6c723ba4ddd636bb9b826ed86055a4470733241784e554f619d2610364ff8076d84b17d616e9e2fe69e2422941290b84aafd5a1967e9030d800df82c270a8a81868630086d137c600715fcbdd85c706fa106585b4d120e4672ded1f436d6e6cfd9be9279204060be27f357f2a097907f8e9d218fdd6124f339d79d298699716b1da75c6f39ddb6a03bd42b6b505cdfc5f73b9f635deb5e3b6f9fa7ea8fa9c8cefac057010682da114ac5256390dbc12b8e12c48ea639ae79cd8ac8353e224f7b2cf205c495277899088a4439d38fa624e57d6e4aec21c1b0d52e0a3ce5d741b8a5e06dcb4060"]) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000440)='./file0\x00', 0x2141, 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r8 = io_uring_setup(0xd0a, &(0x7f0000000a00)={0x0, 0x533f, 0x0, 0x1, 0x5, 0x0, r7}) ioctl$FITHAW(r8, 0xc0045878) lseek(r7, 0x100, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x40012040) sendfile(r7, r9, 0x0, 0x100000001) r10 = openat2(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', &(0x7f0000000800)={0x0, 0x30}, 0x18) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000008c0)=0x1c, 0x1000) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000940), 0x4003, 0x0) io_submit(0x0, 0x7, &(0x7f00000009c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f0000000180)="036022323676b87444227d7cab3a954a7891e5139d", 0x15, 0x800000000003, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x100, r3, &(0x7f0000000280)="8b96cc22db275985cf500a6aa7db4f33530512c9baf2a65a8a1e2c85119e362b740cee9ca0cd7a56dc1bf6c2cfb2a185a2dd1e45c69aa513a56d5d95", 0x3c, 0x100000000, 0x0, 0x1, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000340)="b83bca011e6064a344238c274f8ef2a566f12b3b273d59c41743c2bddfc87b35a128faa54d9d312cbe1b4280d345ec989bf4b9d712f37abda0a4ca52cc44309ee2f46bebb5e4588b9d729581902a52556c383e636abb6fb89652d4a7ccf6b300e7f6aea67233157ee1186afa2feee10aaa6147b99e41d65302eb94fb2d59108c44c27de3385fc63541e1e63abc49944c3c2adb8ed81009818fe15beb733e43d5082957", 0xa3, 0x5, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x40, r6, &(0x7f0000000480)="a0b0331c27aa8586e0b8371a0a185716a1edc149cc949992570d809e6c40edb527efe2b8b650663cb2c6a5c10b17673fb00c8384b6e4c65f040f10f0341c6d08552c9651e074cee2b290ebf60147f962bf1aa8a6bab650f3ba5ecd05865401e6b4fe6292686c9fc5decb74ae5dced959b0ad109c1a3aadaa7c9b424cbb752e16c6f228d5", 0x84, 0x1, 0x0, 0x2, r9}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000580)="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", 0xfa, 0x3, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x400, r1, &(0x7f00000006c0)="1de636f4a4ae3944483e7839528f9575165ef04d5a9f15478d068b52bb8f8435e0f4610b91967ecaf721ff79a1f6c0823a82e2302406a29c2610285dc6386e6cc0dd4ac0719aa6d4d2534feac84a3c4b54c5d64f2a15a096f3325603928ff73083847d6282599c359479316a85eef6b8506a2393bfe6c8c7f76f9d1744344787684836f315fdaaecd09a685c974ba6b7004b5018d8bcda2563620021b1bb0294a92645f2aab84ee6096646b1a93213b8d6b3d88ef82fab1718ae1694506456c8fab4d51bc571a0f950863e5d5032dceec61568135d27fd462d426e066fdee5", 0xdf, 0x7, 0x0, 0x2, r10}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x7, r11, &(0x7f0000000900), 0x0, 0x4, 0x0, 0x2, r12}]) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:04:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:04:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2344.596757] audit: type=1326 audit(1767902678.411:4575): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12354 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2344.633344] audit: type=1326 audit(1767902678.412:4576): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12354 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:04:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x0, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2344.672292] audit: type=1326 audit(1767902678.424:4577): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12359 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2344.706496] audit: type=1326 audit(1767902678.425:4578): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12359 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2344.842089] loop5: detected capacity change from 0 to 2048 [ 2344.856011] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 20:04:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:04:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) fcntl$getown(r0, 0x9) 20:04:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:04:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x0, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:04:55 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x40002002}) [ 2361.348297] kauditd_printk_skb: 51 callbacks suppressed 20:04:55 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:04:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x301c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:04:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2361.348320] audit: type=1326 audit(1767902695.365:4630): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12396 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x7ffc0000 20:04:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2361.393396] audit: type=1326 audit(1767902695.366:4631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12396 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7738fb0b19 code=0x7ffc0000 20:04:55 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r0, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42e3f30dabef7a3f, 0x0, 0x5, 0x1, &(0x7f0000000080)="2bf33a5716573573a5154741bb6e562362517addf12f71c75fbed915906f74e709b2e856db5f711b2c0eee1fd4d24b9ec70b81126e27c3db051e002ea83df13a5fc47881950907873ae2411e7651a21a227686176568854b59e5fcc7436f9dcde9802c50f6ec0b2f2ca007dc49e67007b0a7f0a4e94c074b698c1b45d4e9c232c8daac07c689b35ed45fdb7d6162ab8931c93f21ae45282a3c2436c92414e0dd", 0x5, 0x0, 0x1, {0x1}}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x81, 0x0, 0x4}]}) set_robust_list(&(0x7f0000000280)={0x0, 0x3, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:04:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0200001f0000082abd7000fddbdf257f000001000000000000000000000000000004d302002b00ff020000000000000000000000000001040000002ae90000960012007063727970742867636d2874776f666973682d61736d292900000000000000000000000000000000000000000000000000000000000000000000000000000000500200000002000085fc96f2124a177c9934e9beb0f8e5fbe21c7eca25ecc167db38b1bf38be56e5a8e8d55d4153bd33f14d0f9c633a8bc92f5668b705aaf604a358729ecc7546c2d0d3ba3f60c2870c11d40000340111007f0000010000000000000000000000002001000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000312b030000063500000a000a007f000001000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000640101010000000000000000000000006c0300000000000002000000ff010000000000000000000000000001e0000001000000000000000000000000ffffffff0000000000000000000000000a0101010000000000000000000000003c040000063500000a000a00fe8000000000000000000000000000bbac1e010100000000000000000000000020010000000000000000000000000002ac1414bb0000000000000000000000003202000000000000020002005000120061757468656e6365736e287368613531322d61726d2c6c72772d63617374362d6176782900002d00000000000000000000000000000000000000000000000000002000000080010000fcb11944"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2361.425486] audit: type=1326 audit(1767902695.366:4632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12396 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x7ffc0000 20:04:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18) [ 2361.445099] audit: type=1326 audit(1767902695.366:4633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12396 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f7738fb0b19 code=0x7ffc0000 20:04:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0x0, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2361.485567] audit: type=1326 audit(1767902695.366:4634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12396 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x7ffc0000 20:04:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2361.503215] audit: type=1326 audit(1767902695.389:4635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12400 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:04:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2361.530897] audit: type=1326 audit(1767902695.389:4636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12400 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2361.536864] audit: type=1326 audit(1767902695.389:4637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12400 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2361.545824] audit: type=1326 audit(1767902695.389:4638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12400 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2361.568537] audit: type=1326 audit(1767902695.390:4639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12400 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2361.636486] loop5: detected capacity change from 0 to 2048 [ 2361.640801] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2361.696615] loop5: detected capacity change from 0 to 2048 [ 2361.699703] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 20:05:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:05:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) [ 2376.561214] kauditd_printk_skb: 30 callbacks suppressed [ 2376.561225] audit: type=1326 audit(1767902710.578:4670): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2376.564785] audit: type=1326 audit(1767902710.582:4671): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2376.570680] audit: type=1326 audit(1767902710.585:4672): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12438 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 20:05:10 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0x0, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18) 20:05:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:10 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x40002002}) 20:05:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2c400, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:05:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18) 20:05:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0x0, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:10 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2376.685804] audit: type=1326 audit(1767902710.703:4673): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2376.688441] audit: type=1326 audit(1767902710.703:4674): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 [ 2376.691508] audit: type=1326 audit(1767902710.703:4675): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bd25eb19 code=0x7ffc0000 20:05:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x7, 0x1]) semtimedop(r0, &(0x7f0000000040), 0x0, &(0x7f0000000080)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2376.714996] audit: type=1326 audit(1767902710.732:4676): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12458 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:10 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2376.733242] audit: type=1326 audit(1767902710.732:4677): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12458 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:10 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0200001f0000082abd7000fddbdf257f000001000000000000000000000000000004d302002b00ff020000000000000000000000000001040000002ae90000960012007063727970742867636d2874776f666973682d61736d292900000000000000000000000000000000000000000000000000000000000000000000000000000000500200000002000085fc96f2124a177c9934e9beb0f8e5fbe21c7eca25ecc167db38b1bf38be56e5a8e8d55d4153bd33f14d0f9c633a8bc92f5668b705aaf604a358729ecc7546c2d0d3ba3f60c2870c11d40000340111007f0000010000000000000000000000002001000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000312b030000063500000a000a007f000001000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000640101010000000000000000000000006c0300000000000002000000ff010000000000000000000000000001e0000001000000000000000000000000ffffffff0000000000000000000000000a0101010000000000000000000000003c040000063500000a000a00fe8000000000000000000000000000bbac1e010100000000000000000000000020010000000000000000000000000002ac1414bb0000000000000000000000003202000000000000020002005000120061757468656e6365736e287368613531322d61726d2c6c72772d63617374362d6176782900002d00000000000000000000000000000000000000000000000000002000000080010000fcb11944"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2376.760254] audit: type=1326 audit(1767902710.732:4678): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12458 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2376.782647] audit: type=1326 audit(1767902710.732:4679): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12458 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2377.322810] loop5: detected capacity change from 0 to 2048 [ 2377.332781] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 20:05:24 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 20:05:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xec140, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000180)={0xd, 0x81}) getsockname(r2, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000140)={0x7, 0xc3, 0xf799, 0x6, 0x1, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:05:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x7ffffff2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:05:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:05:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x0, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:24 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:24 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2390.876430] kauditd_printk_skb: 14 callbacks suppressed [ 2390.876451] audit: type=1326 audit(1767902724.892:4694): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2390.897821] audit: type=1326 audit(1767902724.892:4695): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2390.924751] audit: type=1326 audit(1767902724.896:4696): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:24 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:24 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2390.977353] audit: type=1326 audit(1767902724.896:4697): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:25 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) dup3(r0, r1, 0x80000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2391.012663] audit: type=1326 audit(1767902724.896:4698): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba5f7a04 code=0x7ffc0000 20:05:25 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2391.031519] audit: type=1326 audit(1767902724.897:4699): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2391.040631] audit: type=1326 audit(1767902724.897:4700): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2391.052181] audit: type=1326 audit(1767902724.897:4701): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2391.057063] audit: type=1326 audit(1767902724.904:4702): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2391.077376] audit: type=1326 audit(1767902724.904:4703): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12485 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x7ffffff9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:05:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:05:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:37 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 20:05:37 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2403.957197] kauditd_printk_skb: 39 callbacks suppressed [ 2403.957217] audit: type=1326 audit(1767902737.974:4743): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) readahead(r1, 0x5889, 0x3) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2403.966928] audit: type=1326 audit(1767902737.975:4744): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2403.980781] audit: type=1326 audit(1767902737.975:4745): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2403.986357] audit: type=1326 audit(1767902737.975:4746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2403.993486] audit: type=1326 audit(1767902737.975:4747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2403.999840] audit: type=1326 audit(1767902737.976:4748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2404.008173] audit: type=1326 audit(1767902737.976:4749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) [ 2404.040333] audit: type=1326 audit(1767902737.976:4750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2404.057547] audit: type=1326 audit(1767902737.976:4751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2404.076841] audit: type=1326 audit(1767902737.976:4752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12527 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:38 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0xffff888045205210, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:05:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:05:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:51 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 20:05:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0003}]}) r0 = epoll_create1(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/130, 0x82}], 0x9, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000180)=[{}, {&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/138, 0x8a}], 0x3, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000000ac0)=""/8, 0x8}], 0x2, &(0x7f0000000b40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000c00)=""/221, 0xdd}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x2, &(0x7f0000002840)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="240000000000000001ddffff00000000cf91f5b0e741fa74e269f65bf3d69648f4dd4ba7477014d1a6adab27f7445459e2786a7b3450ce3d9e8ddd4d4acc0b0ddd7e02356c231b0fdd9bbf7ded0e48129e0fba6221b75486036ac0317860ae0dded0af", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/21, 0x15}, {&(0x7f0000001e80)=""/41, 0x29}], 0x2, &(0x7f0000001f00)=ANY=[@ANYBLOB="24000000f1ff0001b0c40000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/184, 0xb8}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="1c55a82bd6248dd9dda82a0002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118}}, {{&(0x7f0000002240), 0x6e, &(0x7f0000002600)=[{&(0x7f00000022c0)=""/7, 0x7}, {&(0x7f0000002300)=""/191, 0xbf}, {&(0x7f00000023c0)=""/130, 0x82}, {&(0x7f0000002480)=""/81, 0x51}, {&(0x7f0000002500)=""/233, 0xe9}], 0x5}}], 0x7, 0x40000000, 0x0) fcntl$setown(r0, 0x8, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x6, &(0x7f0000001d40)={[0x3]}, 0x8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:05:51 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2417.123901] kauditd_printk_skb: 5 callbacks suppressed [ 2417.123913] audit: type=1326 audit(1767902751.140:4758): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2417.134035] audit: type=1326 audit(1767902751.141:4759): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.139017] audit: type=1326 audit(1767902751.147:4760): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.145140] audit: type=1326 audit(1767902751.148:4761): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.159450] audit: type=1326 audit(1767902751.148:4762): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.167004] audit: type=1326 audit(1767902751.151:4763): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.173566] audit: type=1326 audit(1767902751.151:4764): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.176930] audit: type=1326 audit(1767902751.151:4765): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.182396] audit: type=1326 audit(1767902751.151:4766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2417.196130] audit: type=1326 audit(1767902751.153:4767): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12564 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:05:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:05:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:05:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:05:51 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) 20:06:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0xffff888045205ec0, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:06:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x0) 20:06:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:07 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x7ff, 0x0, 0x3f, 0x6}, {0x8bb, 0x6, 0x7f, 0x7}, {0x4, 0xfa, 0x40, 0x6}, {0x3, 0x9, 0x3, 0x100}, {0xe1, 0x80, 0x7, 0x4}, {0x9, 0x80, 0x0, 0x7ff}, {0x6, 0x61, 0x1, 0x4}, {0x200, 0x5, 0x1, 0x6}, {0x19, 0x7f, 0x8, 0x5}]}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, 0x0, 0x122, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x31, 0x4f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x24008000) 20:06:07 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) [ 2433.796342] kauditd_printk_skb: 25 callbacks suppressed [ 2433.796360] audit: type=1326 audit(1767902767.813:4793): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2433.813550] audit: type=1326 audit(1767902767.815:4794): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2433.842308] audit: type=1326 audit(1767902767.815:4795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:07 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2433.893285] audit: type=1326 audit(1767902767.815:4796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2433.904225] audit: type=1326 audit(1767902767.815:4797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2433.916291] audit: type=1326 audit(1767902767.815:4798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x0) 20:06:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2433.960520] audit: type=1326 audit(1767902767.815:4799): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2433.966428] audit: type=1326 audit(1767902767.825:4800): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2434.018325] audit: type=1326 audit(1767902767.825:4801): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2434.024609] audit: type=1326 audit(1767902767.826:4802): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12598 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:08 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:08 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x0) 20:06:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:06:20 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:20 executing program 3: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:06:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:20 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) 20:06:20 executing program 2: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x0) 20:06:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:20 executing program 3: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:06:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x20, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:06:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:21 executing program 3: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2447.029238] kauditd_printk_skb: 16 callbacks suppressed [ 2447.029254] audit: type=1326 audit(1767902781.045:4819): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.039398] audit: type=1326 audit(1767902781.048:4820): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.054570] audit: type=1326 audit(1767902781.048:4821): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:21 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:21 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x208700, 0x0) pidfd_getfd(r1, r0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x3}) [ 2447.088516] audit: type=1326 audit(1767902781.048:4822): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.130946] audit: type=1326 audit(1767902781.048:4823): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.133668] audit: type=1326 audit(1767902781.055:4824): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12654 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.137403] audit: type=1326 audit(1767902781.063:4825): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12655 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x0 [ 2447.142439] audit: type=1326 audit(1767902781.138:4826): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12663 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.145423] audit: type=1326 audit(1767902781.138:4827): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12663 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2447.148259] audit: type=1326 audit(1767902781.140:4828): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12663 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:35 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:06:35 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0a0000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:06:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:35 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x40, 0x0, 0xbf}, 0x0) 20:06:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x6}) [ 2461.520642] kauditd_printk_skb: 19 callbacks suppressed [ 2461.520664] audit: type=1326 audit(1767902795.537:4848): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12673 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x0 [ 2461.522303] loop5: detected capacity change from 0 to 2048 [ 2461.540393] audit: type=1326 audit(1767902795.546:4849): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.543009] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2461.562244] loop5: detected capacity change from 0 to 2048 [ 2461.569521] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2461.571037] audit: type=1326 audit(1767902795.547:4850): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.596013] audit: type=1326 audit(1767902795.550:4851): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.632601] audit: type=1326 audit(1767902795.550:4852): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 2461.660839] audit: type=1326 audit(1767902795.550:4853): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0f0000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:06:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x800, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$getown(r0, 0x9) 20:06:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2461.688805] audit: type=1326 audit(1767902795.554:4854): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2461.724906] audit: type=1326 audit(1767902795.554:4855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.749213] loop5: detected capacity change from 0 to 2048 [ 2461.757653] audit: type=1326 audit(1767902795.554:4856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.771885] audit: type=1326 audit(1767902795.555:4857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12679 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2461.816485] EXT4-fs (loop5): Invalid log cluster size: 32773 20:06:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x5102, 0x0) r1 = fsmount(r0, 0x1, 0x74) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x7, 0x6, &(0x7f0000000540)=[{&(0x7f0000000140)="e8bb769f9798a3c7e40cb63eebe1f542", 0x10, 0x2}, {&(0x7f0000000180)="b1de4196185c4b5375cf47772dc4fa229ebbc4142cec86a885bcd6ddf9b2126745efaa3d4d48122a0d69f45859", 0x2d, 0x4}, {&(0x7f0000000200)="1ae7b24aca4784fca0b2050989155fb6b20e391f583a5e8fea91d041068b506246de2042979c8ddb8865e94322d450c268c90e81cd670aef87830503ca3d284dfd5bf82a217b11ba0ca79b76c954fe4f72e19be1e48f6eafed31cc49bcb561d5f613504120e91fa2bdf11b7d79", 0x6d, 0x1}, {&(0x7f00000002c0)="7bfefecaf0000cf114de5219d5d9a98191e7648a3b1a2b83f09b3024e25ce51a1225476fbdd05c9529a88f8ea986a1533e7d1cf0fd100b240e501bbd89cc845acea51b28b94a95d8f961d791f864858761e40391a060b8df932880a92d099311cacedfb9502b9107931439c7bdd8fd4d22a189", 0x73, 0x5}, {&(0x7f0000000340)="efd0ae3ddbe4dd5016b00b16aae23e790382d61810a0c6797de87ba0c5ad5328232fc1d88f1dab799c11436ff79c611dbfc4d3648c7fabf8a36fa0d060b7f57ec0fd2e7d587add1ae0affa5f1dbdf47329a1cb6af0785ace1aa932412c4a5623af8aa947dc4c15e675575a245cc2699f7e12ea719a19329f681d642711422a704e27a1dd3553cc328da6f3796195e84d7d30889a66ca445112961384bf8168e7687691347948eeb41c8a8002fc2636585177bbd2e91a1af5967d0ca47654ec6ef6acf8c6c94c52ffdaa3ac05202ffdd7a249ac155ca8db6df2dbfdc38b82e85fc76446f7468b4b3bb06c4e36a53445", 0xef, 0x9}, {&(0x7f0000000440)="2efebd895b373578e1fa54292cc0951f64cd6298c4de715362bb4fe8385c793020d58e6292056596e2acf14df47a63208982ef1c8013438d925fde621aa3ced10637ccc390b89ca97ba2b4d8201fb7014ff36fd0339af2fe72ba93edeab425de36b4f8da610dc762ac9fb076eade95fee24f27742b04fa50789090ca715b91a69399e31609602ee6d7c95631212390f254912f52af346818cd7ad39505c220ccef590e150bdcbd846a3910e6f9961b34314f419a1918878abf903466d28a5f9ac3006f29311c78c67a34a8c35857b3cea988a584afd8ed33094e44ecc04908e9", 0xe0, 0x1}], 0x204000, &(0x7f0000000600)={[{@dots}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/full\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/full\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/full\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/full\x00'}}]}) dup2(r1, r4) [ 2461.872600] loop5: detected capacity change from 0 to 2048 20:06:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2461.890034] EXT4-fs (loop5): Invalid log cluster size: 32773 20:06:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 2475.240134] kauditd_printk_skb: 46 callbacks suppressed 20:06:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:06:49 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x86, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{0x0, 0xc0ba, 0x3, 0x5, 0xc9f60, 0x0, 0x1, 0x9, 0x0, 0x80, 0x83, 0x3, 0x8, 0x0, 0xfffffffffffffb33}}) 20:06:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="120000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2475.240147] audit: type=1326 audit(1767902809.257:4904): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12718 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7738fb0b19 code=0x0 20:06:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:49 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:49 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) [ 2475.249834] loop5: detected capacity change from 0 to 2048 20:06:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2475.266387] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2475.301882] loop5: detected capacity change from 0 to 2048 [ 2475.306008] EXT4-fs (loop5): Invalid log cluster size: 32773 20:06:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3c8cfb8d820a8d9def29ef", 0xb}], 0x1, &(0x7f0000000200)=[@dstopts_2292={{0x1090, 0x29, 0x4, {0x5c, 0x20f, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x0, [0x3, 0x4, 0x100000001, 0x1, 0x800]}}, @padn={0x1, 0x1, [0x0]}, @generic={0xe0, 0x1000, "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"}, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x32, "1cdcad9a1dd290759eb2e5a52bddcff1b1fdaa248582a3034c8eeff178589bb6d2524f4339ea426ee3a48c736288caedc211"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8c}]}}}, @hopopts={{0x38, 0x29, 0x36, {0xff, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5d}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xfe}, @jumbo={0xc2, 0x4, 0x1f}, @ra={0x5, 0x2, 0x4d9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x10e0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="122434f8f22f9dc483e66f132eaad3ccd0f81ab83d3c310a2a716c17c1465451177a6b564cbe65210fb1c050ae1ca59f27261348c41948c1f95e0f1e1860db3e92c31b7e94d8be28cc98c2cd7015d1e2d7b44503872282ac4a6f3cbc61ebb84eee8b6b68cd20", 0x66}, {&(0x7f0000000140)="96da5f771a15da6db2c9a6d74fcc7c53e8f6186c37a31817c12376851b5f6b05575330be", 0x24}, {&(0x7f0000001300)="214e074ab977c351f0a5f6cf51750400f6fef18a616abe85a382e5ecc92edea0fc3c1908ac5e77cf3467f5bd723cbb028535579ff276521cb147e6536d95d8b7d8995312cf8f942e28b40d4ee96fbd957cb7e19775244809f93b04bbbb7fa997ae66d8883e4e491b0d", 0x69}, {&(0x7f0000001380)="cda962c87036104d8131013163add62629b7352d43b513b198c19eb182f3ff5379dd3efdf58ac5301b2aa4488321d0479eb69115000a35bfa38a2e27a7cfddc9061b281ce3e857be8994efe5b54f4d36c91c20a1a5679524c91efdfd6c2c5d8e65eba5c2c84272fa7d1e1be35426ee9c392ed0ff5c06b012ad651aaee2f1ac8cf887021fb4702166a1c0a14d22f664da0b1bf7f60074008d00b6011ad7d19b830e0d8bc5b89df14efaba0bc3", 0xac}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x5c, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x228}]}}}], 0x20}}], 0x2, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:06:49 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:06:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="130000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:06:49 executing program 3: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x0) 20:06:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:06:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:06:49 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2475.417727] loop5: detected capacity change from 0 to 2048 20:06:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2475.423263] audit: type=1326 audit(1767902809.440:4905): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.426415] audit: type=1326 audit(1767902809.441:4906): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.429595] audit: type=1326 audit(1767902809.447:4907): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.432048] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2475.443074] audit: type=1326 audit(1767902809.447:4908): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.465061] audit: type=1326 audit(1767902809.447:4909): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:06:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="250000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2475.533431] loop5: detected capacity change from 0 to 2048 [ 2475.546555] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2475.600876] audit: type=1326 audit(1767902809.618:4910): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.606348] audit: type=1326 audit(1767902809.618:4911): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.611555] audit: type=1326 audit(1767902809.618:4912): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2475.617363] audit: type=1326 audit(1767902809.618:4913): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12738 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x1, 0x0, 0x6, 0xe0c}, {0x9, 0x5, 0xfb, 0x4}, {0x6, 0x0, 0xfe, 0x9}, {0x7, 0x0, 0x90, 0x3}, {0x1, 0x1, 0x1, 0x1}]}) socket$packet(0x11, 0x2, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fcntl$setlease(r1, 0x400, 0x1) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:07:04 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:07:04 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:07:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2e0000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:04 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) recvmsg$unix(r3, 0x0, 0x0) 20:07:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2490.872075] loop5: detected capacity change from 0 to 2048 [ 2490.883909] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2490.918071] loop5: detected capacity change from 0 to 2048 [ 2490.935393] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200200000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:05 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x200100, 0x0) [ 2491.110606] loop5: detected capacity change from 0 to 2048 20:07:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:07:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2491.159940] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2491.198669] loop5: detected capacity change from 0 to 2048 20:07:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2491.218397] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:05 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2491.276302] kauditd_printk_skb: 4 callbacks suppressed [ 2491.276322] audit: type=1326 audit(1767902825.293:4918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2491.288941] audit: type=1326 audit(1767902825.294:4919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2491.305588] audit: type=1326 audit(1767902825.294:4920): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2491.308954] audit: type=1326 audit(1767902825.294:4921): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effba5f7a04 code=0x7ffc0000 [ 2491.313011] audit: type=1326 audit(1767902825.294:4922): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7effba646107 code=0x7ffc0000 [ 2491.316918] audit: type=1326 audit(1767902825.294:4923): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2491.320727] audit: type=1326 audit(1767902825.301:4924): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7effba646107 code=0x7ffc0000 [ 2491.324506] audit: type=1326 audit(1767902825.302:4925): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7effba5f772b code=0x7ffc0000 [ 2491.328345] audit: type=1326 audit(1767902825.303:4926): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2491.332153] audit: type=1326 audit(1767902825.305:4927): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12807 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:18 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:07:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x8, 0x7ffc0000}]}) splice(r0, &(0x7f00000000c0)=0x1, r0, &(0x7f0000000100)=0x4d, 0x7, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x8800}, {0xffffffffffffffff, 0x6108}], 0x2, 0x20) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)={&(0x7f0000000140), &(0x7f0000000200)=""/90, 0x5a}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x4e, 0x1, 0x9, 0x0, 0x4, 0x940, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x6}, 0x10, 0x7f, 0x630d, 0xd, 0xffff, 0x6, 0x4d4, 0x0, 0x7fffffff}, r1, 0xa, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x20) 20:07:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200300000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:18 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2504.395624] loop5: detected capacity change from 0 to 2048 [ 2504.407680] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:07:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2504.453976] loop5: detected capacity change from 0 to 2048 20:07:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000) 20:07:18 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) getpid() r1 = gettid() r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) recvmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f00000002c0)=""/123, 0x7b}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000018"], 0xd0}, 0x2100) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r4, 0x0) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f00000004c0)=""/140, &(0x7f0000000580)=0x8c) move_pages(r6, 0x9, 0x0, 0x0, 0x0, 0x6) [ 2504.469561] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2504.475024] kauditd_printk_skb: 4 callbacks suppressed [ 2504.475035] audit: type=1326 audit(1767902838.492:4932): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.478287] audit: type=1326 audit(1767902838.493:4933): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.481581] audit: type=1326 audit(1767902838.493:4934): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.486886] audit: type=1326 audit(1767902838.493:4935): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.491818] audit: type=1326 audit(1767902838.493:4936): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.494785] audit: type=1326 audit(1767902838.493:4937): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.497512] audit: type=1326 audit(1767902838.493:4938): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.500363] audit: type=1326 audit(1767902838.494:4939): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.503037] audit: type=1326 audit(1767902838.494:4940): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2504.505872] audit: type=1326 audit(1767902838.494:4941): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12845 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200400000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2504.594316] loop5: detected capacity change from 0 to 2048 [ 2504.605165] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2504.628953] loop5: detected capacity change from 0 to 2048 [ 2504.640432] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:07:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200500000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:33 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) 20:07:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:33 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2519.366769] loop5: detected capacity change from 0 to 2048 [ 2519.379890] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2519.397023] kauditd_printk_skb: 58 callbacks suppressed [ 2519.397042] audit: type=1326 audit(1767902853.414:5000): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2519.400521] loop5: detected capacity change from 0 to 2048 [ 2519.405430] audit: type=1326 audit(1767902853.414:5001): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) [ 2519.419010] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2519.449933] audit: type=1326 audit(1767902853.438:5002): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2519.470599] audit: type=1326 audit(1767902853.438:5003): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2519.487477] audit: type=1326 audit(1767902853.438:5004): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200600000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) [ 2519.521356] audit: type=1326 audit(1767902853.440:5005): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2519.567605] audit: type=1326 audit(1767902853.440:5006): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 20:07:33 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="fdffffff0000000018000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) 20:07:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2519.624278] audit: type=1326 audit(1767902853.441:5007): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2519.655154] loop5: detected capacity change from 0 to 2048 [ 2519.661693] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2519.665908] audit: type=1326 audit(1767902853.451:5008): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2519.671359] audit: type=1326 audit(1767902853.452:5009): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12863 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba644b19 code=0x7ffc0000 [ 2533.385090] loop5: detected capacity change from 0 to 2048 [ 2533.392790] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) 20:07:47 executing program 2: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:07:47 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:07:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200700000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:47 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) 20:07:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2533.418259] loop5: detected capacity change from 0 to 2048 [ 2533.425603] EXT4-fs (loop5): Invalid log cluster size: 32773 20:07:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200800000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:07:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) [ 2533.590694] loop5: detected capacity change from 0 to 2048 20:07:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:07:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:07:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x2, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2533.649446] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:01 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) 20:08:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200900000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:08:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2547.854014] loop5: detected capacity change from 0 to 2048 20:08:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={[0x5]}, 0x8) [ 2547.865226] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2547.882794] loop5: detected capacity change from 0 to 2048 [ 2547.886619] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200a00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2547.999358] loop5: detected capacity change from 0 to 2048 [ 2548.014284] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200b00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:02 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:08:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 20:08:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:08:02 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:08:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:17 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:08:17 executing program 3: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) lseek(r2, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xc0000001}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) 20:08:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200d00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:08:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 20:08:17 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2563.226478] loop5: detected capacity change from 0 to 2048 [ 2563.245586] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2563.261547] loop5: detected capacity change from 0 to 2048 [ 2563.271294] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 20:08:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x10, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:08:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200f00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:17 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:08:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) [ 2563.428397] loop5: detected capacity change from 0 to 2048 [ 2563.468814] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0200001f0000082abd7000fddbdf257f000001000000000000000000000000000004d302002b00ff020000000000000000000000000001040000002ae90000960012007063727970742867636d2874776f666973682d61736d292900000000000000000000000000000000000000000000000000000000000000000000000000000000500200000002000085fc96f2124a177c9934e9beb0f8e5fbe21c7eca25ecc167db38b1bf38be56e5a8e8d55d4153bd33f14d0f9c633a8bc92f5668b705aaf604a358729ecc7546c2d0d3ba3f60c2870c11d40000340111007f0000010000000000000000000000002001000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000312b030000063500000a000a007f000001000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000640101010000000000000000000000006c0300000000000002000000ff010000000000000000000000000001e0000001000000000000000000000000ffffffff0000000000000000000000000a0101010000000000000000000000003c040000063500000a000a00fe8000000000000000000000000000bbac1e010100000000000000000000000020010000000000000000000000000002ac1414bb0000000000000000000000003202000000000000020002005000120061757468656e6365736e287368613531322d61726d2c6c72772d63617374362d6176782900002d00000000000000000000000000000000000000000000000000002000000080010000fcb11944"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:08:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:08:33 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:08:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:08:33 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:08:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="201100000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000) [ 2579.069731] kauditd_printk_skb: 28 callbacks suppressed [ 2579.069749] audit: type=1326 audit(1767902913.087:5038): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba103eb19 code=0x7ffc0000 [ 2579.082695] loop5: detected capacity change from 0 to 2048 [ 2579.089298] audit: type=1326 audit(1767902913.104:5039): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6ba103eb19 code=0x7ffc0000 [ 2579.103163] audit: type=1326 audit(1767902913.114:5040): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba103eb19 code=0x7ffc0000 [ 2579.114830] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:08:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:08:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2579.179865] loop5: detected capacity change from 0 to 2048 [ 2579.187093] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:08:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x5, 0x82ff, 0x2, &(0x7f0000000540)={[0x5]}, 0x8) 20:08:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="201300000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x5, 0x0) 20:08:33 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2579.399610] loop5: detected capacity change from 0 to 2048 20:08:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2579.459679] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x5, 0x0) 20:08:54 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:08:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="201500000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:08:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0x78) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0x3, 0x0, 0x0, 0xffff, 0x25009, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x1, 0x8}, 0x200, 0x9, 0x800, 0x8, 0x9, 0x4, 0x100, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xa, r5, 0x0) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) socketpair(0x6, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) 20:08:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0x78) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0x3, 0x0, 0x0, 0xffff, 0x25009, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x1, 0x8}, 0x200, 0x9, 0x800, 0x8, 0x9, 0x4, 0x100, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xa, r5, 0x0) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) 20:08:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x5, 0x0) 20:08:54 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:08:54 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:08:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:08:54 executing program 1: r0 = epoll_create(0x3ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2600.848986] loop5: detected capacity change from 0 to 2048 20:08:54 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:08:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0x78) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0x3, 0x0, 0x0, 0xffff, 0x25009, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x1, 0x8}, 0x200, 0x9, 0x800, 0x8, 0x9, 0x4, 0x100, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xa, r5, 0x0) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) socketpair(0x6, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0200001f0000082abd7000fddbdf257f000001000000000000000000000000000004d302002b00ff020000000000000000000000000001040000002ae90000960012007063727970742867636d2874776f666973682d61736d292900000000000000000000000000000000000000000000000000000000000000000000000000000000500200000002000085fc96f2124a177c9934e9beb0f8e5fbe21c7eca25ecc167db38b1bf38be56e5a8e8d55d4153bd33f14d0f9c633a8bc92f5668b705aaf604a358729ecc7546c2d0d3ba3f60c2870c11d40000340111007f0000010000000000000000000000002001000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000312b030000063500000a000a007f000001000000000000000000000000fc010000000000000000000000000001fc020000000000000000000000000000640101010000000000000000000000006c0300000000000002000000ff010000000000000000000000000001e0000001000000000000000000000000ffffffff0000000000000000000000000a0101010000000000000000000000003c040000063500000a000a00fe8000000000000000000000000000bbac1e010100000000000000000000000020010000000000000000000000000002ac1414bb0000000000000000000000003202000000000000020002005000120061757468656e6365736e287368613531322d61726d2c6c72772d63617374362d6176782900002d00000000000000000000000000000000000000000000000000002000000080010000fcb11944"], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) [ 2600.891487] EXT4-fs (loop5): Invalid log cluster size: 32773 20:08:54 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) (fail_nth: 1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:08:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2601.037626] FAULT_INJECTION: forcing a failure. [ 2601.037626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2601.040699] CPU: 1 PID: 13113 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2601.042440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2601.044630] Call Trace: [ 2601.045418] dump_stack+0x107/0x167 [ 2601.046397] should_fail.cold+0x5/0xa [ 2601.047404] _copy_to_user+0x2e/0x180 [ 2601.048519] simple_read_from_buffer+0xcc/0x160 [ 2601.049666] proc_fail_nth_read+0x198/0x230 [ 2601.050812] ? proc_sessionid_read+0x230/0x230 [ 2601.052022] ? security_file_permission+0xb1/0xe0 [ 2601.053141] ? proc_sessionid_read+0x230/0x230 [ 2601.054359] vfs_read+0x228/0x620 [ 2601.055238] ksys_read+0x12d/0x260 [ 2601.056012] ? vfs_write+0xb10/0xb10 [ 2601.056825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2601.057968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2601.059112] do_syscall_64+0x33/0x40 [ 2601.059922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2601.061046] RIP: 0033:0x7f6ba0ff169c [ 2601.061858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2601.065864] RSP: 002b:00007f6b9e5b4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2601.067543] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6ba0ff169c [ 2601.069093] RDX: 000000000000000f RSI: 00007f6b9e5b41e0 RDI: 0000000000000008 [ 2601.070652] RBP: 00007f6b9e5b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2601.072209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2601.073769] R13: 00007ffc201c698f R14: 00007f6b9e5b4300 R15: 0000000000022000 [ 2615.998758] FAULT_INJECTION: forcing a failure. [ 2615.998758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2616.001356] CPU: 1 PID: 13121 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 2616.002871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.004675] Call Trace: [ 2616.005249] dump_stack+0x107/0x167 [ 2616.006026] should_fail.cold+0x5/0xa [ 2616.006866] _copy_to_user+0x2e/0x180 [ 2616.007695] simple_read_from_buffer+0xcc/0x160 [ 2616.008702] proc_fail_nth_read+0x198/0x230 [ 2616.009646] ? proc_sessionid_read+0x230/0x230 [ 2616.010644] ? security_file_permission+0xb1/0xe0 [ 2616.011706] ? proc_sessionid_read+0x230/0x230 [ 2616.012710] vfs_read+0x228/0x620 [ 2616.013475] ksys_read+0x12d/0x260 [ 2616.014240] ? vfs_write+0xb10/0xb10 [ 2616.015068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:09:09 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) (fail_nth: 1) 20:09:09 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="202e00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2616.016205] ? syscall_enter_from_user_mode+0x1d/0x50 20:09:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:10 executing program 1: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:09:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 1) 20:09:10 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:09:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) [ 2616.017686] do_syscall_64+0x33/0x40 [ 2616.018644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.019766] RIP: 0033:0x7effba5f769c [ 2616.020571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2616.024583] RSP: 002b:00007effb7bba170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2616.026246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007effba5f769c [ 2616.027817] RDX: 000000000000000f RSI: 00007effb7bba1e0 RDI: 0000000000000007 [ 2616.029374] RBP: 00007effb7bba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.030929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2616.032481] R13: 00007fff0ce5290f R14: 00007effb7bba300 R15: 0000000000022000 [ 2616.051392] audit: type=1326 audit(1767902950.067:5041): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2616.058531] loop5: detected capacity change from 0 to 2048 [ 2616.063005] audit: type=1326 audit(1767902950.080:5042): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2616.072792] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2616.076931] FAULT_INJECTION: forcing a failure. [ 2616.076931] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.077516] audit: type=1326 audit(1767902950.094:5043): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2616.079306] CPU: 0 PID: 13132 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2616.079324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.087161] Call Trace: [ 2616.087737] dump_stack+0x107/0x167 [ 2616.088518] should_fail.cold+0x5/0xa [ 2616.089342] ? audit_log_start.part.0+0x27e/0x730 [ 2616.090372] should_failslab+0x5/0x20 [ 2616.091182] kmem_cache_alloc+0x5b/0x310 [ 2616.092066] audit_log_start.part.0+0x27e/0x730 [ 2616.093072] ? audit_log_task_context+0x170/0x170 [ 2616.094105] ? audit_filter+0x5d6/0xb10 [ 2616.094976] ? __bpf_prog_run64+0xe0/0xe0 [ 2616.095864] ? audit_compare_dname_path+0x120/0x120 [ 2616.096930] ? find_held_lock+0x2c/0x110 [ 2616.097813] audit_log_start+0x5f/0x90 [ 2616.098662] audit_seccomp+0x5d/0x200 [ 2616.099488] ? lock_downgrade+0x6d0/0x6d0 [ 2616.100397] __seccomp_filter+0x669/0x1530 [ 2616.101459] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2616.102469] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2616.103518] ? wait_for_completion_io+0x270/0x270 [ 2616.104565] ? fput_many+0x2f/0x1a0 [ 2616.105341] ? ksys_write+0x1a9/0x260 [ 2616.106164] __secure_computing+0x191/0x2f0 [ 2616.107108] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2616.108261] do_syscall_64+0xf/0x40 [ 2616.109044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.110157] RIP: 0033:0x7f9b49447b19 [ 2616.110977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.114943] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2616.116582] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2616.118091] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2616.119630] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.121160] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2616.122704] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2616.124385] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 2616.125870] audit: out of memory in audit_log_start [ 2616.140516] loop5: detected capacity change from 0 to 2048 [ 2616.145239] EXT4-fs (loop5): Invalid log cluster size: 32773 20:09:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:09:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="204800000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:09:10 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:09:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) [ 2616.213875] audit: type=1326 audit(1767902950.228:5044): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2616.234388] audit: type=1326 audit(1767902950.229:5045): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:09:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2616.263460] loop5: detected capacity change from 0 to 2048 [ 2616.269474] audit: type=1326 audit(1767902950.229:5046): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2616.281966] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2616.314488] audit: type=1326 audit(1767902950.229:5047): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2616.336767] loop5: detected capacity change from 0 to 2048 20:09:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 2) 20:09:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2616.354025] audit: type=1326 audit(1767902950.229:5048): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13122 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:09:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) [ 2616.379215] EXT4-fs (loop5): Invalid log cluster size: 32773 20:09:10 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) [ 2616.427795] FAULT_INJECTION: forcing a failure. [ 2616.427795] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.430418] CPU: 1 PID: 13156 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2616.432026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.433834] Call Trace: [ 2616.434415] dump_stack+0x107/0x167 [ 2616.435250] should_fail.cold+0x5/0xa [ 2616.436106] ? create_object.isra.0+0x3a/0xa30 [ 2616.437127] should_failslab+0x5/0x20 [ 2616.438124] kmem_cache_alloc+0x5b/0x310 [ 2616.439040] ? auditd_test_task+0x11e/0x300 [ 2616.439994] create_object.isra.0+0x3a/0xa30 [ 2616.440965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.442197] kmem_cache_alloc+0x159/0x310 [ 2616.443225] audit_log_start.part.0+0x27e/0x730 [ 2616.444251] ? audit_log_task_context+0x170/0x170 [ 2616.445435] ? audit_filter+0x5d6/0xb10 [ 2616.446444] ? __bpf_prog_run64+0xe0/0xe0 [ 2616.447547] ? audit_compare_dname_path+0x120/0x120 [ 2616.448646] ? find_held_lock+0x2c/0x110 [ 2616.449542] audit_log_start+0x5f/0x90 [ 2616.450375] audit_seccomp+0x5d/0x200 [ 2616.451239] ? lock_downgrade+0x6d0/0x6d0 [ 2616.452167] __seccomp_filter+0x669/0x1530 [ 2616.453113] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2616.454141] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2616.455201] ? wait_for_completion_io+0x270/0x270 [ 2616.456273] ? fput_many+0x2f/0x1a0 [ 2616.457075] ? ksys_write+0x1a9/0x260 [ 2616.457916] __secure_computing+0x191/0x2f0 [ 2616.458892] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2616.460060] do_syscall_64+0xf/0x40 [ 2616.460853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2616.462184] RIP: 0033:0x7f9b49447b19 [ 2616.463081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.467716] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2616.469639] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2616.471321] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2616.472920] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.474492] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2616.476058] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:09:27 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:09:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:09:27 executing program 1: epoll_create(0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:09:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="204c00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2633.177780] loop5: detected capacity change from 0 to 2048 [ 2633.190617] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2633.203323] loop5: detected capacity change from 0 to 2048 [ 2633.208809] kauditd_printk_skb: 9 callbacks suppressed [ 2633.208827] audit: type=1326 audit(1767902967.226:5058): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:09:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:09:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 3) 20:09:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x1000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x10) [ 2633.219785] audit: type=1326 audit(1767902967.226:5059): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2633.219869] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2633.237807] FAULT_INJECTION: forcing a failure. [ 2633.237807] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.237902] audit: type=1326 audit(1767902967.255:5060): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2633.240476] CPU: 1 PID: 13181 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2633.246570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2633.248437] Call Trace: [ 2633.249034] dump_stack+0x107/0x167 [ 2633.249852] should_fail.cold+0x5/0xa [ 2633.250708] ? __alloc_skb+0x6d/0x5b0 [ 2633.251568] should_failslab+0x5/0x20 [ 2633.252421] kmem_cache_alloc_node+0x55/0x330 [ 2633.253426] ? trace_hardirqs_on+0x5b/0x180 [ 2633.254394] __alloc_skb+0x6d/0x5b0 [ 2633.255222] audit_log_start.part.0+0x2a3/0x730 [ 2633.256266] ? audit_log_task_context+0x170/0x170 [ 2633.257353] ? audit_filter+0x5d6/0xb10 [ 2633.258249] ? __bpf_prog_run64+0xe0/0xe0 [ 2633.259187] ? audit_compare_dname_path+0x120/0x120 [ 2633.260301] ? find_held_lock+0x2c/0x110 [ 2633.261221] audit_log_start+0x5f/0x90 [ 2633.262096] audit_seccomp+0x5d/0x200 [ 2633.262954] ? lock_downgrade+0x6d0/0x6d0 [ 2633.263885] __seccomp_filter+0x669/0x1530 [ 2633.264835] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2633.265877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2633.266980] ? wait_for_completion_io+0x270/0x270 [ 2633.268081] ? fput_many+0x2f/0x1a0 [ 2633.268894] ? ksys_write+0x1a9/0x260 [ 2633.269750] __secure_computing+0x191/0x2f0 [ 2633.270724] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2633.271934] do_syscall_64+0xf/0x40 [ 2633.272749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2633.273897] RIP: 0033:0x7f9b49447b19 [ 2633.274729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2633.278827] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2633.280486] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2633.282047] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2633.283610] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.285166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2633.286737] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2633.288431] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 2633.289951] audit: out of memory in audit_log_start 20:09:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2633.382707] audit: type=1326 audit(1767902967.399:5061): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 20:09:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x1000000) [ 2633.392346] audit: type=1326 audit(1767902967.399:5062): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2633.397281] audit: type=1326 audit(1767902967.399:5063): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 20:09:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2633.403879] audit: type=1326 audit(1767902967.400:5064): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2633.408535] audit: type=1326 audit(1767902967.400:5065): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:09:27 executing program 1: epoll_create(0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:09:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="206000000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:09:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x10000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:27 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 4) [ 2633.527848] loop5: detected capacity change from 0 to 2048 [ 2633.554249] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2633.601401] loop5: detected capacity change from 0 to 2048 [ 2633.617900] FAULT_INJECTION: forcing a failure. [ 2633.617900] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.620568] CPU: 0 PID: 13210 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2633.622037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2633.623805] Call Trace: [ 2633.624372] dump_stack+0x107/0x167 [ 2633.625151] should_fail.cold+0x5/0xa [ 2633.625959] ? create_object.isra.0+0x3a/0xa30 [ 2633.626936] should_failslab+0x5/0x20 [ 2633.627750] kmem_cache_alloc+0x5b/0x310 [ 2633.628614] ? kmem_cache_alloc+0x159/0x310 [ 2633.629545] create_object.isra.0+0x3a/0xa30 [ 2633.630475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2633.631571] kmem_cache_alloc_node+0x169/0x330 [ 2633.632552] __alloc_skb+0x6d/0x5b0 [ 2633.633346] audit_log_start.part.0+0x2a3/0x730 [ 2633.634337] ? audit_log_task_context+0x170/0x170 [ 2633.635362] ? audit_filter+0x5d6/0xb10 [ 2633.636209] ? __bpf_prog_run64+0xe0/0xe0 [ 2633.637085] ? audit_compare_dname_path+0x120/0x120 [ 2633.638139] ? find_held_lock+0x2c/0x110 [ 2633.639020] audit_log_start+0x5f/0x90 [ 2633.639851] audit_seccomp+0x5d/0x200 [ 2633.640666] ? lock_downgrade+0x6d0/0x6d0 [ 2633.641547] __seccomp_filter+0x669/0x1530 [ 2633.642448] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2633.643456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2633.644488] ? wait_for_completion_io+0x270/0x270 [ 2633.645522] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2633.646499] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2633.647658] ? ksys_write+0x1a9/0x260 [ 2633.648472] __secure_computing+0x191/0x2f0 [ 2633.649400] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2633.650533] do_syscall_64+0xf/0x40 [ 2633.651319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2633.652416] RIP: 0033:0x7f9b49447b19 [ 2633.653210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2633.657099] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2633.658728] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2633.660271] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2633.661788] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.663319] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2633.664840] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2633.673422] EXT4-fs (loop5): Invalid log cluster size: 32773 20:09:42 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 5) 20:09:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:09:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:09:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x100000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x10000000) 20:09:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="206800000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:09:42 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2648.541947] loop5: detected capacity change from 0 to 2048 [ 2648.542803] kauditd_printk_skb: 9 callbacks suppressed [ 2648.542813] audit: type=1326 audit(1767902982.559:5075): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2648.551451] audit: type=1326 audit(1767902982.569:5076): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2648.552103] FAULT_INJECTION: forcing a failure. [ 2648.552103] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.553993] audit: type=1326 audit(1767902982.569:5077): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2648.556466] CPU: 1 PID: 13229 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2648.560304] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2648.560403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2648.562960] Call Trace: [ 2648.563540] dump_stack+0x107/0x167 [ 2648.564335] should_fail.cold+0x5/0xa [ 2648.565173] ? create_object.isra.0+0x3a/0xa30 [ 2648.566165] should_failslab+0x5/0x20 [ 2648.567008] kmem_cache_alloc+0x5b/0x310 [ 2648.567886] ? kmem_cache_alloc+0x159/0x310 [ 2648.568825] create_object.isra.0+0x3a/0xa30 [ 2648.569783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2648.570886] kmem_cache_alloc_node+0x169/0x330 [ 2648.571895] __alloc_skb+0x6d/0x5b0 [ 2648.572686] audit_log_start.part.0+0x2a3/0x730 [ 2648.573701] ? audit_log_task_context+0x170/0x170 [ 2648.574768] ? audit_filter+0x5d6/0xb10 [ 2648.575649] ? __bpf_prog_run64+0xe0/0xe0 [ 2648.576551] ? audit_compare_dname_path+0x120/0x120 [ 2648.577632] ? find_held_lock+0x2c/0x110 [ 2648.578520] audit_log_start+0x5f/0x90 [ 2648.579379] audit_seccomp+0x5d/0x200 [ 2648.580203] ? lock_downgrade+0x6d0/0x6d0 [ 2648.581101] __seccomp_filter+0x669/0x1530 [ 2648.582018] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2648.583040] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2648.584083] ? wait_for_completion_io+0x270/0x270 [ 2648.585131] ? fput_many+0x2f/0x1a0 [ 2648.585915] ? ksys_write+0x1a9/0x260 [ 2648.586747] __secure_computing+0x191/0x2f0 [ 2648.587699] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2648.588849] do_syscall_64+0xf/0x40 [ 2648.589638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2648.590747] RIP: 0033:0x7f9b49447b19 [ 2648.591563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2648.595550] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2648.597208] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2648.598751] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2648.600300] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2648.601832] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2648.603378] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:09:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x100000000000000) 20:09:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, 0x0, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2648.652259] loop5: detected capacity change from 0 to 2048 [ 2648.658691] EXT4-fs (loop5): Invalid log cluster size: 32773 20:09:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x1000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="206c00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:09:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x1000000000000000) [ 2648.824652] audit: type=1326 audit(1767902982.842:5078): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2648.829442] audit: type=1326 audit(1767902982.842:5079): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2648.844843] audit: type=1326 audit(1767902982.842:5080): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2648.851099] loop5: detected capacity change from 0 to 2048 [ 2648.855605] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2648.877049] audit: type=1326 audit(1767902982.842:5081): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2648.908499] audit: type=1326 audit(1767902982.842:5082): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2648.930313] audit: type=1326 audit(1767902982.842:5083): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13217 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2662.561706] audit: type=1326 audit(1767902996.579:5084): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2662.576724] FAULT_INJECTION: forcing a failure. [ 2662.576724] name failslab, interval 1, probability 0, space 0, times 0 20:09:56 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:09:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:09:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:09:56 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 6) 20:09:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:56 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0xfb, 0x6, 0x0, 0x0, 0x1f, 0x81084, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x101, 0xc4, 0x3, 0x7fffffff, 0x6, 0x0, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2662.579913] CPU: 1 PID: 13266 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2662.581920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2662.584163] Call Trace: [ 2662.584871] dump_stack+0x107/0x167 [ 2662.585854] should_fail.cold+0x5/0xa [ 2662.586877] ? create_object.isra.0+0x3a/0xa30 [ 2662.588111] should_failslab+0x5/0x20 [ 2662.589135] kmem_cache_alloc+0x5b/0x310 [ 2662.590234] create_object.isra.0+0x3a/0xa30 [ 2662.591426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2662.592791] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2662.594157] ? audit_log_start.part.0+0x2a3/0x730 [ 2662.595464] __alloc_skb+0xb1/0x5b0 [ 2662.596448] audit_log_start.part.0+0x2a3/0x730 [ 2662.597769] ? audit_log_task_context+0x170/0x170 [ 2662.599070] ? audit_filter+0x5d6/0xb10 [ 2662.600143] ? __bpf_prog_run64+0xe0/0xe0 [ 2662.601255] ? audit_compare_dname_path+0x120/0x120 [ 2662.602583] ? find_held_lock+0x2c/0x110 [ 2662.603681] audit_log_start+0x5f/0x90 [ 2662.604714] audit_seccomp+0x5d/0x200 [ 2662.605728] ? lock_downgrade+0x6d0/0x6d0 [ 2662.606828] __seccomp_filter+0x669/0x1530 [ 2662.607968] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2662.609206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2662.610489] ? wait_for_completion_io+0x270/0x270 [ 2662.611786] ? fput_many+0x2f/0x1a0 [ 2662.612754] ? ksys_write+0x1a9/0x260 [ 2662.613763] __secure_computing+0x191/0x2f0 [ 2662.614911] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2662.616336] do_syscall_64+0xf/0x40 [ 2662.617306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2662.618669] RIP: 0033:0x7f9b49447b19 [ 2662.619674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.624051] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2662.625880] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 20:09:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:09:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="207400000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:09:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) [ 2662.627597] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2662.629466] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2662.631182] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2662.632885] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2662.647590] audit: type=1326 audit(1767902996.590:5085): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2662.660152] loop5: detected capacity change from 0 to 2048 20:09:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0xe, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2662.677665] audit: type=1326 audit(1767902996.594:5086): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:09:56 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:09:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2662.727526] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2662.732067] audit: type=1326 audit(1767902996.652:5087): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2662.774261] audit: type=1326 audit(1767902996.706:5088): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 20:09:56 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 7) [ 2662.822370] audit: type=1326 audit(1767902996.706:5089): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:09:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001400000876b97000ffdbdf250b0000000c000e000093cf000000e000b28c302d7fd8cacc6381b915e4ded9607166d0e024672a37e92912e32adb6b4c0f9d5be3f1c51938cb"], 0x20}, 0x1, 0x0, 0x0, 0x20048041}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:09:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) pread64(r4, &(0x7f00000000c0)=""/83, 0x53, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:09:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="207a00000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2662.845743] audit: type=1326 audit(1767902996.706:5090): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 20:09:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:09:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2662.874695] audit: type=1326 audit(1767902996.708:5091): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13261 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:09:56 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1b0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) [ 2662.924369] audit: type=1326 audit(1767902996.941:5092): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13289 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2662.925632] FAULT_INJECTION: forcing a failure. [ 2662.925632] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.929475] audit: type=1326 audit(1767902996.942:5093): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13289 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2662.931507] CPU: 0 PID: 13298 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2662.931526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2662.939576] Call Trace: [ 2662.940131] dump_stack+0x107/0x167 [ 2662.940904] should_fail.cold+0x5/0xa [ 2662.941698] should_failslab+0x5/0x20 [ 2662.942492] __kmalloc_track_caller+0x79/0x370 [ 2662.943445] ? sidtab_sid2str_get+0x17e/0x720 [ 2662.944386] kmemdup+0x23/0x50 [ 2662.945063] sidtab_sid2str_get+0x17e/0x720 [ 2662.945957] ? audit_log_format+0xca/0x120 [ 2662.946843] sidtab_entry_to_string+0x33/0x110 [ 2662.947810] security_sid_to_context_core+0x33c/0x5d0 [ 2662.948903] security_secid_to_secctx+0x72/0xc0 [ 2662.949871] audit_log_task_context+0xf0/0x170 [ 2662.950821] ? audit_log_format+0x120/0x120 [ 2662.951735] ? from_kuid+0x85/0xc0 [ 2662.952499] audit_log_task+0x1cd/0x310 [ 2662.953336] ? __audit_log_nfcfg+0x210/0x210 [ 2662.954278] audit_seccomp+0x76/0x200 [ 2662.955088] ? lock_downgrade+0x6d0/0x6d0 [ 2662.955966] __seccomp_filter+0x669/0x1530 [ 2662.956868] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2662.957855] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2662.958872] ? wait_for_completion_io+0x270/0x270 [ 2662.959896] ? fput_many+0x2f/0x1a0 [ 2662.960658] ? ksys_write+0x1a9/0x260 [ 2662.961453] __secure_computing+0x191/0x2f0 [ 2662.962354] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2662.963478] do_syscall_64+0xf/0x40 [ 2662.964245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2662.965326] RIP: 0033:0x7f9b49447b19 [ 2662.966100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2662.969952] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2662.971564] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2662.973050] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2662.974544] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2662.976051] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2662.977542] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2662.999832] loop5: detected capacity change from 0 to 2048 [ 2663.013777] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2663.063621] loop5: detected capacity change from 0 to 2048 [ 2663.095995] EXT4-fs (loop5): Invalid log cluster size: 32773 20:09:57 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='security.selinux\x00') 20:09:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x0, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:09:57 executing program 6: epoll_create(0x3ff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:09:57 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 8) 20:09:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:09:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200003000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2663.266651] FAULT_INJECTION: forcing a failure. [ 2663.266651] name failslab, interval 1, probability 0, space 0, times 0 [ 2663.269008] CPU: 0 PID: 13318 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2663.270441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2663.272156] Call Trace: [ 2663.272704] dump_stack+0x107/0x167 [ 2663.273457] should_fail.cold+0x5/0xa [ 2663.274244] ? create_object.isra.0+0x3a/0xa30 [ 2663.275189] should_failslab+0x5/0x20 [ 2663.275972] kmem_cache_alloc+0x5b/0x310 [ 2663.276805] ? sidtab_sid2str_get+0x65/0x720 [ 2663.277710] create_object.isra.0+0x3a/0xa30 [ 2663.278612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2663.279672] __kmalloc_track_caller+0x177/0x370 [ 2663.280622] ? sidtab_sid2str_get+0x17e/0x720 [ 2663.281548] kmemdup+0x23/0x50 [ 2663.282211] sidtab_sid2str_get+0x17e/0x720 [ 2663.283114] ? audit_log_format+0xca/0x120 [ 2663.283986] sidtab_entry_to_string+0x33/0x110 [ 2663.284937] security_sid_to_context_core+0x33c/0x5d0 [ 2663.286005] security_secid_to_secctx+0x72/0xc0 [ 2663.286965] audit_log_task_context+0xf0/0x170 [ 2663.287913] ? audit_log_format+0x120/0x120 [ 2663.288799] ? from_kuid+0x85/0xc0 [ 2663.289541] audit_log_task+0x1cd/0x310 [ 2663.290357] ? __audit_log_nfcfg+0x210/0x210 [ 2663.291288] audit_seccomp+0x76/0x200 [ 2663.292077] ? lock_downgrade+0x6d0/0x6d0 [ 2663.292953] __seccomp_filter+0x669/0x1530 [ 2663.293830] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2663.294803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2663.295804] ? wait_for_completion_io+0x270/0x270 [ 2663.296818] ? fput_many+0x2f/0x1a0 [ 2663.297568] ? ksys_write+0x1a9/0x260 [ 2663.298354] __secure_computing+0x191/0x2f0 [ 2663.299251] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2663.300343] do_syscall_64+0xf/0x40 [ 2663.301087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2663.302142] RIP: 0033:0x7f9b49447b19 [ 2663.302904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2663.306677] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2663.308250] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2663.309709] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2663.311184] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2663.312645] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2663.314117] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2663.402471] loop5: detected capacity change from 0 to 2048 [ 2663.422038] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2663.442977] loop5: detected capacity change from 0 to 2048 [ 2663.459813] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x0, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:10:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:10 executing program 6: epoll_create(0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="201004000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:10:10 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, r3, 0x0) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x40, 0x0, 0xbf}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r0, 0x8dd, 0x0, 0x0, 0x11, 0x1, {0x2, r9}}, 0xbb5b) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:10:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:10:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 9) 20:10:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)) [ 2676.263510] loop5: detected capacity change from 0 to 2048 [ 2676.271225] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2676.276780] kauditd_printk_skb: 17 callbacks suppressed [ 2676.276798] audit: type=1326 audit(1767903010.293:5110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2676.276886] FAULT_INJECTION: forcing a failure. [ 2676.276886] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.278163] audit: type=1326 audit(1767903010.294:5111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2676.280506] CPU: 0 PID: 13346 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2676.280512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.280525] Call Trace: [ 2676.286659] audit: type=1326 audit(1767903010.294:5112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2676.287115] dump_stack+0x107/0x167 [ 2676.287129] should_fail.cold+0x5/0xa [ 2676.287148] ? audit_log_d_path+0xce/0x190 [ 2676.291498] should_failslab+0x5/0x20 [ 2676.291939] kmem_cache_alloc_trace+0x55/0x320 [ 2676.292471] audit_log_d_path+0xce/0x190 [ 2676.292939] audit_log_d_path_exe+0x40/0x70 [ 2676.293445] audit_log_task+0x278/0x310 [ 2676.293902] ? __audit_log_nfcfg+0x210/0x210 [ 2676.294420] audit_seccomp+0x76/0x200 [ 2676.294858] ? lock_downgrade+0x6d0/0x6d0 [ 2676.295345] __seccomp_filter+0x669/0x1530 [ 2676.295830] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2676.296369] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2676.296922] ? wait_for_completion_io+0x270/0x270 [ 2676.297495] ? fput_many+0x2f/0x1a0 [ 2676.297927] ? ksys_write+0x1a9/0x260 [ 2676.298390] __secure_computing+0x191/0x2f0 [ 2676.298888] syscall_trace_enter.constprop.0+0x84/0x1e0 20:10:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x0, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2676.299519] do_syscall_64+0xf/0x40 [ 2676.300131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2676.300717] RIP: 0033:0x7f9b49447b19 [ 2676.301148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.303282] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2676.304159] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2676.304973] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2676.305790] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2676.306609] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2676.307449] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2676.308644] audit: type=1326 audit(1767903010.294:5113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:10:10 executing program 4: pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2676.336733] loop5: detected capacity change from 0 to 2048 [ 2676.343237] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200005000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:10:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0xa38, 0x6, 0x3307, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) syz_io_uring_setup(0x714, &(0x7f0000000040)={0x0, 0xf564, 0x4, 0x0, 0x32d, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000180)="315d67ffcaa3dbc6bf09e57943f795ee2b0c8607eb488300a108daabab8d44dd06e4b6d7b6028b559c55e7e7cfa0bff477c58953d7a517cb1e70ab161c8a5b4f435c118704f929783a6053137b1e19a5c0a98337b99e8b2540c28b0094cedc1f3556c465bd752b1d6ccfc7627d5b841413d3433dfd59d427b304784bf10ed9d56fe64825e8bad6ba9e2d437bd455eba3c9527b2756a4537a6c733127b719975cc855b9cce53794faf64534a975872fd4bca9d4f30ba51bc5a1fc15440f26", 0xbe, 0x40012101, 0x1}, 0x3ff) 20:10:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x0, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2676.453541] loop5: detected capacity change from 0 to 2048 [ 2676.461622] audit: type=1400 audit(1767903010.479:5114): avc: denied { map } for pid=13362 comm="syz-executor.3" path="pipe:[45948]" dev="pipefs" ino=45948 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 2676.479853] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:10 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:10 executing program 4: pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2676.524916] audit: type=1326 audit(1767903010.542:5115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2676.530353] audit: type=1326 audit(1767903010.542:5116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2676.535588] audit: type=1326 audit(1767903010.542:5117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2676.540583] audit: type=1326 audit(1767903010.542:5118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2676.549513] audit: type=1326 audit(1767903010.542:5119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13341 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:10:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:23 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 10) 20:10:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x2000a040}, 0x20000000) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x110c, 0x3a, 0x10, 0x70bd25, 0x25dfdbfd, {0x19}, [@typed={0x4, 0x3}, @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@mcast1}, @generic="513232b734d9f0b11dd0c3cf", @typed={0x8, 0x92, 0x0, 0x0, @u32=0x4}, @generic="bbaa44ae8c32a0f8ba7c8468330f4f0a92e1d68ba86f575cd534592fe9b61b074aafe2a7a7f4c6bfc6eb1175f53a2b7a5d9e637d6aefb7331adc849f258dd8652c35bcb38f0eec57787bfba6e3d9f6c0c1cf90ac47b5674360b174ce31e8aec19254623bdc7855a36670616c489902abec7d83501872febffaf8cc854e9809a487f05c7c27ab1cf042ae6023f9081e6a5f01e1d2d879bde042dbe0ccdc47bc0f98fc7ada8448ed1c42854da6d8e452c2966a193202cd475edf848d88a30f3d66bfb3524ee8f1", @typed={0x1004, 0x78, 0x0, 0x0, @binary="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"}]}, 0x110c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f0000001a00)={0x728, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f800000}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x728}, 0x1, 0x0, 0x0, 0x801}, 0x804) 20:10:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x0, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:10:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200006000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:10:23 executing program 4: pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:10:23 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2804], 0xaf4) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) fsmount(r0, 0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x2) sendfile(r5, r6, 0x0, 0x100000001) splice(r5, 0x0, r1, 0x0, 0x100000000005b, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x88000, 0x58) [ 2689.492215] audit: type=1326 audit(1767903023.509:5120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2689.492672] FAULT_INJECTION: forcing a failure. [ 2689.492672] name failslab, interval 1, probability 0, space 0, times 0 [ 2689.499183] CPU: 0 PID: 13384 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2689.499989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.500952] Call Trace: [ 2689.501265] dump_stack+0x107/0x167 [ 2689.501689] should_fail.cold+0x5/0xa [ 2689.502141] ? create_object.isra.0+0x3a/0xa30 [ 2689.502668] should_failslab+0x5/0x20 [ 2689.503107] kmem_cache_alloc+0x5b/0x310 [ 2689.503586] ? audit_log_format+0xca/0x120 [ 2689.504075] create_object.isra.0+0x3a/0xa30 [ 2689.504587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2689.505180] kmem_cache_alloc_trace+0x151/0x320 [ 2689.505731] audit_log_d_path+0xce/0x190 [ 2689.506199] audit_log_d_path_exe+0x40/0x70 [ 2689.506707] audit_log_task+0x278/0x310 [ 2689.507166] ? __audit_log_nfcfg+0x210/0x210 [ 2689.507688] audit_seccomp+0x76/0x200 [ 2689.508132] ? lock_downgrade+0x6d0/0x6d0 [ 2689.508613] __seccomp_filter+0x669/0x1530 [ 2689.509103] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2689.509643] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2689.510197] ? wait_for_completion_io+0x270/0x270 [ 2689.510758] ? fput_many+0x2f/0x1a0 [ 2689.511182] ? ksys_write+0x1a9/0x260 [ 2689.511624] __secure_computing+0x191/0x2f0 [ 2689.512142] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2689.512758] do_syscall_64+0xf/0x40 [ 2689.513193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2689.513785] RIP: 0033:0x7f9b49447b19 [ 2689.514219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.516371] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2689.517140] audit: type=1326 audit(1767903023.510:5121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2689.517267] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2689.517284] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2689.524576] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2689.525437] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2689.526272] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2689.546781] audit: type=1326 audit(1767903023.510:5122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2689.558297] loop5: detected capacity change from 0 to 2048 20:10:23 executing program 4: pipe(&(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2689.572257] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x0, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2689.617643] audit: type=1326 audit(1767903023.510:5123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2689.622291] audit: type=1326 audit(1767903023.580:5124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2689.625514] audit: type=1326 audit(1767903023.580:5125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2689.628969] audit: type=1326 audit(1767903023.581:5126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2689.632743] audit: type=1326 audit(1767903023.581:5127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2689.635292] audit: type=1326 audit(1767903023.581:5128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13378 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2689.639049] loop5: detected capacity change from 0 to 2048 [ 2689.645363] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 11) 20:10:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200007000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:10:37 executing program 4: pipe(&(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:10:37 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0x0, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:10:37 executing program 3: r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0xffffffffffffffeb, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4844}, 0x20000800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:10:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="d30000b5bb0fc45f21928efd177000", @ANYRES16=0x0, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40080}, 0x1040) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) fcntl$setpipe(r4, 0x407, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_snmp6\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8800, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYRESOCT, @ANYRESHEX=r8, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="09736d61636b6673766c6f6f623d2a5d2cb453f073"]) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r1, 0x0, 0x5, 0x0) syz_io_uring_complete(0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2200422, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '{'}}, {@cachetag}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@afid={'afid', 0x3d, 0x8982}}, {@version_L}, {@access_any}, {@uname={'uname', 0x3d, '9p\x00'}}, {@msize={'msize', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '-:'}}, {@dfltuid={'dfltuid', 0x3d, r9}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'net/dev_snmp6\x00'}}, {@measure}, {@fsname}, {@measure}, {@dont_appraise}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) 20:10:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2703.177076] loop5: detected capacity change from 0 to 2048 [ 2703.186744] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2703.189055] audit: type=1326 audit(1767903037.206:5129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2703.192898] FAULT_INJECTION: forcing a failure. [ 2703.192898] name failslab, interval 1, probability 0, space 0, times 0 [ 2703.194706] CPU: 0 PID: 13428 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2703.195618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.196578] Call Trace: [ 2703.196889] dump_stack+0x107/0x167 [ 2703.197317] should_fail.cold+0x5/0xa [ 2703.197764] ? vm_area_dup+0x78/0x290 [ 2703.198209] should_failslab+0x5/0x20 [ 2703.198647] kmem_cache_alloc+0x5b/0x310 [ 2703.199120] vm_area_dup+0x78/0x290 [ 2703.199556] ? lock_chain_count+0x20/0x20 [ 2703.200039] ? __secure_computing+0x191/0x2f0 [ 2703.200571] ? syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2703.201212] ? do_syscall_64+0xf/0x40 [ 2703.201654] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.202281] ? lock_acquire+0x197/0x470 [ 2703.202741] ? find_held_lock+0x2c/0x110 [ 2703.203217] ? __lock_acquire+0x1657/0x5b00 [ 2703.203727] ? vm_area_alloc+0x110/0x110 [ 2703.204205] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.204807] ? __kasan_slab_free+0x122/0x160 [ 2703.205327] ? slab_free_freelist_hook+0xa9/0x180 [ 2703.205889] ? lock_acquire+0x197/0x470 [ 2703.206352] ? can_vma_merge_before+0x89/0x250 [ 2703.206878] __split_vma+0xa8/0x4e0 [ 2703.207303] split_vma+0x99/0xe0 [ 2703.207702] mprotect_fixup+0x669/0x8c0 [ 2703.208168] ? change_protection+0x1ad0/0x1ad0 [ 2703.208699] ? down_write_killable_nested+0x180/0x180 [ 2703.209296] ? vmacache_find+0x55/0x2a0 [ 2703.209758] do_mprotect_pkey+0x518/0x940 [ 2703.210240] ? mprotect_fixup+0x8c0/0x8c0 [ 2703.210726] __x64_sys_pkey_mprotect+0x93/0x100 [ 2703.211264] do_syscall_64+0x33/0x40 [ 2703.211704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.212297] RIP: 0033:0x7f9b49447b19 [ 2703.212731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2703.214866] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2703.215757] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2703.216590] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2703.217421] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2703.218246] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2703.219074] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2703.225493] audit: type=1326 audit(1767903037.210:5130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2703.230217] audit: type=1326 audit(1767903037.210:5131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:10:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0x0, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2703.250544] loop5: detected capacity change from 0 to 2048 [ 2703.255228] audit: type=1326 audit(1767903037.210:5132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:10:37 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:37 executing program 4: pipe(&(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2703.287549] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0x0, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:10:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 20:10:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200009000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2703.391352] audit: type=1326 audit(1767903037.408:5133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2703.393984] audit: type=1326 audit(1767903037.408:5134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2703.396935] audit: type=1326 audit(1767903037.408:5135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2703.403423] audit: type=1326 audit(1767903037.408:5136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2703.424409] audit: type=1326 audit(1767903037.409:5137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13427 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:10:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 12) 20:10:37 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x0, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:10:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2703.509443] loop5: detected capacity change from 0 to 2048 20:10:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2703.523273] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2703.539189] audit: type=1326 audit(1767903037.556:5138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13460 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2703.544530] FAULT_INJECTION: forcing a failure. [ 2703.544530] name failslab, interval 1, probability 0, space 0, times 0 [ 2703.545939] CPU: 0 PID: 13461 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2703.546745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.547711] Call Trace: [ 2703.548024] dump_stack+0x107/0x167 [ 2703.548459] should_fail.cold+0x5/0xa [ 2703.548903] ? create_object.isra.0+0x3a/0xa30 [ 2703.549437] should_failslab+0x5/0x20 [ 2703.549879] kmem_cache_alloc+0x5b/0x310 [ 2703.550351] create_object.isra.0+0x3a/0xa30 [ 2703.550862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2703.551457] kmem_cache_alloc+0x159/0x310 [ 2703.551940] vm_area_dup+0x78/0x290 [ 2703.552366] ? lock_chain_count+0x20/0x20 [ 2703.552855] ? __secure_computing+0x191/0x2f0 [ 2703.553378] ? syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2703.554007] ? do_syscall_64+0xf/0x40 [ 2703.554446] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.555075] ? lock_acquire+0x197/0x470 [ 2703.555548] ? find_held_lock+0x2c/0x110 [ 2703.556019] ? __lock_acquire+0x1657/0x5b00 [ 2703.556522] ? vm_area_alloc+0x110/0x110 [ 2703.557002] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2703.557606] ? __kasan_slab_free+0x122/0x160 [ 2703.558119] ? slab_free_freelist_hook+0xa9/0x180 [ 2703.558675] ? lock_acquire+0x197/0x470 [ 2703.559141] ? can_vma_merge_before+0x89/0x250 [ 2703.559674] __split_vma+0xa8/0x4e0 [ 2703.560096] split_vma+0x99/0xe0 [ 2703.560486] mprotect_fixup+0x669/0x8c0 [ 2703.560948] ? change_protection+0x1ad0/0x1ad0 [ 2703.561474] ? down_write_killable_nested+0x180/0x180 [ 2703.562066] ? vmacache_find+0x55/0x2a0 [ 2703.562530] do_mprotect_pkey+0x518/0x940 [ 2703.563007] ? mprotect_fixup+0x8c0/0x8c0 [ 2703.563502] __x64_sys_pkey_mprotect+0x93/0x100 [ 2703.564032] do_syscall_64+0x33/0x40 [ 2703.564465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2703.565048] RIP: 0033:0x7f9b49447b19 [ 2703.565485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2703.567650] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2703.568534] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2703.569359] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2703.570186] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2703.571003] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2703.571835] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2703.601443] loop5: detected capacity change from 0 to 2048 [ 2703.607244] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000a000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:10:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 13) 20:10:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x0, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2715.214806] kauditd_printk_skb: 9 callbacks suppressed [ 2715.214817] audit: type=1326 audit(1767903049.232:5148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2715.218246] audit: type=1326 audit(1767903049.232:5149): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2715.225491] FAULT_INJECTION: forcing a failure. [ 2715.225491] name failslab, interval 1, probability 0, space 0, times 0 [ 2715.226238] audit: type=1326 audit(1767903049.242:5150): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2715.228536] CPU: 1 PID: 13476 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2715.233329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2715.235547] Call Trace: [ 2715.236272] dump_stack+0x107/0x167 [ 2715.237251] should_fail.cold+0x5/0xa [ 2715.238269] ? anon_vma_clone+0xdc/0x590 [ 2715.239354] should_failslab+0x5/0x20 [ 2715.240378] kmem_cache_alloc+0x5b/0x310 [ 2715.241465] anon_vma_clone+0xdc/0x590 [ 2715.242510] __split_vma+0x17c/0x4e0 [ 2715.243502] split_vma+0x99/0xe0 [ 2715.244415] mprotect_fixup+0x669/0x8c0 [ 2715.245482] ? change_protection+0x1ad0/0x1ad0 [ 2715.246696] ? down_write_killable_nested+0x180/0x180 [ 2715.248071] ? vmacache_find+0x55/0x2a0 [ 2715.249136] do_mprotect_pkey+0x518/0x940 [ 2715.250245] ? mprotect_fixup+0x8c0/0x8c0 [ 2715.251361] __x64_sys_pkey_mprotect+0x93/0x100 [ 2715.252607] do_syscall_64+0x33/0x40 [ 2715.253600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2715.254961] RIP: 0033:0x7f9b49447b19 [ 2715.255965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2715.260275] audit: type=1326 audit(1767903049.242:5151): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2715.260912] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2715.265929] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2715.267863] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2715.269780] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2715.271727] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2715.273655] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2715.275249] audit: type=1326 audit(1767903049.243:5152): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:10:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x1000200100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18}, './file1\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x14080, 0x0) 20:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:10:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2715.281494] loop5: detected capacity change from 0 to 2048 [ 2715.286651] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2715.304887] loop5: detected capacity change from 0 to 2048 [ 2715.316354] EXT4-fs (loop5): Invalid log cluster size: 32773 20:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:10:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x0, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2715.331922] audit: type=1326 audit(1767903049.349:5153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2715.340209] audit: type=1326 audit(1767903049.349:5154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:10:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2715.360176] audit: type=1326 audit(1767903049.349:5155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2715.370237] audit: type=1326 audit(1767903049.349:5156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2715.399537] audit: type=1326 audit(1767903049.349:5157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13474 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:03 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 14) 20:11:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x4, 0x21, 0xfffffffd, 0x3af, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={r3, "ce6e765f732580663ee20319cf5555dd"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="3a3138a9997b5a28ebdae03434363734343037c331a66e8bd4ba759c17edaa778ba73aab46bd954db43fe0a04d0000000000000000a88f2a94f8c79a070ca3541d1a356302b5842341e7a74e9c44cb8b04d21b0b66c1e52eb84af2c22f95f09b78f652cf9575ce938bf6ddf3e777526590e5566d723e00498401c7848751667a8bf0d9aba46089ac6e8a263b05ff2efc2f79b019bf3ab6fbc116"]) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={r3, "50e16485f556dfd19007e3207a544f4d"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) 20:11:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000b000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:03 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ffd}, 0x10000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r0, 0xe44f2000) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) pipe(&(0x7f0000000100)) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x481b, 0x0, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) io_submit(0x0, 0x7, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)="22571758eeca94e31ad35eefe38e63dd258939c635e45dd25aada94c873a856a8ad7dbe208031d5a85a214d874bfbef2aacd287a8809ec946b290d29fc1ba184773b7e4b9642434eff6b1b4157e7e563481e2900", 0x54, 0x1, 0x0, 0x2, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xde3, r1, &(0x7f0000000240)="82c27ccb279056c3b54e0459cdf0cf523b5022b5a52259269eeb0563f1fb5766369ff4e7ea8751f315df", 0x2a, 0x9, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x98, 0xffffffffffffffff, &(0x7f0000000400)="1dab083878ee2d9adde4fc62006a8f49ead129239f05b368ae81cbee5a7c71876ec3c96f65331977551e9e45b0b5c32fe48229819421a4339d", 0x39, 0x7ff, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000500)="f1308f70acf744402de3ba16ab30fbe119110b407202616f8f10a4524099fe5d60e7605114586f9323037bb04b75dbb67fd618009c9d5783a20a38b423a916e2bf899ed329a9d284416589369743e2bdd56cf1c35ccb7135c2c838b6195b789e06445f14a97fb043f7ea11ec14f9db29a31c96c344fc035c569f5149765ea12fab5d514eba5f1fc2c58ba0c50c62c68d116214126435f70adb7e383cfab99963158bb468692cd400468d42dde4abdce68e1136fc222bd5e320edc9284a7ca67bdabff4154a6aa378ce61dfd24303573e", 0xd0, 0xfff, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x84, r1, &(0x7f0000000680)="389085d2b8e522ebd02b0f0afce5f825ea", 0x11, 0x7ff, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000700), 0x0, 0x8001, 0x0, 0x0, r3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x3ff, 0xffffffffffffffff, &(0x7f0000000780)="b98b5150fd2bf68ba5f94896ebe6c8614555fd39497255b5964f58fe62622a1bf52b5d956d289c3aa95afcfa1f7086f200093012e8f507891ecd783f8d4a06c5c73bb97e6aa07ee54a6b76a63fb04ba1263512b30f717ed071a56d0958ebd565036c3483882da0b3cc1e10713ffd80bc6b8e45893bd7f1c6d4c9af587bbef00937d3ec4927091552f4772368486113f8db08fc64d91db899ce9ae779d385c9e45f17f9dcb67dcde00f99b77c55fefb79fb31db5f0f", 0xb5, 0x10000, 0x0, 0x1, r7}]) 20:11:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:11:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:11:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x0, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2729.097529] audit: type=1326 audit(1767903063.115:5158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2729.104284] audit: type=1326 audit(1767903063.115:5159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2729.118165] FAULT_INJECTION: forcing a failure. [ 2729.118165] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.120960] CPU: 1 PID: 13514 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2729.122436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2729.124215] Call Trace: [ 2729.124785] dump_stack+0x107/0x167 [ 2729.125563] should_fail.cold+0x5/0xa [ 2729.125616] audit: type=1326 audit(1767903063.132:5160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2729.126370] ? create_object.isra.0+0x3a/0xa30 [ 2729.126390] should_failslab+0x5/0x20 [ 2729.126410] kmem_cache_alloc+0x5b/0x310 [ 2729.126443] create_object.isra.0+0x3a/0xa30 [ 2729.134930] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2729.136029] kmem_cache_alloc+0x159/0x310 [ 2729.136937] anon_vma_clone+0xdc/0x590 [ 2729.137780] __split_vma+0x17c/0x4e0 [ 2729.138575] split_vma+0x99/0xe0 [ 2729.139295] mprotect_fixup+0x669/0x8c0 [ 2729.140162] ? change_protection+0x1ad0/0x1ad0 [ 2729.141135] ? down_write_killable_nested+0x180/0x180 [ 2729.142228] ? vmacache_find+0x55/0x2a0 [ 2729.143078] do_mprotect_pkey+0x518/0x940 [ 2729.143965] ? mprotect_fixup+0x8c0/0x8c0 [ 2729.144854] __x64_sys_pkey_mprotect+0x93/0x100 [ 2729.145834] do_syscall_64+0x33/0x40 [ 2729.146634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2729.147567] loop5: detected capacity change from 0 to 2048 [ 2729.147729] RIP: 0033:0x7f9b49447b19 [ 2729.147754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2729.153584] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2729.153792] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2729.155183] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2729.155194] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2729.155206] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2729.155217] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2729.155227] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2729.181766] loop5: detected capacity change from 0 to 2048 [ 2729.189149] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2729.195941] audit: type=1326 audit(1767903063.133:5161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:11:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2729.227742] audit: type=1326 audit(1767903063.134:5162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2729.268911] audit: type=1326 audit(1767903063.285:5163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2729.274063] audit: type=1326 audit(1767903063.285:5164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2729.293456] audit: type=1326 audit(1767903063.285:5165): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2729.298289] audit: type=1326 audit(1767903063.285:5166): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2729.302915] audit: type=1326 audit(1767903063.286:5167): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13502 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) r3 = signalfd4(r2, &(0x7f0000000040)={[0x20]}, 0x8, 0x800) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000080)={0xd, 0x627bbce4}) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:11:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:11:16 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r4, 0xe6467000) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000080)={0x0, 0xad}) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000280)={0x1, 0x2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000200)={&(0x7f00000002c0)=""/221, 0xdd, 0x7f, 0xeba}) ppoll(&(0x7f0000000100)=[{r1, 0x1008}, {r6, 0x40}], 0x2, &(0x7f0000000180)={r8, r9+10000000}, &(0x7f00000001c0)={[0x9]}, 0x8) 20:11:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000d000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:11:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2742.145980] audit: type=1326 audit(1767903076.163:5168): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2742.146935] FAULT_INJECTION: forcing a failure. [ 2742.146935] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.151835] audit: type=1326 audit(1767903076.163:5169): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2742.152966] CPU: 0 PID: 13548 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2742.152972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.152976] Call Trace: [ 2742.152992] dump_stack+0x107/0x167 [ 2742.153005] should_fail.cold+0x5/0xa [ 2742.153018] ? audit_log_start.part.0+0x27e/0x730 [ 2742.153030] should_failslab+0x5/0x20 [ 2742.153043] kmem_cache_alloc+0x5b/0x310 [ 2742.153055] audit_log_start.part.0+0x27e/0x730 [ 2742.153079] ? audit_log_task_context+0x170/0x170 [ 2742.161528] loop5: detected capacity change from 0 to 2048 [ 2742.162025] ? audit_filter+0x5d6/0xb10 [ 2742.162045] ? __bpf_prog_run64+0xe0/0xe0 [ 2742.166109] ? audit_compare_dname_path+0x120/0x120 [ 2742.166683] audit_log_start+0x5f/0x90 [ 2742.167141] audit_seccomp+0x5d/0x200 [ 2742.167580] __seccomp_filter+0x669/0x1530 [ 2742.168076] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2742.168615] ? downgrade_write+0x3a0/0x3a0 [ 2742.169104] ? down_write_killable_nested+0x180/0x180 [ 2742.169694] ? vmacache_find+0x55/0x2a0 [ 2742.170163] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2742.170686] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2742.171317] ? mprotect_fixup+0x8c0/0x8c0 [ 2742.171807] __secure_computing+0x191/0x2f0 [ 2742.172311] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2742.172915] do_syscall_64+0xf/0x40 [ 2742.173336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.173921] RIP: 0033:0x7f9b493fa69c [ 2742.174350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2742.176458] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2742.177330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2742.178146] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2742.178956] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.179771] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2742.180600] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2742.181531] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 2742.182379] audit: out of memory in audit_log_start [ 2742.183388] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2742.187043] audit: type=1326 audit(1767903076.164:5170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:11:16 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 15) [ 2742.197903] audit: type=1326 audit(1767903076.164:5171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2742.209730] audit: type=1326 audit(1767903076.221:5172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2742.215150] loop5: detected capacity change from 0 to 2048 [ 2742.218418] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2742.223788] audit: type=1326 audit(1767903076.221:5173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 20:11:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:11:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2742.239410] audit: type=1326 audit(1767903076.221:5174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) signalfd4(r4, &(0x7f0000000040)={[0x1]}, 0x8, 0xc00) r5 = timerfd_create(0x1, 0x80000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000080)=0x6) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2742.255706] audit: type=1326 audit(1767903076.221:5175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13547 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000f000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:16 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) [ 2742.326493] loop5: detected capacity change from 0 to 2048 [ 2742.342954] EXT4-fs (loop5): Invalid log cluster size: 32773 20:11:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:11:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2742.371662] loop5: detected capacity change from 0 to 2048 [ 2742.384977] EXT4-fs (loop5): Invalid log cluster size: 32773 20:11:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:16 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) 20:11:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200410000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:11:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) 20:11:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:11:30 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 16) 20:11:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:11:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="202010000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r0, 0x0, 0x100000001) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000100)={{r6}, 0x7, 0x9b, 0x8}) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r8, 0x100, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x57, 0x2c, 0x8bc3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x100000001) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000140)=[r8, r7, r0], 0x3) 20:11:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) [ 2756.635539] loop5: detected capacity change from 0 to 2048 [ 2756.649275] audit: type=1326 audit(1767903090.666:5176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2756.653086] FAULT_INJECTION: forcing a failure. [ 2756.653086] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.654228] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2756.654532] CPU: 0 PID: 13606 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2756.656932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.657877] Call Trace: [ 2756.658187] dump_stack+0x107/0x167 [ 2756.658609] should_fail.cold+0x5/0xa [ 2756.659048] ? create_object.isra.0+0x3a/0xa30 [ 2756.659571] should_failslab+0x5/0x20 [ 2756.660015] kmem_cache_alloc+0x5b/0x310 [ 2756.660483] ? auditd_test_task+0x11e/0x300 [ 2756.660978] create_object.isra.0+0x3a/0xa30 [ 2756.661480] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.662060] kmem_cache_alloc+0x159/0x310 [ 2756.662545] audit_log_start.part.0+0x27e/0x730 [ 2756.663079] ? audit_log_task_context+0x170/0x170 [ 2756.663630] ? audit_filter+0x5d6/0xb10 [ 2756.664103] ? __bpf_prog_run64+0xe0/0xe0 [ 2756.664577] ? audit_compare_dname_path+0x120/0x120 [ 2756.665154] audit_log_start+0x5f/0x90 [ 2756.665598] audit_seccomp+0x5d/0x200 [ 2756.666038] __seccomp_filter+0x669/0x1530 [ 2756.666527] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2756.667057] ? downgrade_write+0x3a0/0x3a0 [ 2756.667543] ? down_write_killable_nested+0x180/0x180 [ 2756.668163] ? vmacache_find+0x55/0x2a0 [ 2756.668629] ? mprotect_fixup+0x8c0/0x8c0 [ 2756.669108] __secure_computing+0x191/0x2f0 [ 2756.669608] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2756.670222] do_syscall_64+0xf/0x40 [ 2756.670645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2756.671234] RIP: 0033:0x7f9b493fa69c [ 2756.671661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2756.673779] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2756.674650] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2756.675472] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2756.676296] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.677119] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2756.677936] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2756.679462] audit: type=1326 audit(1767903090.670:5177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2756.683334] audit: type=1326 audit(1767903090.670:5178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2756.688302] audit: type=1326 audit(1767903090.670:5179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2756.704860] loop5: detected capacity change from 0 to 2048 [ 2756.708292] EXT4-fs (loop5): Invalid log cluster size: 32773 20:11:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 20:11:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:11:30 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) 20:11:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200011000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) tee(r1, r4, 0x80000000, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="840b1b2cf62f50c3dd5dde2351a8c36f8bddf436dd6fe67628830a357c5f6465eb0053c1937eae9c5ab948b5e5fc5c759111d435faeecc04f2f14d8bb5e539530c0c2778a4228d1f52f0021f4caf0c80d6410132eb6b578ad867a0380d33117fbe0b5c80c9cfd2761ccebb1e44f3ba6220581a32388a34d789c7eb86fbb7b53404c4d3c0f8b31e742168e79bed92896cfb690ea59bc1ffe5aca56a153914b0e2264d5162f5e89d96d35d5a093ba756fae74116be47c5df67e9715e482c3b9d969a3fc915d4f33aa01a969b728c898bf3400df8297049c3ef94bd462d3014691c2240b0932cd266525dd43c909096dd049ff1", 0xf2}, {&(0x7f0000000040)="c262e2a82fbaef258bdb09b2c0a1c9e15a0ba215fc3abdfe6f040617e15195810381765acfec9fa4c185a937a21136606fdf3e435f76e7edccd6e6c611a74ed37d832e2c4e", 0x45}, {&(0x7f0000000580)="845362b97800325568debbf3cf6f413d35d80d3cdc81a2794f44e7899b8bb1066e9d50eab5716c6d3c4e679442339616b802e1e708dcf786b811f58132d74bd973ea276fc1951ac8bdcd1e229a89efadd54a4a0ff78c3d0bf5fbb35eb3327d8a3d33b0a43fe53176e6d6970d51cfb5f0bcc5c7169209faff655cc13907ebb97d0db5cba95c54f0b341d34526cf158058f5ed5e21d76823e6cbec41fb867a00304cc1ec304bd1dad3177b2a3e3758ba739a25", 0xb2}, {&(0x7f0000000200)="0bd5dfef7e1b35313eb2bfad6a895049efc3c96552ab93e6bb58ede7e598e8658c72e267186e36d8cc8c5f887651fd6d150e377309e52ec2ff64aa749882f6c79eefbd2015f7952323ca3a1379007922ddc20cac1f37aa20ef55171b5ef069f3fbf64c7e0e32596f15797f96275d18570877d2c912214568bedd5aca", 0x7c}, {&(0x7f0000000300)="deeb4edc53b276eb9f78b0f57b1eede23bc96f7635546caecae8bc4735e97c3844f68f0995c2c00f6f253fd5e728", 0x2e}, {&(0x7f0000000400)="70305f98154da461d27e2c96be09f1a572d19dce70aefeae8adce9023c83d27313d3cad1db7890f4262fad3770d623c48e8d7ae8185d0c", 0x37}, {&(0x7f0000000440)="370d2af222f49761d604400eaae32167", 0x10}, {&(0x7f0000000640)="bd563ff06c9bd3fc27cfa84c91ce237c4c6569de00be7d865278903a7a5915a752cb66073789a9cd3c1df22fe7948b7e7fd8b17b60661c073205d24b5816eb7cb75ef5978657fa629da274f02f791390bbc2a75acac1237272cbd1b3b461181818f1fbd922846e8fc767651014e1f22410b10abcdd515720232f932c14e9839c3f3e6aed897b533f6df03107629fe07316ca3f144bbebb91f6d66187657dcc61e4fe8a899cedfa6381bb36519a409b98a2f539764bf8e851b5", 0xb9}, {&(0x7f0000000700)="6374aef56533d8dae97fa3809fe82f12d9edc9e7a8bf6212df0deb3505f13244a095ece3248baf6b998cdcc75dab673fffa3985fdf97b9df564a47063af7960104e682583ae9ae32a257d2b79fc1dc60aba4c7695dfd3c716753726a09799e5e3d4e94ea92df6f64de651a3fbf596449b7880fe051ae2056ba785ceff30c327387dd82e9a05641d4612c525e03b87fd37ba4d7d8ad022fd06b9dd224a0d4fb2f63c99f2ba837ce7d3ab9403fa8a40a83", 0xb0}, {&(0x7f00000007c0)="a16861e1bea388d71a22ae22bdfdfcc68b0d753e7c9f4469c557fbfc1f8c9d5fd499ad547824fd84386e2fef96b2d637636add682fd26bd3b22719f92bc179f6cdda07db4d95490c320da2aa8c68b59f8b0195f030c2c9061baa24a5f92ff99c0b0ebd3b50acb392c5c507a70d6ca3cbf21587aab1ee33c06221a569e23a1bb3d9c65f541fe2cee1487527932486358c1498238d48e8ec0c0716a91cd5d6ec0fd9af7159df923b6c1f5b00945b8d4162d15b03700d0e35c32168b7037b473f8a17bd06f2432faf4193cfb47f", 0xcc}], 0xa, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}, 0x80) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2756.786480] audit: type=1326 audit(1767903090.804:5180): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2756.789243] audit: type=1326 audit(1767903090.804:5181): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2756.792456] audit: type=1326 audit(1767903090.804:5182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2756.803072] audit: type=1326 audit(1767903090.804:5183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2756.807780] audit: type=1326 audit(1767903090.804:5184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13601 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:11:30 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 17) 20:11:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:11:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2756.924647] loop5: detected capacity change from 0 to 2048 [ 2756.938329] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2756.968524] audit: type=1326 audit(1767903090.986:5185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13629 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2756.990667] FAULT_INJECTION: forcing a failure. [ 2756.990667] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.993494] CPU: 1 PID: 13630 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2756.995131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.997095] Call Trace: [ 2756.997724] dump_stack+0x107/0x167 [ 2756.998594] should_fail.cold+0x5/0xa [ 2756.999499] ? create_object.isra.0+0x3a/0xa30 [ 2757.000583] should_failslab+0x5/0x20 [ 2757.001488] kmem_cache_alloc+0x5b/0x310 [ 2757.002450] create_object.isra.0+0x3a/0xa30 [ 2757.003496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.004701] kmem_cache_alloc+0x159/0x310 [ 2757.005679] anon_vma_clone+0xdc/0x590 [ 2757.006607] __split_vma+0x17c/0x4e0 [ 2757.007486] split_vma+0x99/0xe0 [ 2757.008290] mprotect_fixup+0x669/0x8c0 [ 2757.009226] ? change_protection+0x1ad0/0x1ad0 [ 2757.010304] ? down_write_killable_nested+0x180/0x180 [ 2757.011522] ? vmacache_find+0x55/0x2a0 [ 2757.012472] do_mprotect_pkey+0x518/0x940 [ 2757.013445] ? io_schedule_timeout+0x140/0x140 [ 2757.014513] ? mprotect_fixup+0x8c0/0x8c0 [ 2757.015491] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2757.016787] __x64_sys_pkey_mprotect+0x93/0x100 [ 2757.017880] do_syscall_64+0x33/0x40 [ 2757.018761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.019956] RIP: 0033:0x7f9b49447b19 [ 2757.020852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.025187] RSP: 002b:00007f9b469bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 2757.026975] RAX: ffffffffffffffda RBX: 00007f9b4955af60 RCX: 00007f9b49447b19 [ 2757.028679] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020fff000 [ 2757.030375] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.032096] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2757.033801] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:11:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) 20:11:45 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 18) 20:11:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200013000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:11:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x74b2fbf8, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000180)) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x488b00, 0x24a, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0xff, 0x6}, {0xfe, 0x2}, 0x4, 0x1, 0x78}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000200)={0x5, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:11:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = accept$unix(r3, &(0x7f0000000140), &(0x7f0000000080)=0x6e) sendfile(r1, r5, 0x0, 0x9) fcntl$getown(r4, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000001c0)={0x3}) 20:11:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) 20:11:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:11:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2772.007640] kauditd_printk_skb: 9 callbacks suppressed [ 2772.007659] audit: type=1326 audit(1767903106.024:5195): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2772.007692] FAULT_INJECTION: forcing a failure. [ 2772.007692] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.008959] audit: type=1326 audit(1767903106.024:5196): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2772.011821] CPU: 1 PID: 13652 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2772.011835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.017320] audit: type=1326 audit(1767903106.024:5197): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2772.018053] Call Trace: [ 2772.018073] dump_stack+0x107/0x167 [ 2772.018087] should_fail.cold+0x5/0xa [ 2772.018103] ? create_object.isra.0+0x3a/0xa30 [ 2772.018115] should_failslab+0x5/0x20 [ 2772.018135] kmem_cache_alloc+0x5b/0x310 [ 2772.020390] loop5: detected capacity change from 0 to 2048 [ 2772.022910] ? kmem_cache_alloc+0x159/0x310 [ 2772.022924] create_object.isra.0+0x3a/0xa30 [ 2772.022935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.022958] kmem_cache_alloc_node+0x169/0x330 [ 2772.023856] audit: type=1326 audit(1767903106.025:5198): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2772.024020] __alloc_skb+0x6d/0x5b0 [ 2772.028368] audit: type=1326 audit(1767903106.025:5199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2772.029029] audit_log_start.part.0+0x2a3/0x730 [ 2772.036939] ? audit_log_task_context+0x170/0x170 [ 2772.037598] ? audit_filter+0x5d6/0xb10 [ 2772.038149] ? __bpf_prog_run64+0xe0/0xe0 [ 2772.038714] ? audit_compare_dname_path+0x120/0x120 [ 2772.039409] audit_log_start+0x5f/0x90 [ 2772.039941] audit_seccomp+0x5d/0x200 [ 2772.040476] __seccomp_filter+0x669/0x1530 [ 2772.041054] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2772.041694] ? downgrade_write+0x3a0/0x3a0 [ 2772.042291] ? down_write_killable_nested+0x180/0x180 [ 2772.042993] ? vmacache_find+0x55/0x2a0 [ 2772.043548] ? mprotect_fixup+0x8c0/0x8c0 [ 2772.044139] __secure_computing+0x191/0x2f0 [ 2772.044745] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2772.045479] do_syscall_64+0xf/0x40 [ 2772.045990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.046688] RIP: 0033:0x7f9b493fa69c [ 2772.047191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2772.049709] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2772.050746] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2772.051710] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2772.052700] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.053667] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2772.054640] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2772.060320] audit: type=1326 audit(1767903106.075:5200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2772.075462] audit: type=1326 audit(1767903106.076:5201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2772.091419] EXT4-fs (loop5): Invalid log cluster size: 32773 20:11:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) pidfd_getfd(r4, r3, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) 20:11:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) [ 2772.108861] loop5: detected capacity change from 0 to 2048 [ 2772.113208] EXT4-fs (loop5): Invalid log cluster size: 32773 20:11:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x10000000000000, 0x3) [ 2772.122761] audit: type=1326 audit(1767903106.076:5202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 20:11:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 19) [ 2772.154275] audit: type=1326 audit(1767903106.076:5203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200015000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2772.179920] audit: type=1326 audit(1767903106.076:5204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13645 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:11:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x100000005, 0xb) [ 2772.193783] FAULT_INJECTION: forcing a failure. [ 2772.193783] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.195251] CPU: 1 PID: 13668 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2772.196383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.197445] Call Trace: [ 2772.197863] dump_stack+0x107/0x167 [ 2772.198311] should_fail.cold+0x5/0xa [ 2772.198781] should_failslab+0x5/0x20 [ 2772.199347] __kmalloc_node_track_caller+0x74/0x3b0 [ 2772.200134] ? audit_log_start.part.0+0x2a3/0x730 [ 2772.200747] __alloc_skb+0xb1/0x5b0 [ 2772.201200] audit_log_start.part.0+0x2a3/0x730 [ 2772.201924] ? audit_log_task_context+0x170/0x170 [ 2772.202550] ? audit_filter+0x5d6/0xb10 [ 2772.203052] ? __bpf_prog_run64+0xe0/0xe0 [ 2772.203560] ? audit_compare_dname_path+0x120/0x120 [ 2772.204300] audit_log_start+0x5f/0x90 [ 2772.204875] audit_seccomp+0x5d/0x200 [ 2772.205359] __seccomp_filter+0x669/0x1530 [ 2772.206031] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2772.206785] ? downgrade_write+0x3a0/0x3a0 [ 2772.207312] ? down_write_killable_nested+0x180/0x180 [ 2772.208097] ? vmacache_find+0x55/0x2a0 [ 2772.208606] ? mprotect_fixup+0x8c0/0x8c0 [ 2772.209231] __secure_computing+0x191/0x2f0 [ 2772.209896] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2772.210759] do_syscall_64+0xf/0x40 [ 2772.211204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.211970] RIP: 0033:0x7f9b493fa69c [ 2772.212470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2772.214952] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2772.216206] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2772.217129] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2772.218121] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.219230] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2772.220341] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:11:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2772.267139] loop5: detected capacity change from 0 to 2048 [ 2772.281321] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:12:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:12:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x68, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x80, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:12:03 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:12:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200020000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:03 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 20) 20:12:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:12:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') [ 2789.887533] kauditd_printk_skb: 10 callbacks suppressed [ 2789.887552] audit: type=1326 audit(1767903123.905:5213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2789.894840] audit: type=1326 audit(1767903123.905:5214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2789.896143] FAULT_INJECTION: forcing a failure. [ 2789.896143] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.902601] CPU: 1 PID: 13692 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2789.904466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.906660] Call Trace: [ 2789.907363] dump_stack+0x107/0x167 [ 2789.908343] should_fail.cold+0x5/0xa [ 2789.909364] ? create_object.isra.0+0x3a/0xa30 [ 2789.910593] should_failslab+0x5/0x20 [ 2789.911616] kmem_cache_alloc+0x5b/0x310 [ 2789.912709] create_object.isra.0+0x3a/0xa30 [ 2789.913160] audit: type=1326 audit(1767903123.913:5215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2789.913884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.913921] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2789.921134] ? audit_log_start.part.0+0x2a3/0x730 [ 2789.922446] __alloc_skb+0xb1/0x5b0 [ 2789.923435] audit_log_start.part.0+0x2a3/0x730 [ 2789.924738] ? audit_log_task_context+0x170/0x170 [ 2789.925856] ? audit_filter+0x5d6/0xb10 [ 2789.926755] ? __bpf_prog_run64+0xe0/0xe0 [ 2789.927678] ? audit_compare_dname_path+0x120/0x120 [ 2789.928797] audit_log_start+0x5f/0x90 [ 2789.929661] audit_seccomp+0x5d/0x200 [ 2789.930536] __seccomp_filter+0x669/0x1530 [ 2789.931481] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2789.932519] ? downgrade_write+0x3a0/0x3a0 [ 2789.933457] ? down_write_killable_nested+0x180/0x180 [ 2789.934600] ? vmacache_find+0x55/0x2a0 [ 2789.935483] ? mprotect_fixup+0x8c0/0x8c0 [ 2789.936404] __secure_computing+0x191/0x2f0 [ 2789.937355] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2789.937374] audit: type=1326 audit(1767903123.913:5216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2789.943191] do_syscall_64+0xf/0x40 [ 2789.943988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2789.945129] RIP: 0033:0x7f9b493fa69c [ 2789.945947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2789.949990] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2789.951662] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2789.953243] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2789.954825] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.956406] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2789.957970] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:12:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2789.979508] loop5: detected capacity change from 0 to 2048 [ 2789.998927] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) 20:12:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2790.035592] loop5: detected capacity change from 0 to 2048 [ 2790.056284] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x40, 0x0, 0xbf}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x200}, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:12:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="201020000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2790.156900] audit: type=1326 audit(1767903123.977:5217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2790.161746] audit: type=1326 audit(1767903124.174:5218): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2790.193253] audit: type=1326 audit(1767903124.176:5219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 20:12:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 21) [ 2790.236484] audit: type=1326 audit(1767903124.176:5220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2790.284629] audit: type=1326 audit(1767903124.176:5221): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2790.289633] loop5: detected capacity change from 0 to 2048 [ 2790.314647] audit: type=1326 audit(1767903124.331:5222): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13719 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2790.321985] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2790.332446] FAULT_INJECTION: forcing a failure. [ 2790.332446] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.334856] CPU: 0 PID: 13720 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2790.336341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.338099] Call Trace: [ 2790.338662] dump_stack+0x107/0x167 [ 2790.339434] should_fail.cold+0x5/0xa [ 2790.340244] should_failslab+0x5/0x20 [ 2790.341069] __kmalloc_track_caller+0x79/0x370 [ 2790.342036] ? sidtab_sid2str_get+0x17e/0x720 [ 2790.342990] kmemdup+0x23/0x50 [ 2790.343673] sidtab_sid2str_get+0x17e/0x720 [ 2790.344612] ? audit_log_format+0xca/0x120 [ 2790.345513] sidtab_entry_to_string+0x33/0x110 [ 2790.346489] security_sid_to_context_core+0x33c/0x5d0 [ 2790.347598] security_secid_to_secctx+0x72/0xc0 [ 2790.348620] audit_log_task_context+0xf0/0x170 [ 2790.349578] ? audit_log_format+0x120/0x120 [ 2790.350487] ? from_kuid+0x85/0xc0 [ 2790.351249] audit_log_task+0x1cd/0x310 [ 2790.352090] ? __audit_log_nfcfg+0x210/0x210 [ 2790.353065] audit_seccomp+0x76/0x200 [ 2790.353882] __seccomp_filter+0x669/0x1530 [ 2790.354780] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2790.355776] ? downgrade_write+0x3a0/0x3a0 [ 2790.356699] ? down_write_killable_nested+0x180/0x180 [ 2790.357796] ? vmacache_find+0x55/0x2a0 [ 2790.358658] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2790.359620] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2790.360775] ? mprotect_fixup+0x8c0/0x8c0 [ 2790.361650] __secure_computing+0x191/0x2f0 [ 2790.362574] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2790.363688] do_syscall_64+0xf/0x40 [ 2790.364480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2790.365563] RIP: 0033:0x7f9b493fa69c [ 2790.366340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2790.370248] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2790.371851] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2790.373376] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2790.374871] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.376392] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2790.377893] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2790.406560] loop5: detected capacity change from 0 to 2048 [ 2790.415897] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2805.765366] loop5: detected capacity change from 0 to 2048 [ 2805.779438] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2805.782934] kauditd_printk_skb: 9 callbacks suppressed [ 2805.782955] audit: type=1326 audit(1767903139.800:5231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2805.803013] FAULT_INJECTION: forcing a failure. [ 2805.803013] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.805979] CPU: 1 PID: 13740 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2805.807675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2805.809786] Call Trace: [ 2805.810550] dump_stack+0x107/0x167 [ 2805.811481] should_fail.cold+0x5/0xa [ 2805.812346] ? create_object.isra.0+0x3a/0xa30 [ 2805.813375] should_failslab+0x5/0x20 [ 2805.814199] kmem_cache_alloc+0x5b/0x310 [ 2805.815215] ? sidtab_sid2str_get+0x65/0x720 [ 2805.816354] create_object.isra.0+0x3a/0xa30 [ 2805.817506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2805.818839] __kmalloc_track_caller+0x177/0x370 [ 2805.819998] ? sidtab_sid2str_get+0x17e/0x720 [ 2805.821244] kmemdup+0x23/0x50 [ 2805.821990] sidtab_sid2str_get+0x17e/0x720 [ 2805.823065] ? audit_log_format+0xca/0x120 [ 2805.824233] sidtab_entry_to_string+0x33/0x110 [ 2805.825347] security_sid_to_context_core+0x33c/0x5d0 [ 2805.826767] security_secid_to_secctx+0x72/0xc0 [ 2805.827773] audit_log_task_context+0xf0/0x170 [ 2805.829073] ? audit_log_format+0x120/0x120 [ 2805.830230] ? from_kuid+0x85/0xc0 [ 2805.831032] audit_log_task+0x1cd/0x310 [ 2805.831876] ? __audit_log_nfcfg+0x210/0x210 [ 2805.833040] audit_seccomp+0x76/0x200 [ 2805.834035] __seccomp_filter+0x669/0x1530 [ 2805.835003] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2805.836145] ? downgrade_write+0x3a0/0x3a0 [ 2805.837177] ? down_write_killable_nested+0x180/0x180 [ 2805.838604] ? vmacache_find+0x55/0x2a0 [ 2805.839612] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2805.840932] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2805.842199] ? mprotect_fixup+0x8c0/0x8c0 [ 2805.843215] __secure_computing+0x191/0x2f0 [ 2805.844255] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2805.845657] do_syscall_64+0xf/0x40 [ 2805.846566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2805.847788] RIP: 0033:0x7f9b493fa69c [ 2805.848753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2805.853302] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2805.855262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2805.856925] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2805.858724] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2805.860360] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2805.862190] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:12:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:12:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) 20:12:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20002e000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 22) 20:12:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000540), 0x8) 20:12:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, 0x0) 20:12:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1081, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@cachetag={'cachetag', 0x3d, '9p\x00'}}, {@msize={'msize', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$incfs(r0, &(0x7f0000000480)='.log\x00', 0xe8040, 0x195) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x7f, 0x3, 0x9, 0x1, 0x0, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x400, 0xe8e, 0xdd, 0x9, 0x6, 0x7ff, 0x9, 0x0, 0x1f6dfb79, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r6, 0x1) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="ed2ce99a120000000000d9bf1b60b99f"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@access_uid}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x62, 0x64, 0x33, 0x34, 0x36, 0x39, 0x32], 0x2d, [0x31, 0x61, 0x31, 0x64], 0x2d, [0x37, 0x37, 0x37, 0x66], 0x2d, [0x31, 0x62, 0x64, 0x63], 0x2d, [0x39, 0x62, 0x34, 0x30, 0x52, 0x61, 0x62, 0x61]}}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000100)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}}, 0x88) splice(r4, 0x0, r1, 0x0, 0x5, 0x0) 20:12:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:12:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) [ 2805.881354] audit: type=1326 audit(1767903139.811:5232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2805.885805] loop5: detected capacity change from 0 to 2048 [ 2805.910312] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2805.915321] audit: type=1326 audit(1767903139.812:5233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 20:12:19 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x4, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fchmod(r1, 0x82) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:12:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2805.968852] audit: type=1326 audit(1767903139.820:5234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20003f000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2806.029078] audit: type=1326 audit(1767903139.820:5235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 [ 2806.041005] FAULT_INJECTION: forcing a failure. [ 2806.041005] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.042549] CPU: 0 PID: 13761 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2806.043426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2806.044462] Call Trace: [ 2806.044800] dump_stack+0x107/0x167 [ 2806.045250] should_fail.cold+0x5/0xa [ 2806.045723] ? audit_log_d_path+0xce/0x190 [ 2806.046248] should_failslab+0x5/0x20 [ 2806.046726] kmem_cache_alloc_trace+0x55/0x320 [ 2806.047294] audit_log_d_path+0xce/0x190 [ 2806.047799] audit_log_d_path_exe+0x40/0x70 [ 2806.048332] audit_log_task+0x278/0x310 [ 2806.048837] ? __audit_log_nfcfg+0x210/0x210 [ 2806.049394] audit_seccomp+0x76/0x200 [ 2806.049870] __seccomp_filter+0x669/0x1530 [ 2806.050405] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2806.050981] ? downgrade_write+0x3a0/0x3a0 [ 2806.051511] ? down_write_killable_nested+0x180/0x180 [ 2806.052151] ? vmacache_find+0x55/0x2a0 [ 2806.052660] ? mprotect_fixup+0x8c0/0x8c0 [ 2806.053173] __secure_computing+0x191/0x2f0 [ 2806.053711] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2806.054384] do_syscall_64+0xf/0x40 [ 2806.054840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2806.055485] RIP: 0033:0x7f9b493fa69c 20:12:20 executing program 2: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x17, 0x3, &(0x7f00000013c0)=[{&(0x7f00000002c0)="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", 0x1000, 0x1}, {&(0x7f00000012c0)="ac8e5bcffdd235ca42a8d46b9e3fd40285fcc71696a922967181339f1875fbc87fcbbe0c340a2fa79a8941ffc9bc7eb8fbeee4da03550c1524702c4036df864d3a4b90d5a0226631e533bc374510b78a69dd09c1df009d2a9b3e6412765f8924ab0de5bef7", 0x65, 0x4}, {&(0x7f0000001340)="a878b0c41de6d4966409978dcbf986c12be5693850885f8fae78127f5326b8d88bef31c0e9b3a3618abda3f58ed18c4da65cf1ec698d6bc1c1423ff6209633bb76179c1658eec072a792331b81ecce6e477fcb3675cfdfb68e7586cbff646259d0a7e91720cdb4a1d5a3ba10", 0x6c, 0x8}], 0x4000, &(0x7f00000015c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c687567653d6164766973652c6d6f64653d30303030303030303030303030303030013030303030312c687567653d6e6bde93c4403e29b7653d37653731386d2c687567653d6164766973652c6e725f626c6f636b733d25676d2c6d706f6c3d64656661756c743d7374617469632c6875030000006c776179732c6e725f696e6f6465733d396d672c6d6561737572652c646f6e745f61707072616973652c646f6e745f6d6561737572652c00e5ed99c5b7e79b3aa06e941f9f74db89f35ed2fc51aea9d76316c5893009c65de1da6c2c3c6c8ed6e967f6b4724e66e4973b3f7799f752888df1cd8ce065f9bc0d2435962592b3543fd3b39503dc53e53abdb044ea281d933aad1fd801ce631da9bcdb201b6f2f6d868e88fde5e729505791506a422af73a0f3ed685f5c549995bf63fbd9da7bac5b29649f949973198c6a5635bbf61eb85cd815cb845576acd"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) copy_file_range(r3, &(0x7f0000001540)=0x7, r5, &(0x7f0000001580)=0x4, 0x7, 0x0) sendfile(r1, r2, 0x0, 0x100000003) r6 = memfd_create(&(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x0) fcntl$addseals(r6, 0x409, 0x8) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) splice(r7, 0x0, r0, 0x0, 0x5, 0xd) 20:12:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 23) [ 2806.055951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2806.058401] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2806.059355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2806.059384] audit: type=1326 audit(1767903139.912:5236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2806.060235] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2806.060243] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.060251] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2806.060258] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2806.071544] loop5: detected capacity change from 0 to 2048 20:12:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:12:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2806.117329] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, 0x0) 20:12:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 24) [ 2806.136304] audit: type=1326 audit(1767903139.912:5237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2806.145074] audit: type=1326 audit(1767903139.912:5238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2806.150019] audit: type=1326 audit(1767903139.912:5239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13737 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2806.155150] audit: type=1326 audit(1767903140.055:5240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13760 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) [ 2806.167789] FAULT_INJECTION: forcing a failure. [ 2806.167789] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.170691] CPU: 1 PID: 13772 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2806.172200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2806.174426] Call Trace: [ 2806.175006] dump_stack+0x107/0x167 [ 2806.175986] should_fail.cold+0x5/0xa [ 2806.176863] ? audit_log_d_path+0xce/0x190 [ 2806.177999] should_failslab+0x5/0x20 [ 2806.178865] kmem_cache_alloc_trace+0x55/0x320 [ 2806.180102] audit_log_d_path+0xce/0x190 [ 2806.181013] audit_log_d_path_exe+0x40/0x70 [ 2806.182169] audit_log_task+0x278/0x310 [ 2806.183085] ? __audit_log_nfcfg+0x210/0x210 [ 2806.184277] audit_seccomp+0x76/0x200 [ 2806.185127] __seccomp_filter+0x669/0x1530 [ 2806.186265] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2806.187300] ? downgrade_write+0x3a0/0x3a0 [ 2806.188432] ? down_write_killable_nested+0x180/0x180 [ 2806.189643] ? vmacache_find+0x55/0x2a0 [ 2806.190720] ? mprotect_fixup+0x8c0/0x8c0 [ 2806.191657] __secure_computing+0x191/0x2f0 [ 2806.192836] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2806.193980] do_syscall_64+0xf/0x40 [ 2806.194950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2806.196190] RIP: 0033:0x7f9b493fa69c [ 2806.197204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2806.202155] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2806.204198] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2806.206125] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2806.208032] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.209952] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2806.211858] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:12:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200040000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 25) [ 2806.331713] loop5: detected capacity change from 0 to 2048 [ 2806.350502] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200048000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:12:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20004c000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2806.472249] FAULT_INJECTION: forcing a failure. [ 2806.472249] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.475458] CPU: 1 PID: 13792 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2806.477449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2806.479587] Call Trace: [ 2806.480382] dump_stack+0x107/0x167 [ 2806.481263] should_fail.cold+0x5/0xa [ 2806.482373] ? create_object.isra.0+0x3a/0xa30 [ 2806.483506] should_failslab+0x5/0x20 [ 2806.484664] kmem_cache_alloc+0x5b/0x310 [ 2806.485655] create_object.isra.0+0x3a/0xa30 [ 2806.486940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2806.488123] kmem_cache_alloc_trace+0x151/0x320 [ 2806.489520] audit_log_d_path+0xce/0x190 [ 2806.490567] audit_log_d_path_exe+0x40/0x70 [ 2806.491713] audit_log_task+0x278/0x310 [ 2806.492708] ? __audit_log_nfcfg+0x210/0x210 [ 2806.494044] audit_seccomp+0x76/0x200 [ 2806.495015] __seccomp_filter+0x669/0x1530 [ 2806.496258] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2806.497370] ? downgrade_write+0x3a0/0x3a0 [ 2806.498496] ? down_write_killable_nested+0x180/0x180 [ 2806.499776] ? vmacache_find+0x55/0x2a0 [ 2806.501022] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2806.502187] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2806.503789] ? mprotect_fixup+0x8c0/0x8c0 [ 2806.504828] __secure_computing+0x191/0x2f0 [ 2806.506074] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2806.507426] do_syscall_64+0xf/0x40 [ 2806.508481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2806.509746] RIP: 0033:0x7f9b493fa69c [ 2806.510874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2806.515636] RSP: 002b:00007f9b469bd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2806.517844] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa69c [ 2806.519785] RDX: 000000000000000f RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2806.521651] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.523475] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2806.525165] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 20:12:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:12:20 executing program 4: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 2806.569040] loop5: detected capacity change from 0 to 2048 20:12:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fremovexattr(r0, 0x0) [ 2806.600526] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:12:35 executing program 4: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:12:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:12:35 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (fail_nth: 26) 20:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200060000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) signalfd4(r3, &(0x7f0000000040)={[0x53]}, 0x8, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:12:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2821.223943] kauditd_printk_skb: 27 callbacks suppressed [ 2821.223955] audit: type=1326 audit(1767903155.241:5268): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r5, 0x0, r0, 0x0, 0x5, 0x0) [ 2821.241282] loop5: detected capacity change from 0 to 2048 [ 2821.254603] audit: type=1326 audit(1767903155.272:5269): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b493faa04 code=0x7ffc0000 [ 2821.263178] audit: type=1326 audit(1767903155.276:5270): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b493fa5ff code=0x7ffc0000 [ 2821.268154] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2821.276215] FAULT_INJECTION: forcing a failure. [ 2821.276215] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.277662] CPU: 0 PID: 13814 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 2821.278536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2821.279576] Call Trace: [ 2821.279914] dump_stack+0x107/0x167 [ 2821.280377] should_fail.cold+0x5/0xa [ 2821.280856] ? audit_log_start.part.0+0x27e/0x730 [ 2821.281462] should_failslab+0x5/0x20 [ 2821.281939] kmem_cache_alloc+0x5b/0x310 [ 2821.282436] audit_log_start.part.0+0x27e/0x730 [ 2821.283018] ? audit_log_task_context+0x170/0x170 [ 2821.283621] ? audit_filter+0x5d6/0xb10 [ 2821.284138] ? __bpf_prog_run64+0xe0/0xe0 [ 2821.284665] ? audit_compare_dname_path+0x120/0x120 [ 2821.285302] audit_log_start+0x5f/0x90 [ 2821.285793] audit_seccomp+0x5d/0x200 [ 2821.286272] ? lock_downgrade+0x6d0/0x6d0 [ 2821.286795] __seccomp_filter+0x669/0x1530 [ 2821.287328] ? seccomp_notify_ioctl+0xda0/0xda0 [ 2821.287914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2821.288526] ? wait_for_completion_io+0x270/0x270 [ 2821.289151] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2821.289724] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2821.290408] ? ksys_read+0x1a9/0x260 [ 2821.290876] __secure_computing+0x191/0x2f0 [ 2821.291422] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 2821.292091] do_syscall_64+0xf/0x40 [ 2821.292547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2821.293203] RIP: 0033:0x7f9b493fa5ff [ 2821.293669] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2821.295961] RSP: 002b:00007f9b469bd170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2821.296914] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b493fa5ff [ 2821.297797] RDX: 0000000000000001 RSI: 00007f9b469bd1e0 RDI: 0000000000000003 [ 2821.298681] RBP: 00007f9b469bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.299567] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000002 [ 2821.300456] R13: 00007ffc421f65bf R14: 00007f9b469bd300 R15: 0000000000022000 [ 2821.301406] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 2821.302292] audit: out of memory in audit_log_start [ 2821.315392] audit: type=1326 audit(1767903155.276:5271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2821.318240] audit: type=1326 audit(1767903155.290:5272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b493fa69c code=0x7ffc0000 20:12:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2821.336034] loop5: detected capacity change from 0 to 2048 20:12:35 executing program 4: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 2821.345327] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2821.372438] audit: type=1326 audit(1767903155.390:5273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b493fa72b code=0x7ffc0000 [ 2821.375464] audit: type=1326 audit(1767903155.390:5274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2821.378497] audit: type=1326 audit(1767903155.390:5275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13808 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200068000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:12:35 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 20:12:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2821.488279] loop5: detected capacity change from 0 to 2048 [ 2821.495763] EXT4-fs (loop5): Invalid log cluster size: 32773 20:12:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:12:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) [ 2835.929272] kauditd_printk_skb: 4 callbacks suppressed [ 2835.929290] audit: type=1326 audit(1767903169.946:5280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13853 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:49 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:12:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:12:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x300, 0x0, 0xffffffffffffffff) 20:12:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20006c000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:12:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 20:12:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x10000000000000, 0x3) 20:12:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r3 = accept4(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80, 0x800) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x100, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@getpolicy={0x1a8, 0x15, 0x10, 0x70bd29, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e20, 0x2, 0x4e20, 0x0, 0x0, 0x60, 0x80, 0x73, 0x0, r4}, 0x6e6bb9, 0x2}, [@encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @extra_flags={0x8, 0x18, 0x7}, @coaddr={0x14, 0xe, @in=@multicast1}, @algo_comp={0x117, 0x3, {{'lzs\x00'}, 0x678, "33f2bf24af12673f8ec4f890113254c24042e71f3ff982807b61ee6248026a058a1e2bea3f445943f853c2130a05f8375d7f6a34229c613d19d6451c291700fd465c47c71c68fe6324b3ee44f49a809e56184931c80b8378f1b1e263a10634685c3aa278688cea20f581baf05082f396d54ff2074f525e3feac54af19fee189baf1a47bd5aa200a7431e13b05db46e1fad0ea13684a972ec1aec44c3fc04929444a897fefae737fba323fe8f27026710379b0a96e54bbb10e2f93a538c30f6673a81ab1a649e1b46e2981e935e7fed"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x84}, 0x24008881) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2835.944352] audit: type=1326 audit(1767903169.946:5281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13853 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:12:49 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4240) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) getuid() r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x320b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = memfd_create(0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000011c0)=[{0x81, 0x5, 0xfe, 0x1, @tick, {0x6, 0x1}, {0x80, 0x2}, @addr={0x5, 0x9}}, {0x1, 0x5, 0x80, 0x1, @tick=0x9, {0x57, 0x81}, {0xff, 0x3}, @time=@tick=0x400}, {0x20, 0xd9, 0x9, 0x2, @time={0x4517, 0x3}, {0x17, 0xb9}, {0x7, 0xb}, @ext={0x1000, &(0x7f0000001e00)="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"}}, {0x80, 0xa, 0x7f, 0x9, @tick=0x5, {0xff, 0x3}, {0x5, 0xa6}, @raw8={"024ea26811817392db67c444"}}], 0x70) lseek(r6, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e240)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "12af00808c2044"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f000005f240)={{0x0, 0x3, 0x1, 0xdc4f, 0x2, 0x1, 0x6, 0x3, 0x9, 0x7, 0x8f31, 0xdc, 0x7, 0x81, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000060240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000060440)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r8}, {}, {r9}, {0x0, r10}], 0xa, "f83cea28b5aaf5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x6, 0x80, 0x9, 0x5, 0x9, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0xffffffffffffffdf, 0xc550, 0x64, 0x1}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000001c0)={r10, r11, "f7aaad7810e8dbc30a2cbb6921cc6d3dc27d497028a5c1328ecc1f9f35dae40702b2fabb6d3612b564262249bc702999597977506a87b7535f268599cbf640f22b2c6af5f7a1e36eca1576bfb58a6b78ba2d1e6a7726565c09f9393c2f6d855fa7858d9cc4db1e33003bd53b193a727f54dbbd3758b331c692effab733d54224537c9889248d86591af7273db5e23e11fd688c521d62cfd34efae9cec245505c49990a389da908e6abe60e5fedb19bfb4e3b0a9bd35d7a50e3aea1e6e461afd3b1fa575e783581150f0822f0ea58a1652fe91a2a5b0bf211cadff64fb5bd1281a8a299e8d60d7d849bcfafa7f6a53a91354a64d0ac598bad004fc6806dc5c873", "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"}) [ 2835.958913] loop5: detected capacity change from 0 to 2048 [ 2835.961017] audit: type=1326 audit(1767903169.946:5282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13853 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2835.968489] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2835.987307] loop5: detected capacity change from 0 to 2048 [ 2835.993292] audit: type=1326 audit(1767903169.947:5283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13853 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2835.998545] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2835.998890] audit: type=1326 audit(1767903169.956:5284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13853 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2850.834405] audit: type=1326 audit(1767903184.851:5285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13879 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2850.837433] audit: type=1326 audit(1767903184.852:5286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13879 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2850.846284] audit: type=1326 audit(1767903184.852:5287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13879 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:13:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:13:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 20:13:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x500, 0x0, 0xffffffffffffffff) 20:13:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:13:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200074000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) [ 2850.864881] audit: type=1326 audit(1767903184.852:5288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13879 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2850.875591] audit: type=1326 audit(1767903184.871:5289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13879 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) [ 2850.894431] loop5: detected capacity change from 0 to 2048 [ 2850.932799] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x80, 0x7, 0x9, 0x9, 0x0, 0x2, 0x20, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x1}, 0x1000, 0x24c6, 0x2, 0x1, 0x6, 0x3, 0x2, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:13:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:05 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x600, 0x0, 0xffffffffffffffff) [ 2850.990240] loop5: detected capacity change from 0 to 2048 [ 2851.004429] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:05 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/213, 0xd5}], 0x2}}], 0x2, 0x0, &(0x7f00000014c0)={r3, r4+60000000}) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) splice(r6, 0x0, r0, 0x0, 0x5, 0x0) [ 2851.064893] audit: type=1326 audit(1767903185.082:5290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13906 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2851.073668] audit: type=1326 audit(1767903185.091:5291): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13906 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2851.096421] audit: type=1326 audit(1767903185.101:5292): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13906 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2851.120350] audit: type=1326 audit(1767903185.102:5293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13906 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2851.147836] audit: type=1326 audit(1767903185.107:5294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13906 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:13:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:13:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x2644, 0x29, 0x4, 0x70bd25, 0x25dfdbff, {0xe}, [@nested={0x210b, 0x93, 0x0, 0x1, [@generic="8db8d1f414553bc36191a7bfa7cc71c92bb007be25e7e3783d86f596669287b864b96dd4ffdc20d12c29c2ef5da0c5c781148b63aedf8e4ad79ab163fde772d4d4df9b7225059c296fb8c7add333d141b673c40c91d7888dfe4b", @typed={0x1004, 0xf, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x59, 0x0, 0x0, @ipv4=@empty}, @generic="a09ded7890e6bff203b726f8b62f858c9f98c55f20a1c02117c0bc0bbd5844b8ea62f324795bd4c11da20f30c65e001706c7d832d106176777665ba3824a36d40d34107bc49de4453667477f4b4b03860c2118f3cf5361256a782b4c947b3189526dd7f8656604607cdc", @generic="9dd84e4836aad88d674b0a0e87f1c2c0fc2a8a05d59822768db3931c950e722841436e4b0c67ea6efa03e263cc5d42da499e6d3ad479a3", @generic="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"]}, @generic="2d544522da65a21d44fdec3378e71296258af360cf6844655f4692f34adbe9e23ba15ecc4b1c8db725b04d5fd2dac903e825acac47df5cc18913a29b575593bbd5b4f5ae94f351b0064bd258f2905d61bfa401536059db3eecf0d7a102c7bc041460007130f894f1b820ed29a44a0f4b8b469c12990e95f33353b5f03627fcbc8eb6fe3d8a61ba71b834671ab33df397f4f7396b44e8fc6f81affb00ffe78f5258edf134253f9df1becc9facdcaaab77568b15aaf3", @nested={0x6b, 0x33, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @generic="b1941422d210822b6060fedf45d244dc6383d8db9d5a3c9758404ee2872d8fb8496f2ce48f765e0b919582af91fcbd", @generic="10ec50ac9bf80d5c1ba148d5442298b6", @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x35f, 0x13, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @uid}, @generic="ce369824ce597218ae178ef8b71dc4e9a8a9343485cf35bf51c52d5b8fe4067f260fbf40f8de21c2addc382984bc68e0f5db148022a81da7490db73bcba9e5865b15169be1e25309b37dffd25723e2ce37e8cdf54c8855826981e51b8ef6ab1941c08785e54046d808317afaf4a49239c7b00c860b3960b7f511d377d79c211e3982ab80e283b0961bf40adbb6816ba57ec650fc7c7034dea559cd5e0c1e846311258f87ae9373813e702b5449372f160210d12f8b6413d734f159300ed28f3e", @typed={0x4, 0x33}, @generic="b4cdb5ea4bc3eb4503b27003143cfb224bc8e8af58072da9e850c054eeb1282f0a8c062a5e5dfa61181862114c7924c1b4e252223a22f5a84f1e97361b010c6365790748d8aaf003f54a05b8e90e8439b07cd823329e8aa75442f6bba3fae392ad1de50f07619bae199aa52dd24f8c3e571eedd50c0091af49ce2f9411158e6cfa50", @typed={0x80, 0x58, 0x0, 0x0, @binary="bcb96e05a14a0abafb65d9faaf16cabe9888a8eddf602b255fedae3bf97affabc64c2648c7c86140e764d1b8bcd7f5b0c0cffaa09a12931facced8cb62564f1c01674f426dcd71062630d5c49e264c486b087fbf4190b48d7524dafb31971f7b8edd98ad2dedb15a5d4ca9d060252e2f2ca8ea5ca3a0458ed872bb32"}, @generic="28cdc01166d94bd3cf1d53dd1d492d43ee90366d9bf93184678da8c8969398ca15ac07e62a6167f5b53baffaa090a005c393ed9971c88146b38b2affaf94f425071c7351cab4e3d0b74d1f9692dafc0ca73b0de1b9cbcb52b18ec35edebb99f35b9f6c60285298db39d3eeb73a96c487507a231e01af84a81485af63e5e654df4b2691c8aa7597b8ab3d4eef87bc666463a23a27193f794d2a06563ffbd13dbf98682dd73e4de70dc9e6657e37688cbb273bc8ea717fe8307189f38780da361be5103c7cf4e628604bd89e", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast1}, @generic="df2d1df762adc9074527d1fb657e5554f6253cb1b5558da43338261111535d7d4738c24f4d662a96dc8524f524f467c50d313d4965989179c93c819ab7f12c9c7c60fca1ac3e697d17e5010e7a6ff593e2f200c5aa9bdbe6db934b3d399be60e6cbecd30ceb058c690652c96ea571a4ab2e97eac1523a8bbe9293c1577cf15bbff909aa717f82ef304f69111d2f8fc9adf84b2cd6dc222662c738a86af933c51ec51c9860fe948045c76413cd17a5064a3479a00e86043b1a098"]}, @generic="8853a870cbea9e131f124b4cde04f47e484dfb9ecc2152468512e745ae82bce3800aab0ab718fa7f59b6bf7d7f7ae0bb57231b91f0c488e0603ffbfd7ad7b68341963536eb593ef1674174502c618a61d1aaebb6800b9aa867704c31e914ba4fcef5d002fedc9d546d95790d76e20b1a543ce8821f4707c4a870a4d0c3fdc0c91b5c4d3eb0b4dbff473b42a7cb8db5cac3c8a867aa2cfeaa0ecc727733546b26"]}, 0x2644}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x801) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x820010, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x81}}], [{@dont_appraise}]}}) 20:13:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x700, 0x0, 0xffffffffffffffff) 20:13:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20007a000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:13:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) [ 2865.375662] audit: type=1326 audit(1767903199.393:5295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13925 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.382452] loop5: detected capacity change from 0 to 2048 [ 2865.383416] audit: type=1326 audit(1767903199.393:5296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13925 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.399411] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2865.417513] loop5: detected capacity change from 0 to 2048 [ 2865.423252] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2865.427050] audit: type=1326 audit(1767903199.393:5297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13925 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x900, 0x0, 0xffffffffffffffff) [ 2865.439667] audit: type=1326 audit(1767903199.393:5298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13925 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.449399] audit: type=1326 audit(1767903199.415:5299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13925 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20c0ed000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2865.529695] audit: type=1326 audit(1767903199.547:5300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13940 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.536711] audit: type=1326 audit(1767903199.547:5301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13940 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.550411] audit: type=1326 audit(1767903199.547:5302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13940 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.574621] audit: type=1326 audit(1767903199.547:5303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13940 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:19 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2865.596631] audit: type=1326 audit(1767903199.554:5304): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13940 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2865.612441] loop5: detected capacity change from 0 to 2048 20:13:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xa00, 0x0, 0xffffffffffffffff) [ 2865.632799] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200fff000002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2865.741628] loop5: detected capacity change from 0 to 2048 [ 2865.753737] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2865.776449] loop5: detected capacity change from 0 to 2048 [ 2865.781976] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) [ 2879.818967] loop5: detected capacity change from 0 to 2048 [ 2879.824658] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:13:33 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:33 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x21, 0x4d, 0x0, 0x0, 0x7, 0x1200, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x200, 0x1}, 0x10008, 0x5, 0x3f, 0x9, 0x9, 0x9, 0x2, 0x0, 0x4c8f, 0x0, 0x4f}, r1, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x1f, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:13:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x78) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) 20:13:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000080002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xb00, 0x0, 0xffffffffffffffff) 20:13:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:13:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x20000005, 0x2) [ 2879.845606] kauditd_printk_skb: 5 callbacks suppressed [ 2879.845624] audit: type=1326 audit(1767903213.863:5310): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2879.852296] loop5: detected capacity change from 0 to 2048 [ 2879.853948] audit: type=1326 audit(1767903213.863:5311): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2879.858861] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2879.888897] audit: type=1326 audit(1767903213.886:5312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xc00, 0x0, 0xffffffffffffffff) [ 2879.911276] audit: type=1326 audit(1767903213.886:5313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000102000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2879.926195] audit: type=1326 audit(1767903213.886:5314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2879.939890] audit: type=1326 audit(1767903213.887:5315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x800, 0x7ff, 0x9, 0x5}) 20:13:33 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2879.975798] audit: type=1326 audit(1767903213.888:5316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) [ 2880.015903] audit: type=1326 audit(1767903213.888:5317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13970 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2880.029980] audit: type=1326 audit(1767903214.032:5318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13984 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2880.033474] loop5: detected capacity change from 0 to 2048 20:13:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7fc, 0xb00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1000000000000006}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) [ 2880.049836] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2880.053884] audit: type=1326 audit(1767903214.032:5319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13984 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:34 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xd00, 0x0, 0xffffffffffffffff) 20:13:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:13:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) 20:13:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xe00, 0x0, 0xffffffffffffffff) 20:13:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000202000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2895.680133] kauditd_printk_skb: 8 callbacks suppressed [ 2895.680147] audit: type=1326 audit(1767903229.697:5328): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.687232] audit: type=1326 audit(1767903229.703:5329): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.695245] audit: type=1326 audit(1767903229.704:5330): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.699659] loop5: detected capacity change from 0 to 2048 20:13:49 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:13:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4001, 0x5, @perf_bp={&(0x7f0000000040), 0x3}, 0x48, 0x6, 0x1000, 0x4, 0x2, 0x0, 0x7, 0x0, 0x9, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0xcc854}, 0x40080) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:13:49 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) dup(r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="f2c726c04d9331d033cd3e812ed48ba94e5f3f5e1deeaabfc2e4c32302b3eaf8fb02f6eef19c38a69f1a6f23cc1528ab6fa6b04998102cd62726e2d375c3d0e0998ca649519070e1f3ce3c22b2e21c153bc166a023698edfb11522e5cc40684c20114eed4b986f272ab1d126f76b2993040eb5687ddf9455f5d12c45bedbaa24b5c465124c6fb9ad6408d0187ba920c05fce956d049ee9e2700501854496b1ec92de", @ANYRES16, @ANYRESDEC, @ANYRES16=r6], 0x78) splice(r3, 0x0, r0, 0x0, 0x5, 0x0) [ 2895.705930] audit: type=1326 audit(1767903229.705:5331): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) [ 2895.742987] audit: type=1326 audit(1767903229.760:5332): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.746405] audit: type=1326 audit(1767903229.760:5333): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.749368] audit: type=1326 audit(1767903229.760:5334): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.756461] EXT4-fs (loop5): Invalid log cluster size: 32773 20:13:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0xffffffffffffffff) [ 2895.775406] loop5: detected capacity change from 0 to 2048 [ 2895.789272] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2895.792037] audit: type=1326 audit(1767903229.809:5335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14032 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.795383] audit: type=1326 audit(1767903229.809:5336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14032 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2895.801987] audit: type=1326 audit(1767903229.809:5337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14032 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:13:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000302000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:49 executing program 4: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:13:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000402000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000502000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:13:49 executing program 4: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:13:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1003, 0x0, 0xffffffffffffffff) 20:13:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) 20:14:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:14:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) 20:14:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000602000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 20:14:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x5a9, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0b, 0x0, @perf_config_ext={0x1}, 0x4051, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce}, 0x0, 0xc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7ff, 0x1804, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f00000001c0), 0x5}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x10001, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) syz_io_uring_setup(0xcd0, &(0x7f0000000040)={0x0, 0xdf36, 0x10, 0x2, 0x170, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) recvmsg$unix(r2, 0x0, 0x40002061) sendfile(r3, r4, 0x0, 0x100000001) flock(r3, 0x1) 20:14:04 executing program 4: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:14:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x5, 0x0) 20:14:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1004, 0x0, 0xffffffffffffffff) [ 2910.755826] loop5: detected capacity change from 0 to 2048 [ 2910.764040] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2910.789233] loop5: detected capacity change from 0 to 2048 20:14:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) [ 2910.798281] kauditd_printk_skb: 7 callbacks suppressed [ 2910.798308] audit: type=1326 audit(1767903244.815:5345): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14065 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2910.817371] audit: type=1326 audit(1767903244.832:5346): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14065 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2910.817404] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) [ 2910.900927] audit: type=1326 audit(1767903244.832:5347): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14065 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000702000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) [ 2910.950693] audit: type=1326 audit(1767903244.833:5348): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14065 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1005, 0x0, 0xffffffffffffffff) 20:14:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:14:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8b9, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000100)="440087031bbfd9559e777b77b34a71bca6b3363175c3cdc9e09e4761223842bd5aa1eb93424082b3b7e7062da1b39fd143df68ca92fcbf1b9e540b5d9666447342b509ebd44d0c22824bf4e4c4935e8ef320e75b8f6b606ad38467a8502739d2f2bed8135aa23e2f0ffa8378e3eb1de189327ef33146fc92ef086d01aad3dee28ca61286a0343dd91b50f865ec7f6cf006c44fd365b0b60b0e73f51c74ccc245c1d70ffc97eea75ccaa2be86c0bb021dee59bc290807041a51c416eca8b247fba12aadf8b551ad22574cf6790199e81dd958cb83a24d6c777c5a5c8cc95a2796f055da", 0xe3, 0x5}, {&(0x7f0000000200)="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", 0x1000, 0x81}, {&(0x7f0000001200)="ab3aef37da7144bb788a03f8c4adda6a57d2289645e6f963df69246adbb57f4ee0d27c265de71480fd8620bf76f5d2f245de8011215328181b6d202d58d3bc1e6d6595053b84f4ace294329f5cfa3af08d2324f5f8e428bb0b4093b6db71611dbdbc1dac1a50a74ecdaf5d053bcbc55c05d452b353e58daec8d171d0f396b85934e2cfdc93c8724c536054", 0x8b, 0x2}], 0x2ab0004, &(0x7f0000001340)={[{@nodots}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@hash}]}) signalfd4(r3, &(0x7f0000001380)={[0x4]}, 0x8, 0x80800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000013c0)={0x9, 0x3, 0xffffffff}) [ 2910.976324] audit: type=1326 audit(1767903244.833:5349): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14065 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) [ 2910.994696] loop5: detected capacity change from 0 to 2048 [ 2910.995200] audit: type=1326 audit(1767903244.985:5350): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14083 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:05 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) [ 2911.007028] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2911.012813] audit: type=1326 audit(1767903244.989:5351): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14083 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2911.034152] audit: type=1326 audit(1767903244.989:5352): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14083 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2911.048691] audit: type=1326 audit(1767903244.992:5353): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14083 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2911.057804] audit: type=1326 audit(1767903244.993:5354): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14083 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1006, 0x0, 0xffffffffffffffff) 20:14:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x7b12, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x40, 0x0, 0xbf}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x9, r4, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @initdev}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20110000", @ANYRES16=0x0, @ANYBLOB="100027bdff0000000000000000000c0001800800030001000000680001801400020076657468305f746f5f68737200000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f767469300000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300030000005400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f77696669001400020076657468305f766c616e00000000000008000100", @ANYRES32=r4, @ANYBLOB="300001800800030001000000140002007465616d5f736c6176655f3100000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1120}}, 0x801) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000100)=ANY=[], 0x78) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 20:14:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000802000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:14:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) 20:14:17 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) 20:14:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x800, 0x7ff, 0x9, 0x5}) 20:14:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x142) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) sendfile(r4, r5, 0x0, 0x100000001) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r3, 0x1, 0x80000}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) creat(&(0x7f00000001c0)='./file1\x00', 0x100) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x6ed, 0x9}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r7, 0x100, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100000001) fsetxattr$security_selinux(r7, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x2) [ 2923.779847] loop5: detected capacity change from 0 to 2048 [ 2923.793171] audit: type=1326 audit(1767903257.810:5355): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14104 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.801987] audit: type=1326 audit(1767903257.819:5356): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14104 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:17 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0x0) 20:14:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1007, 0x0, 0xffffffffffffffff) [ 2923.843600] audit: type=1326 audit(1767903257.819:5357): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14104 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.847464] audit: type=1326 audit(1767903257.839:5358): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14104 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.851362] audit: type=1326 audit(1767903257.839:5359): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14104 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.865220] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) 20:14:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:14:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 20:14:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) [ 2923.939936] audit: type=1326 audit(1767903257.957:5360): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14131 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.944606] audit: type=1326 audit(1767903257.961:5361): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14131 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.955364] loop5: detected capacity change from 0 to 2048 [ 2923.956246] audit: type=1326 audit(1767903257.967:5362): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14131 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 2923.978342] audit: type=1326 audit(1767903257.967:5363): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14131 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.992322] audit: type=1326 audit(1767903257.970:5364): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14131 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2923.997313] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x100a, 0x0, 0xffffffffffffffff) 20:14:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) dup3(0xffffffffffffffff, r0, 0x0) splice(r0, 0x0, r0, 0x0, 0x2, 0x7) getsockname(r1, &(0x7f0000000140)=@qipcrtr, &(0x7f0000000000)=0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fcntl$setown(r3, 0x8, 0x0) 20:14:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x100c, 0x0, 0xffffffffffffffff) 20:14:32 executing program 2: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x100, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) splice(r2, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 20:14:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000500), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x1) r5 = syz_io_uring_complete(r1) io_uring_enter(r5, 0x45ad, 0x5606, 0x0, &(0x7f0000000040)={[0x1]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[], 0x78) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000010000001800000083a2ba52cc88352de070328e1c4dbd0c8e94ffa3a0192596f1e52052e150ea243ef96c19d630352de7b3892f7ceb660bc0cea39764dc558c8635304e4a15a8957e1a7fc42d5cd5f33245b9bdcddf7e460083d8bee76d3bcde0da47f16231bdd993c452175135f770e34660f4f375ac52e4206bedc7b62adabbd3e165192d9dcfed0dbca50763126cddeda71d76fd84bde681a35e4b8d45f15cc92bf29b35cb20fbca3c5dac2d703b74b5f7c9f7c374362f542d4a700ec3e44758d982b0", @ANYRES32=r6, @ANYBLOB="000000007233893e20286ee2bfcded2199ee4c000e00002e2f66696c653000693e47aef1886b7cdcb8764d043c94ca7681b1a633dfd0b6cf6a4d383aa2f576fc056d915f718cfcd383f7ce87970019708fec7f97cdbbf528f063a0e4be70d68884cad2d996782d107f3ea0e0e5e0673e485a435bb6d8db8fa4500fa69ae8bdec76b9f3342273ba1f47125f3004d2654f650f48c2326f0f8e4015466c7f6fcfe3f749d32705d19e3b365ea7b066243c35f583bf265fd2329ffc90a4742016e2"]) splice(r8, 0x0, r7, 0x0, 0x5, 0x0) [ 2938.783264] kauditd_printk_skb: 10 callbacks suppressed 20:14:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x800, 0x7ff, 0x9, 0x5}) 20:14:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20c1c7830802000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:14:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) 20:14:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:14:32 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1048, 0x0, 0xffffffffffffffff) [ 2938.783284] audit: type=1326 audit(1767903272.800:5375): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.803917] audit: type=1326 audit(1767903272.800:5376): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.827633] loop5: detected capacity change from 0 to 2048 [ 2938.828532] audit: type=1326 audit(1767903272.808:5377): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) 20:14:32 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x104c, 0x0, 0xffffffffffffffff) [ 2938.867371] audit: type=1326 audit(1767903272.809:5378): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.887580] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) [ 2938.898039] audit: type=1326 audit(1767903272.809:5379): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.925348] audit: type=1326 audit(1767903272.810:5380): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.945376] audit: type=1326 audit(1767903272.810:5381): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.963103] audit: type=1326 audit(1767903272.811:5382): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.978487] audit: type=1326 audit(1767903272.811:5383): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14162 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2938.986580] audit: type=1326 audit(1767903272.911:5384): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14177 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.495724] kauditd_printk_skb: 7 callbacks suppressed [ 2951.495744] audit: type=1326 audit(1767903285.513:5392): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.508783] loop5: detected capacity change from 0 to 2048 [ 2951.513373] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:45 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1068, 0x0, 0xffffffffffffffff) 20:14:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r7, 0x800, 0x7ff, 0x9, 0x5}) 20:14:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32], 0x78) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) kcmp$KCMP_EPOLL_TFD(r3, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000200)={r2, r4, 0x3}) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x20}}, './file0\x00'}) getsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000080)={@loopback, @loopback, @local}, &(0x7f0000000100)=0xc) 20:14:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000902000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x7, 0x0, 0x1f, 0x1, 0x0, 0x7ff, 0x80, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x0, 0x9cb, 0x80000001, 0xd, 0x1, {0x2}}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) 20:14:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) pread64(r4, &(0x7f0000000580)=""/4096, 0x1000, 0x436) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:14:45 executing program 1: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) 20:14:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 2951.532112] loop5: detected capacity change from 0 to 2048 [ 2951.534500] audit: type=1326 audit(1767903285.536:5393): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.537464] audit: type=1326 audit(1767903285.536:5394): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.543610] audit: type=1326 audit(1767903285.536:5395): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.547135] audit: type=1326 audit(1767903285.544:5396): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.559579] audit: type=1326 audit(1767903285.545:5397): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.567719] audit: type=1326 audit(1767903285.545:5398): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14187 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.580310] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) r3 = open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x801) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000004080)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004040)={&(0x7f0000002e40)={0x11f4, 0x3d, 0x200, 0x70bd29, 0x25dfdbfd, {0xc}, [@nested={0xdb, 0x68, 0x0, 0x1, [@typed={0x5, 0x8b, 0x0, 0x0, @str='\x00'}, @generic="dda905c770c689221bd17358923d80e4b1aef919cfd23b38a276fafc97efcd4468a6e901e5283ef503246db4ec7d3ba185f804b557e4188bcd6e2ff5eab8ee0660bf4a543357deb26475c4c2d768e197a730bb73d16f3af9ecf3bb07348e71c3d91c9491bc16b1ed1fdebb3b055abc76d27fa339b741ef24d91801ea3bdc0e2df287cc719d6a3306bb273997a7f4e678b0397397dc9ec5b2fbda5faed21683ac3e4f71924f94", @generic="5aaa4b2ab73200bfb6cc43601a8271e24c98fbd79d15e750e37f6d3f02", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x5}]}, @generic="4beb92a4c97f6735d87c8dd45d34", @typed={0x8, 0x1a, 0x0, 0x0, @u32=0x6}, @nested={0x104c, 0x71, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r4}, @generic="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", @generic="30b79ad9010ddb064ea848f8432a33fc94f38ab33d0978ea2e01c7ccf81d207a3bdced95f1cc009a5ae544be30fda9c1", @typed={0x4, 0xd}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x1000}]}, @generic="7434a449e800d8903d40b9d5e6175964f267d5668ff01bd09276c43958c24f2d60f89cc4dd6a3daece9ea47c6f50439248643aa1b7d89c542850063ed306e8b3a0a959de95a4c0872641bd8546fc1378acdfb21daab200a83a7191443a428ad4b5c95bb4ff2469f346b9eb591b5447a58beb8b02bababd90d92ceaaafdf19930818f67140c5ae13e516261685f3e699389161f63b6caa691ec408f71c69ca8ecd3e7"]}, 0x11f4}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000800) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r5 = fcntl$dupfd(r1, 0x406, r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) recvfrom$packet(r7, &(0x7f00000040c0)=""/130, 0x82, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/82, 0x52}, {&(0x7f0000000440)=""/34, 0x22}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/166, 0xa6}], 0xa, &(0x7f0000000740)=""/161, 0xa1}, 0x228}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/21, 0x15}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/158, 0x9e}], 0x4}, 0x78}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, &(0x7f0000002a40)}, 0x20}, {{&(0x7f0000002a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b00)=""/113, 0x71}, {&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/12, 0xc}, {&(0x7f0000002cc0)=""/55, 0x37}], 0x4}, 0x20}], 0x4, 0x12000, 0x0) pidfd_getfd(r5, r8, 0x0) 20:14:45 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x106c, 0x0, 0xffffffffffffffff) 20:14:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000a02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:45 executing program 1: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) [ 2951.671659] loop5: detected capacity change from 0 to 2048 [ 2951.678300] EXT4-fs (loop5): Invalid log cluster size: 32773 20:14:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000b02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000000000000, 0x3) [ 2951.734820] audit: type=1326 audit(1767903285.752:5399): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14216 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.746998] audit: type=1326 audit(1767903285.764:5400): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14216 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2951.750267] audit: type=1326 audit(1767903285.764:5401): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14216 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:14:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000d02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:14:45 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1074, 0x0, 0xffffffffffffffff) [ 2951.846148] loop5: detected capacity change from 0 to 2048 [ 2951.852546] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x107a, 0x0, 0xffffffffffffffff) 20:15:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000f02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:01 executing program 1: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) 20:15:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 20:15:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x6, 0x2, 0x2, 0x0, 0x0, 0x5e6, 0x201, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x200000, 0x1}, 0x4c, 0x761d, 0x3, 0xa, 0x1, 0x4, 0x9, 0x0, 0x10000, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:15:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x0, 0x3) 20:15:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)=ANY=[@ANYBLOB="010009000000000000003003000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000100)={0x8351, 0x8, 0xa, 0x1, 0x1ff, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r2}, 0xffffffff) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) 20:15:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) 20:15:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2967.706253] kauditd_printk_skb: 9 callbacks suppressed [ 2967.706264] audit: type=1326 audit(1767903301.723:5411): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.714023] audit: type=1326 audit(1767903301.731:5412): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.720480] audit: type=1326 audit(1767903301.737:5413): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.723401] loop5: detected capacity change from 0 to 2048 [ 2967.730251] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2967.746666] audit: type=1326 audit(1767903301.737:5414): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.747422] loop5: detected capacity change from 0 to 2048 [ 2967.751977] audit: type=1326 audit(1767903301.737:5415): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.758871] audit: type=1326 audit(1767903301.741:5416): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="541f3bf26c3c6b106ac0e07577edc7aeea8e19fc8ffecdead85b3d1395c3dcb550b39b73c797f7b370ccc27915df68713f541e9d3995ef2c642fc901c8f0c8d3a8eb40e0c5c8559736f815ee", @ANYRESDEC=r0], 0x78) splice(r2, 0x0, r1, 0x0, 0xfffffffffffffff8, 0x0) pipe(&(0x7f0000000100)) [ 2967.765015] audit: type=1326 audit(1767903301.743:5417): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.771599] audit: type=1326 audit(1767903301.743:5418): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14239 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1100, 0x0, 0xffffffffffffffff) 20:15:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2967.810876] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2967.848346] audit: type=1326 audit(1767903301.865:5419): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14266 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2967.855876] audit: type=1326 audit(1767903301.873:5420): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14266 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) 20:15:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000041002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1200, 0x0, 0xffffffffffffffff) 20:15:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) 20:15:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x0, 0x3) 20:15:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001102000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) 20:15:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x2f00, 0x0, 0xffffffffffffffff) 20:15:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xc, 0x3f, 0x0, 0x2, 0x0, 0x7, 0x10060, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x6, 0x20}, 0x21, 0x7e, 0x1, 0x1, 0x2, 0x4f, 0x9, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x4, r0, 0x2) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:15:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, r0, 0x0, 0x4, 0x0) 20:15:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0x0, 0x3) 20:15:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) 20:15:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2983.976009] kauditd_printk_skb: 8 callbacks suppressed [ 2983.976027] audit: type=1326 audit(1767903317.993:5429): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14293 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2983.996761] audit: type=1326 audit(1767903318.012:5430): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14293 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2983.999825] loop5: detected capacity change from 0 to 2048 [ 2984.020750] audit: type=1326 audit(1767903318.012:5431): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14293 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:18 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000440)='\x00', 0x8ddf, 0x2, &(0x7f0000000500)=[{&(0x7f0000000580)="7e992205e78df5374f291e9edce7c6bd6e9db5cc9c5455150a4f85599b0d540792a7c4ab1e55068b953afb2dc16764b1e082723404127e64a7d7eb4f968c91a985dbed04cffac695704635b197cd8281182a5c75578e3823856579cfa2adbe4eaef8c7f642d1393d716b3fe1a28eac668447e3473988f994876d09239cff49724ff736880b1ec7548b486dc4c9b24ab36d402be6109d3a8a315a5db4d9b4629edbf442038e8dc99a24cd8491ef64d2815657e695a2323f75c50c76016c2efeb377ecc236fc40db64", 0xc8, 0x1}, {&(0x7f0000000680)="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", 0xfb, 0x3ff}], 0x260046, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f74732c6f626a5f726f6c653d2be8e02c2c61707072616973652c7569643c", @ANYRESDEC=0xee00, @ANYBLOB="2c736d61636bac00f1f16f6f723d002c00040000000000005a74"]) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140)=0x8f80, 0x6) dup3(r0, r5, 0x80000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r4, r6, 0x0, 0x100000001) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000040)=""/84, &(0x7f0000000100)=0x54) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 2984.041739] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) [ 2984.062429] loop5: detected capacity change from 0 to 2048 [ 2984.063422] audit: type=1326 audit(1767903318.013:5432): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14293 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.079856] audit: type=1326 audit(1767903318.026:5433): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14293 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.085226] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x5906, 0x0, 0xffffffffffffffff) 20:15:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001302000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 2984.184785] audit: type=1326 audit(1767903318.202:5434): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14321 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.191889] audit: type=1326 audit(1767903318.209:5435): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14321 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x80, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@msize={'msize', 0x3d, 0x9}}, {@afid={'afid', 0x3d, 0x80000001}}, {@access_client}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r7}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_lt={'uid<', r8}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_measure}, {@euid_gt}]}}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x8, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}], [{@uid_eq={'uid', 0x3d, r9}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe3'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) r10 = accept(r0, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000100)=0x80) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast1, 0x2}, 0x1c) [ 2984.221274] audit: type=1326 audit(1767903318.209:5436): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14321 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.267237] audit: type=1326 audit(1767903318.209:5437): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14321 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.298530] audit: type=1326 audit(1767903318.218:5438): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14321 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2984.328814] loop5: detected capacity change from 0 to 2048 [ 2984.356469] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 2984.383311] loop5: detected capacity change from 0 to 2048 [ 2984.389077] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0xc006, 0x0, 0xffffffffffffffff) 20:15:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:15:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) 20:15:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000001502000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) r2 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x3ff, 0x12}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000580)={0x0, 0x7, 0xa1, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x101080, 0x8) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x1, 0x1ff, 0x2a, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x8022, 0x3ff, 0x7fffffff}}) 20:15:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) copy_file_range(r0, &(0x7f0000000040)=0x5, r5, &(0x7f0000000080)=0x79, 0x9, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0xffffffffffffff9a) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x1) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x21) 20:15:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 2999.634281] audit: type=1326 audit(1767903333.651:5439): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.653631] audit: type=1326 audit(1767903333.652:5440): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.680523] audit: type=1326 audit(1767903333.662:5441): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.689315] loop5: detected capacity change from 0 to 2048 20:15:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 2999.715205] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) [ 2999.744935] audit: type=1326 audit(1767903333.662:5442): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.788561] audit: type=1326 audit(1767903333.662:5443): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 2999.806472] audit: type=1326 audit(1767903333.670:5444): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.855646] audit: type=1326 audit(1767903333.670:5445): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) [ 2999.915196] audit: type=1326 audit(1767903333.670:5446): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14338 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 2999.954575] audit: type=1326 audit(1767903333.863:5447): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14359 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.959765] audit: type=1326 audit(1767903333.864:5448): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14359 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 2999.960453] loop5: detected capacity change from 0 to 2048 20:15:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 3000.026787] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 3000.108661] loop5: detected capacity change from 0 to 2048 [ 3000.123243] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r6, 0x0, r3, 0x0, 0x7, 0x0) 20:15:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:15:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 20:15:46 executing program 2: pipe(&(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000040)='\xfa!]]+.}-%', 0x1) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) splice(r0, 0x0, r2, 0x0, 0x5, 0x0) 20:15:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:15:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000102002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:15:46 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:15:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) 20:15:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x85a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x20, 0x3, 0x0, 0x0, 0x7, 0x200, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x4005, 0x3, 0x80000000, 0x3, 0x3, 0x33, 0x3, 0x0, 0x1000, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r4, 0x5) r5 = syz_io_uring_setup(0x0, &(0x7f0000000980)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000a40)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r1, 0x80, &(0x7f0000001a80)=@in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) recvmmsg$unix(r0, &(0x7f0000001980)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/230, 0xe6}, {&(0x7f0000001680)=""/191, 0xbf}], 0x6, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/183, 0xb7}, {&(0x7f0000001900)=""/99, 0x63}], 0x3}}], 0x2, 0x12001, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x737) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x6, 0x97a, 0x800}) [ 3012.893676] loop5: detected capacity change from 0 to 2048 20:15:46 executing program 0: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 3012.900690] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3012.903756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14390 comm=syz-executor.3 [ 3012.916360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14390 comm=syz-executor.3 [ 3012.918290] loop5: detected capacity change from 0 to 2048 [ 3012.922438] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3012.933256] kauditd_printk_skb: 9 callbacks suppressed [ 3012.933267] audit: type=1326 audit(1767903346.950:5458): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14397 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3012.941392] audit: type=1326 audit(1767903346.956:5459): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14397 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 3012.955500] audit: type=1326 audit(1767903346.956:5460): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14397 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3012.972824] audit: type=1326 audit(1767903346.957:5461): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14397 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) [ 3012.989905] audit: type=1326 audit(1767903346.957:5462): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14397 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) dup2(r0, r5) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:15:47 executing program 0: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:15:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000002e02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3013.022225] audit: type=1326 audit(1767903347.039:5463): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14409 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3013.053517] audit: type=1326 audit(1767903347.056:5464): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14409 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3013.069728] audit: type=1326 audit(1767903347.058:5465): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14409 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3013.085779] audit: type=1326 audit(1767903347.059:5466): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14409 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:15:47 executing program 0: pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:15:47 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0xffffffffffffffff) [ 3013.103692] audit: type=1326 audit(1767903347.062:5467): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14409 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3013.110113] loop5: detected capacity change from 0 to 2048 [ 3013.131984] EXT4-fs (loop5): Invalid log cluster size: 32773 20:15:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:15:47 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:15:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003f02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3013.272874] loop5: detected capacity change from 0 to 2048 [ 3013.290406] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3013.304637] loop5: detected capacity change from 0 to 2048 [ 3013.312542] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3028.230862] kauditd_printk_skb: 8 callbacks suppressed [ 3028.230872] audit: type=1326 audit(1767903362.248:5476): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3028.234131] audit: type=1326 audit(1767903362.248:5477): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) 20:16:02 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:16:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:16:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYRES64=r4, @ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX=r1, @ANYBLOB="5de4d807f44f4eb3bce06f17b6e16564b3d70708c652736f85b87402bc88242568a9e1c7e3d06f9192503af1f78862cf666b0399ff39b58a170fb98bb5694714637567df85af1e34f8", @ANYRES64], 0x78) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x105142, 0x0) lseek(r7, 0x100, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/exe\x00', 0x0, 0xa) recvmsg$unix(r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000100)) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000005c0), &(0x7f0000000080)=0x8) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) 20:16:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:16:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) [ 3028.237518] audit: type=1326 audit(1767903362.255:5478): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 3028.261871] audit: type=1326 audit(1767903362.255:5479): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x1ab400, 0x30) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 3028.269801] audit: type=1326 audit(1767903362.255:5480): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3028.270968] loop5: detected capacity change from 0 to 2048 [ 3028.272447] audit: type=1326 audit(1767903362.273:5481): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3028.296858] audit: type=1326 audit(1767903362.273:5482): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0xffffffffffffffff) [ 3028.304288] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3028.314212] audit: type=1326 audit(1767903362.273:5483): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14437 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:16:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) lseek(0xffffffffffffffff, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080), &(0x7f0000000140)=0x4) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r4 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x2, 0x40, 0x0, 0xbf}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0xfffffffe) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:16:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 3028.347934] audit: type=1326 audit(1767903362.363:5484): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14458 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3028.353286] loop5: detected capacity change from 0 to 2048 [ 3028.358025] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3028.380700] audit: type=1326 audit(1767903362.363:5485): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14458 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x5) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x286000, 0x4) close(r5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:16:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004802000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3028.493535] loop5: detected capacity change from 0 to 2048 [ 3028.509756] EXT4-fs (loop5): Invalid log cluster size: 32773 20:16:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:16:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) 20:16:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x860460, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0xc2080, 0x100) [ 3043.870513] loop5: detected capacity change from 0 to 2048 [ 3043.891838] kauditd_printk_skb: 6 callbacks suppressed [ 3043.891859] audit: type=1326 audit(1767903377.908:5492): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3043.895143] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3043.903744] audit: type=1326 audit(1767903377.908:5493): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004c02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:16:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:16:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:16:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) 20:16:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) ioctl$TIOCEXCL(r1, 0x540c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r0, 0x0, 0x5, 0x0) 20:16:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) 20:16:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4d74, 0x5, &(0x7f0000000740)=[{&(0x7f0000000140)="0f88428fc6b60393777bc8235bce4f4e6a1c9be8e404b5130025405be3b73943ac90d81ebda0d31e8231126c8476982abcfe25f94e5a1f2ed18401b272e09e195a3703d047fff2837f9fd0b1fa5399ca1572571d74e0f2f3bbc33fe398d401c83e253c52f150c3e28122a75e", 0x6c, 0x8001}, {&(0x7f0000000580)="052adc27428721f64681c1eaea905363153c3edc334775354dbcd6a4ba55c7e73ea0095ce893f64da8ec89c7db955ac16d08bfe2596e125bb9df749433a517c29a9780163008aec9b579f46757e470a727b9af1670a83875936a3456019818721fd85898d9f2b0f60ca3aa2f61bd955e6ddee00ca63d8871fdb6fbaec101f496c18eb24aca77be8cdc5693a8610c0212e72c51837afe7b74424dfed55dcaf7ecbe8303a62d3f0989b496828d5ee3e42e735630001fbc740dad2e4ffdf808d16423ed78694655dba7ebc560cca43d8f2adfecca53", 0xd4, 0x1f}, {&(0x7f00000001c0)="877902bcaef82e2bbd08bfaf2c356f635923b5614eeb7220b7fd55701e8ddd85c1d8ee7ad34b902c6c98deb63148a9c541708192dbdf8aeb42cf994fa5a3e28b17b53fe454f00306080b88a8d6098450e4db096687e7c985eb7278d9df001272d229a05522b8ef1d37ee94e3bc6778cc04f94db4ffd527160a9822a327ecc806d1808ad6af45c51bc7d287847c30c7d2042076df09b08a9d34d0fc1dda4b02e47f22ebc648a8ef981d5dc814", 0xac, 0x7fffffff}, {&(0x7f0000000400)="95bdb3b2eab3614fb7a573e6d5f946c2d55b0f576726c5a4fd7768e5f0836a2334dbd6d184cd4eec733367f2b7a92472a40a8453aa45f5ea2d5c6941ded62b6077e415fddd4ce390091edd19d183745ecc69e0e3ea225c2b096d783c4e2f05502574f74e18d60ffe96510b4c3e28", 0x6e, 0x3}, {&(0x7f0000000680)="b48eb3cb1eb6a47f78c299567da399f10e77e0ed46cfbf90caa1c1ad648c9eb5af3768ffdae65b5eb53167d390d4b7025e2273eb7cdc6d59bcfb5942aa096884467aa11d254fc5c47a6337a3db977beb32ac9004ba4a2fd9fe77902718ae3800dea36411d6585a3495c7148b790d90fd1f445a21eb1d9aec5e17e865981e948178e8a6a226973f418ff3862a025dab7917a788527a8a7dadf98180", 0x9b, 0xffff}], 0x3080000, &(0x7f00000007c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}, {@huge_always}, {@huge_never}], [{@appraise}, {@uid_gt={'uid>', 0xee00}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x6) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x0) 20:16:17 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3043.954483] audit: type=1326 audit(1767903377.918:5494): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3043.962974] audit: type=1326 audit(1767903377.918:5495): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3043.972871] audit: type=1326 audit(1767903377.918:5496): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x48, 0xffffffffffffffff) 20:16:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0x6ae, 0x4}, {0x5, 0x6}, 0x5, 0x1}) [ 3043.983864] audit: type=1326 audit(1767903377.921:5497): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3043.987703] loop5: detected capacity change from 0 to 2048 [ 3043.998972] EXT4-fs (loop5): Invalid log cluster size: 32773 20:16:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0xb) [ 3044.007693] audit: type=1326 audit(1767903377.921:5498): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3044.043936] audit: type=1326 audit(1767903377.921:5499): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3044.069855] audit: type=1326 audit(1767903377.929:5500): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14483 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4c, 0xffffffffffffffff) [ 3044.096578] audit: type=1326 audit(1767903378.032:5501): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14508 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3044.168058] loop5: detected capacity change from 0 to 2048 [ 3044.189974] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3044.221950] loop5: detected capacity change from 0 to 2048 [ 3044.226674] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3059.760260] kauditd_printk_skb: 10 callbacks suppressed [ 3059.760282] audit: type=1326 audit(1767903393.777:5512): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3059.771544] loop5: detected capacity change from 0 to 2048 [ 3059.791795] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3059.794536] audit: type=1326 audit(1767903393.777:5513): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3059.814589] loop5: detected capacity change from 0 to 2048 20:16:33 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:16:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x78, 0x0) 20:16:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r2, 0x100, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) open(&(0x7f0000001140)='./file1/file0\x00', 0x40380, 0xa) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000140)={{r2}, 0x0, 0x6, @inherit={0x90, &(0x7f0000000080)={0x0, 0x9, 0x10000000000000, 0x8, {0x8, 0x29c, 0x9, 0x9, 0x100}, [0x9, 0xfffffffffffffffc, 0x6, 0x6, 0x426, 0x2, 0xd94, 0x8, 0xffffffff]}}, @subvolid=0x80000001}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x0) 20:16:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x68, 0xffffffffffffffff) 20:16:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:16:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x7, 0x0) 20:16:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006802000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:16:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5fe4, &(0x7f00000001c0)={0x0, 0x410d, 0x4, 0x3, 0x278}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x2400, 0x40) recvmsg$unix(r4, 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 20:16:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6c, 0xffffffffffffffff) [ 3059.828160] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3059.844636] audit: type=1326 audit(1767903393.795:5514): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3059.875856] audit: type=1326 audit(1767903393.795:5515): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000006c02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:16:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) [ 3059.923174] audit: type=1326 audit(1767903393.795:5516): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:33 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3059.942329] loop5: detected capacity change from 0 to 2048 [ 3059.953040] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3059.955781] audit: type=1326 audit(1767903393.801:5517): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3059.975864] loop5: detected capacity change from 0 to 2048 [ 3059.984741] audit: type=1326 audit(1767903393.801:5518): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3059.988646] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3060.001876] audit: type=1326 audit(1767903393.801:5519): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14529 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3060.012590] audit: type=1326 audit(1767903393.908:5520): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14548 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x74, 0xffffffffffffffff) [ 3060.036773] audit: type=1326 audit(1767903393.909:5521): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14548 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) 20:16:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000005, 0xb) 20:16:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FIONCLEX(r1, 0x5450) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x1a, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:16:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:16:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007402000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3075.622264] kauditd_printk_skb: 8 callbacks suppressed 20:16:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7a, 0xffffffffffffffff) 20:16:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x7, 0x0) 20:16:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file1\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRESOCT, @ANYRESHEX], 0xfffffffffffffdc8) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x1) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) ioctl$LOOP_SET_FD(r7, 0x4c00, r2) [ 3075.622282] audit: type=1326 audit(1767903409.639:5530): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.629834] loop5: detected capacity change from 0 to 2048 [ 3075.636073] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3075.644181] audit: type=1326 audit(1767903409.639:5531): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.680785] loop5: detected capacity change from 0 to 2048 [ 3075.700267] audit: type=1326 audit(1767903409.652:5532): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.727190] EXT4-fs (loop5): Invalid log cluster size: 32773 20:16:49 executing program 0: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:16:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3075.740646] audit: type=1326 audit(1767903409.654:5533): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.754119] audit: type=1326 audit(1767903409.659:5534): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300, 0xffffffffffffffff) 20:16:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) [ 3075.762570] audit: type=1326 audit(1767903409.667:5535): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.772533] audit: type=1326 audit(1767903409.677:5536): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.778863] audit: type=1326 audit(1767903409.677:5537): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14572 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000007a02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:16:49 executing program 0: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) [ 3075.925233] audit: type=1326 audit(1767903409.939:5538): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3075.931778] audit: type=1326 audit(1767903409.941:5539): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14595 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:16:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x78, 0x0) [ 3075.980943] loop5: detected capacity change from 0 to 2048 [ 3076.006591] EXT4-fs (loop5): Invalid log cluster size: 32773 20:16:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:17:03 executing program 1: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) 20:17:03 executing program 0: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000005, 0xb) 20:17:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x100, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) signalfd(r4, &(0x7f0000000040)={[0x7]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x100, &(0x7f0000000040)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r7, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) io_cancel(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) execveat(r6, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380)=[&(0x7f0000000140)='.@\x00', &(0x7f0000000180)='-\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='{\x00', &(0x7f0000000240)='\xaa&@\x00', &(0x7f00000002c0)='[@.#J\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='{-\x00'], &(0x7f0000000400)=[&(0x7f00000003c0)=')-)\x00'], 0x1000) 20:17:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:17:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20ffffff8c02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:17:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r4, 0x0, r2, 0x0, 0x7, 0x0) 20:17:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3c, 0x2, 0x0, 0x3, 0x0, 0x5, 0x30200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x8}, 0x16800, 0xfff, 0x6, 0x1, 0xc1, 0xc7, 0x20, 0x0, 0x4, 0x0, 0x7fff}, r1, 0xf, r0, 0x2) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000200), 0x1}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7, 0x8, 0x2, 0x1, 0x0, 0x2, 0x100, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa, @perf_config_ext={0x17378028, 0x57}, 0x200, 0x9, 0x9, 0x7, 0xfc9c, 0x57, 0x0, 0x0, 0x9, 0x0, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x2) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) io_uring_enter(0xffffffffffffffff, 0x31c4, 0xea7c, 0x0, &(0x7f0000000040)={[0x4]}, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xbb5) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:17:03 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x500, 0xffffffffffffffff) [ 3089.959361] kauditd_printk_skb: 3 callbacks suppressed [ 3089.959375] audit: type=1326 audit(1767903423.977:5543): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14628 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3089.966118] audit: type=1326 audit(1767903423.981:5544): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14628 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3089.968962] audit: type=1326 audit(1767903423.981:5545): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14628 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) 20:17:04 executing program 1: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) [ 3089.993248] audit: type=1326 audit(1767903423.981:5546): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14628 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3090.000271] loop5: detected capacity change from 0 to 2048 [ 3090.010326] audit: type=1326 audit(1767903423.982:5547): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14628 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3090.024454] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x600, 0xffffffffffffffff) [ 3090.101463] loop5: detected capacity change from 0 to 2048 [ 3090.121927] audit: type=1326 audit(1767903424.139:5548): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14643 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3090.124454] audit: type=1326 audit(1767903424.139:5549): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14643 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3090.127360] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:17:04 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) 20:17:04 executing program 1: pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0) [ 3090.150573] audit: type=1326 audit(1767903424.146:5550): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14643 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:04 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 3090.175924] audit: type=1326 audit(1767903424.146:5551): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14643 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:04 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0xb) [ 3090.189413] audit: type=1326 audit(1767903424.146:5552): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14643 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x700, 0xffffffffffffffff) 20:17:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20ffffff9702000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3090.308035] loop5: detected capacity change from 0 to 2048 [ 3090.321122] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3090.340732] loop5: detected capacity change from 0 to 2048 [ 3090.347938] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:17:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x3a) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) fcntl$getflags(r4, 0x408) clone3(&(0x7f0000000200)={0x8400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x25}, &(0x7f0000000140)=""/30, 0x1e, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x4, 0x1, r6}) 20:17:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:17:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0x0) 20:17:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x0) 20:17:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:17:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa00, 0xffffffffffffffff) 20:17:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000edc002000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3105.531972] kauditd_printk_skb: 10 callbacks suppressed [ 3105.531990] audit: type=1326 audit(1767903439.549:5563): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14673 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.541756] loop5: detected capacity change from 0 to 2048 [ 3105.550560] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3105.551378] audit: type=1326 audit(1767903439.564:5564): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14673 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.551472] audit: type=1326 audit(1767903439.564:5565): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14673 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.575370] audit: type=1326 audit(1767903439.564:5566): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14673 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.589330] loop5: detected capacity change from 0 to 2048 20:17:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 3105.599225] audit: type=1326 audit(1767903439.565:5567): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14673 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.599771] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc00, 0xffffffffffffffff) 20:17:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200883c7c102000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:17:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:17:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) io_uring_enter(0xffffffffffffffff, 0x5d03, 0x63e7, 0x2, &(0x7f0000000040), 0x8) [ 3105.700192] audit: type=1326 audit(1767903439.717:5568): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.705024] audit: type=1326 audit(1767903439.717:5569): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.738168] audit: type=1326 audit(1767903439.735:5570): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0xffffffffffffffff) [ 3105.775192] audit: type=1326 audit(1767903439.735:5571): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3105.781615] audit: type=1326 audit(1767903439.735:5572): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14694 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.131487] kauditd_printk_skb: 9 callbacks suppressed [ 3122.131498] audit: type=1326 audit(1767903456.149:5582): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.140602] audit: type=1326 audit(1767903456.149:5583): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.164139] audit: type=1326 audit(1767903456.171:5584): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:36 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:17:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r7, 0x100, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100000001) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r5, r6, r0, r8], 0x4) lseek(r4, 0x100, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r9, 0x0, 0x0) sendfile(r4, r9, 0x0, 0x100000001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r9, 0x1ff, 0xd00f, 0x5}) 20:17:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4800, 0xffffffffffffffff) 20:17:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:17:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffff602000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:17:36 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:17:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x0) 20:17:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0x0) 20:17:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:17:36 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 3122.183625] audit: type=1326 audit(1767903456.171:5585): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:36 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3c, 0x2, 0x0, 0x3, 0x0, 0x5, 0x30200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x8}, 0x16800, 0xfff, 0x6, 0x1, 0xc1, 0xc7, 0x20, 0x0, 0x4, 0x0, 0x7fff}, r1, 0xf, r0, 0x2) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000200), 0x1}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7, 0x8, 0x2, 0x1, 0x0, 0x2, 0x100, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa, @perf_config_ext={0x17378028, 0x57}, 0x200, 0x9, 0x9, 0x7, 0xfc9c, 0x57, 0x0, 0x0, 0x9, 0x0, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x2) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) io_uring_enter(0xffffffffffffffff, 0x31c4, 0xea7c, 0x0, &(0x7f0000000040)={[0x4]}, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0xbb5) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) [ 3122.197992] audit: type=1326 audit(1767903456.171:5586): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.222650] loop5: detected capacity change from 0 to 2048 [ 3122.230202] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 3122.255036] loop5: detected capacity change from 0 to 2048 20:17:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4c00, 0xffffffffffffffff) [ 3122.265009] audit: type=1326 audit(1767903456.173:5587): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) [ 3122.270525] audit: type=1326 audit(1767903456.173:5588): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.273812] audit: type=1326 audit(1767903456.173:5589): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14711 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.296463] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3122.334986] audit: type=1326 audit(1767903456.352:5590): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14741 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3122.345927] audit: type=1326 audit(1767903456.363:5591): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14741 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) 20:17:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000040)=0x3, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x420, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@appraise_type}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0xc, 0x62, 0x4, 0x0, 0x61, 0x36, 0x35, 0x34], 0x2d, [0x66, 0x30, 0x70], 0x2d, [0x65, 0x63, 0x33, 0x36], 0x2d, [0x33, 0x31, 0x64, 0x61], 0x2d, [0x65, 0x0, 0x64, 0x35, 0x66, 0x33, 0x63, 0x63]}}}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, '\\+(]%!$:'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt}]}}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3ff}) 20:17:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x78) splice(r1, 0x0, r0, 0x0, 0x100000005, 0x0) 20:17:51 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x9, 0x7fffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:17:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x100000001, 0xef5e, 0x1f}) lseek(r5, 0x100, 0x4) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) 20:17:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6800, 0xffffffffffffffff) 20:17:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x0) 20:17:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdf902000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3137.289553] loop5: detected capacity change from 0 to 2048 [ 3137.305402] kauditd_printk_skb: 3 callbacks suppressed [ 3137.305421] audit: type=1326 audit(1767903471.320:5595): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3137.320469] audit: type=1326 audit(1767903471.331:5596): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3137.332246] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3137.363639] audit: type=1326 audit(1767903471.331:5597): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3137.409251] audit: type=1326 audit(1767903471.348:5598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000100)={{0x1, 0x100, 0x2, 0x6d5, 0x8001, 0x2}, 0x270, [0xfb, 0xffffffff, 0x3, 0x4, 0x1, 0xfffff171, 0x9, 0xc23c, 0x6, 0x7, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x6, 0x61b, 0x4, 0xad1, 0x3, 0x2, 0x0, 0x7fffffff, 0x7fff, 0x1f, 0x7, 0x3, 0x10001, 0x3, 0x401, 0x1e64, 0x4, 0x80, 0x4, 0x0, 0x8, 0x72, 0x68, 0xed8, 0x59, 0x9b, 0x3, 0x1000, 0x9, 0x1000, 0x3f, 0x200, 0x5, 0xff, 0x0, 0x2, 0x4, 0x5, 0x9, 0x1, 0x9, 0x101, 0x0, 0x7, 0x2, 0x200, 0x3, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0xfffffffb, 0x0, 0x6, 0x2, 0x9, 0x100, 0x8, 0x1, 0x9, 0x9, 0x5, 0x3f, 0x9, 0x26cf83e5, 0xfffff02d, 0x0, 0x360, 0x8, 0x33c8, 0x400, 0x1f, 0xfff, 0x0, 0x58, 0x9, 0x9, 0x4, 0x200, 0x1, 0x1, 0x9, 0x96e9, 0x1, 0x809073d8, 0xd0, 0xaea, 0x0, 0x10001, 0x6, 0x0, 0x6, 0x400, 0x2, 0x80000000, 0x2, 0x8, 0x7fff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x0, 0x401, 0x6, 0x10000, 0x1, 0x4, 0xffff, 0x6, 0x9, 0x9, 0x40, 0xfffff001, 0x6, 0x5, 0x1, 0xffffffff, 0x7f, 0x69, 0x1, 0x7, 0x1, 0x7, 0x1ff, 0x6, 0x5, 0x800, 0xa61, 0x6, 0x2, 0x2, 0x2, 0x2, 0x9, 0x2, 0x1f, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7f, 0x6, 0x480000, 0xf195ef2, 0x6, 0x3, 0x800, 0xffffffd0, 0xfffff000, 0x9, 0xc25, 0x3, 0x7, 0x81, 0x7, 0x1, 0x7, 0x3, 0x200, 0xc8a6, 0x3, 0x9, 0x2, 0x5, 0x775, 0x20, 0x210e, 0x0, 0x81, 0x13a9, 0x5, 0x2, 0xfb, 0x4, 0x1, 0x3f, 0x5, 0xffff, 0x9, 0x6, 0xf54, 0x9, 0xd25, 0x40, 0xff, 0x7, 0x3, 0x7, 0xff, 0x800, 0x4, 0x3, 0x0, 0x0, 0x98, 0x101, 0xffffffff, 0x101, 0x8a, 0x401, 0x7, 0x9, 0x7, 0x5, 0x1, 0x1, 0x3f, 0x5d, 0x81, 0x3, 0x200, 0x1f2, 0x4, 0x7c3, 0x80, 0x7ff, 0x2, 0x72, 0x5, 0x401, 0x9, 0xc60, 0x70, 0x5, 0x9b0, 0x80000000, 0x8, 0x0, 0x822, 0x9, 0x1, 0x2, 0x3, 0x0, 0x10001, 0x66fc5148, 0x10001, 0x7, 0x0, 0x7fffffff, 0x800, 0x5bb596e1, 0xac6, 0x3ff, 0x1, 0x7, 0x2, 0x101, 0x3678, 0x7, 0x4, 0x3, 0x1000, 0x40, 0x5, 0x8, 0x1, 0x1, 0x8, 0x10000, 0x441b, 0xbe, 0x101, 0x40, 0x100, 0x0, 0x10000, 0xfffffffe, 0xfffffffb, 0x401, 0x70a, 0x0, 0x100, 0x3f, 0x1, 0xc0000, 0x0, 0x6, 0x9, 0x80, 0xaaf3, 0x93, 0x0, 0x3, 0x101, 0x69, 0x9, 0x6, 0x1f, 0x7fff, 0x2, 0x5, 0x1, 0x5, 0x0, 0x400, 0x8001, 0xff, 0x20, 0x5, 0x2, 0x1, 0xee, 0x2, 0x7ff, 0x9, 0x0, 0x6, 0x1ff, 0x2146, 0x401, 0x2, 0x6, 0x9, 0x7f, 0x40, 0x7fff, 0xffffff55, 0x2ea5, 0x4, 0x8b, 0x40, 0x1, 0x3ff, 0x2, 0x0, 0x2, 0x8, 0x3, 0xea, 0x80000001, 0xf6, 0x6, 0x3, 0x6, 0x2e9c, 0x7, 0x8, 0x1, 0x82, 0x9, 0x9, 0x6, 0x2e, 0x401, 0x0, 0x0, 0x1, 0x6, 0x8000, 0x5, 0x9, 0x7, 0x1, 0x0, 0xa3b, 0x4, 0x1, 0x14d7, 0x8, 0x3ff, 0xd242, 0x7ff, 0x71a, 0x6, 0x5, 0x40, 0xf10, 0xffff7fff, 0x973, 0x4, 0x3ff, 0x80000000, 0xea0, 0x9, 0x400, 0x9, 0x4, 0x4f, 0xfff, 0xdbe3, 0x3, 0x5b0a, 0x2, 0x0, 0x7, 0x6, 0xe24, 0xef, 0x9, 0x0, 0x6, 0x7fff, 0x3, 0x3, 0x10000, 0xff, 0x0, 0x80, 0x4, 0x3, 0x8, 0xa55, 0x5, 0x3, 0x2, 0x8001, 0x4, 0x7f, 0xfff, 0x5, 0x9, 0xfffff61e, 0x400, 0x6, 0x9, 0x3, 0x80000000, 0x92da, 0x53e, 0x0, 0x596f, 0x7, 0x224, 0x4, 0xfffffff8, 0x100, 0x1, 0xc6, 0xc08, 0x8, 0x80, 0x0, 0x3, 0x6, 0xae16, 0x3f, 0x100, 0x7, 0x933, 0x4, 0xffc0000, 0x9, 0x9, 0x3, 0x81, 0x101, 0x80, 0x0, 0x7, 0xb255, 0x1, 0x977, 0x10000, 0x0, 0x9, 0x1f, 0x80000001, 0x0, 0xfffffffe, 0x6, 0x5, 0x1f, 0x2, 0x3, 0x101, 0xee2, 0x0, 0x1, 0x4, 0x1, 0x9, 0x7fff, 0x401, 0x3, 0x200, 0x1, 0x2, 0x1000, 0xb, 0x20, 0x7fffffff, 0x1000, 0x8e0000, 0x649, 0x40, 0x40, 0x3, 0x0, 0x8, 0x0, 0x3, 0x2, 0x80000000, 0x10000, 0x401, 0x4, 0x4, 0x1, 0x4, 0xf0000000, 0xa2, 0x5, 0x2, 0x3, 0x2, 0x7ff, 0x80, 0x8, 0x8c, 0x100, 0x100, 0x5, 0x80, 0x5, 0x0, 0x9, 0xfff, 0x3f, 0x80, 0x378c, 0x0, 0x62e, 0xfff, 0x3, 0x4, 0x6, 0x16ac, 0x9, 0x7e, 0xc0000000, 0xe0, 0x2, 0x3, 0x4, 0x1, 0x6, 0x81, 0x4, 0x9, 0x9, 0x8, 0x101, 0x0, 0x9, 0xb9, 0xd3, 0x80000001, 0x3, 0x20, 0x8499, 0x2, 0x7fff, 0x5, 0x423, 0x6, 0x80000001, 0x1, 0x200, 0x7, 0x5, 0x1, 0x9, 0xda, 0xe052427c, 0x3, 0xe440, 0x12b2, 0x7fccb9dd, 0xd6b, 0x5, 0x7ff, 0x80000000, 0x100, 0x8, 0xfffffffc, 0xecb0, 0x0, 0x7f, 0x7, 0x7, 0x2, 0x2, 0x17c, 0x3, 0x0, 0x1, 0xff, 0xddf8, 0x1e, 0xff, 0x7, 0x9, 0xfff, 0xffffff01, 0x73, 0x20, 0x1, 0x80000001, 0x4, 0x80000000, 0x24b, 0xfffffff8, 0x18000000, 0x40, 0xbde4, 0x7ff, 0x4, 0x1400, 0x4, 0x324e, 0xffffffe0, 0xba, 0x3ff, 0x8d, 0x2, 0x6, 0x7, 0x8, 0x100, 0x3, 0x1, 0x5, 0x4, 0x650608c2, 0x10000, 0x0, 0x1000, 0x2, 0x55, 0x3ff, 0xfffffffd, 0x4aaa59ab, 0x6, 0x83af, 0x4, 0x0, 0x7fffffff, 0x0, 0x6, 0x6, 0x0, 0x7fff, 0x6, 0x8001, 0x20, 0x1000, 0x9, 0x5, 0x101, 0x8, 0x80000000, 0xfffffffe, 0x3dd4, 0xffff, 0x7ff, 0x8, 0x7ff, 0xdc1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x5, 0x678, 0x8000, 0x200, 0x5, 0x7, 0x9, 0x7ff, 0x7, 0x0, 0x0, 0xffffffff, 0x10000, 0x7ff, 0x4, 0x7, 0x8, 0x9d4, 0x2, 0xcad, 0x2, 0x80000000, 0x7, 0x10000, 0x1, 0x9, 0x7734, 0x2, 0xdb4, 0x0, 0x3, 0x4, 0xfff, 0x40, 0x3ff, 0x8, 0x10000, 0x3, 0x10001, 0x9, 0x1000, 0x6, 0x1, 0x8, 0xfffffffa, 0x1, 0x6, 0xfff, 0x1f, 0x7000, 0x58, 0x9bb, 0xffffffff, 0xdd, 0x38, 0x100, 0x26, 0x1, 0x1, 0x7fffffff, 0x0, 0x7fffffff, 0x8, 0x78a2, 0x343, 0x4, 0x2, 0x9, 0x3, 0x81, 0xd1, 0xffffffe0, 0x7, 0x6539, 0x6, 0x7, 0x6, 0x10001, 0x8, 0x9, 0x8, 0x8001, 0x8, 0x1, 0x9, 0x0, 0xc5f, 0x4, 0x400, 0x4b7, 0x6, 0x10001, 0x6, 0x6, 0x800, 0xabb7, 0x40, 0x8, 0x101, 0x8, 0x9, 0x1, 0xffff, 0x4c, 0x8, 0x65, 0x2, 0x5, 0x4, 0x3ff00000, 0x8000, 0xb35, 0x58, 0x3, 0x8, 0x4, 0x5, 0x6, 0x3, 0x40, 0x5, 0x3ff, 0x1, 0x80000000, 0x1f, 0xffffff44, 0xa26, 0x324bd87a, 0x8001, 0x5, 0x800, 0x5317d2f4, 0x40, 0x8001, 0x80000001, 0x3, 0x1, 0x8a27, 0x80000001, 0x7, 0x1000, 0x3, 0xba9, 0x401, 0xfd3, 0x40, 0x40, 0x4, 0x8, 0x1e8, 0x529b, 0x200, 0x2, 0x3ff, 0x8d1, 0x4, 0x2, 0x9, 0x5, 0x80000000, 0x0, 0x7, 0x4, 0x7ff, 0x1000, 0x7, 0x90, 0xb5a, 0x101, 0x30000000, 0x6, 0x7, 0x7, 0x4, 0x400, 0x1000, 0x26, 0x9, 0x8, 0x1000, 0x6, 0x0, 0x1, 0x7, 0x0, 0x3ff, 0x2, 0x9, 0x999d, 0x100, 0x4, 0x1, 0x6, 0x1000, 0x49, 0x1000, 0x3ff, 0x2, 0x6, 0x4ee, 0x7, 0x44e, 0x2e99a3, 0x8a, 0x7, 0x0, 0x9, 0x8000, 0xffffb35b, 0x1, 0x4, 0x1, 0x40, 0x52, 0x5f1, 0x9, 0x5, 0x8, 0x5, 0x200, 0x9, 0x7f, 0x7fff, 0x8, 0x4, 0x401, 0x80, 0x80, 0x3, 0xfffffffd, 0x4a6, 0x2, 0xd2b, 0x91, 0xbbab, 0x401, 0x8, 0xffffffff, 0x2, 0xcd78, 0x1, 0x7f, 0x9, 0x4, 0x100, 0x40, 0x0, 0x9, 0x7, 0x7, 0x2, 0x80000001, 0x8, 0x6, 0x4, 0xffff54f6, 0x4, 0x9, 0x7, 0x3, 0x40, 0x401, 0x280000, 0x9, 0x81, 0x10001, 0x0, 0x1, 0x3, 0x4807, 0xfffffffc, 0x8, 0x2, 0x0, 0x8, 0x3, 0x6, 0xfffffffe, 0x5, 0x0, 0x7, 0xdd5, 0x6, 0x1f, 0x5, 0x1, 0x101, 0xc5ae, 0x10000, 0x45f, 0x4, 0x1, 0x3174114, 0x0, 0x9, 0x3f, 0x3, 0xb7, 0xff, 0x6, 0xc0c8, 0xfffffffa, 0x5, 0x4, 0x9, 0x10000, 0x12a6, 0x9, 0x100, 0x6, 0x7fff, 0x3, 0x9, 0x1, 0xec, 0x4, 0x2b, 0x10000, 0x2, 0xf6, 0x0, 0x5, 0xb82, 0x9, 0x6, 0x7c6b0547, 0x80, 0x400, 0x7fffffff, 0x7f, 0x7d0d8aba, 0x101, 0x2, 0x400, 0x9, 0x2, 0xafe, 0xc0, 0xfffffffe, 0x1]}) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0x78) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) readv(r4, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000001140)=""/103, 0x67}], 0x2) splice(r2, 0x0, r1, 0x0, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x100, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001200)={{0x1, 0x1, 0x18, r6, {0xbbd}}, './file1/file0\x00'}) [ 3137.444012] audit: type=1326 audit(1767903471.354:5599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3137.449623] audit: type=1326 audit(1767903471.354:5600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14757 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdfc02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:17:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6c00, 0xffffffffffffffff) [ 3137.513511] loop5: detected capacity change from 0 to 2048 [ 3137.543058] audit: type=1326 audit(1767903471.560:5601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3137.547963] EXT4-fs (loop5): Invalid log cluster size: 32773 20:17:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3137.567689] audit: type=1326 audit(1767903471.566:5602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7400, 0xffffffffffffffff) [ 3137.635868] audit: type=1326 audit(1767903471.566:5603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffdfd02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3137.681700] audit: type=1326 audit(1767903471.567:5604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14776 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:17:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) [ 3137.847521] loop5: detected capacity change from 0 to 2048 [ 3137.877877] EXT4-fs (loop5): Invalid log cluster size: 32773 20:18:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) [ 3152.201038] kauditd_printk_skb: 7 callbacks suppressed [ 3152.201066] audit: type=1326 audit(1767903486.218:5612): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:18:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffffd02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:18:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x0, 0x3) 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7a00, 0xffffffffffffffff) 20:18:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) 20:18:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000040)=0x3, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x420, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@appraise_type}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0xc, 0x62, 0x4, 0x0, 0x61, 0x36, 0x35, 0x34], 0x2d, [0x66, 0x30, 0x70], 0x2d, [0x65, 0x63, 0x33, 0x36], 0x2d, [0x33, 0x31, 0x64, 0x61], 0x2d, [0x65, 0x0, 0x64, 0x35, 0x66, 0x33, 0x63, 0x63]}}}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, '\\+(]%!$:'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt}]}}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r5, 0x100, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3ff}) 20:18:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000580)={0x1, 0x5, @start={0x0, 0x0, "dd0fc667136544e769e85cf59953bfc3634466839a753be0015b73216d2fac8a9c26c6df715436e9ebe9b13d51ab6efc386ec7f3494c0b9b4e7cbb8fd974d554fc2acf11d1bc28106391e4f4568a232c9324a3559d94668f6482cb9310ce2d6c1e4937461af7e9ca07726ff47bbe1d76efb2747b34038f223a4e915145c1b506bb51f177dfd7bb0b6cc3f3c9903187292e0eb541aeac97001cb8d0aebe61af803892150e7249a1fd0001c7dbe381c3484b784525f40dcdbd596f96d5319c0e267e04e7f245bf7873bd97e46456a1ea9947e1b548a84b743745750209454dd1f76ae7f39b5b7f21c0da2607aa8295e0cb07899977f138009fd5035443b7309b6a6e488f98e3b0f31ba5de954ca78196e9118c3c7f1560c39b49987c4de37a30f26971a431eb570c993c967fbd3f0c8c4c68df9784fb41bbb0f8ec665e8bfe4655991d87dc5726bab16b8aaafe126fdd13d71ddfc2549223a3be29a981a537c1eb5f625f30428a0b083b1cf7d8ebe545ba132b96bd93a38568bad7ce13a960c62b5ce7e6807170710d94fbe744f616185b486818e3c4fc23080f7e4669827e38e6660e412fb2c86de204bb84636f87324ba7859bb21ac4905dfe60d9e2eb4a1c3bd5307c80d4d25c3f2209248cea341f9798fd60a94c6017d45b6429eb100add94cd3aca0211cc1000703e8dbee66ed85ac3d17265d27ba50cc4776eaed2c7cebf77781fc69fb62c12e5167c7c92c1abd526d1e305006f54eb9ae278afbf4d5c4d72ec4422f0759470fa6f73b1e4898fb09bc8dbecb3b8ce289e356fba984ee895dc3205240fd7cd04b0207174c220bc3ea45a449effe6d87ab289aeabac5eb6ba229e85f22799798c8c1b1e42d465fb2430c5e6f9a57e6a0d64af3e6507976fe1e0da0b0712ca8c71526b1420be175dff9923db30cd7c0cbf894f8bc1b9cb6a1586177ae9a0ec0c8699f4729df3a6abcc0a0a63dfc41957d264d04e95329cf45194deccb5a9038e97d06e5555a009c10bed49acb08363f4978eb35a6a4ea03adae989744080086c84974f2db91d97340ba2827c78afa9cc2cb840ed4b2096ee11ecd8dfe4af7479a60e8b52512f96101a37bc9e14d36c7485827becae19a1e829da0ec328c579e212827e46cf51aae7a32e2734ed6d64add9e5fd78b9feb681f9978f64366bd479a94fa5e0f1507919f01e76aaf65d1076a307056428a55e8a2a8634f3284ff2017d5848d6562c4248c7475e1d9a53ea34c325096902bd04576496d4f6d250b118a7a3e36c7d7193e4d8c0785e0748cd7b855db9ca9f1e056cf71d20003356872e774a344d9d3096de423365d9cf7bc490cbaf427618d4b4920a2f693aa669cf2193ee5ca83a7a7757087c2a9b5f592f6c486e9f81feb667341df3d4ca1d21f570899275f8518067fb8243016d393ca3107c02deb8b038557d9b19", "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"}, [0xe45, 0x100000001, 0x36, 0x1b000000000, 0x8000000000000000, 0x2, 0x9, 0x18b, 0x40e, 0xd43, 0xcd, 0x6, 0x1000, 0xfd, 0x1, 0x3f, 0x9, 0x7f, 0xfffffffffffeffff, 0x7, 0x5, 0xfffffffffffeffff, 0x6f4c, 0xa6cc, 0x8000, 0x4, 0x8001, 0x8, 0x7fff, 0x6a86, 0x2, 0x0, 0x2, 0xdc28, 0x5, 0x200, 0x70, 0x91a, 0x4, 0x8, 0x8902, 0xffffffffffffffff, 0x6, 0x7fa, 0x9c, 0x7, 0x6, 0xffffffffffffff4f, 0x1ff, 0x6, 0x1, 0x20, 0x2, 0x100000001, 0x9, 0x7, 0x7, 0x7, 0x9, 0x5, 0x4, 0x1, 0xffffffff, 0x8]}) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_config_ext={0xfffffffffffffff7}, 0x48, 0x6, 0xdd, 0x0, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x200}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0xf2f32e3a59c19772, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000440)={0x0, r5, 0x1f, 0x8, 0x8, 0xca}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000540), 0x8) 20:18:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x0) [ 3152.225272] audit: type=1326 audit(1767903486.232:5613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:18:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x315400, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40480c4}, 0x6000) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) [ 3152.245562] audit: type=1326 audit(1767903486.232:5614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.246945] loop5: detected capacity change from 0 to 2048 [ 3152.248617] audit: type=1326 audit(1767903486.233:5615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.253685] audit: type=1326 audit(1767903486.234:5616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.256577] audit: type=1326 audit(1767903486.234:5617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14795 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.275539] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3152.286270] audit: type=1326 audit(1767903486.304:5618): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14816 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.290495] audit: type=1326 audit(1767903486.307:5619): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14816 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=329 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.294618] audit: type=1326 audit(1767903486.307:5620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14816 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 [ 3152.299920] loop5: detected capacity change from 0 to 2048 [ 3152.302760] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3152.309829] audit: type=1326 audit(1767903486.307:5621): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14816 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b49447b19 code=0x7ffc0000 20:18:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffffe02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) [ 3152.338468] loop5: detected capacity change from 0 to 2048 [ 3152.342402] EXT4-fs (loop5): Invalid log cluster size: 32773 [ 3152.350931] loop5: detected capacity change from 0 to 2048 [ 3152.353599] EXT4-fs (loop5): Invalid log cluster size: 32773 20:18:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000fff02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) [ 3152.415379] loop5: detected capacity change from 0 to 2048 [ 3152.431816] EXT4-fs (loop5): Invalid log cluster size: 32773 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0xffffffffffffffff) 20:18:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0x78) r3 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x40000, 0x22) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x32c, 0x0, 0x421, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0x6, 0x3, "38c1"}]}, @TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x101, 0x3, "b11aacac652c4cbd80993eb207ba80c4da7032a7bcb6ff4c5170656fdef77c69145c329eca36692f0880f10b2231d85d0659ebb7e70459a776d98b94915cf29bc62915dcb5e25dda68511dab28a7bc4b73c53feb8e858450f226fa554b0cf912e3d627d3d2799e5196945964df12b05ca70867f1a3260be26a07a9fb98c7fc14a64348e383d93d2db427ab4f8826321578deb17a8657d5e57f7fb4524f1a56f5da457e7a16bde3d22c49bbcdfadd50252570b26ec30c48f89a32ab476214176c234fa87709e56c7504f8060b398124dc5f7254494748e93bda2e3afbd9915fd35baf7dd05f6d47a7ef3a18a598cdd9d360a0b830fee27096e9000a09e0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "dc5da221e1819647bc9e535d73be52adb46d33a733a85b39961587b9e19339440f3a400b3bc867554513fba037418c94c117a62e092eeee12c9c8ef757d9b7a286d54e6f432fd2"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1e768a3b06ef65e0a23f293ffa86a4e4a52b260fae9935586c3d6acb2d03"}}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "b4bdf9df01a198d0a4d7d5dc04fbceed89f79ae71b9d3b4b019735e622bd1b85f5790fc3de09a939bdb7908b6cc94db569954b350a783587b9d94be71c3d4b0f246b2976dd8ff4e7ff70d895dcf59a8cec337b80fd4387d7877315bf7b49c243e8ebc4006572b144fca5d7f1ff393ad145916be260a2805a66c430f60022c5fe034f2ecc91410d898c71c7eeeaf608c253aac69435aa97bd643b216a87e055ebdb04"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff0094}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xda7c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xec}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c001) splice(r3, 0x0, r1, 0x0, 0x4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r4, 0x100, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) fchmod(r5, 0x10) 20:18:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20fffffbff02000019000000900100000f0000000000000001000000058000000000040c0040000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[]) 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000000, 0xffffffffffffffff) [ 3152.623461] loop5: detected capacity change from 0 to 2048 [ 3152.626675] EXT4-fs (loop5): Invalid log cluster size: 32773 20:18:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5000000, 0xffffffffffffffff) [ 3152.654823] loop5: detected capacity change from 0 to 2048 [ 3152.666510] EXT4-fs (loop5): Invalid log cluster size: 32773 BUG: leak checking failed VM DIAGNOSIS: 20:18:07 Registers: info registers vcpu 0 RAX=0000000080010004 RBX=ffff88800f490000 RCX=ffffffff81f4da74 RDX=000000000000c062 RSI=ffffffff81f4da82 RDI=0000000000000007 RBP=000000000001c062 RSP=ffff88806ce09db0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffffffff853a2000 R13=ffff88800f494338 R14=0000000000000000 R15=ffff88800f490008 RIP=ffffffff81f4da86 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff2eca158c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffde3525448 CR3=0000000048f80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00363a372f6b636f6c622f7665642f73 XMM02=00ff0000000000000000000000000000 XMM03=696e656420737365636341002f737973 XMM04=00000003000000000000562f8eefccd0 XMM05=0000562f8e6790d00000562f8eeea070 XMM06=0000562f8eeefeb00000000000000000 XMM07=00000000000000000000000000000000 XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff814d03ca RBX=dffffc0000000000 RCX=ffffffff814d3c56 RDX=0000000000000000 RSI=ffffffff814d00ae RDI=ffffffff84be8ca8 RBP=ffff8880481f7cd0 RSP=ffff8880481f7c00 R8 =0000000000000001 R9 =0000000000000001 R10=00000000c000003e R11=0000000000000001 R12=0000000000000061 R13=ffffed100903ef9c R14=00000000c000003e R15=ffffc900006a9068 RIP=ffffffff8140cd80 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff2eca158c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562f8ef0b028 CR3=00000000417f6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=372f6b636f6c622f7665642f7379732f XMM01=00373a372f6b636f6c622f7665642f73 XMM02=00ff0000000000000000000000000000 XMM03=696e656420737365636341002f737973 XMM04=00000001ffffffff0000562f8eef35c0 XMM05=0000562f8eee67600000562f8eee3a30 XMM06=0000562f8ef020600000000300000004 XMM07=00000000000000000000000000000000 XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000