last executing test programs: 7m53.191586255s ago: executing program 1 (id=182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10) (async) sysinfo(&(0x7f0000000000)=""/115) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@arp={@private=0xa010101, @local, 0xff, 0xff, 0xd, 0x5, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4607, 0x1, 0x0, 0x3, 0x7, 0x2, 'hsr0\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x280}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (rerun: 64) 7m53.116731363s ago: executing program 1 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 7m53.084863386s ago: executing program 1 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m53.030904401s ago: executing program 1 (id=187): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x10, 0xffffffffffffffff, 0xd0fba000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xfe6162f2fe4c4855, 0x11, r0, 0x12199000) write$binfmt_misc(r1, &(0x7f0000000380)="dfab365f765f07e030894e7162eb559a8be217106ef1aa0e1afbd1db728ba24cd3a9933d0d52a828eb34e6e610862583383ecae7c00df541f610a4bedce6c7fb7b387306cc1bf6b366d0731a4910621e9ee7d16b4b2125784e5aa4ee6da56c06ace56ddbc161e4c1b66771e7af8bc1a97b6c41c69e5ec6e374e647531090550fa14d4261b25d28b971945735521d48548dd829838bb59a578f146f6d0987b5e299f5b9d530529f5906a10f48925f0be5c061e7f56671e15293d3f4cd1c77e088e47f43b1", 0xc4) r2 = syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0xfffffffffffffffc) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="2e27ddd6b63c3b072388c9cfdbfbeb100000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910be00000000007f0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r9, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r10, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r4, 0x0, 0x6, 0x2000402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32], 0x50) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 7m52.851330869s ago: executing program 1 (id=194): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/122, 0x7a}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x40012001, 0x0) 7m52.161106337s ago: executing program 1 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r3, &(0x7f00000000c0)=""/199, 0xfffffdf7) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') pread64(r5, &(0x7f0000000040)=""/9, 0x9, 0x100) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x5e, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x55) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r6, 0x0, 0x3ffff) 7m52.136587799s ago: executing program 32 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r3, &(0x7f00000000c0)=""/199, 0xfffffdf7) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') pread64(r5, &(0x7f0000000040)=""/9, 0x9, 0x100) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x5e, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x55) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r6, 0x0, 0x3ffff) 4.820895865s ago: executing program 0 (id=5848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") write$binfmt_script(r1, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) r2 = memfd_create(&(0x7f00000004c0)='l\xde\xbdf\xd31]\x8f\xbf9\xe0\x92P\xe9\xac\xec\x18\xd3]\xf0\x88\xfc\tf?H.TNH\x81%4\x88\xa4\x16\x06\x11\xcb&\x03\xa6C\x84Z\xe2\xecc\x861\xa6uh\x15\xba\xa7\x05$\xf2U\x99>\xa4\x03B\xbc\x98\x13\x1a-\xd5\xc3>\x84\xa6\x06\xe3\x8a+\x1d\x05\x91D\xdc,\x1eV\x05\xefY\x1d\xb6\x93\xddS\xd3\xfe\xb8\x0e\xcf\xe02\xe1H}\xd6>\x89\xf4\xfe\x19\x9dY\xe6d\x9d-\xa7,R\x1b\xe5\xa8U\xb1\xe0\x83C\xfb\x06b\xb7\xa9\x9any)\xb1(\t\xfe\xb7\xb9\'\b\xcc\xb7D', 0x1) copy_file_range(r2, 0x0, r2, &(0x7f0000000100)=0xde27, 0x3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8, 0x4, 0x0, 0x4, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000900)={'veth0_to_bridge\x00', &(0x7f0000000840)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) 4.758826481s ago: executing program 0 (id=5849): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) 4.551898841s ago: executing program 0 (id=5850): statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4100, 0x4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r1, 0xee01) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000080a4a200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) umount2(&(0x7f00000002c0)='./file2\x00', 0x3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x8000000, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0xffffffffffffffb6) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x3, 0x9, @local, 0x5}, 0x1c) 4.431043823s ago: executing program 2 (id=5852): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000400000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) unshare(0x42000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) 4.328305883s ago: executing program 5 (id=5854): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvtap0\x00'}) 3.392994475s ago: executing program 5 (id=5855): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) 3.190698865s ago: executing program 2 (id=5856): syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x0, 0x9, 0xd, 0x4, 0x0, 0x8, 0x1, 0x7f, 0x8, [0xeb2f, 0x1, 0x9, 0x100, 0x4, 0x98b2, 0xa4, 0xff]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 3.093816835s ago: executing program 0 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.064541958s ago: executing program 2 (id=5858): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") 3.063681888s ago: executing program 5 (id=5859): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000400000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) unshare(0x42000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) 2.875518127s ago: executing program 2 (id=5863): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") 2.542450989s ago: executing program 0 (id=5865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) 1.940270929s ago: executing program 5 (id=5866): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x285}, &(0x7f0000000900)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0xa4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0xfff}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000007c0)={0x0, @adiantum, 0x0, @desc1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 1.856704687s ago: executing program 2 (id=5867): statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4100, 0x4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r1, 0xee01) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000080a4a200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) umount2(&(0x7f00000002c0)='./file2\x00', 0x3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x8000000, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0xffffffffffffffb6) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x3, 0x9, @local, 0x5}, 0x1c) 1.700507172s ago: executing program 4 (id=5871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 1.682036564s ago: executing program 5 (id=5872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x9, 0x4, 0x7) 1.645296917s ago: executing program 4 (id=5873): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) 1.41739944s ago: executing program 5 (id=5875): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00'], 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x912a4d6ae1c1d5fc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a010100000000000000"], 0xf8}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4f, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYBLOB="0000000000000000b702513d02000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290) 1.299796782s ago: executing program 3 (id=5876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}, {@nogrpid}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.298952612s ago: executing program 4 (id=5877): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") write$binfmt_script(r1, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) r2 = memfd_create(&(0x7f00000004c0)='l\xde\xbdf\xd31]\x8f\xbf9\xe0\x92P\xe9\xac\xec\x18\xd3]\xf0\x88\xfc\tf?H.TNH\x81%4\x88\xa4\x16\x06\x11\xcb&\x03\xa6C\x84Z\xe2\xecc\x861\xa6uh\x15\xba\xa7\x05$\xf2U\x99>\xa4\x03B\xbc\x98\x13\x1a-\xd5\xc3>\x84\xa6\x06\xe3\x8a+\x1d\x05\x91D\xdc,\x1eV\x05\xefY\x1d\xb6\x93\xddS\xd3\xfe\xb8\x0e\xcf\xe02\xe1H}\xd6>\x89\xf4\xfe\x19\x9dY\xe6d\x9d-\xa7,R\x1b\xe5\xa8U\xb1\xe0\x83C\xfb\x06b\xb7\xa9\x9any)\xb1(\t\xfe\xb7\xb9\'\b\xcc\xb7D', 0x1) copy_file_range(r2, 0x0, r2, &(0x7f0000000100)=0xde27, 0x3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x8, 0x4, 0x0, 0x4, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000900)={'veth0_to_bridge\x00', &(0x7f0000000840)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) 1.217695679s ago: executing program 4 (id=5878): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4100, 0x4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r1, 0xee01) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000080a4a200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 946.796377ms ago: executing program 0 (id=5879): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14510, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000003440)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="81fcd8bbd74a5464e4060d6d1cd3cb9dff6d8c758a5abf02186cbc18ce90b47832"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(&(0x7f0000000380)=""/20, 0x14) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 944.342137ms ago: executing program 3 (id=5880): syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x0, 0x9, 0xd, 0x4, 0x0, 0x8, 0x1, 0x7f, 0x8, [0xeb2f, 0x1, 0x9, 0x100, 0x4, 0x98b2, 0xa4, 0xff]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 845.442606ms ago: executing program 3 (id=5881): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 844.586366ms ago: executing program 2 (id=5882): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) unshare(0x42000000) 500.698571ms ago: executing program 3 (id=5883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 240.524106ms ago: executing program 3 (id=5884): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x7f, 0x4, 0x28}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x500, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000300), &(0x7f0000000440)=r6}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r9) socket$netlink(0x10, 0x3, 0x0) 133.920067ms ago: executing program 4 (id=5885): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 53.471015ms ago: executing program 4 (id=5886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x0) 0s ago: executing program 3 (id=5887): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000", @ANYRES32], 0x38}}, 0x0) kernel console output (not intermixed with test programs): 9. [ 468.401426][T19771] loop4: detected capacity change from 0 to 8192 [ 468.446702][T19774] loop3: detected capacity change from 0 to 164 [ 468.891801][T19784] sctp: [Deprecated]: syz.0.5274 (pid 19784) Use of int in max_burst socket option. [ 468.891801][T19784] Use struct sctp_assoc_value instead [ 468.984178][T19789] loop2: detected capacity change from 0 to 128 [ 468.997738][T19789] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.021251][T19789] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.204293][T19796] loop0: detected capacity change from 0 to 128 [ 469.291565][T19796] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.319606][T19805] ip6_vti0 speed is unknown, defaulting to 1000 [ 469.453763][T11899] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 469.617775][T19804] loop5: detected capacity change from 0 to 8192 [ 469.639804][T19796] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.802819][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.116148][T19809] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 470.215478][T19835] loop2: detected capacity change from 0 to 164 [ 470.300016][T19841] loop5: detected capacity change from 0 to 512 [ 470.348625][T19841] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 470.425179][T19841] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.451492][T19841] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.5293: corrupted inode contents [ 470.484776][T19841] EXT4-fs (loop5): Remounting filesystem read-only [ 470.508129][T19841] EXT4-fs (loop5): 1 truncate cleaned up [ 470.513986][ T2037] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 470.524807][ T2037] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 470.539000][T19863] loop3: detected capacity change from 0 to 128 [ 470.546207][ T2037] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 470.556992][T19841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.574020][T19860] loop4: detected capacity change from 0 to 8192 [ 470.581056][T19863] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 470.588972][T19863] FAT-fs (loop3): Filesystem has been set read-only [ 470.614675][T19863] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 470.622691][T19863] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 470.675664][T19867] buffer_io_error: 15406 callbacks suppressed [ 470.675685][T19867] Buffer I/O error on dev loop3, logical block 2065, async page read [ 470.773025][T19867] Buffer I/O error on dev loop3, logical block 2066, async page read [ 470.812642][T19867] Buffer I/O error on dev loop3, logical block 2067, async page read [ 470.821403][T13615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.834354][T19867] Buffer I/O error on dev loop3, logical block 2068, async page read [ 470.938838][T19867] bio_check_eod: 3811 callbacks suppressed [ 470.938859][T19867] syz.3.5301: attempt to access beyond end of device [ 470.938859][T19867] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 470.958107][T19867] Buffer I/O error on dev loop3, logical block 2069, async page read [ 470.975071][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 470.975086][ T29] audit: type=1326 audit(1760607610.386:81844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.005128][ T29] audit: type=1326 audit(1760607610.386:81845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.036824][T19867] syz.3.5301: attempt to access beyond end of device [ 471.036824][T19867] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 471.050133][T19867] Buffer I/O error on dev loop3, logical block 2070, async page read [ 471.058453][ T29] audit: type=1326 audit(1760607610.426:81846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.082250][ T29] audit: type=1326 audit(1760607610.426:81847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.105940][ T29] audit: type=1326 audit(1760607610.426:81848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.129726][T19867] syz.3.5301: attempt to access beyond end of device [ 471.129726][T19867] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 471.143118][T19867] Buffer I/O error on dev loop3, logical block 2071, async page read [ 471.151716][ T29] audit: type=1326 audit(1760607610.526:81849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.175484][ T29] audit: type=1326 audit(1760607610.526:81850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.199104][ T29] audit: type=1326 audit(1760607610.526:81851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 471.222839][ T29] audit: type=1326 audit(1760607610.526:81852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7125a71785 code=0x7ffc0000 [ 471.246685][ T29] audit: type=1326 audit(1760607610.526:81853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7125a71785 code=0x7ffc0000 [ 471.285225][T19867] syz.3.5301: attempt to access beyond end of device [ 471.285225][T19867] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 471.298622][T19867] Buffer I/O error on dev loop3, logical block 2072, async page read [ 471.311889][T19863] syz.3.5301: attempt to access beyond end of device [ 471.311889][T19863] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 471.325255][T19863] Buffer I/O error on dev loop3, logical block 2065, async page read [ 471.371106][T19863] syz.3.5301: attempt to access beyond end of device [ 471.371106][T19863] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 471.384678][T19863] Buffer I/O error on dev loop3, logical block 2066, async page read [ 471.438830][T19863] syz.3.5301: attempt to access beyond end of device [ 471.438830][T19863] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 471.452897][T19863] syz.3.5301: attempt to access beyond end of device [ 471.452897][T19863] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 471.466667][T19863] syz.3.5301: attempt to access beyond end of device [ 471.466667][T19863] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 471.496172][T19887] loop2: detected capacity change from 0 to 128 [ 471.498226][T19887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 471.503687][T19863] syz.3.5301: attempt to access beyond end of device [ 471.503687][T19863] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 471.510666][T19887] FAT-fs (loop2): Filesystem has been set read-only [ 471.510908][T19887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 471.538383][T19887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 471.546604][T19879] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 471.721600][T19897] __nla_validate_parse: 8 callbacks suppressed [ 471.721614][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5313'. [ 471.742322][T19899] loop5: detected capacity change from 0 to 1024 [ 471.759570][T19899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 471.779925][T19899] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.790922][T19899] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.824393][T19899] JBD2: no valid journal superblock found [ 471.830299][T19899] EXT4-fs (loop5): Could not load journal inode [ 471.904875][T19905] loop4: detected capacity change from 0 to 128 [ 472.007905][T19905] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 472.015837][T19905] FAT-fs (loop4): Filesystem has been set read-only [ 472.022602][T19905] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 472.030521][T19905] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 472.777343][T19927] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.145013][T19931] loop3: detected capacity change from 0 to 164 [ 473.457219][T19935] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.550481][T19937] usb usb7: selecting invalid altsetting 7 [ 473.703149][T19948] loop3: detected capacity change from 0 to 128 [ 473.724010][T19948] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 473.731915][T19948] FAT-fs (loop3): Filesystem has been set read-only [ 473.742780][T19929] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 473.756925][T19948] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 473.765091][T19948] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 473.778332][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'. [ 473.909966][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 473.919143][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 473.928268][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 473.952969][T19964] loop0: detected capacity change from 0 to 128 [ 473.975755][T19964] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 473.983616][T19964] FAT-fs (loop0): Filesystem has been set read-only [ 474.035267][T19964] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 474.043163][T19964] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 474.052696][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 474.061878][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 474.070898][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 474.207783][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 474.217097][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5336'. [ 474.567088][T19980] loop3: detected capacity change from 0 to 164 [ 474.611239][T19983] usb usb7: selecting invalid altsetting 7 [ 475.222282][T19991] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.958162][T20013] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.075362][T20014] loop2: detected capacity change from 0 to 512 [ 476.090454][T20009] loop0: detected capacity change from 0 to 8192 [ 476.124100][T20014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.177191][T20014] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5349: corrupted xattr entries [ 476.202050][T20014] EXT4-fs (loop2): Remounting filesystem read-only [ 476.210146][T20014] EXT4-fs (loop2): 1 truncate cleaned up [ 476.216181][T20011] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.360394][T20019] loop2: detected capacity change from 0 to 128 [ 476.373579][T20019] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 476.381489][T20019] FAT-fs (loop2): Filesystem has been set read-only [ 476.416592][T20019] bio_check_eod: 177492 callbacks suppressed [ 476.416608][T20019] syz.2.5351: attempt to access beyond end of device [ 476.416608][T20019] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 476.436365][T20019] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 476.444191][T20019] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 476.452290][T20019] syz.2.5351: attempt to access beyond end of device [ 476.452290][T20019] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 476.490430][T20020] syz.2.5351: attempt to access beyond end of device [ 476.490430][T20020] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 476.503830][T20020] buffer_io_error: 176326 callbacks suppressed [ 476.503844][T20020] Buffer I/O error on dev loop2, logical block 2065, async page read [ 476.518795][T20020] syz.2.5351: attempt to access beyond end of device [ 476.518795][T20020] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 476.532140][T20020] Buffer I/O error on dev loop2, logical block 2066, async page read [ 476.551435][T20020] syz.2.5351: attempt to access beyond end of device [ 476.551435][T20020] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 476.564710][T20020] Buffer I/O error on dev loop2, logical block 2067, async page read [ 476.573178][T20020] syz.2.5351: attempt to access beyond end of device [ 476.573178][T20020] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 476.586555][T20020] Buffer I/O error on dev loop2, logical block 2068, async page read [ 476.594980][T20020] syz.2.5351: attempt to access beyond end of device [ 476.594980][T20020] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 476.608546][T20020] Buffer I/O error on dev loop2, logical block 2069, async page read [ 476.617806][T20020] syz.2.5351: attempt to access beyond end of device [ 476.617806][T20020] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 476.631122][T20020] Buffer I/O error on dev loop2, logical block 2070, async page read [ 476.675311][T20020] syz.2.5351: attempt to access beyond end of device [ 476.675311][T20020] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 476.688643][T20020] Buffer I/O error on dev loop2, logical block 2071, async page read [ 476.715589][T20023] loop3: detected capacity change from 0 to 8192 [ 476.730714][T20020] syz.2.5351: attempt to access beyond end of device [ 476.730714][T20020] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 476.744088][T20020] Buffer I/O error on dev loop2, logical block 2072, async page read [ 476.767162][T20019] Buffer I/O error on dev loop2, logical block 2065, async page read [ 476.822165][T20019] Buffer I/O error on dev loop2, logical block 2066, async page read [ 477.125524][T20030] usb usb7: selecting invalid altsetting 7 [ 477.272367][T20038] loop4: detected capacity change from 0 to 512 [ 477.286524][T20038] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 477.286770][T20038] EXT4-fs (loop4): orphan cleanup on readonly fs [ 477.320670][T20038] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5358: corrupted inode contents [ 477.335055][T20038] EXT4-fs (loop4): Remounting filesystem read-only [ 477.341708][T20038] EXT4-fs (loop4): 1 truncate cleaned up [ 477.349351][ T168] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 477.360053][ T168] __quota_error: 346 callbacks suppressed [ 477.360068][ T168] Quota error (device loop4): write_blk: dquota write failed [ 477.373220][ T168] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 477.383358][ T168] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 477.393938][ T168] Quota error (device loop4): write_blk: dquota write failed [ 477.401355][ T168] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 477.414848][T20044] __nla_validate_parse: 3 callbacks suppressed [ 477.414866][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 477.421110][ T168] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 477.440115][ T168] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 477.449844][ T168] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 477.515555][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5358'. [ 477.524681][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5358'. [ 477.568215][ T29] audit: type=1326 audit(1760607617.016:82200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 477.624248][ T29] audit: type=1326 audit(1760607617.036:82201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 477.647962][ T29] audit: type=1326 audit(1760607617.036:82202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 477.671580][ T29] audit: type=1326 audit(1760607617.036:82203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20055 comm="syz.3.5362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 477.696241][T20061] loop3: detected capacity change from 0 to 164 [ 477.751312][T20067] loop5: detected capacity change from 0 to 164 [ 477.763565][T20063] loop2: detected capacity change from 0 to 164 [ 477.771665][T20069] usb usb7: selecting invalid altsetting 7 [ 477.805591][T20074] loop4: detected capacity change from 0 to 128 [ 477.813976][T20074] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.852444][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 477.962176][T20086] loop5: detected capacity change from 0 to 8192 [ 478.007709][T20098] loop4: detected capacity change from 0 to 128 [ 478.025472][T20098] EXT4-fs mount: 6 callbacks suppressed [ 478.025487][T20098] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.053648][T20098] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.194983][T20102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5378'. [ 478.260521][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.287101][T20109] loop2: detected capacity change from 0 to 512 [ 478.312069][T20109] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 478.335225][T20109] EXT4-fs (loop2): orphan cleanup on readonly fs [ 478.343825][T20109] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5380: corrupted inode contents [ 478.369615][T20114] loop4: detected capacity change from 0 to 164 [ 478.389832][T20109] EXT4-fs (loop2): Remounting filesystem read-only [ 478.404321][T20109] EXT4-fs (loop2): 1 truncate cleaned up [ 478.410134][ T2856] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 478.420701][ T2856] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 478.445142][ T2856] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 478.467392][T20109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.483695][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5382'. [ 478.492798][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5382'. [ 478.501872][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5382'. [ 478.547344][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5382'. [ 478.556445][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5382'. [ 478.629124][T20128] loop3: detected capacity change from 0 to 164 [ 478.698683][T20130] loop4: detected capacity change from 0 to 128 [ 478.731062][T20130] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.775278][T20130] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.859704][T11899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.889780][T20142] loop3: detected capacity change from 0 to 8192 [ 478.897273][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.973771][T20152] loop4: detected capacity change from 0 to 128 [ 479.000629][T20152] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.013112][T20155] usb usb7: selecting invalid altsetting 7 [ 479.027512][T20158] loop2: detected capacity change from 0 to 164 [ 479.035327][T20152] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.113200][T20163] loop2: detected capacity change from 0 to 128 [ 479.148616][T20163] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 479.156488][T20163] FAT-fs (loop2): Filesystem has been set read-only [ 479.188396][T20163] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 479.196321][T20163] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 479.233232][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.270573][T20166] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.460473][T20169] loop4: detected capacity change from 0 to 8192 [ 479.962357][T20176] loop3: detected capacity change from 0 to 512 [ 479.986146][T20176] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 479.994115][T20176] EXT4-fs (loop3): orphan cleanup on readonly fs [ 480.005094][T20178] loop5: detected capacity change from 0 to 128 [ 480.016730][T20176] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5399: corrupted inode contents [ 480.029516][T20178] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.044631][T20178] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.055288][T20176] EXT4-fs (loop3): Remounting filesystem read-only [ 480.062093][T20176] EXT4-fs (loop3): 1 truncate cleaned up [ 480.068083][ T168] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 480.078672][ T168] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 480.101599][ T168] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 480.112508][T20176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.141431][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.164216][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.222697][T20200] loop5: detected capacity change from 0 to 128 [ 480.243513][T20200] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.289559][T20200] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.412832][T20212] loop2: detected capacity change from 0 to 128 [ 480.441354][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.455002][T20212] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 480.463012][T20212] FAT-fs (loop2): Filesystem has been set read-only [ 480.478904][T20214] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.492790][T20212] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 480.500680][T20212] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 480.512539][T20220] loop5: detected capacity change from 0 to 128 [ 480.564578][T20223] loop4: detected capacity change from 0 to 512 [ 480.572446][T20220] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.586275][T20223] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 480.594874][T20220] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.608655][T20223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 480.624272][T20223] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5415: corrupted inode contents [ 480.649988][T20223] EXT4-fs (loop4): Remounting filesystem read-only [ 480.675143][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.690186][T20223] EXT4-fs (loop4): 1 truncate cleaned up [ 480.696157][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 480.706726][ T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 480.728052][ T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 480.745670][T20223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.782402][T20234] loop5: detected capacity change from 0 to 128 [ 480.790807][T20234] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 480.798713][T20234] FAT-fs (loop5): Filesystem has been set read-only [ 480.812104][T12285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.817852][T20234] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 480.828895][T20234] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 481.029903][T20237] loop4: detected capacity change from 0 to 8192 [ 481.394259][T20249] loop3: detected capacity change from 0 to 164 [ 481.425024][T20234] bio_check_eod: 159782 callbacks suppressed [ 481.431067][T20234] syz.5.5416: attempt to access beyond end of device [ 481.431067][T20234] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 481.437771][T20249] syz.3.5423: attempt to access beyond end of device [ 481.437771][T20249] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 481.444468][T20234] syz.5.5416: attempt to access beyond end of device [ 481.444468][T20234] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 481.476753][T20252] loop0: detected capacity change from 0 to 128 [ 481.495968][T20234] syz.5.5416: attempt to access beyond end of device [ 481.495968][T20234] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 481.498778][T20249] syz.3.5423: attempt to access beyond end of device [ 481.498778][T20249] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 481.509259][T20234] buffer_io_error: 158968 callbacks suppressed [ 481.509273][T20234] Buffer I/O error on dev loop5, logical block 2067, async page read [ 481.537519][T20252] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 481.545269][T20234] syz.5.5416: attempt to access beyond end of device [ 481.545269][T20234] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 481.562755][T20234] Buffer I/O error on dev loop5, logical block 2068, async page read [ 481.571872][T20252] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.615900][T20234] syz.5.5416: attempt to access beyond end of device [ 481.615900][T20234] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 481.629158][T20234] Buffer I/O error on dev loop5, logical block 2069, async page read [ 481.651790][T20234] syz.5.5416: attempt to access beyond end of device [ 481.651790][T20234] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 481.665279][T20234] Buffer I/O error on dev loop5, logical block 2070, async page read [ 481.681824][T20234] syz.5.5416: attempt to access beyond end of device [ 481.681824][T20234] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 481.695080][T20234] Buffer I/O error on dev loop5, logical block 2071, async page read [ 481.704532][T20234] syz.5.5416: attempt to access beyond end of device [ 481.704532][T20234] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 481.717805][T20234] Buffer I/O error on dev loop5, logical block 2072, async page read [ 481.728824][T20264] loop2: detected capacity change from 0 to 512 [ 481.764209][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.785850][T20264] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 481.793945][T20264] EXT4-fs (loop2): orphan cleanup on readonly fs [ 481.825179][T20264] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5427: corrupted inode contents [ 481.839218][T20264] EXT4-fs (loop2): Remounting filesystem read-only [ 481.855538][T20264] EXT4-fs (loop2): 1 truncate cleaned up [ 481.861299][ T2856] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 481.871944][ T2856] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 481.920708][ T2856] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 481.933726][T20281] loop0: detected capacity change from 0 to 128 [ 481.951354][T20264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 481.972818][T20281] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 481.980705][T20281] FAT-fs (loop0): Filesystem has been set read-only [ 482.000900][T20281] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 482.008826][T20281] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 482.011228][T20291] loop5: detected capacity change from 0 to 164 [ 482.023463][T11899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.051026][T20293] loop4: detected capacity change from 0 to 164 [ 482.076723][T20281] Buffer I/O error on dev loop0, logical block 2065, async page read [ 482.085126][T20281] Buffer I/O error on dev loop0, logical block 2066, async page read [ 482.093262][T20281] Buffer I/O error on dev loop0, logical block 2067, async page read [ 482.101441][T20281] Buffer I/O error on dev loop0, logical block 2068, async page read [ 482.176519][T20304] loop2: detected capacity change from 0 to 128 [ 482.194973][T20307] loop5: detected capacity change from 0 to 128 [ 482.206574][T20307] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 482.214432][T20307] FAT-fs (loop5): Filesystem has been set read-only [ 482.226562][T20308] loop4: detected capacity change from 0 to 8192 [ 482.233997][T20307] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 482.241989][T20307] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 482.255451][T20304] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.365261][ T29] kauditd_printk_skb: 1315 callbacks suppressed [ 482.365278][ T29] audit: type=1326 audit(1760607621.726:83495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.395210][ T29] audit: type=1326 audit(1760607621.726:83496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.418935][ T29] audit: type=1326 audit(1760607621.726:83497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.442509][ T29] audit: type=1326 audit(1760607621.726:83498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.466160][ T29] audit: type=1326 audit(1760607621.726:83499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.482187][T20304] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.489844][ T29] audit: type=1326 audit(1760607621.726:83500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.523949][ T29] audit: type=1326 audit(1760607621.726:83501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.547646][ T29] audit: type=1326 audit(1760607621.736:83502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.571243][ T29] audit: type=1326 audit(1760607621.736:83503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.594914][ T29] audit: type=1326 audit(1760607621.736:83504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.0.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bd2c1785 code=0x7ffc0000 [ 482.625565][T20315] __nla_validate_parse: 33 callbacks suppressed [ 482.625582][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5440'. [ 482.699837][T11899] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.745101][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 482.920856][T20325] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.939713][T20327] loop2: detected capacity change from 0 to 512 [ 482.957588][T20327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 482.971295][T20327] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5447: corrupted xattr entries [ 482.983816][T20327] EXT4-fs (loop2): Remounting filesystem read-only [ 482.997069][T20327] EXT4-fs (loop2): 1 truncate cleaned up [ 483.010818][T20327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.063506][T20327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.085382][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.094433][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.103435][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.132386][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.141456][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.141895][T20335] loop5: detected capacity change from 0 to 164 [ 483.150429][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.164496][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5450'. [ 483.221612][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5448'. [ 483.234067][T20346] loop2: detected capacity change from 0 to 128 [ 483.244204][T20346] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 483.252194][T20346] FAT-fs (loop2): Filesystem has been set read-only [ 483.259182][T20346] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 483.267115][T20346] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 483.382731][T20350] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.767510][T20363] loop0: detected capacity change from 0 to 8192 [ 484.114340][T20367] loop2: detected capacity change from 0 to 512 [ 484.126337][T20367] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 484.191530][T20367] EXT4-fs (loop2): orphan cleanup on readonly fs [ 484.234626][T20367] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5460: corrupted inode contents [ 484.327778][T20377] loop5: detected capacity change from 0 to 164 [ 484.357909][T20367] EXT4-fs (loop2): Remounting filesystem read-only [ 484.392979][T20367] EXT4-fs (loop2): 1 truncate cleaned up [ 484.398821][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 484.409497][ T37] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 484.420358][ T37] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 484.431433][T20367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.455563][T20378] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.744146][T20407] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.792656][T20411] loop3: detected capacity change from 0 to 512 [ 484.800127][T11899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.809634][T20411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.855241][T20411] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5473: corrupted xattr entries [ 484.885355][T20411] EXT4-fs (loop3): Remounting filesystem read-only [ 484.902047][T20411] EXT4-fs (loop3): 1 truncate cleaned up [ 484.910845][T20418] loop0: detected capacity change from 0 to 8192 [ 484.925524][T20411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.030035][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.055177][T20422] loop2: detected capacity change from 0 to 1024 [ 485.072509][T20422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 485.094119][T20422] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 485.105218][T20422] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 485.142793][T20422] JBD2: no valid journal superblock found [ 485.148643][T20422] EXT4-fs (loop2): Could not load journal inode [ 485.345547][T20433] usb usb7: selecting invalid altsetting 7 [ 485.759645][T20459] loop5: detected capacity change from 0 to 164 [ 485.844987][T20468] loop5: detected capacity change from 0 to 1024 [ 485.883416][T20468] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 485.917410][T20468] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 485.928343][T20468] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 485.982666][T20468] JBD2: no valid journal superblock found [ 485.988728][T20468] EXT4-fs (loop5): Could not load journal inode [ 486.189291][T20476] loop0: detected capacity change from 0 to 512 [ 486.413064][T20476] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 486.457677][T20476] EXT4-fs (loop0): orphan cleanup on readonly fs [ 486.515523][T20476] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5497: corrupted inode contents [ 486.604196][T20476] EXT4-fs (loop0): Remounting filesystem read-only [ 486.693422][T20476] EXT4-fs (loop0): 1 truncate cleaned up [ 486.718491][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 486.729086][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 486.791507][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 486.827459][T20476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.947134][T20504] loop2: detected capacity change from 0 to 128 [ 486.972146][T20504] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 487.004387][T20495] loop3: detected capacity change from 0 to 8192 [ 487.119271][T20504] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.471394][T11899] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.826415][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 487.826493][ T29] audit: type=1326 audit(1760607627.276:84056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 487.915392][T12991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.924391][ T29] audit: type=1326 audit(1760607627.296:84057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 487.948006][ T29] audit: type=1326 audit(1760607627.296:84058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 487.971950][ T29] audit: type=1326 audit(1760607627.296:84059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 487.995564][ T29] audit: type=1326 audit(1760607627.296:84060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.019162][ T29] audit: type=1326 audit(1760607627.306:84061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.042880][ T29] audit: type=1326 audit(1760607627.306:84062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.063472][T20526] loop3: detected capacity change from 0 to 512 [ 488.066753][ T29] audit: type=1326 audit(1760607627.306:84063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.096537][ T29] audit: type=1326 audit(1760607627.306:84064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.120103][ T29] audit: type=1326 audit(1760607627.306:84065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20515 comm="syz.2.5509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b16beec9 code=0x7ffc0000 [ 488.154521][T20526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 488.189032][T20525] ip6_vti0 speed is unknown, defaulting to 1000 [ 488.215256][T20526] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5512: corrupted xattr entries [ 488.237488][T20526] EXT4-fs (loop3): Remounting filesystem read-only [ 488.244084][T20526] EXT4-fs (loop3): 1 truncate cleaned up [ 488.260354][T20526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.315867][T20531] usb usb7: selecting invalid altsetting 7 [ 488.357837][T20533] loop0: detected capacity change from 0 to 1024 [ 488.369091][T20533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.389221][T20533] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 488.400181][T20533] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 488.469713][T20533] JBD2: no valid journal superblock found [ 488.475486][T20533] EXT4-fs (loop0): Could not load journal inode [ 488.634081][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.727485][T20542] loop3: detected capacity change from 0 to 164 [ 488.748780][T20542] bio_check_eod: 105382 callbacks suppressed [ 488.748799][T20542] syz.3.5519: attempt to access beyond end of device [ 488.748799][T20542] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 488.789205][T20542] syz.3.5519: attempt to access beyond end of device [ 488.789205][T20542] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 489.059148][T20552] loop4: detected capacity change from 0 to 512 [ 489.068528][T20555] loop3: detected capacity change from 0 to 128 [ 489.122622][T20555] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.175255][T20555] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.238117][T20552] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 489.264008][T20552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 489.319884][T20511] syz.5.5508 (20511) used greatest stack depth: 6184 bytes left [ 489.442566][T20567] loop2: detected capacity change from 0 to 128 [ 489.454512][T20570] __nla_validate_parse: 28 callbacks suppressed [ 489.454525][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5527'. [ 489.615613][T13160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.655164][T20552] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5523: corrupted inode contents [ 489.661081][T20567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.706695][T20567] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.717798][T20552] EXT4-fs (loop4): Remounting filesystem read-only [ 489.724621][T20552] EXT4-fs (loop4): 1 truncate cleaned up [ 489.730636][ T361] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 489.741292][ T361] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 489.816579][ T361] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 489.850184][T20552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.877100][T20578] loop5: detected capacity change from 0 to 8192 [ 489.887337][T11899] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.014372][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5523'. [ 490.023399][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5523'. [ 490.348505][T20603] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.816551][T12285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.824936][T20611] ip6_vti0 speed is unknown, defaulting to 1000 [ 490.878472][T20613] loop3: detected capacity change from 0 to 512 [ 490.917085][T20612] loop5: detected capacity change from 0 to 8192 [ 490.917866][T20613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.947842][T20615] loop4: detected capacity change from 0 to 512 [ 491.016980][T20615] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 491.034186][T20615] EXT4-fs (loop4): orphan cleanup on readonly fs [ 491.059697][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5541'. [ 491.071622][T20615] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5540: corrupted inode contents [ 491.105327][T20613] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5539: corrupted xattr entries [ 491.115252][T20615] EXT4-fs (loop4): Remounting filesystem read-only [ 491.123467][T20615] EXT4-fs (loop4): 1 truncate cleaned up [ 491.129249][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.139778][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.150539][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 491.176831][T20628] loop2: detected capacity change from 0 to 164 [ 491.184808][T20628] syz.2.5542: attempt to access beyond end of device [ 491.184808][T20628] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 491.198487][T20613] EXT4-fs (loop3): Remounting filesystem read-only [ 491.199183][T20628] syz.2.5542: attempt to access beyond end of device [ 491.199183][T20628] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 491.222237][T20615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.244311][T20613] EXT4-fs (loop3): 1 truncate cleaned up [ 491.282755][T20613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.339090][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5540'. [ 491.348113][T20633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 491.469167][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5546'. [ 491.566425][T12285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.640563][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.739687][T20648] loop3: detected capacity change from 0 to 512 [ 491.748696][T20646] loop4: detected capacity change from 0 to 8192 [ 491.756645][T20648] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 491.772411][T20653] loop5: detected capacity change from 0 to 128 [ 491.773524][T20648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 491.788769][T20648] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5550: corrupted inode contents [ 491.800907][T20648] EXT4-fs (loop3): Remounting filesystem read-only [ 491.807700][T20648] EXT4-fs (loop3): 1 truncate cleaned up [ 491.817155][ T2037] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.827723][ T2037] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 491.839519][T20653] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.904865][T20653] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.928499][ T2037] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 491.986397][T20648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.000686][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.048399][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 492.057353][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5550'. [ 492.114767][T20664] loop0: detected capacity change from 0 to 164 [ 492.114825][T20662] loop5: detected capacity change from 0 to 128 [ 492.128433][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.142832][T20664] syz.0.5553: attempt to access beyond end of device [ 492.142832][T20664] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 492.157238][T20664] syz.0.5553: attempt to access beyond end of device [ 492.157238][T20664] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 492.189771][T20662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 492.197795][T20662] FAT-fs (loop5): Filesystem has been set read-only [ 492.220306][T20662] syz.5.5551: attempt to access beyond end of device [ 492.220306][T20662] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 492.257386][T20662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 492.265352][T20662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 492.276247][T20670] syz.5.5551: attempt to access beyond end of device [ 492.276247][T20670] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 492.289711][T20670] buffer_io_error: 98452 callbacks suppressed [ 492.289725][T20670] Buffer I/O error on dev loop5, logical block 2065, async page read [ 492.343145][T20670] syz.5.5551: attempt to access beyond end of device [ 492.343145][T20670] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 492.356544][T20670] Buffer I/O error on dev loop5, logical block 2066, async page read [ 492.415613][T20670] syz.5.5551: attempt to access beyond end of device [ 492.415613][T20670] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 492.429016][T20670] Buffer I/O error on dev loop5, logical block 2067, async page read [ 492.452562][T20670] Buffer I/O error on dev loop5, logical block 2068, async page read [ 492.461801][T20678] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.471822][T20670] Buffer I/O error on dev loop5, logical block 2069, async page read [ 492.475540][T20679] usb usb7: usbfs: process 20679 (syz.2.5559) did not claim interface 0 before use [ 492.495368][T20670] Buffer I/O error on dev loop5, logical block 2070, async page read [ 492.516699][T20679] usb usb7: selecting invalid altsetting 7 [ 492.518928][T20682] loop0: detected capacity change from 0 to 128 [ 492.534852][T20680] loop3: detected capacity change from 0 to 512 [ 492.541821][T20670] Buffer I/O error on dev loop5, logical block 2071, async page read [ 492.551967][T20680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 492.554617][T20682] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 492.569791][T20682] FAT-fs (loop0): Filesystem has been set read-only [ 492.580778][T20682] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 492.588770][T20682] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 492.605087][T20670] Buffer I/O error on dev loop5, logical block 2072, async page read [ 492.635104][T20662] Buffer I/O error on dev loop5, logical block 2065, async page read [ 492.638007][T20684] loop2: detected capacity change from 0 to 1024 [ 492.660178][T20686] Buffer I/O error on dev loop0, logical block 2065, async page read [ 492.668518][T20684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 492.680796][T20680] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5558: corrupted xattr entries [ 492.692367][T20684] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 492.703260][T20684] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 492.722356][T20684] JBD2: no valid journal superblock found [ 492.728308][T20684] EXT4-fs (loop2): Could not load journal inode [ 492.735143][T20680] EXT4-fs (loop3): Remounting filesystem read-only [ 492.741740][T20680] EXT4-fs (loop3): 1 truncate cleaned up [ 492.875649][T20680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.914854][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 492.914871][ T29] audit: type=1326 audit(1760607632.356:84426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.006730][ T29] audit: type=1326 audit(1760607632.356:84427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.030493][ T29] audit: type=1326 audit(1760607632.356:84428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.054113][ T29] audit: type=1326 audit(1760607632.356:84429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.081123][ T29] audit: type=1326 audit(1760607632.356:84430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.105583][ T29] audit: type=1326 audit(1760607632.356:84431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.129228][ T29] audit: type=1326 audit(1760607632.356:84432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.152829][ T29] audit: type=1326 audit(1760607632.356:84433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.176406][ T29] audit: type=1326 audit(1760607632.356:84434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.199950][ T29] audit: type=1326 audit(1760607632.356:84435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20687 comm="syz.4.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 493.335637][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.360679][T20696] loop2: detected capacity change from 0 to 512 [ 493.384645][T20699] loop5: detected capacity change from 0 to 164 [ 493.397867][T20696] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 493.411341][T20696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 493.455072][T20696] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.5564: corrupted inode contents [ 493.481419][T20696] EXT4-fs (loop2): Remounting filesystem read-only [ 493.488201][T20696] EXT4-fs (loop2): 1 truncate cleaned up [ 493.495139][ T361] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 493.506113][ T361] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 493.546056][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5565'. [ 493.605093][ T361] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 493.637073][T20696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.702782][T20719] loop3: detected capacity change from 0 to 128 [ 493.716035][T11899] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.743234][T20719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 493.751159][T20719] FAT-fs (loop3): Filesystem has been set read-only [ 493.778214][T20719] bio_check_eod: 58871 callbacks suppressed [ 493.778231][T20719] syz.3.5570: attempt to access beyond end of device [ 493.778231][T20719] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 493.819481][T20719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 493.827458][T20719] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 493.855233][T20719] syz.3.5570: attempt to access beyond end of device [ 493.855233][T20719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 493.872611][T20730] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.878818][T20719] syz.3.5570: attempt to access beyond end of device [ 493.878818][T20719] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 493.894351][T20731] syz.3.5570: attempt to access beyond end of device [ 493.894351][T20731] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 493.928647][T20734] loop5: detected capacity change from 0 to 512 [ 493.995766][T20734] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 494.015132][T20731] syz.3.5570: attempt to access beyond end of device [ 494.015132][T20731] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 494.039893][T20736] loop2: detected capacity change from 0 to 128 [ 494.057264][T20736] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.095353][T20731] syz.3.5570: attempt to access beyond end of device [ 494.095353][T20731] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 494.145110][T20736] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.155991][T20731] syz.3.5570: attempt to access beyond end of device [ 494.155991][T20731] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 494.175616][T20734] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.5575: corrupted xattr entries [ 494.205105][T20731] syz.3.5570: attempt to access beyond end of device [ 494.205105][T20731] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 494.222454][T20734] EXT4-fs (loop5): Remounting filesystem read-only [ 494.243397][T20734] EXT4-fs (loop5): 1 truncate cleaned up [ 494.264137][T11899] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.286000][T20731] syz.3.5570: attempt to access beyond end of device [ 494.286000][T20731] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 494.294675][T20734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.321465][T20731] syz.3.5570: attempt to access beyond end of device [ 494.321465][T20731] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 494.513541][T20747] loop2: detected capacity change from 0 to 8192 [ 494.566038][T13615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.656422][T20756] __nla_validate_parse: 4 callbacks suppressed [ 494.656437][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5581'. [ 494.703768][T20757] loop3: detected capacity change from 0 to 512 [ 494.811413][T20757] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 494.877001][T20757] EXT4-fs (loop3): orphan cleanup on readonly fs [ 495.052906][T20757] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5583: corrupted inode contents [ 495.105616][T20757] EXT4-fs (loop3): Remounting filesystem read-only [ 495.152996][T20757] EXT4-fs (loop3): 1 truncate cleaned up [ 495.159896][ T361] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 495.170541][ T361] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 495.234732][ T361] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 495.295556][T20757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.365181][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5583'. [ 495.374233][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5583'. [ 495.395170][T20784] loop5: detected capacity change from 0 to 128 [ 495.644543][T20784] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.713517][T20789] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.720487][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.795229][T20784] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.014358][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5591'. [ 496.100918][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.123553][T20801] loop3: detected capacity change from 0 to 512 [ 496.165055][T20801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 496.256916][T20797] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.305434][T20801] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.5592: corrupted xattr entries [ 496.397366][T20801] EXT4-fs (loop3): Remounting filesystem read-only [ 496.452519][T20801] EXT4-fs (loop3): 1 truncate cleaned up [ 496.491703][T20801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.572496][T20798] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.707678][T13160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.743291][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5595'. [ 496.890509][T20798] chnl_net:caif_netlink_parms(): no params data found [ 496.908922][T20821] loop3: detected capacity change from 0 to 164 [ 496.965817][T20824] loop3: detected capacity change from 0 to 128 [ 496.998887][T20824] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.012638][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.019810][T20798] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.027092][T20798] bridge_slave_0: entered allmulticast mode [ 497.034951][T20798] bridge_slave_0: entered promiscuous mode [ 497.047258][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.054387][T20798] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.064496][T20798] bridge_slave_1: entered allmulticast mode [ 497.078810][T20798] bridge_slave_1: entered promiscuous mode [ 497.140399][T20798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.146892][T20838] usb usb7: selecting invalid altsetting 7 [ 497.162667][T20798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.178208][T20845] loop3: detected capacity change from 0 to 128 [ 497.192014][T20798] team0: Port device team_slave_0 added [ 497.198787][T20798] team0: Port device team_slave_1 added [ 497.210076][T20845] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.241950][T20798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.246125][T20848] loop5: detected capacity change from 0 to 1024 [ 497.249145][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.281581][T20798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.295405][T20848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 497.305995][T20798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.312951][T20798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.339028][T20798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.352189][T20848] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 497.363158][T20848] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 497.397544][T20798] hsr_slave_0: entered promiscuous mode [ 497.403631][T20798] hsr_slave_1: entered promiscuous mode [ 497.409699][T20798] debugfs: 'hsr0' already exists in 'hsr' [ 497.415523][T20798] Cannot create hsr debugfs directory [ 497.421457][T20848] JBD2: no valid journal superblock found [ 497.427281][T20848] EXT4-fs (loop5): Could not load journal inode [ 497.579719][T20798] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.609041][T20864] loop3: detected capacity change from 0 to 128 [ 497.620749][T20864] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.656593][T20798] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.707762][T20798] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.896021][T20798] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.943359][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 497.943457][ T29] audit: type=1326 audit(1760607637.386:84843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 497.999955][ T29] audit: type=1326 audit(1760607637.386:84844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.015133][T20798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 498.023623][ T29] audit: type=1326 audit(1760607637.386:84845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.053807][ T29] audit: type=1326 audit(1760607637.426:84846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.077434][ T29] audit: type=1326 audit(1760607637.426:84847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.101078][ T29] audit: type=1326 audit(1760607637.426:84848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.124817][ T29] audit: type=1326 audit(1760607637.426:84849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.148590][ T29] audit: type=1326 audit(1760607637.426:84850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.172232][ T29] audit: type=1326 audit(1760607637.436:84851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.195758][ T29] audit: type=1326 audit(1760607637.436:84852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20880 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 498.231530][T20798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 498.250345][T20798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 498.269502][T20798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 498.379826][T20798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.404093][T20798] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.421861][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.429061][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.454682][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.461838][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.485190][T20798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.558226][T20798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.703346][T20798] veth0_vlan: entered promiscuous mode [ 498.717765][T20798] veth1_vlan: entered promiscuous mode [ 498.761613][T20798] veth0_macvtap: entered promiscuous mode [ 498.772972][T20798] veth1_macvtap: entered promiscuous mode [ 498.805848][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 498.814907][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 498.823898][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 498.837484][T20798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.860355][T20798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.889631][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.912268][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.940502][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.975495][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.986387][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 498.995457][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5624'. [ 499.147227][T20929] loop5: detected capacity change from 0 to 164 [ 499.154710][T20930] loop2: detected capacity change from 0 to 164 [ 499.197366][T20929] bio_check_eod: 3443 callbacks suppressed [ 499.197388][T20929] syz.5.5626: attempt to access beyond end of device [ 499.197388][T20929] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 499.226124][T20929] syz.5.5626: attempt to access beyond end of device [ 499.226124][T20929] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 499.384927][T20933] loop5: detected capacity change from 0 to 8192 [ 499.526763][T20938] loop3: detected capacity change from 0 to 128 [ 499.550137][T20938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 499.558044][T20938] FAT-fs (loop3): Filesystem has been set read-only [ 499.584288][T20938] syz.3.5631: attempt to access beyond end of device [ 499.584288][T20938] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 499.620456][T20938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 499.628426][T20938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 499.657250][T20945] syz.3.5631: attempt to access beyond end of device [ 499.657250][T20945] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 499.670865][T20945] buffer_io_error: 61422 callbacks suppressed [ 499.670879][T20945] Buffer I/O error on dev loop3, logical block 2065, async page read [ 499.795295][T20945] syz.3.5631: attempt to access beyond end of device [ 499.795295][T20945] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 499.808803][T20945] Buffer I/O error on dev loop3, logical block 2066, async page read [ 499.869004][T20947] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.035546][T20945] syz.3.5631: attempt to access beyond end of device [ 500.035546][T20945] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 500.048933][T20945] Buffer I/O error on dev loop3, logical block 2067, async page read [ 500.243503][T20945] syz.3.5631: attempt to access beyond end of device [ 500.243503][T20945] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 500.256887][T20945] Buffer I/O error on dev loop3, logical block 2068, async page read [ 500.392690][T20945] syz.3.5631: attempt to access beyond end of device [ 500.392690][T20945] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 500.406067][T20945] Buffer I/O error on dev loop3, logical block 2069, async page read [ 500.414251][T20945] syz.3.5631: attempt to access beyond end of device [ 500.414251][T20945] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 500.427534][T20945] Buffer I/O error on dev loop3, logical block 2070, async page read [ 500.435817][T20945] syz.3.5631: attempt to access beyond end of device [ 500.435817][T20945] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 500.440813][T20950] loop4: detected capacity change from 0 to 8192 [ 500.449060][T20945] Buffer I/O error on dev loop3, logical block 2071, async page read [ 500.449090][T20945] Buffer I/O error on dev loop3, logical block 2072, async page read [ 500.449147][T20945] Buffer I/O error on dev loop3, logical block 2065, async page read [ 500.527616][T20945] Buffer I/O error on dev loop3, logical block 2066, async page read [ 500.637402][T20955] loop0: detected capacity change from 0 to 1024 [ 500.664569][T20955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 500.689125][T20955] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 500.700053][T20955] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 500.731392][T20952] loop2: detected capacity change from 0 to 8192 [ 500.749592][T20955] JBD2: no valid journal superblock found [ 500.755401][T20955] EXT4-fs (loop0): Could not load journal inode [ 500.846233][T20960] __nla_validate_parse: 4 callbacks suppressed [ 500.846297][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 500.861648][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 500.870663][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 500.935725][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 500.944714][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 500.953703][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 501.065135][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 501.074132][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 501.083111][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5638'. [ 501.110028][T20966] loop0: detected capacity change from 0 to 164 [ 501.269363][T20978] loop4: detected capacity change from 0 to 128 [ 501.290383][T20978] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 501.298548][T20978] FAT-fs (loop4): Filesystem has been set read-only [ 501.325635][T20978] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 501.333491][T20978] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 501.369482][T20983] loop3: detected capacity change from 0 to 128 [ 501.380410][T20983] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.620629][T21003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5652'. [ 501.806745][T21011] loop3: detected capacity change from 0 to 512 [ 501.848781][T21011] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 501.866513][T21011] EXT4-fs (loop3): orphan cleanup on readonly fs [ 501.883718][T21011] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.5654: corrupted inode contents [ 501.907164][T21011] EXT4-fs (loop3): Remounting filesystem read-only [ 501.914021][T21011] EXT4-fs (loop3): 1 truncate cleaned up [ 501.922098][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 501.932695][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 501.964072][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 502.219173][T21019] loop5: detected capacity change from 0 to 8192 [ 502.258978][T21031] loop0: detected capacity change from 0 to 164 [ 502.298441][T21024] loop3: detected capacity change from 0 to 8192 [ 502.727196][T21043] usb usb7: selecting invalid altsetting 7 [ 502.840282][T21047] loop0: detected capacity change from 0 to 1024 [ 502.862333][T21047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 502.895479][T21047] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 502.906400][T21047] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 502.952218][T21047] JBD2: no valid journal superblock found [ 502.957985][T21047] EXT4-fs (loop0): Could not load journal inode [ 503.054512][ T29] kauditd_printk_skb: 945 callbacks suppressed [ 503.054531][ T29] audit: type=1326 audit(1760607642.496:85792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.100137][ T29] audit: type=1326 audit(1760607642.496:85793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.123835][ T29] audit: type=1326 audit(1760607642.506:85794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.126020][T21051] loop5: detected capacity change from 0 to 128 [ 503.147561][ T29] audit: type=1326 audit(1760607642.506:85795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.177343][ T29] audit: type=1326 audit(1760607642.506:85796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.186259][T21054] loop4: detected capacity change from 0 to 128 [ 503.200958][ T29] audit: type=1326 audit(1760607642.506:85797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.230828][ T29] audit: type=1326 audit(1760607642.506:85798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.254429][ T29] audit: type=1326 audit(1760607642.506:85799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.278033][ T29] audit: type=1326 audit(1760607642.506:85800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.301635][ T29] audit: type=1326 audit(1760607642.506:85801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21050 comm="syz.5.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8481dbeec9 code=0x7ffc0000 [ 503.329652][T21051] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 503.337592][T21051] FAT-fs (loop5): Filesystem has been set read-only [ 503.347256][T21054] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.361017][T21051] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 503.368942][T21051] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 503.443497][T21068] loop4: detected capacity change from 0 to 128 [ 503.526534][T21068] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.660270][T21075] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.077389][T21078] loop0: detected capacity change from 0 to 128 [ 504.202173][T21081] loop5: detected capacity change from 0 to 128 [ 504.222140][T21078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 504.230044][T21078] FAT-fs (loop0): Filesystem has been set read-only [ 504.308864][T21081] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 504.316917][T21081] FAT-fs (loop5): Filesystem has been set read-only [ 504.326859][T21078] bio_check_eod: 60986 callbacks suppressed [ 504.326876][T21078] syz.0.5677: attempt to access beyond end of device [ 504.326876][T21078] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 504.338811][T21081] syz.5.5678: attempt to access beyond end of device [ 504.338811][T21081] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 504.349613][T21078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 504.368134][T21078] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 504.389134][T21078] syz.0.5677: attempt to access beyond end of device [ 504.389134][T21078] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 504.396166][T21081] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 504.410285][T21081] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 504.415262][T21078] syz.0.5677: attempt to access beyond end of device [ 504.415262][T21078] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 504.434154][T21079] loop4: detected capacity change from 0 to 512 [ 504.442617][T21081] syz.5.5678: attempt to access beyond end of device [ 504.442617][T21081] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 504.484527][T21085] loop3: detected capacity change from 0 to 8192 [ 504.485435][T21081] syz.5.5678: attempt to access beyond end of device [ 504.485435][T21081] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 504.504641][T21086] syz.5.5678: attempt to access beyond end of device [ 504.504641][T21086] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 504.505705][T21079] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.523131][T21086] syz.5.5678: attempt to access beyond end of device [ 504.523131][T21086] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 504.564557][T21086] syz.5.5678: attempt to access beyond end of device [ 504.564557][T21086] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 504.565526][T21078] syz.0.5677: attempt to access beyond end of device [ 504.565526][T21078] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 504.686330][T21087] buffer_io_error: 59198 callbacks suppressed [ 504.686350][T21087] Buffer I/O error on dev loop0, logical block 2065, async page read [ 504.701667][T21081] Buffer I/O error on dev loop5, logical block 2065, async page read [ 504.765103][T21081] Buffer I/O error on dev loop5, logical block 2066, async page read [ 504.773323][T21081] Buffer I/O error on dev loop5, logical block 2067, async page read [ 504.781659][T21087] Buffer I/O error on dev loop0, logical block 2066, async page read [ 504.813610][T21081] Buffer I/O error on dev loop5, logical block 2068, async page read [ 504.846703][T21087] Buffer I/O error on dev loop0, logical block 2067, async page read [ 504.875086][T21081] Buffer I/O error on dev loop5, logical block 2069, async page read [ 504.922460][T21081] Buffer I/O error on dev loop5, logical block 2070, async page read [ 504.939268][T21087] Buffer I/O error on dev loop0, logical block 2068, async page read [ 504.971612][T21094] loop2: detected capacity change from 0 to 128 [ 505.060046][T21094] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.072969][T21094] veth0_macvtap: left promiscuous mode [ 505.194823][T21107] loop5: detected capacity change from 0 to 164 [ 505.266996][T21112] loop5: detected capacity change from 0 to 1024 [ 505.296072][T21109] loop2: detected capacity change from 0 to 128 [ 505.315085][T21112] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 505.354723][T21103] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.448815][T21112] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 505.459763][T21112] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 505.489823][T21109] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 505.497691][T21109] FAT-fs (loop2): Filesystem has been set read-only [ 505.504506][T21109] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 505.512499][T21109] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 505.522492][T21112] JBD2: no valid journal superblock found [ 505.528349][T21112] EXT4-fs (loop5): Could not load journal inode [ 505.574127][T21119] loop3: detected capacity change from 0 to 164 [ 505.721088][T21123] loop3: detected capacity change from 0 to 128 [ 505.766635][T21123] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.886484][T21134] loop5: detected capacity change from 0 to 128 [ 505.900259][T21130] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 505.908154][T21130] FAT-fs (loop5): Filesystem has been set read-only [ 505.908297][T21126] loop4: detected capacity change from 0 to 128 [ 505.914946][T21130] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 505.928961][T21130] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 505.946419][T21126] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.991061][T21137] loop3: detected capacity change from 0 to 128 [ 506.088146][T21131] __nla_validate_parse: 13 callbacks suppressed [ 506.088165][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 506.249347][T21137] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.352378][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5695'. [ 506.421351][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.430407][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.439447][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.529571][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 506.542720][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.551747][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.560726][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.569292][T21167] loop0: detected capacity change from 0 to 512 [ 506.602645][T21167] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 506.611986][T21167] EXT4-fs (loop0): orphan cleanup on readonly fs [ 506.653147][T21167] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.5703: corrupted inode contents [ 506.671653][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5700'. [ 506.691432][T21167] EXT4-fs (loop0): Remounting filesystem read-only [ 506.707590][T21176] loop3: detected capacity change from 0 to 1024 [ 506.709141][T21167] EXT4-fs (loop0): 1 truncate cleaned up [ 506.714551][T21176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 506.720119][ T168] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 506.740073][ T168] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 506.750886][ T168] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 506.769983][T21176] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 506.780930][T21176] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 506.798991][T21176] JBD2: no valid journal superblock found [ 506.804747][T21176] EXT4-fs (loop3): Could not load journal inode [ 506.930462][T21181] loop2: detected capacity change from 0 to 128 [ 506.952426][T21181] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.040153][T21187] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.491390][T21202] loop0: detected capacity change from 0 to 128 [ 507.504333][T21202] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.621270][T21212] usb usb7: selecting invalid altsetting 7 [ 507.738380][T21218] loop4: detected capacity change from 0 to 128 [ 507.767072][T21218] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 507.774974][T21218] FAT-fs (loop4): Filesystem has been set read-only [ 507.805171][T21218] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 507.820460][T21229] loop2: detected capacity change from 0 to 164 [ 507.857721][T21234] loop5: detected capacity change from 0 to 128 [ 507.877300][T21234] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.947894][T21247] usb usb7: selecting invalid altsetting 7 [ 507.988331][T21254] loop3: detected capacity change from 0 to 128 [ 508.002242][T21256] loop2: detected capacity change from 0 to 1024 [ 508.009901][T21256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 508.025981][T21256] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 508.036901][T21256] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 508.047463][T21254] EXT4-fs mount: 32 callbacks suppressed [ 508.047486][T21254] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 508.196113][T21256] JBD2: no valid journal superblock found [ 508.201915][T21256] EXT4-fs (loop2): Could not load journal inode [ 508.225275][T21254] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.280249][T13160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 508.435239][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 508.435270][ T29] audit: type=1326 audit(1760607647.856:86465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.465142][ T29] audit: type=1326 audit(1760607647.856:86466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.488850][ T29] audit: type=1326 audit(1760607647.856:86467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.512477][ T29] audit: type=1326 audit(1760607647.856:86468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.536144][ T29] audit: type=1326 audit(1760607647.856:86469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.559730][ T29] audit: type=1326 audit(1760607647.856:86470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.583377][ T29] audit: type=1326 audit(1760607647.856:86471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.606983][ T29] audit: type=1326 audit(1760607647.856:86472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.630565][ T29] audit: type=1326 audit(1760607647.856:86473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.654052][ T29] audit: type=1326 audit(1760607647.856:86474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21270 comm="syz.4.5739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc660eec9 code=0x7ffc0000 [ 508.756776][T21280] loop4: detected capacity change from 0 to 128 [ 508.770281][T21284] usb usb7: selecting invalid altsetting 7 [ 508.800227][T21280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 508.808170][T21280] FAT-fs (loop4): Filesystem has been set read-only [ 508.814965][T21280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 508.823351][T21280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 508.894783][T21286] loop2: detected capacity change from 0 to 128 [ 508.916842][T21286] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 508.948487][T21286] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.048007][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.068161][T21295] loop5: detected capacity change from 0 to 128 [ 509.086896][T21300] loop3: detected capacity change from 0 to 164 [ 509.122347][T21295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 509.130224][T21295] FAT-fs (loop5): Filesystem has been set read-only [ 509.158820][T21308] loop2: detected capacity change from 0 to 128 [ 509.176519][T21308] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.188783][T21308] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.215929][T21295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 509.223788][T21295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 509.297963][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.335128][T21295] bio_check_eod: 75651 callbacks suppressed [ 509.335162][T21295] syz.5.5747: attempt to access beyond end of device [ 509.335162][T21295] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 509.337601][T21318] usb usb7: selecting invalid altsetting 7 [ 509.341415][T21280] syz.4.5741: attempt to access beyond end of device [ 509.341415][T21280] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 509.382817][T21295] syz.5.5747: attempt to access beyond end of device [ 509.382817][T21295] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 509.401650][T21280] syz.4.5741: attempt to access beyond end of device [ 509.401650][T21280] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 509.424385][T21295] syz.5.5747: attempt to access beyond end of device [ 509.424385][T21295] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 509.438268][T21280] syz.4.5741: attempt to access beyond end of device [ 509.438268][T21280] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 509.451986][T21295] syz.5.5747: attempt to access beyond end of device [ 509.451986][T21295] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 509.465540][T21295] syz.5.5747: attempt to access beyond end of device [ 509.465540][T21295] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 509.479234][T21295] syz.5.5747: attempt to access beyond end of device [ 509.479234][T21295] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 509.492809][T21280] syz.4.5741: attempt to access beyond end of device [ 509.492809][T21280] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 509.695089][T21295] buffer_io_error: 82461 callbacks suppressed [ 509.695108][T21295] Buffer I/O error on dev loop5, logical block 2065, async page read [ 509.711464][T21280] Buffer I/O error on dev loop4, logical block 2072, async page read [ 509.726302][T21295] Buffer I/O error on dev loop5, logical block 2066, async page read [ 509.743887][T21295] Buffer I/O error on dev loop5, logical block 2067, async page read [ 509.762251][T21295] Buffer I/O error on dev loop5, logical block 2068, async page read [ 509.781835][T21295] Buffer I/O error on dev loop5, logical block 2069, async page read [ 509.802497][T21295] Buffer I/O error on dev loop5, logical block 2070, async page read [ 509.858748][T21324] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.877848][T21295] Buffer I/O error on dev loop5, logical block 2071, async page read [ 509.956509][T21332] loop3: detected capacity change from 0 to 164 [ 509.975144][T21295] Buffer I/O error on dev loop5, logical block 2072, async page read [ 510.050010][T21295] Buffer I/O error on dev loop5, logical block 2065, async page read [ 510.136395][T21345] loop4: detected capacity change from 0 to 164 [ 510.260938][T21350] usb usb7: selecting invalid altsetting 7 [ 510.389587][T21362] loop0: detected capacity change from 0 to 128 [ 510.431134][T21362] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 510.439046][T21362] FAT-fs (loop0): Filesystem has been set read-only [ 510.476656][T21362] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 510.484544][T21362] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 510.688757][T21374] loop2: detected capacity change from 0 to 164 [ 511.179084][T21385] usb usb7: selecting invalid altsetting 7 [ 511.226415][T21381] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.407922][T21387] loop3: detected capacity change from 0 to 164 [ 511.479589][T21394] usb usb7: selecting invalid altsetting 7 [ 511.495350][T21391] loop2: detected capacity change from 0 to 164 [ 511.574666][T21396] loop3: detected capacity change from 0 to 164 [ 511.727765][T21402] __nla_validate_parse: 35 callbacks suppressed [ 511.727783][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.743139][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.752157][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.786535][T21403] loop0: detected capacity change from 0 to 128 [ 511.797177][T21405] loop4: detected capacity change from 0 to 164 [ 511.813200][T21403] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.857251][T21403] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.871148][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5790'. [ 511.885144][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.894246][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.903244][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 511.974009][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5788'. [ 511.993091][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 512.002323][T21402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5787'. [ 512.014512][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.074511][T21426] loop2: detected capacity change from 0 to 128 [ 512.086668][T21426] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 512.111999][T21422] loop5: detected capacity change from 0 to 8192 [ 512.189390][T21426] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.282555][T21438] loop3: detected capacity change from 0 to 164 [ 512.357516][T21436] loop4: detected capacity change from 0 to 8192 [ 512.377027][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.622778][T21440] ip6_vti0 speed is unknown, defaulting to 1000 [ 513.384291][T21456] loop4: detected capacity change from 0 to 164 [ 513.638130][T21470] loop0: detected capacity change from 0 to 128 [ 513.656984][T21470] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.731645][T21470] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.980887][T21475] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.216546][T21472] loop4: detected capacity change from 0 to 8192 [ 514.267241][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.313543][ T29] kauditd_printk_skb: 1065 callbacks suppressed [ 514.313556][ T29] audit: type=1326 audit(1760607653.756:87540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.378896][ T29] audit: type=1326 audit(1760607653.786:87541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.402756][ T29] audit: type=1326 audit(1760607653.786:87542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.426443][ T29] audit: type=1326 audit(1760607653.796:87543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.450064][ T29] audit: type=1326 audit(1760607653.796:87544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.473667][ T29] audit: type=1326 audit(1760607653.796:87545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.497304][ T29] audit: type=1326 audit(1760607653.796:87546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.521091][ T29] audit: type=1326 audit(1760607653.796:87547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.544759][ T29] audit: type=1326 audit(1760607653.796:87548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.549117][T21483] loop0: detected capacity change from 0 to 164 [ 514.568423][ T29] audit: type=1326 audit(1760607653.796:87549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21477 comm="syz.0.5811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bd28eec9 code=0x7ffc0000 [ 514.854337][T21496] usb usb7: selecting invalid altsetting 7 [ 515.003151][T21498] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.288427][T21500] loop4: detected capacity change from 0 to 128 [ 515.338798][T21500] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 515.374285][T21500] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.424741][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.468929][T21491] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.560446][T21507] loop4: detected capacity change from 0 to 8192 [ 515.729780][T21512] loop5: detected capacity change from 0 to 8192 [ 516.208100][T21520] loop2: detected capacity change from 0 to 128 [ 516.261740][T21520] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.269706][T21520] FAT-fs (loop2): Filesystem has been set read-only [ 516.285047][T21520] bio_check_eod: 27342 callbacks suppressed [ 516.285065][T21520] syz.2.5826: attempt to access beyond end of device [ 516.285065][T21520] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 516.311626][T21520] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.319491][T21520] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 516.361560][T21522] syz.2.5826: attempt to access beyond end of device [ 516.361560][T21522] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 516.375064][T21522] buffer_io_error: 17975 callbacks suppressed [ 516.375079][T21522] Buffer I/O error on dev loop2, logical block 2065, async page read [ 516.395269][T21522] syz.2.5826: attempt to access beyond end of device [ 516.395269][T21522] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 516.408527][T21522] Buffer I/O error on dev loop2, logical block 2066, async page read [ 516.423430][T21522] syz.2.5826: attempt to access beyond end of device [ 516.423430][T21522] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 516.436784][T21522] Buffer I/O error on dev loop2, logical block 2067, async page read [ 516.452303][T21522] syz.2.5826: attempt to access beyond end of device [ 516.452303][T21522] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 516.465618][T21522] Buffer I/O error on dev loop2, logical block 2068, async page read [ 516.495183][T21522] syz.2.5826: attempt to access beyond end of device [ 516.495183][T21522] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 516.508517][T21522] Buffer I/O error on dev loop2, logical block 2069, async page read [ 516.551034][T21522] syz.2.5826: attempt to access beyond end of device [ 516.551034][T21522] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 516.564330][T21522] Buffer I/O error on dev loop2, logical block 2070, async page read [ 516.598569][T21522] syz.2.5826: attempt to access beyond end of device [ 516.598569][T21522] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 516.611959][T21522] Buffer I/O error on dev loop2, logical block 2071, async page read [ 516.658002][T21522] syz.2.5826: attempt to access beyond end of device [ 516.658002][T21522] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 516.671469][T21522] Buffer I/O error on dev loop2, logical block 2072, async page read [ 516.690300][T21520] syz.2.5826: attempt to access beyond end of device [ 516.690300][T21520] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 516.703594][T21520] Buffer I/O error on dev loop2, logical block 2065, async page read [ 516.726022][T21537] loop4: detected capacity change from 0 to 128 [ 516.736264][T21520] Buffer I/O error on dev loop2, logical block 2066, async page read [ 516.755523][T21537] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 516.780267][T21536] loop3: detected capacity change from 0 to 8192 [ 516.811122][T21537] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.882366][T21537] __nla_validate_parse: 5 callbacks suppressed [ 516.882386][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5831'. [ 516.938559][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 517.012042][T21547] loop2: detected capacity change from 0 to 164 [ 517.199464][T21555] loop4: detected capacity change from 0 to 8192 [ 517.232774][T21558] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5839'. [ 517.701085][T21558] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.790065][T21569] loop3: detected capacity change from 0 to 128 [ 517.814659][T21569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 517.866515][T21569] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.917726][T21575] loop5: detected capacity change from 0 to 128 [ 517.949654][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5843'. [ 517.991030][T21575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 517.998891][T21575] FAT-fs (loop5): Filesystem has been set read-only [ 518.006695][T13160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.016337][T21575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 518.024230][T21575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 518.369956][T21589] loop0: detected capacity change from 0 to 164 [ 518.441220][T21591] loop0: detected capacity change from 0 to 128 [ 518.492555][T21591] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 518.545417][T21591] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.619808][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 518.677135][T21594] loop0: detected capacity change from 0 to 128 [ 518.715955][T21594] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 518.723865][T21594] FAT-fs (loop0): Filesystem has been set read-only [ 518.750721][T21594] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 518.758675][T21594] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 518.919627][T21604] loop5: detected capacity change from 0 to 128 [ 518.944586][T21604] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.030602][T21607] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.332689][T21604] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.864058][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.936130][T21613] loop5: detected capacity change from 0 to 128 [ 520.013180][T21613] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.040357][T21613] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.109739][T13615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.132044][T21618] loop0: detected capacity change from 0 to 128 [ 520.143838][T21620] loop2: detected capacity change from 0 to 128 [ 520.156354][T21618] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.186714][T21618] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.201512][T21620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.253999][T21631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5857'. [ 520.271651][T21620] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.304324][T21629] loop3: detected capacity change from 0 to 128 [ 520.310763][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 520.310832][ T29] audit: type=1326 audit(1760607659.746:88169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.340657][ T29] audit: type=1326 audit(1760607659.746:88170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.364302][ T29] audit: type=1326 audit(1760607659.746:88171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f71259f5aa7 code=0x7ffc0000 [ 520.388008][ T29] audit: type=1326 audit(1760607659.746:88172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f71259f5b06 code=0x7ffc0000 [ 520.411555][ T29] audit: type=1326 audit(1760607659.746:88173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7125a3eacb code=0x7ffc0000 [ 520.414690][T21629] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 520.435257][ T29] audit: type=1326 audit(1760607659.746:88174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.443037][T21629] FAT-fs (loop3): Filesystem has been set read-only [ 520.467142][ T29] audit: type=1326 audit(1760607659.746:88175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.467183][ T29] audit: type=1326 audit(1760607659.746:88176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.479290][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.497417][ T29] audit: type=1326 audit(1760607659.746:88177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.553628][ T29] audit: type=1326 audit(1760607659.746:88178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.3.5861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7125a3eec9 code=0x7ffc0000 [ 520.578551][T21629] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 520.586546][T21629] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 520.629514][T12991] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.650806][T21642] loop2: detected capacity change from 0 to 128 [ 520.666961][T21640] loop4: detected capacity change from 0 to 1024 [ 520.696093][T21640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 520.729275][T21643] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.158243][T21640] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 521.169231][T21640] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 521.237109][T21642] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.252749][T21640] JBD2: no valid journal superblock found [ 521.258647][T21640] EXT4-fs (loop4): Could not load journal inode [ 521.264082][T21649] loop5: detected capacity change from 0 to 1024 [ 521.273332][T21642] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.276650][T21649] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 521.321301][T20798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.335389][T21649] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 521.346317][T21649] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 521.367058][T21654] loop3: detected capacity change from 0 to 164 [ 521.404910][T21649] JBD2: no valid journal superblock found [ 521.410791][T21649] EXT4-fs (loop5): Could not load journal inode [ 521.437783][T21657] loop2: detected capacity change from 0 to 128 [ 521.465440][T21657] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 521.473414][T21657] FAT-fs (loop2): Filesystem has been set read-only [ 521.493331][T21657] bio_check_eod: 60694 callbacks suppressed [ 521.493348][T21657] syz.2.5867: attempt to access beyond end of device [ 521.493348][T21657] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 521.531039][T21657] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 521.538977][T21657] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 521.555944][T21667] loop4: detected capacity change from 0 to 128 [ 521.565732][T21667] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.578412][T21667] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.589732][T21657] syz.2.5867: attempt to access beyond end of device [ 521.589732][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.603556][T21657] syz.2.5867: attempt to access beyond end of device [ 521.603556][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.617320][T21657] syz.2.5867: attempt to access beyond end of device [ 521.617320][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.632280][T21657] syz.2.5867: attempt to access beyond end of device [ 521.632280][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.646187][T21657] syz.2.5867: attempt to access beyond end of device [ 521.646187][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.659968][T21657] syz.2.5867: attempt to access beyond end of device [ 521.659968][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.673653][T21657] syz.2.5867: attempt to access beyond end of device [ 521.673653][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.687429][T21657] syz.2.5867: attempt to access beyond end of device [ 521.687429][T21657] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.731620][T21656] syz.2.5867: attempt to access beyond end of device [ 521.731620][T21656] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 521.762547][T21676] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5875'. [ 521.782479][T21671] buffer_io_error: 58550 callbacks suppressed [ 521.782517][T21671] Buffer I/O error on dev loop2, logical block 2065, async page read [ 521.831698][T21671] Buffer I/O error on dev loop2, logical block 2066, async page read [ 521.876136][T12285] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.894598][T21680] loop3: detected capacity change from 0 to 128 [ 521.903252][T21671] Buffer I/O error on dev loop2, logical block 2067, async page read [ 521.914417][T21684] loop4: detected capacity change from 0 to 164 [ 521.922153][T21680] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.964827][T21680] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.987746][T21686] loop4: detected capacity change from 0 to 128 [ 522.006011][T21671] Buffer I/O error on dev loop2, logical block 2068, async page read [ 522.014198][T21671] Buffer I/O error on dev loop2, logical block 2069, async page read [ 522.022609][T21671] Buffer I/O error on dev loop2, logical block 2070, async page read [ 522.023638][T21676] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.030782][T21671] Buffer I/O error on dev loop2, logical block 2071, async page read [ 522.030889][T21671] Buffer I/O error on dev loop2, logical block 2072, async page read [ 522.030966][T21671] Buffer I/O error on dev loop2, logical block 2065, async page read [ 522.030991][T21671] Buffer I/O error on dev loop2, logical block 2066, async page read [ 522.079557][T21686] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 522.087555][T21686] FAT-fs (loop4): Filesystem has been set read-only [ 522.115098][T21686] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 522.120486][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5876'. [ 522.122971][T21686] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 522.162157][T13160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.493403][T21693] loop0: detected capacity change from 0 to 8192 [ 522.814188][T21700] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.170757][T13160] ================================================================== [ 523.178899][T13160] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 523.186403][T13160] [ 523.188768][T13160] read-write to 0xffff88814bc31180 of 8 bytes by task 21707 on cpu 1: [ 523.196942][T13160] shmem_recalc_inode+0x3b/0x200 [ 523.201924][T13160] shmem_get_folio_gfp+0x7a3/0xd60 [ 523.207085][T13160] shmem_write_begin+0xa8/0x190 [ 523.212410][T13160] generic_perform_write+0x184/0x490 [ 523.217731][T13160] shmem_file_write_iter+0xc5/0xf0 [ 523.222878][T13160] __kernel_write_iter+0x2d6/0x540 [ 523.228025][T13160] dump_user_range+0x61e/0x8f0 [ 523.232844][T13160] elf_core_dump+0x1de7/0x1f80 [ 523.237649][T13160] coredump_write+0xb12/0xe30 [ 523.242361][T13160] vfs_coredump+0x143a/0x20d0 [ 523.247067][T13160] get_signal+0xd84/0xf70 [ 523.251423][T13160] arch_do_signal_or_restart+0x96/0x440 [ 523.256989][T13160] irqentry_exit_to_user_mode+0x5b/0xa0 [ 523.262567][T13160] irqentry_exit+0x12/0x50 [ 523.267007][T13160] asm_exc_page_fault+0x26/0x30 [ 523.271888][T13160] [ 523.274228][T13160] read to 0xffff88814bc31180 of 8 bytes by task 13160 on cpu 0: [ 523.281872][T13160] shmem_getattr+0x41/0x200 [ 523.286399][T13160] vfs_getattr_nosec+0x146/0x1e0 [ 523.291444][T13160] vfs_statx+0x113/0x390 [ 523.295719][T13160] vfs_fstatat+0x115/0x170 [ 523.300163][T13160] __se_sys_newfstatat+0x55/0x260 [ 523.305234][T13160] __x64_sys_newfstatat+0x55/0x70 [ 523.310291][T13160] x64_sys_call+0x135a/0x3000 [ 523.315006][T13160] do_syscall_64+0xd2/0x200 [ 523.319543][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.325458][T13160] [ 523.327793][T13160] value changed: 0x000000000000045d -> 0x000000000000045e [ 523.334935][T13160] [ 523.337272][T13160] Reported by Kernel Concurrency Sanitizer on: [ 523.343448][T13160] CPU: 0 UID: 0 PID: 13160 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 523.353445][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.363783][T13160] ==================================================================