last executing test programs: 2.667207853s ago: executing program 4 (id=1983): kexec_load(0x50001a2c, 0x6, &(0x7f0000000900)=[{&(0x7f0000000380)="e1542eb4d11a930ec3d9c3ea7f4d804d588f754e9f987bd491600171516c00fdef858ceb178c59949ef7da222a3735d5f2c99b284f7750cfe9ff5b035ea4423a2ba3419864310119e1cfa001738c7fe48701c09350e542fc756c229bfe0d86d26179b76a77ac81d2193e5a6f2714ccbd08bd50037e1380038a00d963ea1df081b0a320ec855203acf8153b", 0x8b, 0x0, 0x166fa00000000000}, {&(0x7f0000000480)="71e78cbb8503706ee299951849126b1903d197ee1a2f9236b6b5741a06410a1a3db20fa8bbd93e7e16320e604037db206c3e01f92b15a55a3764adc9fadef544650bf58a3cd0ce8afe639efdd44b86141e5e6e4a99ec62569644a00798d23293212a95b6e2b7a54fdf67558c2894cad8811ad4ca968b4a45e46f2e50c87ecd5a869fc86691f95f60447b7e4727f7be194284da921c5b26a3df52db5a75cd953dd801f8c7baa697a073532083d256be7acf9817edbf9a14dd67263fbf6b8967bac7ed6d6e42f5c9b69e3e10f31fdb885d70efa470526a3d823b9a2782aa0ea56d6f2ff23dfd172db76c2db8735b23c9abd7edae663352", 0xf6, 0xd6a, 0x9e3}, {&(0x7f0000000580)="f500af09137eaa10833aca6fe3ff332dfbcf496b69cd5b577df28aff01f21967d482fd75f062e625082c816543a41d6009de950edd0bc789033c3d8d84d16e4ccf0886e5d58ee359f23d68d3c190ed9f669db08af36630781265f7c96e7764b602b895a1b46d2ec5b9e75e6d9cb1d7f27fa082e8355b5434ecd5f885853f92f73f9150a8ef1d8d0b344c0fc7d8b04838e27f2e239d91f0d6862a18066842479da55ae51f982f620218b4b8ce312115d72eebe2104de17d70bbf4ab24f942ed4ee5f7", 0xc2, 0xd3d4, 0x5}, {&(0x7f0000000680)="4e1913a253214dd9c970ec93f6df56550e942fc6798430cfa4a504e406983f7d2ebcfca173b72727501a28d90a74ea35343b6e38ec38264bf548bf2af8f3c613da43ac7e7fa0450e90c09dd15db69ea5a8511b84a827ca7e92be4708be431de5e7030000f03b4910", 0x68, 0x61, 0x6}, {&(0x7f0000000a00)="463cf3a752830e151fdce99d3f8c929817d9cbd9ca2358c5005c820032c8d305d14a7ce3fce6e39d0a9a6db82dafa8f57749026bf6062976ef5608b1afe3286d3674a02bd6f1b19ae4ed2fa33e1aa2ce12d2703f419904a97ed336461d2cf7e91804f4e499639f55a59e34e9fbecb86b61f62343496fb0e9c764b696416f38e1ab55f1d6c875ba858d323354264bfc82668af987d0aeccbe5d1788e4cd613b9a113b905ea40309ef1c8236a7eaefa5930fc208d09d6cbf8a9e39b3d04e3fcef83131f7c06807e7731e51515b74fadac154f2ee3862b6021fc2a96552eb36cc5a07fdb6fd3531ef3b9a38d940d0d4c6924d953a", 0xf3, 0x2, 0xfffffffffffff26c}, {&(0x7f0000001040)="21fdd3833667b8c8433ab3fdd92bccaf05ce4b49b641d814dc99a6520a3da89a149549ad228cf2fc2ccb6b9c962f5c4e3c06e3fed9fd05df1d6a2e1e128e1b807584d03aab46d6f9349ebf8ceef0f63ab0deb85bc31fe6b3f6b58814a885270410d9120329f148e571e7d0109228622a69ecae07da030ba757c98aaf5ae6311bdd82b0e62088db4605387e76ca8c16982ae95c4db54d7dccc484fd15698a8d9ad6094ea95e15f74097b6086bf22b709765a8640c46508cc1dc1bc6821e07952876c19fce8ed461cd2496e0", 0xcb, 0xffffffffffffff80, 0x1}], 0x2a0000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0xfffffffffffffffe, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r3) sendfile(r2, r0, 0x0, 0xfffa83) 2.420235465s ago: executing program 0 (id=1989): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000800)="3b814bdf5530868e61ed67551066b421dad71d24336ba5c54b3de45dc00bee40f696ac18e100c61c6c465b21446d8a8ca1d0d2308ce38b9774", 0x39}], 0x1, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r2]}}], 0x60}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0xfa, 0x70000000, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x1, 0xe945}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt(r2, 0x4, 0x81, &(0x7f0000000500)="0b9baa4700ed643ed72478e59be410188f7142", 0x13) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e6574000000000bf22680e12c1767cb32561d370f37abc0beda13e8d15f70af4babd75a5ec7870df21b9d"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.337726525s ago: executing program 0 (id=1990): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x20004810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4}) unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e1d, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @private=0xa010100}]}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xffff, 0x0, &(0x7f0000000240)="d2dcaafb519c2ec18000000020476203a3d9f35c0882c27525231d3c48ab7922b28a3950339533a21be75c3fa49730778c6b3989af3c365814c577f22106b9f6084bec4a564daad788349ad2527c56d590281c3beb459491fb51a9f0047fb451e6076730459b179c56cb2488385c62734a0935e13a3b1dd90a5cf84fe5cbaa2ac9649559f6a8c067bc5dd1e67286381ec453facca4f2369c5b294105d745", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) 2.325138945s ago: executing program 3 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64001, 0x109) 1.6521528s ago: executing program 4 (id=1993): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x2, 0x4, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) io_uring_setup(0x1d4b, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x3a2}) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x3, 0x7ffc0004}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.485182001s ago: executing program 0 (id=1996): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000894) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = epoll_create1(0x80000) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x30000000}) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r9 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1.388003822s ago: executing program 3 (id=1997): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="008a000030f8"], 0x28}}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r7, 0xb}}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000f6e3000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) getxattr(0x0, &(0x7f00000001c0)=@known='com.apple.system.Security\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) get_robust_list(r0, &(0x7f00000002c0)=&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000003c0)=0x18) socket$kcm(0x29, 0x2, 0x0) unshare(0x60000600) mmap$perf(&(0x7f00007a2000/0x3000)=nil, 0x3000, 0x0, 0x44030, r5, 0x3ff) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='iso9660\x00', 0xc0000, &(0x7f00000001c0)='\xad&%\x00') 256.826529ms ago: executing program 4 (id=2017): r0 = syz_open_procfs(0x0, &(0x7f0000000980)='mountstats\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x7, 0xdf, 0x9, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @remote}}}}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000011000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0xa) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x2007, @fd=r2, 0x7, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x80080a, &(0x7f0000001c80), 0x1, 0x79b, &(0x7f0000000180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000140)={0x8, 0x2, 0x5, 0x2}) 174.803569ms ago: executing program 1 (id=2018): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000001240)="$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") unlink(&(0x7f0000000000)='./file1\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./bus\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7c, 0x0, 0x0) 174.34264ms ago: executing program 4 (id=2019): syz_emit_ethernet(0x154, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x11e, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}], "4ed1034230795bf6b7047a966a1d294157323cab7fb85ede8a8d92d5298bf606349441277e0588eca9ce6efc60a0e12fccfabf07f1f33184393e055b66c8cee01498ae2fae35e7f25723163ff0da8478c0ebc537010b57d0c128434154c2d20f9e8a91f4e70a8ac85b30a142e5b88fa99ce7d82fe0b84f622cab94e3a3577635146e06ccc15226217bcc6c3e289a0114b839471981cf24407d15c831a95b2a61e4291a74c9c180407b6fad3222df8960db212a45dff2d41d41355668d314791c36fdb412a5030280d9cd65b7c90aad0829fbe9340fe900"/230}}}}}}}, 0x0) 157.329099ms ago: executing program 4 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc44}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f0000018c5bcc"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync() syz_emit_ethernet(0x126, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c20000030000000000000800452801180064000070219078e0000002ac1414bb94040000441c7213e0000002000000047f00000100000003ac1414aa0000007f071fc0e0000001ac14143d0a010101e0000002ffffffffac1414bb00000000004e234e2104419078a074991701404dc18f70b90d1ca8416118b6ff8907351db6aedf45829c547d35ffd586fe6b8d7759e5e7f8c6e678b5f9c2fc13c915638c2a80f5f1aacfbfc8cec5307931b548709655b6fbe41debc1badadaa13e745c4ebcc8d58c5a2a9ffd93b6af0f04fdec99c51c4a02a7945bee827e729eecf457fdb798a394c5ea9ef848d7dfad2181ba98f72cdd10eea725562064b244512c31648e03e24b5725264fb0951ce9108a56da8fa4065ec338fed9f86737cf70e307ff294d004e9bf9722d1c"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x2, 0xfffffffb, 0xd33, 0x27b, 0xfffffffc, 0x401}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910b00000000000c4090000010000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0xffffffad}, 0x49) dup3(r4, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") 38.34835ms ago: executing program 1 (id=2021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="008a000030f801e608"], 0x28}}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = epoll_create1(0x80000) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x30000000}) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r9 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) kernel console output (not intermixed with test programs): [ T6744] syz.1.1110: attempt to access beyond end of device [ 111.736674][ T6744] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 111.790823][ T6745] syz.1.1110: attempt to access beyond end of device [ 111.790823][ T6745] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 111.813882][ T6745] syz.1.1110: attempt to access beyond end of device [ 111.813882][ T6745] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 111.831971][ T6754] syz.1.1110: attempt to access beyond end of device [ 111.831971][ T6754] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 111.845327][ T6754] buffer_io_error: 228534 callbacks suppressed [ 111.845344][ T6754] Buffer I/O error on dev loop1, logical block 2065, async page read [ 111.873102][ T6763] loop3: detected capacity change from 0 to 512 [ 111.891005][ T6754] Buffer I/O error on dev loop1, logical block 2066, async page read [ 111.895470][ T6763] EXT4-fs: Ignoring removed orlov option [ 111.906787][ T6754] Buffer I/O error on dev loop1, logical block 2067, async page read [ 111.921513][ T6767] loop2: detected capacity change from 0 to 512 [ 111.929884][ T6767] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.930577][ T6754] Buffer I/O error on dev loop1, logical block 2068, async page read [ 111.955935][ T6754] Buffer I/O error on dev loop1, logical block 2069, async page read [ 111.957413][ T6767] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1114: bad orphan inode 15 [ 111.974221][ T6754] Buffer I/O error on dev loop1, logical block 2070, async page read [ 111.990813][ T6754] Buffer I/O error on dev loop1, logical block 2071, async page read [ 111.999185][ T6763] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1115: inode has both inline data and extents flags [ 112.025913][ T6754] Buffer I/O error on dev loop1, logical block 2072, async page read [ 112.034272][ T6767] ext4_test_bit(bit=14, block=18) = 1 [ 112.039671][ T6767] is_bad_inode(inode)=0 [ 112.043855][ T6767] NEXT_ORPHAN(inode)=1023 [ 112.048261][ T6767] max_ino=32 [ 112.052214][ T6767] i_nlink=0 [ 112.065829][ T6763] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1115: couldn't read orphan inode 15 (err -117) [ 112.080558][ T6745] Buffer I/O error on dev loop1, logical block 2065, async page read [ 112.098935][ T6745] Buffer I/O error on dev loop1, logical block 2066, async page read [ 112.107559][ T6763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.120271][ T6767] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #15: comm syz.2.1114: corrupted xattr block 19: e_value size too large [ 112.147517][ T6774] loop4: detected capacity change from 0 to 8192 [ 112.154570][ T6767] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 112.166692][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.247220][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.367447][ T6788] loop4: detected capacity change from 0 to 8192 [ 112.456354][ T6799] loop1: detected capacity change from 0 to 1024 [ 112.466733][ T6801] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.466733][ T6801] program syz.2.1126 not setting count and/or reply_len properly [ 112.506579][ T6799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 112.521417][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.542071][ T6799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1125: bg 0: block 88: padding at end of block bitmap is not set [ 112.559561][ T6799] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.569532][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.587011][ T6799] ext4: Unknown parameter '€' [ 112.643085][ T6809] loop2: detected capacity change from 0 to 8192 [ 112.662307][ T6811] loop3: detected capacity change from 0 to 1024 [ 112.678982][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.723288][ T6811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 112.744874][ T6819] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 112.745196][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.757578][ T6819] .`: renamed from bond0 (while UP) [ 112.784302][ T6811] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.838965][ T6830] loop1: detected capacity change from 0 to 1024 [ 112.845996][ T6830] EXT4-fs: Ignoring removed orlov option [ 112.877873][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.890543][ T6830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.952845][ T6836] loop3: detected capacity change from 0 to 512 [ 112.993675][ T6836] EXT4-fs: Ignoring removed orlov option [ 113.027276][ T6836] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1137: inode has both inline data and extents flags [ 113.079094][ T6836] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1137: couldn't read orphan inode 15 (err -117) [ 113.150911][ T6836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.328567][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.473657][ T6872] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 113.481596][ T6872] __nla_validate_parse: 7 callbacks suppressed [ 113.481610][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1149'. [ 113.487667][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 113.487707][ T29] audit: type=1326 audit(1762161911.187:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0efa03f057 code=0x7ffc0000 [ 113.491241][ T6872] dummy0: entered promiscuous mode [ 113.503725][ T29] audit: type=1326 audit(1762161911.207:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0efa03d810 code=0x7ffc0000 [ 113.527232][ T6872] bridge0: port 4(dummy0) entered blocking state [ 113.532710][ T6858] loop4: detected capacity change from 0 to 32768 [ 113.555333][ T6872] bridge0: port 4(dummy0) entered disabled state [ 113.574791][ T6872] dummy0: entered allmulticast mode [ 113.580410][ T29] audit: type=1326 audit(1762161911.237:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0efa03ebcb code=0x7ffc0000 [ 113.581205][ T6872] bridge0: port 4(dummy0) entered blocking state [ 113.604142][ T29] audit: type=1326 audit(1762161911.277:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.610418][ T6872] bridge0: port 4(dummy0) entered forwarding state [ 113.633832][ T29] audit: type=1326 audit(1762161911.277:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.663724][ T29] audit: type=1326 audit(1762161911.277:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.687164][ T29] audit: type=1326 audit(1762161911.277:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.710595][ T29] audit: type=1326 audit(1762161911.277:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.734087][ T29] audit: type=1326 audit(1762161911.277:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.757579][ T29] audit: type=1326 audit(1762161911.277:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 113.792018][ T6883] loop3: detected capacity change from 0 to 2048 [ 113.825525][ T6883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.845157][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.854700][ T6858] loop4: p1 p2 p3 < p5 p6 > p4 < p7 p8 p9 > [ 113.862488][ T6858] loop4: p1 size 33024 extends beyond EOD, truncated [ 113.874208][ T6858] loop4: p5 size 218115617 extends beyond EOD, truncated [ 113.882099][ T6858] loop4: p6 size 55808 extends beyond EOD, truncated [ 113.889303][ T6858] loop4: p7 size 33024 extends beyond EOD, truncated [ 113.897638][ T6858] loop4: p9 size 218115617 extends beyond EOD, truncated [ 113.932462][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 114.036850][ T6900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1153'. [ 114.059440][ T6899] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.143773][ T6904] loop4: detected capacity change from 0 to 512 [ 114.158529][ T6904] EXT4-fs: Ignoring removed nobh option [ 114.164964][ T6904] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 114.281589][ T6917] loop1: detected capacity change from 0 to 128 [ 114.293488][ T6917] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 114.301396][ T6917] FAT-fs (loop1): Filesystem has been set read-only [ 114.316787][ T6917] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 114.324741][ T6917] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 114.353454][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.513420][ T6923] loop2: detected capacity change from 0 to 512 [ 114.590223][ T6926] loop3: detected capacity change from 0 to 2048 [ 114.775426][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.788566][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.812095][ T6926] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1165: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 114.879276][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.901472][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.938127][ T6942] loop3: detected capacity change from 0 to 128 [ 114.964657][ T6942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 114.972539][ T6942] FAT-fs (loop3): Filesystem has been set read-only [ 115.000805][ T6942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 115.008739][ T6942] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 115.044153][ T6939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 115.089284][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 115.164191][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 115.618140][ T6974] loop2: detected capacity change from 0 to 8192 [ 115.630019][ T6976] loop1: detected capacity change from 0 to 2048 [ 115.682245][ T6976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.731286][ T6976] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1181: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 115.791419][ T6982] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 115.811629][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.824470][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 115.845713][ T6987] loop1: detected capacity change from 0 to 128 [ 115.893110][ T6987] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 115.901137][ T6987] FAT-fs (loop1): Filesystem has been set read-only [ 115.910128][ T6987] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 115.918018][ T6987] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 116.035885][ T6988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1186'. [ 116.520610][ T6987] bio_check_eod: 85255 callbacks suppressed [ 116.520627][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.520627][ T6987] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 116.542448][ T7012] loop3: detected capacity change from 0 to 8192 [ 116.549042][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.549042][ T6987] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 116.590838][ T7012] loop3: p1 < > p2 < > p3 p4 < > [ 116.595889][ T7012] loop3: partition table partially beyond EOD, truncated [ 116.616022][ T7012] loop3: p1 start 67108864 is beyond EOD, truncated [ 116.622705][ T7012] loop3: p2 start 4278190080 is beyond EOD, truncated [ 116.629495][ T7012] loop3: p3 start 100859904 is beyond EOD, truncated [ 116.638625][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.638625][ T6987] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 116.652747][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.652747][ T6987] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 116.705034][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.705034][ T6987] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 116.733497][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.733497][ T6987] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 116.779191][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.779191][ T6987] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 116.795456][ T6987] syz.1.1185: attempt to access beyond end of device [ 116.795456][ T6987] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 116.815354][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 116.857316][ T7029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1201'. [ 116.871175][ T7029] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.871175][ T7029] program syz.1.1201 not setting count and/or reply_len properly [ 118.073802][ T7055] loop1: detected capacity change from 0 to 8192 [ 118.092935][ T7059] loop3: detected capacity change from 0 to 1024 [ 118.120178][ T7059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 118.139083][ T7059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.152940][ T7066] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.166775][ T7059] ext4: Unknown parameter '€' [ 118.345598][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.357116][ T7073] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 118.357116][ T7073] program syz.0.1214 not setting count and/or reply_len properly [ 118.436877][ T7082] loop1: detected capacity change from 0 to 2048 [ 118.452726][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.494537][ T7082] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1216: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 118.558321][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.577272][ T7096] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=768 sclass=netlink_audit_socket pid=7096 comm=syz.4.1223 [ 118.621402][ T7100] loop1: detected capacity change from 0 to 128 [ 118.642686][ T7100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 118.650555][ T7100] FAT-fs (loop1): Filesystem has been set read-only [ 118.660793][ T7100] syz.1.1221: attempt to access beyond end of device [ 118.660793][ T7100] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.676449][ T7100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 118.684386][ T7100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 118.700822][ T7100] syz.1.1221: attempt to access beyond end of device [ 118.700822][ T7100] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.816721][ T7103] buffer_io_error: 79534 callbacks suppressed [ 118.816738][ T7103] Buffer I/O error on dev loop1, logical block 2065, async page read [ 118.831713][ T7103] Buffer I/O error on dev loop1, logical block 2066, async page read [ 118.840408][ T7103] Buffer I/O error on dev loop1, logical block 2067, async page read [ 118.847983][ T7096] __nla_validate_parse: 3 callbacks suppressed [ 118.848000][ T7096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1223'. [ 118.848750][ T7103] Buffer I/O error on dev loop1, logical block 2068, async page read [ 118.872707][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 118.872723][ T29] audit: type=1326 audit(1762161916.567:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efa03efc9 code=0x7ffc0000 [ 118.880843][ T7103] Buffer I/O error on dev loop1, logical block 2069, async page read [ 118.902180][ T29] audit: type=1326 audit(1762161916.567:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efa03efc9 code=0x7ffc0000 [ 118.902209][ T29] audit: type=1326 audit(1762161916.567:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0efa03efc9 code=0x7ffc0000 [ 118.902231][ T29] audit: type=1326 audit(1762161916.567:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efa03efc9 code=0x7ffc0000 [ 118.902254][ T29] audit: type=1326 audit(1762161916.567:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efa03efc9 code=0x7ffc0000 [ 118.913000][ T7103] Buffer I/O error on dev loop1, logical block 2070, async page read [ 119.016463][ T7103] Buffer I/O error on dev loop1, logical block 2071, async page read [ 119.024776][ T7103] Buffer I/O error on dev loop1, logical block 2072, async page read [ 119.033116][ T7100] Buffer I/O error on dev loop1, logical block 2065, async page read [ 119.041433][ T7100] Buffer I/O error on dev loop1, logical block 2066, async page read [ 119.164603][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1227'. [ 119.186729][ T29] audit: type=1326 audit(1762161916.887:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 119.210287][ T29] audit: type=1326 audit(1762161916.887:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 119.234145][ T29] audit: type=1326 audit(1762161916.937:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 119.310730][ T29] audit: type=1326 audit(1762161917.007:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 119.334212][ T29] audit: type=1326 audit(1762161917.007:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 119.504432][ T7122] loop2: detected capacity change from 0 to 2048 [ 119.542631][ T7122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.585682][ T7132] loop1: detected capacity change from 0 to 1024 [ 119.599541][ T7132] EXT4-fs: Ignoring removed orlov option [ 119.605985][ T7122] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 119.617063][ T7132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.660770][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.743775][ T7143] loop2: detected capacity change from 0 to 512 [ 119.752010][ T7143] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1239: bg 0: block 5: invalid block bitmap [ 119.770044][ T7143] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 119.782083][ T7143] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1239: invalid indirect mapped block 3 (level 2) [ 119.795626][ T7143] EXT4-fs (loop2): 2 truncates cleaned up [ 119.801961][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.187070][ T7146] Set syz1 is full, maxelem 65536 reached [ 120.372733][ T7159] loop2: detected capacity change from 0 to 128 [ 120.383713][ T7159] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 120.391573][ T7159] FAT-fs (loop2): Filesystem has been set read-only [ 120.398261][ T7159] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 120.406201][ T7159] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 120.453008][ T7161] loop1: detected capacity change from 0 to 2048 [ 120.469578][ T7161] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1244: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 120.807361][ T7175] loop1: detected capacity change from 0 to 512 [ 121.081670][ T7182] loop1: detected capacity change from 0 to 128 [ 121.117446][ T7182] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 121.125422][ T7182] FAT-fs (loop1): Filesystem has been set read-only [ 121.141028][ T7182] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 121.148870][ T7182] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 121.275592][ T7189] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1253'. [ 121.284879][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1253'. [ 121.373022][ T7199] loop2: detected capacity change from 0 to 1024 [ 121.410822][ T7199] EXT4-fs: Ignoring removed orlov option [ 121.530621][ T7182] bio_check_eod: 106925 callbacks suppressed [ 121.530637][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.530637][ T7182] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 121.552473][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.552473][ T7182] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 121.574503][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.574503][ T7182] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 121.621337][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.621337][ T7182] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 121.634754][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.634754][ T7182] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 121.648161][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.648161][ T7182] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 121.661739][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.661739][ T7182] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 121.675141][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.675141][ T7182] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 121.688959][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.688959][ T7182] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 121.702714][ T7182] syz.1.1250: attempt to access beyond end of device [ 121.702714][ T7182] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 121.787696][ T7222] SELinux: policydb version 1618682742 does not match my version range 15-35 [ 121.797107][ T7222] SELinux: failed to load policy [ 121.823570][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1266'. [ 121.956077][ T7240] loop1: detected capacity change from 0 to 512 [ 121.966124][ T7240] EXT4-fs: Ignoring removed orlov option [ 121.975714][ T7240] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1272: inode has both inline data and extents flags [ 121.990557][ T7240] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1272: couldn't read orphan inode 15 (err -117) [ 122.103970][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 122.354635][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1288'. [ 122.479044][ T7281] loop2: detected capacity change from 0 to 1024 [ 122.493432][ T7281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 122.501790][ T7284] macvtap0: refused to change device tx_queue_len [ 122.508683][ T7281] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.605344][ T7299] loop2: detected capacity change from 0 to 128 [ 122.637196][ T7299] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 122.645162][ T7299] FAT-fs (loop2): Filesystem has been set read-only [ 122.658402][ T7299] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 122.666384][ T7299] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 122.935890][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1302'. [ 123.107800][ T7322] bridge0: entered promiscuous mode [ 123.123058][ T7322] macsec1: entered promiscuous mode [ 123.138668][ T7322] bridge0: port 4(macsec1) entered blocking state [ 123.145170][ T7322] bridge0: port 4(macsec1) entered disabled state [ 123.155153][ T7322] macsec1: entered allmulticast mode [ 123.160537][ T7322] bridge0: entered allmulticast mode [ 123.174398][ T7322] macsec1: left allmulticast mode [ 123.179453][ T7322] bridge0: left allmulticast mode [ 123.185845][ T7322] bridge0: left promiscuous mode [ 123.310600][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 123.515633][ T7332] loop3: detected capacity change from 0 to 8192 [ 123.560778][ T7350] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1315'. [ 123.591199][ T7350] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.591199][ T7350] program syz.0.1315 not setting count and/or reply_len properly [ 123.844063][ T7369] loop1: detected capacity change from 0 to 1024 [ 123.867247][ T7369] EXT4-fs: Ignoring removed orlov option [ 124.161025][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 124.161038][ T29] audit: type=1326 audit(1762161921.867:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.222723][ T29] audit: type=1326 audit(1762161921.897:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.245807][ T29] audit: type=1326 audit(1762161921.897:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.268969][ T29] audit: type=1326 audit(1762161921.897:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.292010][ T29] audit: type=1326 audit(1762161921.897:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.314951][ T29] audit: type=1326 audit(1762161921.897:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.337770][ T29] audit: type=1326 audit(1762161921.897:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.360812][ T29] audit: type=1326 audit(1762161921.897:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.383705][ T29] audit: type=1326 audit(1762161921.897:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.406499][ T29] audit: type=1326 audit(1762161921.897:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 124.469514][ T7378] loop2: detected capacity change from 0 to 128 [ 124.478204][ T7378] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 124.486108][ T7378] FAT-fs (loop2): Filesystem has been set read-only [ 124.492933][ T7378] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 124.500827][ T7378] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 124.672946][ T7381] loop1: detected capacity change from 0 to 128 [ 124.696492][ T7385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1324'. [ 124.707592][ T7381] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.715430][ T7381] FAT-fs (loop1): Filesystem has been set read-only [ 124.724174][ T7384] xt_hashlimit: max too large, truncated to 1048576 [ 124.735323][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 124.744378][ T7381] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.752337][ T7381] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 124.763208][ T7384] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.831879][ T7387] buffer_io_error: 185022 callbacks suppressed [ 124.831936][ T7387] Buffer I/O error on dev loop1, logical block 2065, async page read [ 124.846965][ T7387] Buffer I/O error on dev loop1, logical block 2066, async page read [ 124.855216][ T7387] Buffer I/O error on dev loop1, logical block 2067, async page read [ 124.892291][ T7387] Buffer I/O error on dev loop1, logical block 2068, async page read [ 124.900897][ T7387] Buffer I/O error on dev loop1, logical block 2069, async page read [ 124.915551][ T7387] Buffer I/O error on dev loop1, logical block 2070, async page read [ 124.948404][ T7387] Buffer I/O error on dev loop1, logical block 2071, async page read [ 124.987622][ T7387] Buffer I/O error on dev loop1, logical block 2072, async page read [ 125.020106][ T7381] Buffer I/O error on dev loop1, logical block 2065, async page read [ 125.054474][ T7399] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1330'. [ 125.063479][ T7381] Buffer I/O error on dev loop1, logical block 2066, async page read [ 125.090560][ T7399] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1330'. [ 125.335983][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 125.375766][ T7412] loop3: detected capacity change from 0 to 1024 [ 125.425216][ T7412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 125.458329][ T7415] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1335'. [ 125.473303][ T7412] ext4: Unknown parameter '€' [ 125.478186][ T7415] netlink: zone id is out of range [ 125.483441][ T7415] netlink: zone id is out of range [ 125.498971][ T7415] netlink: zone id is out of range [ 125.511730][ T7415] netlink: zone id is out of range [ 125.528993][ T7415] netlink: zone id is out of range [ 125.563258][ T7415] netlink: zone id is out of range [ 125.568399][ T7415] netlink: zone id is out of range [ 125.580937][ T7415] netlink: zone id is out of range [ 125.587905][ T7425] serio: Serial port ptm0 [ 125.593822][ T7415] netlink: zone id is out of range [ 125.599047][ T7415] netlink: zone id is out of range [ 125.822749][ T7445] loop3: detected capacity change from 0 to 512 [ 125.913638][ T7445] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.965079][ T7456] loop2: detected capacity change from 0 to 2048 [ 125.982828][ T7456] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1345: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 126.068559][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 126.155936][ T7471] loop2: detected capacity change from 0 to 128 [ 126.166076][ T7471] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.174065][ T7471] FAT-fs (loop2): Filesystem has been set read-only [ 126.181436][ T7471] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.189304][ T7471] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.542882][ T7471] bio_check_eod: 121485 callbacks suppressed [ 126.542899][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.542899][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.587253][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.587253][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.594048][ T7496] loop3: detected capacity change from 0 to 2048 [ 126.600869][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.600869][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.620796][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.620796][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.634504][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.634504][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.647983][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.647983][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.661452][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.661452][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.676142][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.676142][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.689643][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.689643][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.703083][ T7471] syz.2.1350: attempt to access beyond end of device [ 126.703083][ T7471] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 126.722292][ T7496] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1356: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 127.044563][ T7510] loop3: detected capacity change from 0 to 512 [ 127.198065][ T7522] loop3: detected capacity change from 0 to 512 [ 127.206161][ T7522] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 127.214388][ T7522] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 127.223591][ T7522] EXT4-fs (loop3): 1 truncate cleaned up [ 127.231457][ T7522] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.285724][ T7533] loop1: detected capacity change from 0 to 2048 [ 127.402686][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 127.411963][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 127.464829][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1369'. [ 127.555667][ T7558] loop3: detected capacity change from 0 to 2048 [ 127.595100][ T7558] loop3: p2 p3 p7 [ 127.613926][ T7563] loop1: detected capacity change from 0 to 512 [ 127.626232][ T7565] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 127.626232][ T7565] program syz.4.1380 not setting count and/or reply_len properly [ 127.753480][ T7576] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 127.753480][ T7576] program syz.3.1383 not setting count and/or reply_len properly [ 127.780036][ T7563] bond0: (slave team0): Releasing backup interface [ 127.801086][ T7563] team0 (unregistering): Port device team_slave_0 removed [ 127.818362][ T7563] team0 (unregistering): Port device team_slave_1 removed [ 127.867445][ T7584] loop3: detected capacity change from 0 to 2048 [ 127.882803][ T7586] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 127.891957][ T7584] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1386: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 127.910977][ T7586] sg_read: process 723 (syz.4.1387) changed security contexts after opening file descriptor, this is not allowed. [ 127.985896][ T7602] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 127.985896][ T7602] program syz.1.1392 not setting count and/or reply_len properly [ 128.070324][ T7608] loop1: detected capacity change from 0 to 1024 [ 128.081281][ T7610] loop3: detected capacity change from 0 to 512 [ 128.093213][ T7610] ext4 filesystem being mounted at /263/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.118588][ T7608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 128.146153][ T7608] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.202480][ T7620] loop1: detected capacity change from 0 to 128 [ 128.211614][ T7620] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 128.219574][ T7620] FAT-fs (loop1): Filesystem has been set read-only [ 128.226347][ T7620] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 128.234264][ T7620] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 128.428232][ T7638] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 128.428232][ T7638] program syz.0.1404 not setting count and/or reply_len properly [ 128.480703][ T7634] loop2: detected capacity change from 0 to 2048 [ 128.540955][ T7634] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1400: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 128.617446][ T7652] loop2: detected capacity change from 0 to 512 [ 128.625068][ T7652] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.673657][ T7652] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 128.680269][ T7652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.688585][ T7652] vhci_hcd vhci_hcd.0: Device attached [ 128.697427][ T7652] vhci_hcd vhci_hcd.0: port 0 already used [ 128.960634][ T3401] usb 6-1: SetAddress Request (2) to port 0 [ 128.972830][ T3401] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.075697][ T7674] loop1: detected capacity change from 0 to 2048 [ 129.189074][ T7681] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 129.189074][ T7681] program syz.0.1416 not setting count and/or reply_len properly [ 129.425126][ T7699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.435069][ T7658] vhci_hcd: connection reset by peer [ 129.441511][ T3458] vhci_hcd: stop threads [ 129.446121][ T3458] vhci_hcd: release socket [ 129.450624][ T3458] vhci_hcd: disconnect device [ 129.474242][ T7699] infiniband !yz!: set down [ 129.478788][ T7699] infiniband !yz!: added team_slave_0 [ 129.493171][ T7699] RDS/IB: !yz!: added [ 129.498696][ T7699] smc: adding ib device !yz! with port count 1 [ 129.505175][ T7699] smc: ib device !yz! port 1 has no pnetid [ 129.512918][ T7707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 129.519437][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.527302][ T7707] vhci_hcd vhci_hcd.0: Device attached [ 129.547803][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 129.547818][ T29] audit: type=1400 audit(1762161927.247:4228): avc: denied { bind } for pid=7706 comm="syz.4.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.575595][ T7709] vhci_hcd: connection closed [ 129.575836][ T52] vhci_hcd: stop threads [ 129.584941][ T52] vhci_hcd: release socket [ 129.589354][ T52] vhci_hcd: disconnect device [ 129.669678][ T7715] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 129.669678][ T7715] program syz.3.1428 not setting count and/or reply_len properly [ 129.935625][ T7731] loop3: detected capacity change from 0 to 1024 [ 129.951546][ T7731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 129.966761][ T7731] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.006440][ T7735] loop2: detected capacity change from 0 to 128 [ 130.015726][ T7735] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 130.023634][ T7735] FAT-fs (loop2): Filesystem has been set read-only [ 130.040802][ T7735] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 130.048746][ T7735] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 130.135144][ T7738] buffer_io_error: 82206 callbacks suppressed [ 130.135161][ T7738] Buffer I/O error on dev loop2, logical block 2065, async page read [ 130.150163][ T7738] Buffer I/O error on dev loop2, logical block 2066, async page read [ 130.158510][ T7738] Buffer I/O error on dev loop2, logical block 2067, async page read [ 130.167569][ T7738] Buffer I/O error on dev loop2, logical block 2068, async page read [ 130.176771][ T7738] Buffer I/O error on dev loop2, logical block 2069, async page read [ 130.185377][ T7738] Buffer I/O error on dev loop2, logical block 2070, async page read [ 130.193641][ T7738] Buffer I/O error on dev loop2, logical block 2071, async page read [ 130.202024][ T7738] Buffer I/O error on dev loop2, logical block 2072, async page read [ 130.211529][ T7735] Buffer I/O error on dev loop2, logical block 2065, async page read [ 130.220143][ T7735] Buffer I/O error on dev loop2, logical block 2066, async page read [ 130.443807][ T7751] __nla_validate_parse: 11 callbacks suppressed [ 130.443825][ T7751] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1441'. [ 130.496198][ T7755] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.496198][ T7755] program syz.0.1441 not setting count and/or reply_len properly [ 130.963111][ T29] audit: type=1326 audit(1762161928.667:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 130.990649][ T29] audit: type=1326 audit(1762161928.667:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.014232][ T29] audit: type=1326 audit(1762161928.667:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.037629][ T29] audit: type=1326 audit(1762161928.667:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.061325][ T29] audit: type=1326 audit(1762161928.667:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.084853][ T29] audit: type=1326 audit(1762161928.667:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.109308][ T29] audit: type=1326 audit(1762161928.667:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.110132][ T7768] loop3: detected capacity change from 0 to 2048 [ 131.133164][ T29] audit: type=1326 audit(1762161928.667:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.162885][ T29] audit: type=1326 audit(1762161928.667:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 131.325073][ T7784] loop1: detected capacity change from 0 to 512 [ 131.333092][ T7784] EXT4-fs: Ignoring removed orlov option [ 131.347871][ T7783] loop2: detected capacity change from 0 to 2048 [ 131.361356][ T7784] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1451: inode has both inline data and extents flags [ 131.374992][ T7784] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1451: couldn't read orphan inode 15 (err -117) [ 131.388844][ T7784] EXT4-fs mount: 43 callbacks suppressed [ 131.388864][ T7784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.418847][ T7783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.434104][ T7783] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1450: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 131.488028][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.512176][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.531018][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.582146][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1455'. [ 131.591797][ T7797] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 131.591797][ T7797] program syz.3.1455 not setting count and/or reply_len properly [ 132.151472][ T7830] loop3: detected capacity change from 0 to 512 [ 132.158357][ T7830] EXT4-fs: Ignoring removed orlov option [ 132.298032][ T7830] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1466: inode has both inline data and extents flags [ 132.314216][ T7830] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1466: couldn't read orphan inode 15 (err -117) [ 132.351084][ T7830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.399266][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.430527][ T7845] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1472'. [ 132.442754][ T7845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 132.442754][ T7845] program syz.0.1472 not setting count and/or reply_len properly [ 132.734359][ T7871] loop1: detected capacity change from 0 to 1024 [ 132.782896][ T7871] EXT4-fs: Ignoring removed orlov option [ 132.913729][ T7871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.013346][ T7882] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1485'. [ 133.078680][ T7882] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.078680][ T7882] program syz.0.1485 not setting count and/or reply_len properly [ 133.502260][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.548170][ T7902] loop3: detected capacity change from 0 to 2048 [ 133.633744][ T7902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.655881][ T7902] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1491: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 133.961615][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.058685][ T3401] usb 6-1: device descriptor read/8, error -110 [ 134.172602][ T3401] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 134.190701][ T3401] usb 6-1: enqueue for inactive port 0 [ 134.199413][ T3401] usb 6-1: enqueue for inactive port 0 [ 134.231860][ T3401] usb 6-1: enqueue for inactive port 0 [ 134.239921][ T7919] loop2: detected capacity change from 0 to 164 [ 134.272433][ T7919] Unable to read rock-ridge attributes [ 134.556135][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 134.556187][ T29] audit: type=1326 audit(1762161932.237:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.586544][ T29] audit: type=1326 audit(1762161932.237:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.610239][ T29] audit: type=1326 audit(1762161932.237:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.633829][ T29] audit: type=1326 audit(1762161932.247:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.657285][ T29] audit: type=1326 audit(1762161932.257:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.682339][ T29] audit: type=1326 audit(1762161932.267:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.706006][ T29] audit: type=1326 audit(1762161932.267:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.730060][ T29] audit: type=1326 audit(1762161932.267:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.755196][ T29] audit: type=1326 audit(1762161932.267:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 134.779458][ T29] audit: type=1326 audit(1762161932.267:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92154defc9 code=0x7ffc0000 [ 135.360857][ T3401] usb usb6-port1: attempt power cycle [ 135.622466][ T7990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1509'. [ 135.635563][ T7990] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 135.635563][ T7990] program syz.1.1509 not setting count and/or reply_len properly [ 136.084965][ T8006] loop2: detected capacity change from 0 to 1024 [ 136.091829][ T8006] EXT4-fs: Ignoring removed orlov option [ 136.099902][ T8006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.686290][ T8024] loop1: detected capacity change from 0 to 512 [ 136.704685][ T8024] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 136.806930][ T8024] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 136.816334][ T8024] EXT4-fs (loop1): 1 truncate cleaned up [ 136.862408][ T8024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.863632][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.900859][ T8024] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 136.932865][ T8031] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 136.951804][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.976106][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 137.006451][ T8033] loop2: detected capacity change from 0 to 512 [ 137.014437][ T8033] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.027958][ T8033] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1522: bg 0: block 248: padding at end of block bitmap is not set [ 137.052801][ T8033] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1522: Failed to acquire dquot type 1 [ 137.099709][ T8033] EXT4-fs (loop2): 1 truncate cleaned up [ 137.122291][ T8033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.161810][ T8033] ext4: Unknown parameter 'ÿÿÿÿ' [ 137.180955][ T3401] usb usb6-port1: unable to enumerate USB device [ 137.473109][ T8033] syz.2.1522 (8033) used greatest stack depth: 9144 bytes left [ 137.481182][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.532472][ T8067] loop1: detected capacity change from 0 to 8192 [ 137.583850][ T8079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1535'. [ 137.721347][ T8079] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 137.721347][ T8079] program syz.2.1535 not setting count and/or reply_len properly [ 138.571404][ T8147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1550'. [ 138.601414][ T8147] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.601414][ T8147] program syz.1.1550 not setting count and/or reply_len properly [ 138.724710][ T8140] loop2: detected capacity change from 0 to 512 [ 138.738435][ T8155] loop1: detected capacity change from 0 to 1024 [ 138.747183][ T8140] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1542: bad orphan inode 11862016 [ 138.760390][ T8155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 138.769254][ T8155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.782371][ T8140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 138.795123][ T8140] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.807322][ T8155] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.831233][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.949680][ T8169] loop1: detected capacity change from 0 to 512 [ 138.956798][ T8169] EXT4-fs: Ignoring removed orlov option [ 138.968592][ T8169] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1557: inode has both inline data and extents flags [ 138.982243][ T8169] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1557: couldn't read orphan inode 15 (err -117) [ 138.994901][ T8169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.095894][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.288324][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 139.318604][ T8199] loop1: detected capacity change from 0 to 512 [ 139.358468][ T8199] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 139.377920][ T8199] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 139.396528][ T8202] loop3: detected capacity change from 0 to 512 [ 139.416925][ T8199] EXT4-fs (loop1): 1 truncate cleaned up [ 139.427223][ T8202] EXT4-fs: Ignoring removed i_version option [ 139.433330][ T8202] EXT4-fs: Ignoring removed bh option [ 139.440407][ T8199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.494280][ T8199] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.513657][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.547673][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.569249][ T8202] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.633327][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.689377][ T8212] loop3: detected capacity change from 0 to 2048 [ 139.723152][ T8212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.824670][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.840237][ T8218] loop1: detected capacity change from 0 to 2048 [ 139.865123][ T8218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.891525][ T8218] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1573: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 139.940116][ T8224] loop3: detected capacity change from 0 to 2048 [ 139.981166][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.001807][ T8224] GPT:first_usable_lbas don't match. [ 140.007147][ T8224] GPT:34 != 290 [ 140.010691][ T8224] GPT: Use GNU Parted to correct GPT errors. [ 140.016823][ T8224] loop3: p1 p2 p3 [ 140.117932][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 140.117946][ T29] audit: type=1326 audit(1762161937.817:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92154d5e67 code=0x7ffc0000 [ 140.149213][ T29] audit: type=1326 audit(1762161937.847:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921547b099 code=0x7ffc0000 [ 140.172687][ T29] audit: type=1326 audit(1762161937.847:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92154d5e67 code=0x7ffc0000 [ 140.176449][ T8241] loop3: detected capacity change from 0 to 512 [ 140.196170][ T29] audit: type=1326 audit(1762161937.847:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921547b099 code=0x7ffc0000 [ 140.196200][ T29] audit: type=1326 audit(1762161937.847:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92154d5e67 code=0x7ffc0000 [ 140.203004][ T8241] EXT4-fs: Ignoring removed i_version option [ 140.225914][ T29] audit: type=1326 audit(1762161937.847:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921547b099 code=0x7ffc0000 [ 140.249377][ T8241] EXT4-fs: Ignoring removed bh option [ 140.262147][ T8241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.278961][ T29] audit: type=1326 audit(1762161937.847:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92154d5e67 code=0x7ffc0000 [ 140.286515][ T8241] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.296850][ T29] audit: type=1326 audit(1762161937.847:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921547b099 code=0x7ffc0000 [ 140.353929][ T29] audit: type=1326 audit(1762161937.847:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92154d5e67 code=0x7ffc0000 [ 140.377527][ T29] audit: type=1326 audit(1762161937.847:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.0.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921547b099 code=0x7ffc0000 [ 140.402058][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.457981][ T8246] loop3: detected capacity change from 0 to 2048 [ 140.482132][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.516029][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.556619][ T8259] loop1: detected capacity change from 0 to 512 [ 140.567348][ T8258] loop3: detected capacity change from 0 to 1024 [ 140.575412][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.588031][ T8259] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.591905][ T8258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 140.606962][ T8258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.635998][ T8258] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.654034][ T8270] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1592' sets config #-1 [ 140.663712][ T8270] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1592' sets config #1 [ 140.682840][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.738407][ T3401] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 140.746228][ T3401] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 140.758034][ T3401] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 140.766426][ T3401] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 140.823175][ T8281] loop2: detected capacity change from 0 to 2048 [ 140.831977][ T8278] loop3: detected capacity change from 0 to 8192 [ 140.850061][ T8281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.155137][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 141.264835][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.277111][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 141.286142][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 141.417824][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.485580][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1607'. [ 141.608856][ T8324] loop2: detected capacity change from 0 to 2048 [ 141.635604][ T8324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.689161][ T8335] loop3: detected capacity change from 0 to 2048 [ 141.698609][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.712478][ T8335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.725369][ T8335] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1612: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 141.726997][ T8341] loop2: detected capacity change from 0 to 128 [ 141.760108][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.761418][ T8341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.777061][ T8341] FAT-fs (loop2): Filesystem has been set read-only [ 141.784059][ T8341] bio_check_eod: 101176 callbacks suppressed [ 141.784073][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.784073][ T8341] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 141.820623][ T8341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.828551][ T8341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 141.850866][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.850866][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.870581][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.870581][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.884176][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.884176][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.897861][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.897861][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.912668][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.912668][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.926305][ T8341] syz.2.1617: attempt to access beyond end of device [ 141.926305][ T8341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 141.939751][ T8346] syz.2.1617: attempt to access beyond end of device [ 141.939751][ T8346] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 141.953009][ T8346] buffer_io_error: 19150 callbacks suppressed [ 141.953026][ T8346] Buffer I/O error on dev loop2, logical block 2065, async page read [ 141.974584][ T8346] syz.2.1617: attempt to access beyond end of device [ 141.974584][ T8346] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 141.987978][ T8346] Buffer I/O error on dev loop2, logical block 2066, async page read [ 141.997383][ T8346] syz.2.1617: attempt to access beyond end of device [ 141.997383][ T8346] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 142.010723][ T8346] Buffer I/O error on dev loop2, logical block 2067, async page read [ 142.030062][ T8350] loop3: detected capacity change from 0 to 2048 [ 142.038059][ T8346] Buffer I/O error on dev loop2, logical block 2068, async page read [ 142.047323][ T8346] Buffer I/O error on dev loop2, logical block 2069, async page read [ 142.055842][ T8346] Buffer I/O error on dev loop2, logical block 2070, async page read [ 142.065091][ T8350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.084896][ T8346] Buffer I/O error on dev loop2, logical block 2071, async page read [ 142.093103][ T8346] Buffer I/O error on dev loop2, logical block 2072, async page read [ 142.101467][ T8346] Buffer I/O error on dev loop2, logical block 2065, async page read [ 142.130166][ T8346] Buffer I/O error on dev loop2, logical block 2066, async page read [ 142.265547][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.298064][ T8357] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 143.025647][ T8382] loop2: detected capacity change from 0 to 2048 [ 143.042224][ T8382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.071365][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 143.105209][ T3320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 143.120262][ T3320] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 143.135295][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.229706][ T8396] loop3: detected capacity change from 0 to 136 [ 143.237506][ T8396] /dev/loop3: Can't open blockdev [ 143.296697][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 144.012229][ T8421] loop2: detected capacity change from 0 to 764 [ 144.028966][ T8421] Symlink component flag not implemented [ 144.034725][ T8421] Symlink component flag not implemented [ 144.075659][ T8423] loop2: detected capacity change from 0 to 2048 [ 144.098638][ T8423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.102936][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1640'. [ 144.123677][ T8429] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.123677][ T8429] program syz.0.1640 not setting count and/or reply_len properly [ 144.276636][ T8438] loop1: detected capacity change from 0 to 128 [ 144.678420][ T8446] loop3: detected capacity change from 0 to 2048 [ 144.761641][ T8446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.786857][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.810837][ T8446] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1647: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 144.843952][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 144.894112][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.919731][ T8463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1654'. [ 144.960251][ T8463] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.960251][ T8463] program syz.2.1654 not setting count and/or reply_len properly [ 145.018907][ T8464] loop1: detected capacity change from 0 to 1024 [ 145.041366][ T8464] EXT4-fs: Ignoring removed orlov option [ 145.089946][ T8464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.162112][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 145.162456][ T29] audit: type=1326 audit(1762161942.867:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.191809][ T29] audit: type=1326 audit(1762161942.867:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.214852][ T29] audit: type=1326 audit(1762161942.867:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.237689][ T29] audit: type=1326 audit(1762161942.867:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.261126][ T29] audit: type=1326 audit(1762161942.867:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.284168][ T29] audit: type=1326 audit(1762161942.867:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.307095][ T29] audit: type=1326 audit(1762161942.867:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.330166][ T29] audit: type=1326 audit(1762161942.867:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.353194][ T29] audit: type=1326 audit(1762161942.867:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.376130][ T29] audit: type=1326 audit(1762161942.867:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 145.748673][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.789207][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'. [ 145.815713][ T8501] SELinux: Context Ü is not valid (left unmapped). [ 145.819276][ T8503] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.819276][ T8503] program syz.1.1666 not setting count and/or reply_len properly [ 145.903174][ T8507] loop3: detected capacity change from 0 to 8192 [ 146.326923][ T8528] loop2: detected capacity change from 0 to 512 [ 146.346632][ T8528] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 146.411802][ T8528] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 146.458316][ T8528] EXT4-fs (loop2): 1 truncate cleaned up [ 146.481574][ T8528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.547761][ T8528] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.617443][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.674008][ T8532] __nla_validate_parse: 1 callbacks suppressed [ 146.674026][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 146.798683][ T8537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1678'. [ 146.816756][ T8537] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 146.816756][ T8537] program syz.4.1678 not setting count and/or reply_len properly [ 146.899889][ T8545] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 146.913183][ T8545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.923435][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 146.943459][ T8545] bond1 (unregistering): Released all slaves [ 146.993346][ T8511] syz.1.1670 (8511) used greatest stack depth: 7096 bytes left [ 147.201305][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 147.468504][ T8574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1691'. [ 147.478443][ T8574] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 147.478443][ T8574] program syz.1.1691 not setting count and/or reply_len properly [ 147.545816][ T8578] loop1: detected capacity change from 0 to 1024 [ 147.563015][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.577563][ T8578] SELinux: Context  is not valid (left unmapped). [ 147.602755][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.630934][ T8582] loop1: detected capacity change from 0 to 2048 [ 147.646266][ T8582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.659903][ T8582] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1693: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 147.689026][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.744581][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 147.886793][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'. [ 147.932186][ T8596] loop2: detected capacity change from 0 to 2048 [ 147.939634][ T8596] EXT4-fs (loop2): bad block size 8192 [ 148.013579][ T8603] loop1: detected capacity change from 0 to 1024 [ 148.022978][ T8604] loop3: detected capacity change from 0 to 512 [ 148.051928][ T8603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 148.060584][ T8603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.127169][ T8603] ext4: Unknown parameter 'F' [ 148.184449][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.184757][ T8604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.211182][ T8615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1702'. [ 148.221244][ T8615] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.221244][ T8615] program syz.4.1702 not setting count and/or reply_len properly [ 148.456612][ T8626] loop1: detected capacity change from 0 to 8192 [ 148.978876][ T8635] loop3: detected capacity change from 0 to 1024 [ 149.000367][ T8605] syz.2.1699 (8605) used greatest stack depth: 7032 bytes left [ 149.024859][ T8635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 149.076311][ T8635] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 149.772220][ T8658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1715'. [ 149.811387][ T8658] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.811387][ T8658] program syz.0.1715 not setting count and/or reply_len properly [ 150.175999][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 150.176090][ T29] audit: type=1326 audit(1762161947.877:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 150.252397][ T29] audit: type=1326 audit(1762161947.937:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7416eefc9 code=0x7ffc0000 [ 150.340543][ T29] audit: type=1326 audit(1762161948.007:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.363631][ T29] audit: type=1326 audit(1762161948.007:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.386464][ T29] audit: type=1326 audit(1762161948.007:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.409326][ T29] audit: type=1326 audit(1762161948.007:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.432236][ T29] audit: type=1326 audit(1762161948.007:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.456323][ T29] audit: type=1326 audit(1762161948.007:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.479104][ T29] audit: type=1326 audit(1762161948.007:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.502242][ T29] audit: type=1326 audit(1762161948.007:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 150.651883][ T8694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1726'. [ 150.661947][ T8694] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 150.661947][ T8694] program syz.0.1726 not setting count and/or reply_len properly [ 150.793885][ T8708] loop1: detected capacity change from 0 to 128 [ 150.815351][ T8708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.823271][ T8708] FAT-fs (loop1): Filesystem has been set read-only [ 150.832553][ T8708] bio_check_eod: 40757 callbacks suppressed [ 150.832571][ T8708] syz.1.1730: attempt to access beyond end of device [ 150.832571][ T8708] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 150.852904][ T8708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.860866][ T8708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 150.866608][ T8713] loop3: detected capacity change from 0 to 512 [ 150.869481][ T8708] syz.1.1730: attempt to access beyond end of device [ 150.869481][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 150.889230][ T8708] syz.1.1730: attempt to access beyond end of device [ 150.889230][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 150.902786][ T8708] syz.1.1730: attempt to access beyond end of device [ 150.902786][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 150.916702][ T8713] EXT4-fs: Ignoring removed orlov option [ 150.942001][ T8708] syz.1.1730: attempt to access beyond end of device [ 150.942001][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 150.958241][ T8713] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1732: inode has both inline data and extents flags [ 150.986580][ T8713] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1732: couldn't read orphan inode 15 (err -117) [ 150.999454][ T8707] syz.1.1730: attempt to access beyond end of device [ 150.999454][ T8707] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.013032][ T8708] syz.1.1730: attempt to access beyond end of device [ 151.013032][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.036633][ T8707] syz.1.1730: attempt to access beyond end of device [ 151.036633][ T8707] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.050239][ T8708] syz.1.1730: attempt to access beyond end of device [ 151.050239][ T8708] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.081293][ T8707] syz.1.1730: attempt to access beyond end of device [ 151.081293][ T8707] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 151.136485][ T8714] buffer_io_error: 40750 callbacks suppressed [ 151.136503][ T8714] Buffer I/O error on dev loop1, logical block 2065, async page read [ 151.151507][ T8714] Buffer I/O error on dev loop1, logical block 2066, async page read [ 151.159729][ T8714] Buffer I/O error on dev loop1, logical block 2067, async page read [ 151.168072][ T8714] Buffer I/O error on dev loop1, logical block 2068, async page read [ 151.177520][ T8714] Buffer I/O error on dev loop1, logical block 2069, async page read [ 151.185776][ T8714] Buffer I/O error on dev loop1, logical block 2070, async page read [ 151.193993][ T8714] Buffer I/O error on dev loop1, logical block 2071, async page read [ 151.202223][ T8714] Buffer I/O error on dev loop1, logical block 2072, async page read [ 151.210461][ T8714] Buffer I/O error on dev loop1, logical block 2065, async page read [ 151.218664][ T8714] Buffer I/O error on dev loop1, logical block 2066, async page read [ 151.487787][ T8738] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 151.487787][ T8738] program syz.4.1739 not setting count and/or reply_len properly [ 151.576240][ T8745] loop2: detected capacity change from 0 to 2048 [ 151.741004][ T8745] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 152.718004][ T8769] __nla_validate_parse: 2 callbacks suppressed [ 152.718065][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 152.872734][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1752'. [ 152.882434][ T8775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 152.882434][ T8775] program syz.2.1752 not setting count and/or reply_len properly [ 152.977695][ T8784] 9pnet_fd: Insufficient options for proto=fd [ 152.996999][ T8784] loop1: detected capacity change from 0 to 512 [ 153.039809][ T8787] loop3: detected capacity change from 0 to 1024 [ 153.046663][ T8787] EXT4-fs: Ignoring removed orlov option [ 153.056667][ T8784] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.072371][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1756'. [ 153.106890][ T8784] capability: warning: `syz.1.1754' uses 32-bit capabilities (legacy support in use) [ 153.116179][ T8797] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1760'. [ 153.150033][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 153.192025][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 153.199840][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 153.211367][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.219119][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.226855][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.234537][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.242227][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.249876][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.257568][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.265299][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 153.339423][ T3394] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 153.449117][ T8818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1766'. [ 153.471505][ T8818] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.471505][ T8818] program syz.2.1766 not setting count and/or reply_len properly [ 153.806162][ T8828] loop2: detected capacity change from 0 to 512 [ 153.813132][ T8828] EXT4-fs: Ignoring removed orlov option [ 153.822238][ T8828] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1770: inode has both inline data and extents flags [ 153.841022][ T8828] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1770: couldn't read orphan inode 15 (err -117) [ 153.928235][ T8842] loop2: detected capacity change from 0 to 512 [ 153.934776][ T8842] EXT4-fs: Ignoring removed orlov option [ 153.941696][ T8842] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1774: inode has both inline data and extents flags [ 153.955758][ T8842] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1774: couldn't read orphan inode 15 (err -117) [ 154.030600][ T8846] loop3: detected capacity change from 0 to 2048 [ 154.041801][ T8848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1777'. [ 154.050319][ T8846] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1776: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 154.052372][ T8848] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 154.052372][ T8848] program syz.0.1777 not setting count and/or reply_len properly [ 154.097383][ T8852] loop2: detected capacity change from 0 to 512 [ 154.104238][ T8852] EXT4-fs: Ignoring removed orlov option [ 154.111729][ T8852] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1778: inode has both inline data and extents flags [ 154.132177][ T8852] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1778: couldn't read orphan inode 15 (err -117) [ 154.153001][ T8857] loop3: detected capacity change from 0 to 1024 [ 154.177133][ T8857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 154.199984][ T8857] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.214827][ T8865] loop1: detected capacity change from 0 to 128 [ 154.228768][ T8865] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 154.236767][ T8865] FAT-fs (loop1): Filesystem has been set read-only [ 154.254181][ T8865] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 154.262142][ T8865] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 154.349567][ T8872] loop3: detected capacity change from 0 to 1024 [ 154.361282][ T8872] EXT4-fs: Ignoring removed orlov option [ 154.370194][ T8874] loop2: detected capacity change from 0 to 512 [ 154.403926][ T8874] EXT4-fs: Ignoring removed orlov option [ 154.422764][ T8874] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1785: inode has both inline data and extents flags [ 154.457390][ T8874] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1785: couldn't read orphan inode 15 (err -117) [ 154.925559][ T8890] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1790'. [ 154.936729][ T8889] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 154.936729][ T8889] program syz.4.1790 not setting count and/or reply_len properly [ 155.118121][ T8900] loop1: detected capacity change from 0 to 1024 [ 155.169275][ T8908] loop2: detected capacity change from 0 to 1024 [ 155.178997][ T8900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 155.189134][ T8908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 155.226571][ T8908] ext4: Unknown parameter 'F' [ 155.270473][ T8900] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 155.382210][ T8921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1801'. [ 155.419885][ T8921] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 155.419885][ T8921] program syz.4.1801 not setting count and/or reply_len properly [ 155.514905][ T8923] loop1: detected capacity change from 0 to 512 [ 155.563607][ T8923] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.697793][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 155.697807][ T29] audit: type=1326 audit(1762161953.397:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.742582][ T29] audit: type=1326 audit(1762161953.437:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.766146][ T29] audit: type=1326 audit(1762161953.437:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.789784][ T29] audit: type=1326 audit(1762161953.437:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.813197][ T29] audit: type=1326 audit(1762161953.437:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.836897][ T29] audit: type=1326 audit(1762161953.437:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.840726][ T8946] loop1: detected capacity change from 0 to 2048 [ 155.860253][ T29] audit: type=1326 audit(1762161953.437:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.890083][ T29] audit: type=1326 audit(1762161953.437:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.913553][ T29] audit: type=1326 audit(1762161953.437:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.937004][ T29] audit: type=1326 audit(1762161953.437:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8945 comm="syz.1.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 155.989481][ T8957] loop3: detected capacity change from 0 to 1024 [ 155.996371][ T8957] EXT4-fs: test_dummy_encryption option not supported [ 156.175280][ T8964] loop2: detected capacity change from 0 to 512 [ 156.459253][ T8970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1814'. [ 156.524711][ T8970] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 156.524711][ T8970] program syz.1.1814 not setting count and/or reply_len properly [ 156.800596][ T8994] loop3: detected capacity change from 0 to 512 [ 156.822863][ T8994] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.045104][ T8983] net_ratelimit: 4 callbacks suppressed [ 157.045116][ T8983] Set syz1 is full, maxelem 65536 reached [ 157.127018][ T9002] loop1: detected capacity change from 0 to 2048 [ 157.512795][ T9016] loop3: detected capacity change from 0 to 512 [ 157.532332][ T9016] EXT4-fs: Ignoring removed orlov option [ 157.551324][ T9016] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1829: inode has both inline data and extents flags [ 157.573901][ T9023] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 157.573901][ T9023] program syz.4.1832 not setting count and/or reply_len properly [ 157.603810][ T9016] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1829: couldn't read orphan inode 15 (err -117) [ 157.882513][ T9039] loop3: detected capacity change from 0 to 2048 [ 158.086605][ T9048] __nla_validate_parse: 3 callbacks suppressed [ 158.086622][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 158.129398][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 158.182094][ T9052] loop2: detected capacity change from 0 to 1024 [ 158.216125][ T9020] Set syz1 is full, maxelem 65536 reached [ 158.232407][ T9050] team0 (unregistering): Port device team_slave_0 removed [ 158.255746][ T9050] team0 (unregistering): Port device team_slave_1 removed [ 158.297887][ T9052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 158.330010][ T9052] ext4: Unknown parameter 'F' [ 158.384059][ T9069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1844'. [ 158.404367][ T9067] loop1: detected capacity change from 0 to 2048 [ 158.411828][ T9069] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.411828][ T9069] program syz.0.1844 not setting count and/or reply_len properly [ 158.495725][ T9067] loop1: unable to read partition table [ 158.501582][ T9067] loop1: partition table beyond EOD, truncated [ 158.507820][ T9067] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 158.584993][ T9081] loop2: detected capacity change from 0 to 1024 [ 158.591712][ T9081] EXT4-fs: Ignoring removed orlov option [ 158.871855][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 158.924734][ T9098] loop3: detected capacity change from 0 to 1024 [ 158.943042][ T9098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 158.953427][ T9100] loop1: detected capacity change from 0 to 2048 [ 158.962673][ T9098] ext4: Unknown parameter 'F' [ 158.983504][ T9100] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1856: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 159.035796][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1857'. [ 159.045869][ T9107] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 159.045869][ T9107] program syz.1.1857 not setting count and/or reply_len properly [ 159.096628][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 159.464434][ T9122] loop2: detected capacity change from 0 to 512 [ 159.482857][ T9122] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.558341][ T9129] loop2: detected capacity change from 0 to 8192 [ 159.641251][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 159.681649][ T9140] loop2: detected capacity change from 0 to 1024 [ 159.783230][ T9140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 159.810955][ T9140] ext4: Unknown parameter 'F' [ 160.213946][ T9157] loop3: detected capacity change from 0 to 512 [ 160.234735][ T9157] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.284920][ T9165] loop2: detected capacity change from 0 to 2048 [ 160.328488][ T9168] loop3: detected capacity change from 0 to 8192 [ 160.360425][ T9165] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1876: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 160.437796][ T9179] loop2: detected capacity change from 0 to 128 [ 160.478280][ T9179] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 160.486299][ T9179] FAT-fs (loop2): Filesystem has been set read-only [ 160.503354][ T9179] bio_check_eod: 110937 callbacks suppressed [ 160.503369][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.503369][ T9179] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 160.548413][ T9179] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 160.556359][ T9179] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 160.577187][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.577187][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.597279][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.597279][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.611298][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.611298][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.625519][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.625519][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.639718][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.639718][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.653924][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.653924][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.667419][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.667419][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.681154][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.681154][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.712634][ T9179] syz.2.1881: attempt to access beyond end of device [ 160.712634][ T9179] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 160.760767][ T9192] buffer_io_error: 110582 callbacks suppressed [ 160.760782][ T9192] Buffer I/O error on dev loop2, logical block 2065, async page read [ 160.806316][ T9192] Buffer I/O error on dev loop2, logical block 2066, async page read [ 160.824836][ T9192] Buffer I/O error on dev loop2, logical block 2067, async page read [ 160.843201][ T9192] Buffer I/O error on dev loop2, logical block 2068, async page read [ 160.861575][ T9192] Buffer I/O error on dev loop2, logical block 2069, async page read [ 160.878851][ T9192] Buffer I/O error on dev loop2, logical block 2070, async page read [ 160.898295][ T9192] Buffer I/O error on dev loop2, logical block 2071, async page read [ 160.909438][ T9192] Buffer I/O error on dev loop2, logical block 2072, async page read [ 160.924162][ T9179] Buffer I/O error on dev loop2, logical block 2065, async page read [ 160.948650][ T9179] Buffer I/O error on dev loop2, logical block 2066, async page read [ 161.306684][ T29] kauditd_printk_skb: 998 callbacks suppressed [ 161.306699][ T29] audit: type=1400 audit(1762161959.007:6991): avc: denied { append } for pid=9202 comm="syz.4.1890" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 161.393907][ T9206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.412633][ T29] audit: type=1326 audit(1762161959.117:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.435534][ T29] audit: type=1326 audit(1762161959.117:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.468050][ T9203] netlink: 'syz.4.1890': attribute type 21 has an invalid length. [ 161.476174][ T9203] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1890'. [ 161.477639][ T29] audit: type=1326 audit(1762161959.117:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.508287][ T29] audit: type=1326 audit(1762161959.117:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.531378][ T29] audit: type=1326 audit(1762161959.117:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.554249][ T29] audit: type=1326 audit(1762161959.117:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.577216][ T29] audit: type=1326 audit(1762161959.117:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.579959][ T9209] loop3: detected capacity change from 0 to 512 [ 161.600165][ T29] audit: type=1326 audit(1762161959.117:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.606812][ T9209] EXT4-fs: Ignoring removed orlov option [ 161.629487][ T29] audit: type=1326 audit(1762161959.117:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe22366efc9 code=0x7ffc0000 [ 161.640243][ T9209] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1892: inode has both inline data and extents flags [ 161.676263][ T9206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.686656][ T9209] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1892: couldn't read orphan inode 15 (err -117) [ 161.699265][ T9209] EXT4-fs mount: 59 callbacks suppressed [ 161.699313][ T9209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.725415][ T9206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.726224][ T9215] loop1: detected capacity change from 0 to 1024 [ 161.762681][ T9215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 161.771505][ T9215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.786684][ T9206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.802525][ T9215] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 161.823272][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.847872][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.863116][ T7975] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.880753][ T270] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.898462][ T270] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.909901][ T270] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.910794][ T9219] loop3: detected capacity change from 0 to 1024 [ 161.941645][ T9219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 161.950430][ T9219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.971817][ T9219] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.079401][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.132303][ T9239] netlink: 2184 bytes leftover after parsing attributes in process `syz.4.1903'. [ 162.145675][ T9239] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1903'. [ 162.196637][ T9247] FAULT_INJECTION: forcing a failure. [ 162.196637][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 162.209340][ T9247] CPU: 0 UID: 0 PID: 9247 Comm: syz.4.1905 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.209370][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.209387][ T9247] Call Trace: [ 162.209396][ T9247] [ 162.209403][ T9247] __dump_stack+0x1d/0x30 [ 162.209452][ T9247] dump_stack_lvl+0xe8/0x140 [ 162.209474][ T9247] dump_stack+0x15/0x1b [ 162.209490][ T9247] should_fail_ex+0x265/0x280 [ 162.209512][ T9247] should_failslab+0x8c/0xb0 [ 162.209547][ T9247] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 162.209580][ T9247] ? sidtab_sid2str_get+0xa0/0x130 [ 162.209680][ T9247] kmemdup_noprof+0x2b/0x70 [ 162.209742][ T9247] sidtab_sid2str_get+0xa0/0x130 [ 162.209784][ T9247] security_sid_to_context_core+0x1eb/0x2e0 [ 162.209819][ T9247] security_sid_to_context+0x27/0x40 [ 162.209847][ T9247] avc_audit_post_callback+0x10f/0x520 [ 162.209885][ T9247] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 162.209934][ T9247] common_lsm_audit+0x1bb/0x230 [ 162.210005][ T9247] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 162.210044][ T9247] slow_avc_audit+0x104/0x140 [ 162.210124][ T9247] avc_has_perm+0x13a/0x180 [ 162.210142][ T9247] selinux_inode_setxattr+0x32c/0x6e0 [ 162.210171][ T9247] ? update_curr+0x2c/0x1b0 [ 162.210265][ T9247] security_inode_setxattr+0x13a/0x1b0 [ 162.210357][ T9247] __vfs_setxattr_locked+0x83/0x1d0 [ 162.210450][ T9247] vfs_setxattr+0x132/0x270 [ 162.210541][ T9247] file_setxattr+0x139/0x1b0 [ 162.210566][ T9247] path_setxattrat+0x290/0x310 [ 162.210635][ T9247] __x64_sys_fsetxattr+0x6b/0x80 [ 162.210664][ T9247] x64_sys_call+0x1ced/0x3000 [ 162.210688][ T9247] do_syscall_64+0xd2/0x200 [ 162.210707][ T9247] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.210760][ T9247] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.210791][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.210839][ T9247] RIP: 0033:0x7f0efa03efc9 [ 162.210855][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.210874][ T9247] RSP: 002b:00007f0ef8aa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 162.210915][ T9247] RAX: ffffffffffffffda RBX: 00007f0efa295fa0 RCX: 00007f0efa03efc9 [ 162.210929][ T9247] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 162.210941][ T9247] RBP: 00007f0ef8aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.210953][ T9247] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000002 [ 162.210966][ T9247] R13: 00007f0efa296038 R14: 00007f0efa295fa0 R15: 00007ffee940eb88 [ 162.210986][ T9247] [ 162.484139][ T9251] loop2: detected capacity change from 0 to 512 [ 162.496934][ T9251] EXT4-fs: Ignoring removed orlov option [ 162.504099][ T9251] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1906: inode has both inline data and extents flags [ 162.518243][ T9251] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1906: couldn't read orphan inode 15 (err -117) [ 162.531998][ T9251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.591718][ T9249] loop3: detected capacity change from 0 to 512 [ 162.601879][ T9249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.620398][ T9249] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.654026][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.828849][ T9261] loop1: detected capacity change from 0 to 8192 [ 162.983450][ T9274] loop1: detected capacity change from 0 to 128 [ 163.181442][ T9295] __nla_validate_parse: 1 callbacks suppressed [ 163.181459][ T9295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1922'. [ 163.225913][ T9294] loop2: detected capacity change from 0 to 8192 [ 163.337099][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.448715][ T9305] loop1: detected capacity change from 0 to 128 [ 163.484558][ T9305] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 163.492538][ T9305] FAT-fs (loop1): Filesystem has been set read-only [ 163.526854][ T9305] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 163.534874][ T9305] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 164.382786][ T9320] loop3: detected capacity change from 0 to 1024 [ 164.408869][ T9320] EXT4-fs: Ignoring removed orlov option [ 164.431297][ T9320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.495387][ T9329] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1933'. [ 164.651256][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 164.675098][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 165.096238][ T9345] loop2: detected capacity change from 0 to 512 [ 165.150092][ T9348] loop1: detected capacity change from 0 to 1024 [ 165.238440][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.314445][ T9348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 165.344813][ T9345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.359541][ T9348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.481414][ T9347] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 165.552285][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.817010][ T9371] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1945'. [ 165.911862][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.153556][ T9391] loop2: detected capacity change from 0 to 128 [ 166.164096][ T9391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 166.172141][ T9391] FAT-fs (loop2): Filesystem has been set read-only [ 166.179400][ T9391] bio_check_eod: 59086 callbacks suppressed [ 166.179413][ T9391] syz.2.1953: attempt to access beyond end of device [ 166.179413][ T9391] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 166.204558][ T9391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 166.212469][ T9391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 166.221466][ T9391] syz.2.1953: attempt to access beyond end of device [ 166.221466][ T9391] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.395159][ T9391] syz.2.1953: attempt to access beyond end of device [ 166.395159][ T9391] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 166.413472][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.413472][ T9396] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 166.426872][ T9396] buffer_io_error: 58182 callbacks suppressed [ 166.426907][ T9396] Buffer I/O error on dev loop2, logical block 2065, async page read [ 166.447923][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.447923][ T9396] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 166.461209][ T9396] Buffer I/O error on dev loop2, logical block 2066, async page read [ 166.470180][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.470180][ T9396] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 166.483514][ T9396] Buffer I/O error on dev loop2, logical block 2067, async page read [ 166.551414][ T9399] loop1: detected capacity change from 0 to 128 [ 166.557811][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 166.557869][ T29] audit: type=1326 audit(1762161964.247:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 166.560569][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.560569][ T9396] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 166.564074][ T29] audit: type=1326 audit(1762161964.247:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 166.587646][ T9396] Buffer I/O error on dev loop2, logical block 2068, async page read [ 166.600846][ T29] audit: type=1326 audit(1762161964.247:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c6adaefc9 code=0x7ffc0000 [ 166.626447][ T9402] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1956'. [ 166.632819][ T29] audit: type=1326 audit(1762161964.247:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c6adaf003 code=0x7ffc0000 [ 166.688569][ T29] audit: type=1326 audit(1762161964.257:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c6adada7f code=0x7ffc0000 [ 166.711801][ T29] audit: type=1326 audit(1762161964.257:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c6adaf057 code=0x7ffc0000 [ 166.735131][ T29] audit: type=1326 audit(1762161964.257:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6adad810 code=0x7ffc0000 [ 166.747760][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.747760][ T9396] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 166.758693][ T29] audit: type=1326 audit(1762161964.257:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c6adaebcb code=0x7ffc0000 [ 166.771885][ T9396] Buffer I/O error on dev loop2, logical block 2069, async page read [ 166.804085][ T29] audit: type=1326 audit(1762161964.367:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c6adadc2a code=0x7ffc0000 [ 166.827722][ T29] audit: type=1326 audit(1762161964.367:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.1.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c6adadc2a code=0x7ffc0000 [ 166.851927][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.851927][ T9396] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 166.865692][ T9396] Buffer I/O error on dev loop2, logical block 2070, async page read [ 166.887393][ T9396] syz.2.1953: attempt to access beyond end of device [ 166.887393][ T9396] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 166.900759][ T9396] Buffer I/O error on dev loop2, logical block 2071, async page read [ 166.908838][ T9396] Buffer I/O error on dev loop2, logical block 2072, async page read [ 166.917345][ T9391] Buffer I/O error on dev loop2, logical block 2065, async page read [ 166.925620][ T9391] Buffer I/O error on dev loop2, logical block 2066, async page read [ 167.245246][ T9420] loop2: detected capacity change from 0 to 8192 [ 167.296933][ T9423] loop3: detected capacity change from 0 to 128 [ 167.304966][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 167.362601][ T9423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 167.370473][ T9423] FAT-fs (loop3): Filesystem has been set read-only [ 167.420694][ T9423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 167.428607][ T9423] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 167.661128][ T9438] loop1: detected capacity change from 0 to 2048 [ 167.692693][ T9438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.713003][ T9438] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 167.787195][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.889868][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 167.973708][ T9454] loop1: detected capacity change from 0 to 1024 [ 167.997447][ T9454] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 168.010980][ T9454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.093667][ T9454] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.192668][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.363581][ T9459] loop1: detected capacity change from 0 to 8192 [ 168.634235][ T9469] loop2: detected capacity change from 0 to 512 [ 168.823599][ T9469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.003241][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.015001][ T9479] loop1: detected capacity change from 0 to 512 [ 169.043227][ T9479] EXT4-fs: Ignoring removed orlov option [ 169.103920][ T9479] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1981: inode has both inline data and extents flags [ 169.130693][ T9479] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1981: couldn't read orphan inode 15 (err -117) [ 169.150068][ T9479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.278881][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.291871][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 169.354844][ T9491] loop3: detected capacity change from 0 to 512 [ 169.362303][ T9491] EXT4-fs: Ignoring removed orlov option [ 169.368382][ T9491] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 169.378249][ T9491] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1987: corrupted in-inode xattr: e_value size too large [ 169.392724][ T9491] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1987: couldn't read orphan inode 15 (err -117) [ 169.405543][ T9491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.523399][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.219684][ T9511] loop1: detected capacity change from 0 to 1024 [ 170.226431][ T9511] EXT4-fs: Ignoring removed orlov option [ 170.234188][ T9511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.272812][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.296554][ T9516] loop1: detected capacity change from 0 to 1024 [ 170.322973][ T9516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 170.331784][ T9516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.363996][ T9516] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 170.465887][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 170.487828][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.537908][ T9529] loop1: detected capacity change from 0 to 512 [ 170.544585][ T9529] EXT4-fs: Ignoring removed orlov option [ 170.569310][ T9529] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2000: inode has both inline data and extents flags [ 170.583331][ T9529] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2000: couldn't read orphan inode 15 (err -117) [ 170.596033][ T9529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.691029][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.027392][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 171.255210][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'. [ 171.367988][ T9569] loop2: detected capacity change from 0 to 1024 [ 171.375061][ T9569] EXT4-fs: Ignoring removed orlov option [ 171.390232][ T9569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.751834][ T9582] loop1: detected capacity change from 0 to 8192 [ 172.000639][ T9570] ================================================================== [ 172.008754][ T9570] BUG: KCSAN: data-race in touch_atime / touch_atime [ 172.015533][ T9570] [ 172.017848][ T9570] write to 0xffff88811a97c3d8 of 4 bytes by task 9566 on cpu 1: [ 172.025549][ T9570] touch_atime+0x1e8/0x340 [ 172.029974][ T9570] shmem_file_read_iter+0x477/0x540 [ 172.035166][ T9570] copy_splice_read+0x442/0x660 [ 172.040019][ T9570] splice_direct_to_actor+0x290/0x680 [ 172.045388][ T9570] do_splice_direct+0xda/0x150 [ 172.050154][ T9570] do_sendfile+0x380/0x650 [ 172.054570][ T9570] __x64_sys_sendfile64+0x105/0x150 [ 172.059785][ T9570] x64_sys_call+0x2bb4/0x3000 [ 172.064465][ T9570] do_syscall_64+0xd2/0x200 [ 172.068960][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.074845][ T9570] [ 172.077158][ T9570] read to 0xffff88811a97c3d8 of 4 bytes by task 9570 on cpu 0: [ 172.084692][ T9570] touch_atime+0x194/0x340 [ 172.089157][ T9570] shmem_file_read_iter+0x477/0x540 [ 172.094346][ T9570] copy_splice_read+0x442/0x660 [ 172.099200][ T9570] splice_direct_to_actor+0x290/0x680 [ 172.104583][ T9570] do_splice_direct+0xda/0x150 [ 172.109432][ T9570] do_sendfile+0x380/0x650 [ 172.113942][ T9570] __x64_sys_sendfile64+0x105/0x150 [ 172.119148][ T9570] x64_sys_call+0x2bb4/0x3000 [ 172.123896][ T9570] do_syscall_64+0xd2/0x200 [ 172.128408][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.134326][ T9570] [ 172.136643][ T9570] value changed: 0x29985e2a -> 0x2a30f4aa [ 172.142354][ T9570] [ 172.145191][ T9570] Reported by Kernel Concurrency Sanitizer on: [ 172.151333][ T9570] CPU: 0 UID: 0 PID: 9570 Comm: syz.0.2014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.161061][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.171111][ T9570] ================================================================== [ 172.200219][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.