last executing test programs: 3.049382136s ago: executing program 2 (id=1365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f000c"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9f62}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004005}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000d602000000000007010000f8ff80caddffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_open_dev$usbfs(&(0x7f00000005c0), 0x8f1, 0x104301) getcwd(0x0, 0x0) 2.76173541s ago: executing program 0 (id=1371): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb"], 0x30}, 0x40880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x20008, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x4000, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x116, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x10, 0x4, 0x0, 0x28, 0x40, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @lsrr={0x83, 0x1f, 0xf, [@remote, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, @loopback, @local]}, @cipso={0x86, 0x6}, @generic={0x44, 0x3, "c0"}]}}}}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, &(0x7f0000000080), 0x10) getrusage(0x1, &(0x7f0000000040)) 2.125990249s ago: executing program 2 (id=1376): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r0, 0x0, 0x8) 2.102601849s ago: executing program 2 (id=1377): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000880)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073", 0xa5}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c028c27ba1d00000000000000000005000033abe805fe6cdcd4386304aee926d10982f6054c0e49c4a6be676d07a9d61ab465cc070000004726d0d2e39543237c93424a344146f9c3be104f7366c812776c6c4eeb4d588b56567e03", 0xa1}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542", 0x2e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52f", 0x4c}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.905187442s ago: executing program 0 (id=1378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.352899241s ago: executing program 3 (id=1384): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xdf5, r1, &(0x7f0000000400)="1803", 0x2, 0x800, 0x0, 0x0, r1}]) 1.256770062s ago: executing program 3 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) 1.183117643s ago: executing program 3 (id=1388): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = dup(r1) r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) sendfile(r5, r6, 0x0, 0x8000fffffffe) 1.073864164s ago: executing program 4 (id=1389): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000008000000f100007b8af8bea371418b580700000000000000a200e4df83a662b3a2e1f1e8f0619dc3b6bc18f162b776c0da5b97b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x5, 0x2, 0x4, @private2, @loopback, 0x1, 0x7800, 0x80000001, 0x8}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x51cca4c7262bd871, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 983.738976ms ago: executing program 0 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 963.783416ms ago: executing program 0 (id=1391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/30) 963.489156ms ago: executing program 2 (id=1392): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x1001}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 910.206487ms ago: executing program 0 (id=1393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 866.221568ms ago: executing program 0 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) 819.760268ms ago: executing program 1 (id=1395): socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 809.780098ms ago: executing program 3 (id=1396): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 797.389198ms ago: executing program 1 (id=1397): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r0, 0x0, 0x8) 752.081149ms ago: executing program 1 (id=1398): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup(r1) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendfile(r3, r4, 0x0, 0x8000fffffffe) 629.894601ms ago: executing program 4 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 598.520471ms ago: executing program 4 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 554.362182ms ago: executing program 3 (id=1401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xdf5, r2, &(0x7f0000000400)="1803", 0x2, 0x800, 0x0, 0x0, r2}]) 496.364073ms ago: executing program 4 (id=1402): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000009c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_continue}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) 414.905914ms ago: executing program 3 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getgroups(0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) 414.412774ms ago: executing program 2 (id=1404): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 346.550395ms ago: executing program 4 (id=1405): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 215.750847ms ago: executing program 1 (id=1406): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000880)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000b40)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec", 0xe7}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073", 0xa5}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000006000200000088e0e022b04dbd50d36f3c028c27ba1d00000000000000000005000033abe805fe6cdcd4386304aee926d10982f6054c0e49c4a6be676d07a9d61ab465cc070000004726d0d2e39543237c93424a344146f9c3be104f7366c812776c6c4eeb4d588b56567e03", 0xa1}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542", 0x2e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52f", 0x4c}], 0x3}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 121.435498ms ago: executing program 2 (id=1407): socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 115.326478ms ago: executing program 1 (id=1408): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="8b3329bd70000000000005"], 0x2c}}, 0x0) 23.65832ms ago: executing program 4 (id=1409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xdf5, r2, &(0x7f0000000400)="1803", 0x2, 0x800, 0x0, 0x0, r2}]) 0s ago: executing program 1 (id=1410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 12 [ 70.473628][ T5480] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.487299][ T5480] EXT4-fs (loop0): 1 truncate cleaned up [ 70.494278][ T5480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.550237][ T5488] loop3: detected capacity change from 0 to 128 [ 70.559388][ T5488] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.573725][ T5488] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.751718][ T5553] lo speed is unknown, defaulting to 1000 [ 70.850855][ T5554] program syz.0.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.434980][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.474063][ T5564] loop0: detected capacity change from 0 to 128 [ 71.500303][ T5566] loop2: detected capacity change from 0 to 512 [ 71.520100][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.530534][ T5564] FAT-fs (loop0): Directory bread(block 162) failed [ 71.539780][ T5564] FAT-fs (loop0): Directory bread(block 163) failed [ 71.548667][ T5564] FAT-fs (loop0): Directory bread(block 164) failed [ 71.562526][ T5564] FAT-fs (loop0): Directory bread(block 165) failed [ 71.571315][ T5564] FAT-fs (loop0): Directory bread(block 166) failed [ 71.579166][ T5564] FAT-fs (loop0): Directory bread(block 167) failed [ 71.587619][ T5564] FAT-fs (loop0): Directory bread(block 168) failed [ 71.594735][ T5564] FAT-fs (loop0): Directory bread(block 169) failed [ 71.604031][ T5564] FAT-fs (loop0): Directory bread(block 162) failed [ 71.611909][ T5564] FAT-fs (loop0): Directory bread(block 163) failed [ 71.622310][ T5564] syz.0.703: attempt to access beyond end of device [ 71.622310][ T5564] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 71.641501][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 71.646717][ T5584] loop2: detected capacity change from 0 to 1024 [ 71.658177][ T5564] syz.0.703: attempt to access beyond end of device [ 71.658177][ T5564] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 71.659284][ T5583] netlink: 88 bytes leftover after parsing attributes in process `syz.1.710'. [ 71.681292][ T5581] loop3: detected capacity change from 0 to 128 [ 71.696564][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.751727][ T5583] ALSA: seq fatal error: cannot create timer (-19) [ 71.758470][ T5588] loop3: detected capacity change from 0 to 512 [ 71.766311][ T5588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.778211][ T5588] EXT4-fs (loop3): 1 truncate cleaned up [ 71.784377][ T5588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.867030][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.016252][ T5601] lo speed is unknown, defaulting to 1000 [ 72.150664][ T5601] program syz.3.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.542889][ T5611] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 72.645962][ T5613] loop4: detected capacity change from 0 to 128 [ 72.674334][ T5613] FAT-fs (loop4): Directory bread(block 162) failed [ 72.691189][ T5613] FAT-fs (loop4): Directory bread(block 163) failed [ 72.698155][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.698579][ T5613] FAT-fs (loop4): Directory bread(block 164) failed [ 72.716777][ T5613] FAT-fs (loop4): Directory bread(block 165) failed [ 72.725311][ T5613] FAT-fs (loop4): Directory bread(block 166) failed [ 72.732369][ T5613] FAT-fs (loop4): Directory bread(block 167) failed [ 72.740957][ T5613] FAT-fs (loop4): Directory bread(block 168) failed [ 72.748071][ T5613] FAT-fs (loop4): Directory bread(block 169) failed [ 72.758813][ T5613] FAT-fs (loop4): Directory bread(block 162) failed [ 72.767164][ T5613] FAT-fs (loop4): Directory bread(block 163) failed [ 72.774135][ T5619] hub 6-0:1.0: USB hub found [ 72.774691][ T5613] syz.4.723: attempt to access beyond end of device [ 72.774691][ T5613] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 72.780515][ T5621] loop2: detected capacity change from 0 to 1024 [ 72.800682][ T5613] syz.4.723: attempt to access beyond end of device [ 72.800682][ T5613] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 72.814589][ T5619] hub 6-0:1.0: 8 ports detected [ 72.817483][ T5621] EXT4-fs: Ignoring removed bh option [ 72.825074][ T5621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.853572][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.880876][ T5632] loop3: detected capacity change from 0 to 128 [ 73.228958][ T5664] bond_slave_0: entered promiscuous mode [ 73.234711][ T5664] bond_slave_1: entered promiscuous mode [ 73.264893][ T5664] vlan2: entered promiscuous mode [ 73.270005][ T5664] bond0: entered promiscuous mode [ 73.521063][ T5680] loop4: detected capacity change from 0 to 128 [ 73.636719][ T5689] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 73.644444][ T5689] netlink: 224 bytes leftover after parsing attributes in process `syz.4.748'. [ 73.665883][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.675411][ T5691] loop3: detected capacity change from 0 to 1024 [ 73.683635][ T5691] EXT4-fs: Ignoring removed bh option [ 73.689283][ T5691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.699960][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.127677][ T29] kauditd_printk_skb: 1466 callbacks suppressed [ 74.127695][ T29] audit: type=1326 audit(1749233827.914:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.159266][ T29] audit: type=1326 audit(1749233827.914:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.182216][ T29] audit: type=1326 audit(1749233827.914:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.205327][ T29] audit: type=1326 audit(1749233827.914:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.228388][ T29] audit: type=1326 audit(1749233827.914:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.251430][ T29] audit: type=1326 audit(1749233827.914:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.274392][ T29] audit: type=1326 audit(1749233827.914:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.297697][ T29] audit: type=1326 audit(1749233827.914:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.320685][ T29] audit: type=1326 audit(1749233827.914:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.343723][ T29] audit: type=1326 audit(1749233827.914:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 74.441570][ T5747] loop1: detected capacity change from 0 to 128 [ 74.451631][ T5747] FAT-fs (loop1): Directory bread(block 162) failed [ 74.459781][ T5747] FAT-fs (loop1): Directory bread(block 163) failed [ 74.467413][ T5747] FAT-fs (loop1): Directory bread(block 164) failed [ 74.475094][ T5747] FAT-fs (loop1): Directory bread(block 165) failed [ 74.482425][ T5747] FAT-fs (loop1): Directory bread(block 166) failed [ 74.492140][ T5747] FAT-fs (loop1): Directory bread(block 167) failed [ 74.499617][ T5747] FAT-fs (loop1): Directory bread(block 168) failed [ 74.510233][ T5747] FAT-fs (loop1): Directory bread(block 169) failed [ 74.519150][ T5747] FAT-fs (loop1): Directory bread(block 162) failed [ 74.526563][ T5747] FAT-fs (loop1): Directory bread(block 163) failed [ 74.527018][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.534438][ T5747] syz.1.769: attempt to access beyond end of device [ 74.534438][ T5747] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 74.556716][ T5747] syz.1.769: attempt to access beyond end of device [ 74.556716][ T5747] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 74.591880][ T5754] loop3: detected capacity change from 0 to 512 [ 74.599312][ T5754] EXT4-fs: Ignoring removed i_version option [ 74.605430][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.612902][ T5754] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.624141][ T5754] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 74.643898][ T5754] loop3: detected capacity change from 0 to 1024 [ 74.647243][ T5758] loop1: detected capacity change from 0 to 128 [ 74.655244][ T5754] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 74.659719][ T5758] FAT-fs (loop1): Directory bread(block 162) failed [ 74.672314][ T5758] FAT-fs (loop1): Directory bread(block 163) failed [ 74.680617][ T5758] FAT-fs (loop1): Directory bread(block 164) failed [ 74.687893][ T5758] FAT-fs (loop1): Directory bread(block 165) failed [ 74.694591][ T5758] FAT-fs (loop1): Directory bread(block 166) failed [ 74.702192][ T5758] FAT-fs (loop1): Directory bread(block 167) failed [ 74.710733][ T5758] FAT-fs (loop1): Directory bread(block 168) failed [ 74.719377][ T5758] FAT-fs (loop1): Directory bread(block 169) failed [ 74.729783][ T5758] FAT-fs (loop1): Directory bread(block 162) failed [ 74.736805][ T5758] FAT-fs (loop1): Directory bread(block 163) failed [ 74.744449][ T5758] syz.1.773: attempt to access beyond end of device [ 74.744449][ T5758] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 74.758048][ T5758] syz.1.773: attempt to access beyond end of device [ 74.758048][ T5758] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 74.797445][ T5762] hub 6-0:1.0: USB hub found [ 74.813244][ T5762] hub 6-0:1.0: 8 ports detected [ 74.840034][ T5766] loop1: detected capacity change from 0 to 128 [ 74.848528][ T5766] FAT-fs (loop1): Directory bread(block 162) failed [ 74.856518][ T5766] FAT-fs (loop1): Directory bread(block 163) failed [ 74.863694][ T5766] FAT-fs (loop1): Directory bread(block 164) failed [ 74.871782][ T5766] FAT-fs (loop1): Directory bread(block 165) failed [ 74.879294][ T5772] loop2: detected capacity change from 0 to 512 [ 74.879434][ T5766] FAT-fs (loop1): Directory bread(block 166) failed [ 74.893123][ T5772] EXT4-fs: Ignoring removed i_version option [ 74.899283][ T5772] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.908090][ T5766] FAT-fs (loop1): Directory bread(block 167) failed [ 74.915167][ T5772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.925898][ T5766] FAT-fs (loop1): Directory bread(block 168) failed [ 74.932684][ T5766] FAT-fs (loop1): Directory bread(block 169) failed [ 74.939997][ T5772] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 74.950583][ T5766] FAT-fs (loop1): Directory bread(block 162) failed [ 74.956098][ T5776] loop0: detected capacity change from 0 to 128 [ 74.957630][ T5766] FAT-fs (loop1): Directory bread(block 163) failed [ 74.969832][ T5776] FAT-fs (loop0): Directory bread(block 162) failed [ 74.979044][ T5776] FAT-fs (loop0): Directory bread(block 163) failed [ 74.984534][ T5772] loop2: detected capacity change from 0 to 1024 [ 74.986195][ T5776] FAT-fs (loop0): Directory bread(block 164) failed [ 74.993589][ T5766] syz.1.776: attempt to access beyond end of device [ 74.993589][ T5766] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 75.000911][ T5776] FAT-fs (loop0): Directory bread(block 165) failed [ 75.012371][ T5772] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 75.026850][ T5776] FAT-fs (loop0): Directory bread(block 166) failed [ 75.028081][ T5766] syz.1.776: attempt to access beyond end of device [ 75.028081][ T5766] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 75.034405][ T5776] FAT-fs (loop0): Directory bread(block 167) failed [ 75.050580][ T5772] FAULT_INJECTION: forcing a failure. [ 75.050580][ T5772] name failslab, interval 1, probability 0, space 0, times 0 [ 75.056002][ T5776] FAT-fs (loop0): Directory bread(block 168) failed [ 75.066582][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.2.780 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 75.066620][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.066636][ T5772] Call Trace: [ 75.066644][ T5772] [ 75.066693][ T5772] __dump_stack+0x1d/0x30 [ 75.066723][ T5772] dump_stack_lvl+0xe8/0x140 [ 75.066811][ T5772] dump_stack+0x15/0x1b [ 75.066833][ T5772] should_fail_ex+0x265/0x280 [ 75.066904][ T5772] should_failslab+0x8c/0xb0 [ 75.066936][ T5772] kmem_cache_alloc_noprof+0x50/0x310 [ 75.066971][ T5772] ? sk_prot_alloc+0x3f/0x190 [ 75.067072][ T5772] ? should_failslab+0x8c/0xb0 [ 75.067105][ T5772] sk_prot_alloc+0x3f/0x190 [ 75.067140][ T5772] sk_alloc+0x34/0x360 [ 75.067175][ T5772] inet6_create+0x3bd/0x870 [ 75.067272][ T5772] __sock_create+0x2e9/0x5b0 [ 75.067303][ T5772] sock_create_kern+0x38/0x50 [ 75.067332][ T5772] udp_sock_create6+0x68/0x3d0 [ 75.067461][ T5772] fou_nl_add_doit+0xd8/0x410 [ 75.067503][ T5772] genl_family_rcv_msg_doit+0x140/0x1b0 [ 75.067532][ T5772] genl_rcv_msg+0x422/0x460 [ 75.067632][ T5772] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 75.067671][ T5772] netlink_rcv_skb+0x123/0x220 [ 75.067763][ T5772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.067798][ T5772] genl_rcv+0x28/0x40 [ 75.067822][ T5772] netlink_unicast+0x59e/0x670 [ 75.067859][ T5772] netlink_sendmsg+0x58b/0x6b0 [ 75.067930][ T5772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.068038][ T5772] __sock_sendmsg+0x145/0x180 [ 75.068065][ T5772] ____sys_sendmsg+0x31e/0x4e0 [ 75.068166][ T5772] ___sys_sendmsg+0x17b/0x1d0 [ 75.068237][ T5772] __x64_sys_sendmsg+0xd4/0x160 [ 75.068282][ T5772] x64_sys_call+0x2999/0x2fb0 [ 75.068382][ T5772] do_syscall_64+0xd2/0x200 [ 75.068420][ T5772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.068492][ T5772] ? clear_bhb_loop+0x40/0x90 [ 75.068519][ T5772] ? clear_bhb_loop+0x40/0x90 [ 75.068548][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.068576][ T5772] RIP: 0033:0x7f3e2fdde929 [ 75.068607][ T5772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.068631][ T5772] RSP: 002b:00007f3e2e447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.068655][ T5772] RAX: ffffffffffffffda RBX: 00007f3e30005fa0 RCX: 00007f3e2fdde929 [ 75.068672][ T5772] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 75.068704][ T5772] RBP: 00007f3e2e447090 R08: 0000000000000000 R09: 0000000000000000 [ 75.068791][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.068807][ T5772] R13: 0000000000000000 R14: 00007f3e30005fa0 R15: 00007ffec4d6e088 [ 75.068833][ T5772] [ 75.341549][ T5776] FAT-fs (loop0): Directory bread(block 169) failed [ 75.360079][ T5776] FAT-fs (loop0): Directory bread(block 162) failed [ 75.368002][ T5776] FAT-fs (loop0): Directory bread(block 163) failed [ 75.375454][ T5776] syz.0.782: attempt to access beyond end of device [ 75.375454][ T5776] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 75.388651][ T5776] syz.0.782: attempt to access beyond end of device [ 75.388651][ T5776] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 75.406656][ T5784] loop1: detected capacity change from 0 to 2048 [ 75.417675][ T5788] loop4: detected capacity change from 0 to 128 [ 75.428159][ T5788] FAT-fs (loop4): Directory bread(block 162) failed [ 75.428493][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.435022][ T5788] FAT-fs (loop4): Directory bread(block 163) failed [ 75.455447][ T5784] Invalid ELF header magic: != ELF [ 75.456374][ T5788] FAT-fs (loop4): Directory bread(block 164) failed [ 75.461897][ T5784] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.783: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 75.484363][ T5788] FAT-fs (loop4): Directory bread(block 165) failed [ 75.491102][ T5784] EXT4-fs (loop1): Remounting filesystem read-only [ 75.497820][ T5788] FAT-fs (loop4): Directory bread(block 166) failed [ 75.504465][ T5788] FAT-fs (loop4): Directory bread(block 167) failed [ 75.525565][ T5788] FAT-fs (loop4): Directory bread(block 168) failed [ 75.532704][ T5788] FAT-fs (loop4): Directory bread(block 169) failed [ 75.532918][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.554273][ T5788] FAT-fs (loop4): Directory bread(block 162) failed [ 75.561565][ T5788] FAT-fs (loop4): Directory bread(block 163) failed [ 75.570549][ T5788] syz.4.787: attempt to access beyond end of device [ 75.570549][ T5788] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 75.588430][ T5788] syz.4.787: attempt to access beyond end of device [ 75.588430][ T5788] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 75.715371][ T5821] loop4: detected capacity change from 0 to 128 [ 75.736871][ T5821] FAT-fs (loop4): Directory bread(block 162) failed [ 75.743741][ T5821] FAT-fs (loop4): Directory bread(block 163) failed [ 75.797350][ T5821] FAT-fs (loop4): Directory bread(block 164) failed [ 75.804024][ T5821] FAT-fs (loop4): Directory bread(block 165) failed [ 75.812212][ T5821] FAT-fs (loop4): Directory bread(block 166) failed [ 75.821998][ T5821] FAT-fs (loop4): Directory bread(block 167) failed [ 75.828954][ T5821] FAT-fs (loop4): Directory bread(block 168) failed [ 75.836129][ T5821] FAT-fs (loop4): Directory bread(block 169) failed [ 75.844054][ T5821] FAT-fs (loop4): Directory bread(block 162) failed [ 75.860745][ T5821] FAT-fs (loop4): Directory bread(block 163) failed [ 75.894103][ T5833] lo speed is unknown, defaulting to 1000 [ 75.962284][ T5842] loop0: detected capacity change from 0 to 1024 [ 75.970156][ T5842] EXT4-fs: Ignoring removed bh option [ 75.975777][ T5842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.009684][ T5842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.009824][ T5848] syz!: rxe_newlink: already configured on team_slave_0 [ 76.367422][ T5868] loop4: detected capacity change from 0 to 128 [ 76.379120][ T5868] FAT-fs (loop4): Directory bread(block 162) failed [ 76.392402][ T5868] FAT-fs (loop4): Directory bread(block 163) failed [ 76.400955][ T5868] FAT-fs (loop4): Directory bread(block 164) failed [ 76.409935][ T5868] FAT-fs (loop4): Directory bread(block 165) failed [ 76.434181][ T5868] FAT-fs (loop4): Directory bread(block 166) failed [ 76.457279][ T5868] FAT-fs (loop4): Directory bread(block 167) failed [ 76.473659][ T5868] FAT-fs (loop4): Directory bread(block 168) failed [ 76.493423][ T5868] FAT-fs (loop4): Directory bread(block 169) failed [ 76.515068][ T5868] FAT-fs (loop4): Directory bread(block 162) failed [ 76.530829][ T5868] FAT-fs (loop4): Directory bread(block 163) failed [ 76.676138][ T5894] syz!: rxe_newlink: already configured on team_slave_0 [ 76.707276][ T5898] syz!: rxe_newlink: already configured on team_slave_0 [ 76.809038][ T5902] sctp: [Deprecated]: syz.3.821 (pid 5902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.809038][ T5902] Use struct sctp_sack_info instead [ 76.857044][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.907526][ T5910] loop3: detected capacity change from 0 to 1024 [ 76.926781][ T5910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.947782][ T5910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.001157][ T5910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.049482][ T5917] loop0: detected capacity change from 0 to 128 [ 77.064331][ T5917] FAT-fs (loop0): Directory bread(block 162) failed [ 77.101814][ T5919] loop1: detected capacity change from 0 to 128 [ 77.114772][ T5917] FAT-fs (loop0): Directory bread(block 163) failed [ 77.121785][ T5917] FAT-fs (loop0): Directory bread(block 164) failed [ 77.131340][ T5917] FAT-fs (loop0): Directory bread(block 165) failed [ 77.143825][ T5919] FAT-fs (loop1): Directory bread(block 162) failed [ 77.151798][ T5917] FAT-fs (loop0): Directory bread(block 166) failed [ 77.163506][ T5919] FAT-fs (loop1): Directory bread(block 163) failed [ 77.164096][ T5917] FAT-fs (loop0): Directory bread(block 167) failed [ 77.189119][ T5917] FAT-fs (loop0): Directory bread(block 168) failed [ 77.201396][ T5917] FAT-fs (loop0): Directory bread(block 169) failed [ 77.207572][ T5919] FAT-fs (loop1): Directory bread(block 164) failed [ 77.214715][ T5919] FAT-fs (loop1): Directory bread(block 165) failed [ 77.221603][ T5919] FAT-fs (loop1): Directory bread(block 166) failed [ 77.232021][ T5917] FAT-fs (loop0): Directory bread(block 162) failed [ 77.232502][ T5919] FAT-fs (loop1): Directory bread(block 167) failed [ 77.246729][ T5919] FAT-fs (loop1): Directory bread(block 168) failed [ 77.246952][ T5917] FAT-fs (loop0): Directory bread(block 163) failed [ 77.253414][ T5919] FAT-fs (loop1): Directory bread(block 169) failed [ 77.286546][ T5919] FAT-fs (loop1): Directory bread(block 162) failed [ 77.305826][ T5919] FAT-fs (loop1): Directory bread(block 163) failed [ 77.330900][ T5923] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 77.775177][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.784189][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.793201][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.829128][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.838598][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.847847][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.885881][ T5966] loop2: detected capacity change from 0 to 2048 [ 77.898195][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.907154][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.916064][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 77.929201][ T5961] hub 6-0:1.0: USB hub found [ 77.933859][ T5961] hub 6-0:1.0: 8 ports detected [ 77.940777][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.956188][ T5966] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.842: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 77.974858][ T5966] EXT4-fs (loop2): Remounting filesystem read-only [ 77.995280][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.329970][ T5998] hub 6-0:1.0: USB hub found [ 78.334956][ T5998] hub 6-0:1.0: 8 ports detected [ 78.446498][ T6009] loop1: detected capacity change from 0 to 2048 [ 78.456881][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.472561][ T6009] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.860: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.489747][ T6009] EXT4-fs (loop1): Remounting filesystem read-only [ 78.492360][ T6015] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 78.514618][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.595417][ T6027] loop4: detected capacity change from 0 to 128 [ 78.602874][ T6027] EXT4-fs: Ignoring removed nobh option [ 78.611022][ T6027] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.612449][ T6025] hub 6-0:1.0: USB hub found [ 78.626796][ T6027] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.630187][ T6025] hub 6-0:1.0: 8 ports detected [ 78.779645][ T6036] loop0: detected capacity change from 0 to 128 [ 78.788680][ T6036] FAT-fs (loop0): Directory bread(block 162) failed [ 78.795879][ T6036] FAT-fs (loop0): Directory bread(block 163) failed [ 78.803097][ T6036] FAT-fs (loop0): Directory bread(block 164) failed [ 78.811890][ T6036] FAT-fs (loop0): Directory bread(block 165) failed [ 78.819702][ T6036] FAT-fs (loop0): Directory bread(block 166) failed [ 78.827834][ T6036] FAT-fs (loop0): Directory bread(block 167) failed [ 78.834914][ T6036] FAT-fs (loop0): Directory bread(block 168) failed [ 78.842256][ T6036] FAT-fs (loop0): Directory bread(block 169) failed [ 78.852299][ T6036] FAT-fs (loop0): Directory bread(block 162) failed [ 78.859429][ T6036] FAT-fs (loop0): Directory bread(block 163) failed [ 78.868527][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.898678][ T6040] loop4: detected capacity change from 0 to 2048 [ 78.915713][ T6042] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 78.923989][ T6040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.939542][ T6040] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.874: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.957839][ T6040] EXT4-fs (loop4): Remounting filesystem read-only [ 78.982588][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.018478][ T6050] loop1: detected capacity change from 0 to 128 [ 79.057917][ T6053] hub 6-0:1.0: USB hub found [ 79.062734][ T6053] hub 6-0:1.0: 8 ports detected [ 79.138128][ T29] kauditd_printk_skb: 1201 callbacks suppressed [ 79.138145][ T29] audit: type=1326 audit(1749233832.924:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 79.158079][ T6064] loop2: detected capacity change from 0 to 128 [ 79.168146][ T29] audit: type=1326 audit(1749233832.924:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.198002][ T29] audit: type=1326 audit(1749233832.924:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.214580][ T6064] EXT4-fs: Ignoring removed nobh option [ 79.222514][ T29] audit: type=1326 audit(1749233832.924:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252779][ T29] audit: type=1326 audit(1749233832.924:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252818][ T29] audit: type=1326 audit(1749233832.924:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252845][ T29] audit: type=1326 audit(1749233832.924:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252872][ T29] audit: type=1326 audit(1749233832.924:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252947][ T29] audit: type=1326 audit(1749233832.924:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.252974][ T29] audit: type=1326 audit(1749233832.924:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 79.351331][ T6069] loop4: detected capacity change from 0 to 128 [ 79.403844][ T6064] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.414628][ T6069] FAT-fs (loop4): Directory bread(block 162) failed [ 79.417497][ T6064] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.438667][ T6069] FAT-fs (loop4): Directory bread(block 163) failed [ 79.446129][ T6069] FAT-fs (loop4): Directory bread(block 164) failed [ 79.453179][ T6069] FAT-fs (loop4): Directory bread(block 165) failed [ 79.484404][ T6071] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 79.486340][ T6069] FAT-fs (loop4): Directory bread(block 166) failed [ 79.499316][ T6069] FAT-fs (loop4): Directory bread(block 167) failed [ 79.510891][ T6069] FAT-fs (loop4): Directory bread(block 168) failed [ 79.520869][ T6069] FAT-fs (loop4): Directory bread(block 169) failed [ 79.530917][ T6069] FAT-fs (loop4): Directory bread(block 162) failed [ 79.558869][ T6069] FAT-fs (loop4): Directory bread(block 163) failed [ 79.567221][ T6069] bio_check_eod: 10 callbacks suppressed [ 79.567241][ T6069] syz.4.887: attempt to access beyond end of device [ 79.567241][ T6069] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 79.588219][ T6069] syz.4.887: attempt to access beyond end of device [ 79.588219][ T6069] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 79.634111][ T6080] loop3: detected capacity change from 0 to 128 [ 79.650319][ T6081] loop4: detected capacity change from 0 to 2048 [ 79.667255][ T6081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.681911][ T6081] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.892: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 79.699709][ T6081] EXT4-fs (loop4): Remounting filesystem read-only [ 79.721122][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.747785][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.955307][ T6116] hub 6-0:1.0: USB hub found [ 79.969870][ T6116] hub 6-0:1.0: 8 ports detected [ 80.023998][ T6126] loop2: detected capacity change from 0 to 128 [ 80.032059][ T6126] FAT-fs (loop2): Directory bread(block 162) failed [ 80.039634][ T6126] FAT-fs (loop2): Directory bread(block 163) failed [ 80.046736][ T6126] FAT-fs (loop2): Directory bread(block 164) failed [ 80.053894][ T6126] FAT-fs (loop2): Directory bread(block 165) failed [ 80.076398][ T6126] FAT-fs (loop2): Directory bread(block 166) failed [ 80.083563][ T6126] FAT-fs (loop2): Directory bread(block 167) failed [ 80.091150][ T6126] FAT-fs (loop2): Directory bread(block 168) failed [ 80.098078][ T6126] FAT-fs (loop2): Directory bread(block 169) failed [ 80.106604][ T6126] FAT-fs (loop2): Directory bread(block 162) failed [ 80.113860][ T6126] FAT-fs (loop2): Directory bread(block 163) failed [ 80.123057][ T6126] syz.2.903: attempt to access beyond end of device [ 80.123057][ T6126] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 80.137836][ T6126] syz.2.903: attempt to access beyond end of device [ 80.137836][ T6126] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 80.190860][ T6141] loop2: detected capacity change from 0 to 128 [ 80.328266][ T6160] loop3: detected capacity change from 0 to 2048 [ 80.356803][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.384725][ T6160] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.909: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 80.403457][ T6160] EXT4-fs (loop3): Remounting filesystem read-only [ 80.423053][ T6175] loop0: detected capacity change from 0 to 512 [ 80.436278][ T6175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.449582][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.461620][ T6175] EXT4-fs (loop0): 1 truncate cleaned up [ 80.470315][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.669864][ T6207] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.725462][ T6208] lo speed is unknown, defaulting to 1000 [ 80.851133][ T6208] program syz.0.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.037662][ T6216] loop3: detected capacity change from 0 to 128 [ 81.087286][ T6216] FAT-fs (loop3): Directory bread(block 162) failed [ 81.098622][ T6216] FAT-fs (loop3): Directory bread(block 163) failed [ 81.109485][ T6216] FAT-fs (loop3): Directory bread(block 164) failed [ 81.116346][ T6216] FAT-fs (loop3): Directory bread(block 165) failed [ 81.123275][ T6216] FAT-fs (loop3): Directory bread(block 166) failed [ 81.123301][ T6216] FAT-fs (loop3): Directory bread(block 167) failed [ 81.123324][ T6216] FAT-fs (loop3): Directory bread(block 168) failed [ 81.123385][ T6216] FAT-fs (loop3): Directory bread(block 169) failed [ 81.135508][ T6219] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 81.136977][ T6216] FAT-fs (loop3): Directory bread(block 162) failed [ 81.137046][ T6216] FAT-fs (loop3): Directory bread(block 163) failed [ 81.137478][ T6216] syz.3.918: attempt to access beyond end of device [ 81.137478][ T6216] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 81.137513][ T6216] syz.3.918: attempt to access beyond end of device [ 81.137513][ T6216] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 81.167927][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.919'. [ 81.311413][ T6219] netem: change failed [ 81.352284][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.475109][ T6247] loop2: detected capacity change from 0 to 128 [ 81.489517][ T6248] ip6tnl1: entered promiscuous mode [ 81.494960][ T6248] ip6tnl1: entered allmulticast mode [ 81.575338][ T6261] loop4: detected capacity change from 0 to 128 [ 81.582643][ T6261] EXT4-fs: Ignoring removed nobh option [ 81.653392][ T6261] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.667832][ T6261] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.723708][ T6268] loop0: detected capacity change from 0 to 2048 [ 81.737813][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.752917][ T6268] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.932: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 81.771937][ T6268] EXT4-fs (loop0): Remounting filesystem read-only [ 81.792861][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.996547][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.130725][ T6283] loop0: detected capacity change from 0 to 128 [ 82.567574][ T6338] loop0: detected capacity change from 0 to 128 [ 82.575773][ T6338] FAT-fs (loop0): Directory bread(block 162) failed [ 82.582575][ T6338] FAT-fs (loop0): Directory bread(block 163) failed [ 82.590578][ T6338] FAT-fs (loop0): Directory bread(block 164) failed [ 82.598923][ T6338] FAT-fs (loop0): Directory bread(block 165) failed [ 82.607446][ T6338] FAT-fs (loop0): Directory bread(block 166) failed [ 82.615008][ T6338] FAT-fs (loop0): Directory bread(block 167) failed [ 82.630824][ T6338] FAT-fs (loop0): Directory bread(block 168) failed [ 82.640343][ T6337] loop1: detected capacity change from 0 to 2048 [ 82.641448][ T6338] FAT-fs (loop0): Directory bread(block 169) failed [ 82.662891][ T6338] FAT-fs (loop0): Directory bread(block 162) failed [ 82.681542][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.684450][ T6338] FAT-fs (loop0): Directory bread(block 163) failed [ 82.704576][ T6338] syz.0.953: attempt to access beyond end of device [ 82.704576][ T6338] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 82.709335][ T6337] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.952: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 82.718269][ T6338] syz.0.953: attempt to access beyond end of device [ 82.718269][ T6338] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 82.752008][ T6337] EXT4-fs (loop1): Remounting filesystem read-only [ 82.800437][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.876749][ T6365] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.888645][ T6368] vhci_hcd: invalid port number 96 [ 82.893820][ T6368] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 82.959209][ T6374] loop2: detected capacity change from 0 to 512 [ 82.977458][ T6376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6376 comm=syz.1.962 [ 82.989980][ T6376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6376 comm=syz.1.962 [ 83.052528][ T6354] loop3: detected capacity change from 0 to 512 [ 83.061219][ T6354] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 83.087373][ T6354] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 83.128833][ T6391] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.142498][ T6393] loop1: detected capacity change from 0 to 128 [ 83.150226][ T6393] FAT-fs (loop1): Directory bread(block 162) failed [ 83.157763][ T6393] FAT-fs (loop1): Directory bread(block 163) failed [ 83.167162][ T6393] FAT-fs (loop1): Directory bread(block 164) failed [ 83.173308][ T6395] vhci_hcd: invalid port number 96 [ 83.175258][ T6393] FAT-fs (loop1): Directory bread(block 165) failed [ 83.179145][ T6395] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 83.185963][ T6393] FAT-fs (loop1): Directory bread(block 166) failed [ 83.200507][ T6393] FAT-fs (loop1): Directory bread(block 167) failed [ 83.207211][ T6393] FAT-fs (loop1): Directory bread(block 168) failed [ 83.213952][ T6393] FAT-fs (loop1): Directory bread(block 169) failed [ 83.234215][ T6393] FAT-fs (loop1): Directory bread(block 162) failed [ 83.240991][ T6393] FAT-fs (loop1): Directory bread(block 163) failed [ 83.248329][ T6393] syz.1.969: attempt to access beyond end of device [ 83.248329][ T6393] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 83.263046][ T6393] syz.1.969: attempt to access beyond end of device [ 83.263046][ T6393] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 83.326744][ T6406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6406 comm=syz.1.975 [ 83.339356][ T6406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6406 comm=syz.1.975 [ 83.420286][ T6419] loop2: detected capacity change from 0 to 128 [ 83.433871][ T6419] FAT-fs (loop2): Directory bread(block 162) failed [ 83.444988][ T6419] FAT-fs (loop2): Directory bread(block 163) failed [ 83.462034][ T6419] FAT-fs (loop2): Directory bread(block 164) failed [ 83.468963][ T6419] FAT-fs (loop2): Directory bread(block 165) failed [ 83.485950][ T6419] FAT-fs (loop2): Directory bread(block 166) failed [ 83.493161][ T6419] FAT-fs (loop2): Directory bread(block 167) failed [ 83.514034][ T6419] FAT-fs (loop2): Directory bread(block 168) failed [ 83.524117][ T6419] FAT-fs (loop2): Directory bread(block 169) failed [ 83.546898][ T6419] FAT-fs (loop2): Directory bread(block 162) failed [ 83.553577][ T6419] FAT-fs (loop2): Directory bread(block 163) failed [ 83.583080][ T6426] vhci_hcd: invalid port number 96 [ 83.588301][ T6426] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 83.604349][ T6428] loop3: detected capacity change from 0 to 128 [ 83.611854][ T6428] FAT-fs (loop3): Directory bread(block 162) failed [ 83.619784][ T6428] FAT-fs (loop3): Directory bread(block 163) failed [ 83.626654][ T6428] FAT-fs (loop3): Directory bread(block 164) failed [ 83.633400][ T6428] FAT-fs (loop3): Directory bread(block 165) failed [ 83.644496][ T6428] FAT-fs (loop3): Directory bread(block 166) failed [ 83.651294][ T6428] FAT-fs (loop3): Directory bread(block 167) failed [ 83.658748][ T6428] FAT-fs (loop3): Directory bread(block 168) failed [ 83.665504][ T6428] FAT-fs (loop3): Directory bread(block 169) failed [ 83.666959][ T6424] __nla_validate_parse: 9 callbacks suppressed [ 83.666975][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.679178][ T6428] FAT-fs (loop3): Directory bread(block 162) failed [ 83.687586][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.697552][ T6428] FAT-fs (loop3): Directory bread(block 163) failed [ 83.704359][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.730859][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.740706][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.750961][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.779119][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.788083][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.797194][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 83.924387][ T6457] loop0: detected capacity change from 0 to 2048 [ 83.937530][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.951871][ T6457] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.997: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 83.969360][ T6457] EXT4-fs (loop0): Remounting filesystem read-only [ 83.990326][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.289642][ T29] kauditd_printk_skb: 1057 callbacks suppressed [ 84.289661][ T29] audit: type=1326 audit(1749233838.074:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.344696][ T29] audit: type=1326 audit(1749233838.074:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.368242][ T29] audit: type=1326 audit(1749233838.074:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.391978][ T29] audit: type=1326 audit(1749233838.074:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.416062][ T29] audit: type=1326 audit(1749233838.074:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.439751][ T29] audit: type=1326 audit(1749233838.074:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.463578][ T29] audit: type=1326 audit(1749233838.074:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.487211][ T29] audit: type=1326 audit(1749233838.074:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.510762][ T29] audit: type=1326 audit(1749233838.074:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.534468][ T29] audit: type=1326 audit(1749233838.074:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.1.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 84.805703][ T6533] lo speed is unknown, defaulting to 1000 [ 84.902457][ T6534] program syz.2.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.354407][ T6541] loop4: detected capacity change from 0 to 1024 [ 85.373675][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 85.385699][ T6541] EXT4-fs: Ignoring removed bh option [ 85.391215][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.405007][ T6541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.483382][ T6549] vhci_hcd: invalid port number 96 [ 85.489017][ T6549] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 85.513863][ T6558] loop0: detected capacity change from 0 to 512 [ 85.542552][ T6558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.568924][ T6558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 85.603272][ T6558] System zones: 1-12 [ 85.664698][ T6558] EXT4-fs (loop0): 1 truncate cleaned up [ 85.671217][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.696615][ T6558] EXT4-fs warning (device loop0): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 85.708243][ T6558] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 85.731075][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.864240][ T6581] loop0: detected capacity change from 0 to 128 [ 85.871893][ T6581] EXT4-fs: Ignoring removed nobh option [ 85.880221][ T6581] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.892964][ T6581] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.920565][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.003968][ T6589] loop1: detected capacity change from 0 to 1024 [ 86.012120][ T6589] EXT4-fs: Ignoring removed bh option [ 86.018286][ T6589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.042242][ T6591] loop0: detected capacity change from 0 to 1024 [ 86.049658][ T6591] EXT4-fs: Ignoring removed bh option [ 86.055210][ T6591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.932812][ T6643] loop4: detected capacity change from 0 to 128 [ 86.963261][ T6643] FAT-fs (loop4): Directory bread(block 162) failed [ 86.964491][ T6647] loop3: detected capacity change from 0 to 128 [ 86.976835][ T6643] FAT-fs (loop4): Directory bread(block 163) failed [ 86.978202][ T6647] EXT4-fs: Ignoring removed nobh option [ 86.983638][ T6643] FAT-fs (loop4): Directory bread(block 164) failed [ 86.997419][ T6647] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.997522][ T6643] FAT-fs (loop4): Directory bread(block 165) failed [ 87.017860][ T6643] FAT-fs (loop4): Directory bread(block 166) failed [ 87.031307][ T6643] FAT-fs (loop4): Directory bread(block 167) failed [ 87.039088][ T6643] FAT-fs (loop4): Directory bread(block 168) failed [ 87.046848][ T6643] FAT-fs (loop4): Directory bread(block 169) failed [ 87.060750][ T6643] FAT-fs (loop4): Directory bread(block 162) failed [ 87.072344][ T6643] FAT-fs (loop4): Directory bread(block 163) failed [ 87.081367][ T6643] bio_check_eod: 4 callbacks suppressed [ 87.081385][ T6643] syz.4.1032: attempt to access beyond end of device [ 87.081385][ T6643] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 87.101663][ T6643] syz.4.1032: attempt to access beyond end of device [ 87.101663][ T6643] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 87.159083][ T6655] loop4: detected capacity change from 0 to 1024 [ 87.167987][ T6655] EXT4-fs: Ignoring removed bh option [ 87.173709][ T6655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.332343][ T6671] loop2: detected capacity change from 0 to 512 [ 87.339752][ T6671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.361414][ T6671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 87.371378][ T6671] System zones: 1-12 [ 87.380834][ T6671] EXT4-fs (loop2): 1 truncate cleaned up [ 87.404249][ T6671] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 87.418086][ T6671] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 87.464279][ T6682] SELinux: syz.1.1044 (6682) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 87.583484][ T6682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.646771][ T6682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.696624][ T6682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.746233][ T6682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.832919][ T6682] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.846279][ T6682] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.864603][ T6682] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.881588][ T6682] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.063783][ T6724] loop2: detected capacity change from 0 to 512 [ 88.077320][ T6714] SELinux: ebitmap: truncated map [ 88.082160][ T6724] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.083590][ T6714] SELinux: failed to load policy [ 88.112417][ T6724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 88.121659][ T6724] System zones: 1-12 [ 88.126694][ T6724] EXT4-fs (loop2): 1 truncate cleaned up [ 88.136620][ T6724] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 88.148382][ T6724] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 88.215117][ T6739] SELinux: policydb magic number 0x68746576 does not match expected magic number 0xf97cff8c [ 88.225865][ T6739] SELinux: failed to load policy [ 88.334803][ T6758] SELinux: syz.3.1062 (6758) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.369822][ T6758] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.406351][ T6758] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.456681][ T6758] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.516223][ T6758] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.572593][ T6758] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.586610][ T6758] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598509][ T6758] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.610455][ T6758] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663447][ T6772] loop2: detected capacity change from 0 to 1024 [ 88.670556][ T6772] EXT4-fs: Ignoring removed bh option [ 88.676241][ T6772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.830523][ T6774] loop3: detected capacity change from 0 to 512 [ 88.838681][ T6774] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 88.871310][ T6774] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 88.973170][ T6783] loop4: detected capacity change from 0 to 512 [ 88.980435][ T6783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.992027][ T6783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 89.000338][ T6783] System zones: 1-12 [ 89.006163][ T6783] EXT4-fs (loop4): 1 truncate cleaned up [ 89.015382][ T6783] EXT4-fs warning (device loop4): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 89.027005][ T6783] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 89.093134][ T6786] __nla_validate_parse: 26 callbacks suppressed [ 89.093155][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 89.143225][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'. [ 89.155060][ T6789] SELinux: policydb magic number 0x68746576 does not match expected magic number 0xf97cff8c [ 89.167296][ T6789] SELinux: failed to load policy [ 89.252261][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 89.283861][ T6797] loop3: detected capacity change from 0 to 128 [ 89.293090][ T6797] FAT-fs (loop3): Directory bread(block 162) failed [ 89.300694][ T6797] FAT-fs (loop3): Directory bread(block 163) failed [ 89.308760][ T6797] FAT-fs (loop3): Directory bread(block 164) failed [ 89.315954][ T6797] FAT-fs (loop3): Directory bread(block 165) failed [ 89.322807][ T6797] FAT-fs (loop3): Directory bread(block 166) failed [ 89.330787][ T6797] FAT-fs (loop3): Directory bread(block 167) failed [ 89.338722][ T6797] FAT-fs (loop3): Directory bread(block 168) failed [ 89.345643][ T6797] FAT-fs (loop3): Directory bread(block 169) failed [ 89.353501][ T6797] FAT-fs (loop3): Directory bread(block 162) failed [ 89.360613][ T6797] FAT-fs (loop3): Directory bread(block 163) failed [ 89.368682][ T6797] syz.3.1075: attempt to access beyond end of device [ 89.368682][ T6797] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 89.382626][ T6797] syz.3.1075: attempt to access beyond end of device [ 89.382626][ T6797] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 89.429488][ T6801] loop3: detected capacity change from 0 to 128 [ 89.437036][ T6801] EXT4-fs: Ignoring removed nobh option [ 89.447137][ T6801] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.512552][ T6806] loop0: detected capacity change from 0 to 1024 [ 89.519939][ T6806] EXT4-fs: Ignoring removed bh option [ 89.526051][ T6806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.539765][ T6809] loop2: detected capacity change from 0 to 512 [ 89.548088][ T6809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.562649][ T6809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 89.571107][ T6809] System zones: 1-12 [ 89.578302][ T6809] EXT4-fs (loop2): 1 truncate cleaned up [ 89.601851][ T6809] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 89.613465][ T6809] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 89.652986][ T6816] loop3: detected capacity change from 0 to 2048 [ 89.681391][ T6821] loop2: detected capacity change from 0 to 128 [ 89.689259][ T6821] FAT-fs (loop2): Directory bread(block 162) failed [ 89.696310][ T6821] FAT-fs (loop2): Directory bread(block 163) failed [ 89.703034][ T6821] FAT-fs (loop2): Directory bread(block 164) failed [ 89.712867][ T6816] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1081: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.730981][ T6816] EXT4-fs (loop3): Remounting filesystem read-only [ 89.773566][ T6821] FAT-fs (loop2): Directory bread(block 165) failed [ 89.792454][ T6821] FAT-fs (loop2): Directory bread(block 166) failed [ 89.800333][ T6821] FAT-fs (loop2): Directory bread(block 167) failed [ 89.807189][ T6821] FAT-fs (loop2): Directory bread(block 168) failed [ 89.813923][ T6821] FAT-fs (loop2): Directory bread(block 169) failed [ 89.822736][ T6821] FAT-fs (loop2): Directory bread(block 162) failed [ 89.830611][ T6821] FAT-fs (loop2): Directory bread(block 163) failed [ 89.839875][ T6821] syz.2.1085: attempt to access beyond end of device [ 89.839875][ T6821] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 89.854757][ T6821] syz.2.1085: attempt to access beyond end of device [ 89.854757][ T6821] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 89.879179][ T6830] loop3: detected capacity change from 0 to 1024 [ 89.905334][ T6830] EXT4-fs: Ignoring removed bh option [ 89.911057][ T6830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.051790][ T6848] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1088'. [ 90.151739][ T6857] vhci_hcd: invalid port number 96 [ 90.157009][ T6857] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 90.198462][ T6861] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 90.390898][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 90.390916][ T29] audit: type=1326 audit(1749233844.174:10378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.430670][ T29] audit: type=1326 audit(1749233844.174:10379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.454847][ T29] audit: type=1326 audit(1749233844.174:10380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.479353][ T29] audit: type=1326 audit(1749233844.174:10381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.503265][ T29] audit: type=1326 audit(1749233844.174:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.526801][ T29] audit: type=1326 audit(1749233844.174:10383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.550384][ T29] audit: type=1326 audit(1749233844.174:10384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.573979][ T29] audit: type=1326 audit(1749233844.174:10385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.597827][ T29] audit: type=1326 audit(1749233844.174:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.621827][ T29] audit: type=1326 audit(1749233844.174:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.2.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 90.651456][ T6873] loop4: detected capacity change from 0 to 128 [ 90.745667][ T6875] SELinux: syz.4.1101 (6875) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 90.854201][ T6880] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.938081][ T6880] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.966646][ T6871] loop2: detected capacity change from 0 to 512 [ 90.977843][ T6880] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.990221][ T6871] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 91.037736][ T6880] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.047775][ T6871] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 91.050677][ T6891] vhci_hcd: invalid port number 96 [ 91.061846][ T6891] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 91.104497][ T6880] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.137435][ T6880] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.153081][ T6880] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.167918][ T6880] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.179998][ T6900] loop0: detected capacity change from 0 to 512 [ 91.186936][ T6900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.199034][ T6900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 91.207225][ T6900] System zones: 1-12 [ 91.211658][ T6900] EXT4-fs (loop0): 1 truncate cleaned up [ 91.218737][ T6903] loop4: detected capacity change from 0 to 512 [ 91.225778][ T6903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.237461][ T6900] EXT4-fs warning (device loop0): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 91.251484][ T6900] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 91.271121][ T6903] EXT4-fs (loop4): 1 truncate cleaned up [ 91.381346][ T6916] vhci_hcd: invalid port number 96 [ 91.386670][ T6916] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 91.456632][ T6924] loop0: detected capacity change from 0 to 1024 [ 91.463437][ T6924] EXT4-fs: Ignoring removed bh option [ 91.469028][ T6924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.534100][ T6928] lo speed is unknown, defaulting to 1000 [ 91.740097][ T6928] program syz.4.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.069607][ T6933] loop3: detected capacity change from 0 to 512 [ 92.134345][ T6933] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 92.184096][ T6933] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 92.205341][ T6940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6940 comm=syz.2.1125 [ 92.218008][ T6940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6940 comm=syz.2.1125 [ 92.317427][ T6949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6949 comm=syz.0.1129 [ 92.329995][ T6949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6949 comm=syz.0.1129 [ 92.381609][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1133'. [ 92.393867][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 92.445526][ T6964] SELinux: policydb magic number 0x68746576 does not match expected magic number 0xf97cff8c [ 92.456784][ T6964] SELinux: failed to load policy [ 92.457943][ T6963] loop4: detected capacity change from 0 to 1024 [ 92.468940][ T6963] EXT4-fs: Ignoring removed bh option [ 92.474466][ T6963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.594384][ T6979] loop0: detected capacity change from 0 to 1024 [ 92.601845][ T6979] EXT4-fs: Ignoring removed bh option [ 92.607398][ T6979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.862898][ T6994] loop2: detected capacity change from 0 to 128 [ 92.871266][ T6994] FAT-fs (loop2): Directory bread(block 162) failed [ 92.879777][ T6994] FAT-fs (loop2): Directory bread(block 163) failed [ 92.886594][ T6994] FAT-fs (loop2): Directory bread(block 164) failed [ 92.893422][ T6994] FAT-fs (loop2): Directory bread(block 165) failed [ 92.901951][ T6994] FAT-fs (loop2): Directory bread(block 166) failed [ 92.909044][ T6994] FAT-fs (loop2): Directory bread(block 167) failed [ 92.917689][ T6994] FAT-fs (loop2): Directory bread(block 168) failed [ 92.924976][ T6994] FAT-fs (loop2): Directory bread(block 169) failed [ 92.933500][ T6994] FAT-fs (loop2): Directory bread(block 162) failed [ 92.940660][ T6994] FAT-fs (loop2): Directory bread(block 163) failed [ 92.948217][ T6994] syz.2.1148: attempt to access beyond end of device [ 92.948217][ T6994] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 92.972112][ T6994] syz.2.1148: attempt to access beyond end of device [ 92.972112][ T6994] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 93.022679][ T6990] loop1: detected capacity change from 0 to 512 [ 93.025397][ T6997] loop2: detected capacity change from 0 to 128 [ 93.031836][ T6990] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 93.036442][ T6997] EXT4-fs: Ignoring removed nobh option [ 93.065760][ T6997] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.080301][ T6990] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 93.615174][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 93.684493][ T7040] SELinux: ebitmap: truncated map [ 93.697333][ T7040] SELinux: failed to load policy [ 93.921231][ T7046] loop2: detected capacity change from 0 to 512 [ 93.930239][ T7046] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 93.957752][ T7046] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 94.401392][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.410773][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.419852][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.448436][ T7100] SELinux: syz.1.1169 (7100) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 94.476931][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.485998][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.495023][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.540138][ T7100] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.544112][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.559328][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.568626][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'. [ 94.636951][ T7100] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.670625][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 94.696925][ T7100] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.721360][ T7114] loop2: detected capacity change from 0 to 2048 [ 94.779046][ T7100] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.799530][ T7120] loop0: detected capacity change from 0 to 128 [ 94.808669][ T7120] EXT4-fs: Ignoring removed nobh option [ 94.818391][ T7114] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1173: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 94.836660][ T7114] EXT4-fs (loop2): Remounting filesystem read-only [ 94.844357][ T7100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.847868][ T7100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.850847][ T7100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.853965][ T7100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.871704][ T7120] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.932722][ T7130] loop1: detected capacity change from 0 to 128 [ 94.941039][ T7128] loop3: detected capacity change from 0 to 512 [ 94.942206][ T7128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.982357][ T7130] FAT-fs (loop1): Directory bread(block 162) failed [ 94.989408][ T7130] FAT-fs (loop1): Directory bread(block 163) failed [ 94.997358][ T7128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 94.997682][ T7130] FAT-fs (loop1): Directory bread(block 164) failed [ 95.012158][ T7130] FAT-fs (loop1): Directory bread(block 165) failed [ 95.015081][ T7128] System zones: 1-12 [ 95.019258][ T7130] FAT-fs (loop1): Directory bread(block 166) failed [ 95.030283][ T7130] FAT-fs (loop1): Directory bread(block 167) failed [ 95.037468][ T7130] FAT-fs (loop1): Directory bread(block 168) failed [ 95.044239][ T7130] FAT-fs (loop1): Directory bread(block 169) failed [ 95.071437][ T7128] EXT4-fs (loop3): 1 truncate cleaned up [ 95.086006][ T7130] FAT-fs (loop1): Directory bread(block 162) failed [ 95.106279][ T7130] FAT-fs (loop1): Directory bread(block 163) failed [ 95.113521][ T7130] syz.1.1179: attempt to access beyond end of device [ 95.113521][ T7130] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 95.114869][ T7139] SELinux: policydb magic number 0x68746576 does not match expected magic number 0xf97cff8c [ 95.136975][ T7124] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 95.150886][ T7124] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 95.172208][ T7139] SELinux: failed to load policy [ 95.194768][ T7130] syz.1.1179: attempt to access beyond end of device [ 95.194768][ T7130] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 95.243377][ T7151] SELinux: syz.1.1185 (7151) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 95.298007][ T7151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.336963][ T7151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.396663][ T7151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.402102][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 95.402121][ T29] audit: type=1326 audit(1749233849.184:11382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4525ab58e7 code=0x7ffc0000 [ 95.446584][ T29] audit: type=1326 audit(1749233849.224:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4525a5ab19 code=0x7ffc0000 [ 95.470256][ T29] audit: type=1326 audit(1749233849.224:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4525ab58e7 code=0x7ffc0000 [ 95.494055][ T29] audit: type=1326 audit(1749233849.224:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4525a5ab19 code=0x7ffc0000 [ 95.517566][ T29] audit: type=1326 audit(1749233849.224:11386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 95.541477][ T29] audit: type=1326 audit(1749233849.224:11387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4525ab58e7 code=0x7ffc0000 [ 95.565185][ T29] audit: type=1326 audit(1749233849.224:11388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4525a5ab19 code=0x7ffc0000 [ 95.588890][ T29] audit: type=1326 audit(1749233849.224:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.0.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4525abe929 code=0x7ffc0000 [ 95.613003][ T29] audit: type=1326 audit(1749233849.234:11390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 95.636774][ T29] audit: type=1326 audit(1749233849.234:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fdde929 code=0x7ffc0000 [ 95.667362][ T7151] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.706721][ T7182] loop3: detected capacity change from 0 to 2048 [ 95.728410][ T7185] loop2: detected capacity change from 0 to 128 [ 95.737366][ T7185] EXT4-fs: Ignoring removed nobh option [ 95.745447][ T7185] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.778814][ T7182] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1190: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 95.797336][ T7182] EXT4-fs (loop3): Remounting filesystem read-only [ 96.096824][ T7198] loop0: detected capacity change from 0 to 128 [ 96.104492][ T7198] FAT-fs (loop0): Directory bread(block 162) failed [ 96.111263][ T7198] FAT-fs (loop0): Directory bread(block 163) failed [ 96.118169][ T7198] FAT-fs (loop0): Directory bread(block 164) failed [ 96.124975][ T7198] FAT-fs (loop0): Directory bread(block 165) failed [ 96.131671][ T7198] FAT-fs (loop0): Directory bread(block 166) failed [ 96.140040][ T7198] FAT-fs (loop0): Directory bread(block 167) failed [ 96.146933][ T7198] FAT-fs (loop0): Directory bread(block 168) failed [ 96.153551][ T7198] FAT-fs (loop0): Directory bread(block 169) failed [ 96.162767][ T7198] FAT-fs (loop0): Directory bread(block 162) failed [ 96.169439][ T7198] FAT-fs (loop0): Directory bread(block 163) failed [ 96.185044][ T7198] syz.0.1195: attempt to access beyond end of device [ 96.185044][ T7198] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 96.201584][ T7198] syz.0.1195: attempt to access beyond end of device [ 96.201584][ T7198] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 96.462514][ T7223] loop3: detected capacity change from 0 to 1024 [ 96.469363][ T7223] EXT4-fs: Ignoring removed bh option [ 96.474873][ T7223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.263978][ T7299] loop0: detected capacity change from 0 to 128 [ 97.275418][ T7299] FAT-fs (loop0): Directory bread(block 162) failed [ 97.283077][ T7299] FAT-fs (loop0): Directory bread(block 163) failed [ 97.297327][ T7299] FAT-fs (loop0): Directory bread(block 164) failed [ 97.304156][ T7299] FAT-fs (loop0): Directory bread(block 165) failed [ 97.312106][ T7299] FAT-fs (loop0): Directory bread(block 166) failed [ 97.320699][ T7299] FAT-fs (loop0): Directory bread(block 167) failed [ 97.347714][ T7299] FAT-fs (loop0): Directory bread(block 168) failed [ 97.356284][ T7299] FAT-fs (loop0): Directory bread(block 169) failed [ 97.364156][ T7299] FAT-fs (loop0): Directory bread(block 162) failed [ 97.371126][ T7299] FAT-fs (loop0): Directory bread(block 163) failed [ 97.381624][ T7299] syz.0.1218: attempt to access beyond end of device [ 97.381624][ T7299] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 97.396836][ T7299] syz.0.1218: attempt to access beyond end of device [ 97.396836][ T7299] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 97.458522][ T7307] loop3: detected capacity change from 0 to 128 [ 97.466231][ T7307] FAT-fs (loop3): Directory bread(block 162) failed [ 97.472943][ T7307] FAT-fs (loop3): Directory bread(block 163) failed [ 97.479967][ T7307] FAT-fs (loop3): Directory bread(block 164) failed [ 97.488921][ T7307] FAT-fs (loop3): Directory bread(block 165) failed [ 97.509904][ T7307] FAT-fs (loop3): Directory bread(block 166) failed [ 97.516953][ T7307] FAT-fs (loop3): Directory bread(block 167) failed [ 97.523823][ T7307] FAT-fs (loop3): Directory bread(block 168) failed [ 97.532379][ T7307] FAT-fs (loop3): Directory bread(block 169) failed [ 97.541381][ T7307] FAT-fs (loop3): Directory bread(block 162) failed [ 97.549489][ T7307] FAT-fs (loop3): Directory bread(block 163) failed [ 97.556692][ T7307] syz.3.1221: attempt to access beyond end of device [ 97.556692][ T7307] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 97.571803][ T7307] syz.3.1221: attempt to access beyond end of device [ 97.571803][ T7307] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 97.644290][ T7309] loop4: detected capacity change from 0 to 512 [ 97.655494][ T7309] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 97.682178][ T7309] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 97.823966][ T7329] loop3: detected capacity change from 0 to 128 [ 97.831397][ T7329] FAT-fs (loop3): Directory bread(block 162) failed [ 97.838551][ T7329] FAT-fs (loop3): Directory bread(block 163) failed [ 97.845470][ T7329] FAT-fs (loop3): Directory bread(block 164) failed [ 97.852418][ T7329] FAT-fs (loop3): Directory bread(block 165) failed [ 97.859397][ T7329] FAT-fs (loop3): Directory bread(block 166) failed [ 97.875554][ T7329] FAT-fs (loop3): Directory bread(block 167) failed [ 97.882251][ T7329] FAT-fs (loop3): Directory bread(block 168) failed [ 97.890840][ T7329] FAT-fs (loop3): Directory bread(block 169) failed [ 97.899870][ T7329] FAT-fs (loop3): Directory bread(block 162) failed [ 97.907826][ T7329] FAT-fs (loop3): Directory bread(block 163) failed [ 97.966646][ T7331] SELinux: ebitmap: truncated map [ 97.973198][ T7331] SELinux: failed to load policy [ 97.982901][ T7334] loop4: detected capacity change from 0 to 1024 [ 97.995749][ T7334] EXT4-fs: Ignoring removed bh option [ 98.001485][ T7334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.015802][ T7334] EXT4-fs mount: 51 callbacks suppressed [ 98.015821][ T7334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.080461][ T7346] loop3: detected capacity change from 0 to 512 [ 98.089057][ T7346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.105309][ T7346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 98.116000][ T7346] System zones: 1-12 [ 98.122284][ T7350] vhci_hcd: invalid port number 96 [ 98.127564][ T7350] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 98.137099][ T7346] EXT4-fs (loop3): 1 truncate cleaned up [ 98.143578][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.159212][ T7346] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 98.171481][ T7346] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 98.203131][ T7151] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.215436][ T7151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.217584][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.227576][ T7151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.249403][ T7151] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.338059][ T7359] loop3: detected capacity change from 0 to 2048 [ 98.431583][ T7359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.476928][ T7359] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1243: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 98.525037][ T7360] loop1: detected capacity change from 0 to 512 [ 98.530000][ T7359] EXT4-fs (loop3): Remounting filesystem read-only [ 98.539201][ T7360] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 98.599250][ T7360] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 98.627928][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.697755][ T7381] loop3: detected capacity change from 0 to 128 [ 98.718296][ T7381] EXT4-fs: Ignoring removed nobh option [ 98.732981][ T7381] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.786036][ T7381] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.861888][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.991197][ T7415] loop2: detected capacity change from 0 to 512 [ 98.999804][ T7415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.011283][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.031976][ T7415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 99.040303][ T7415] System zones: 1-12 [ 99.052349][ T7415] EXT4-fs (loop2): 1 truncate cleaned up [ 99.054154][ T7419] loop3: detected capacity change from 0 to 512 [ 99.058860][ T7415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.077592][ T7419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.087563][ T7415] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 99.099437][ T7415] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 99.111307][ T7419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 99.123308][ T7419] System zones: 1-12 [ 99.128012][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 99.136250][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.158014][ T7422] SELinux: syz.0.1252 (7422) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 99.190180][ T7424] lo speed is unknown, defaulting to 1000 [ 99.289125][ T7425] program syz.4.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.463397][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.477254][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.533348][ T7435] loop3: detected capacity change from 0 to 128 [ 99.548784][ T7435] FAT-fs (loop3): Directory bread(block 162) failed [ 99.565810][ T7435] FAT-fs (loop3): Directory bread(block 163) failed [ 99.586078][ T7435] FAT-fs (loop3): Directory bread(block 164) failed [ 99.592768][ T7435] FAT-fs (loop3): Directory bread(block 165) failed [ 99.606034][ T7435] FAT-fs (loop3): Directory bread(block 166) failed [ 99.619471][ T7435] FAT-fs (loop3): Directory bread(block 167) failed [ 99.634390][ T7435] FAT-fs (loop3): Directory bread(block 168) failed [ 99.645738][ T7435] FAT-fs (loop3): Directory bread(block 169) failed [ 99.655835][ T7435] FAT-fs (loop3): Directory bread(block 162) failed [ 99.673026][ T7435] FAT-fs (loop3): Directory bread(block 163) failed [ 99.689845][ T7435] bio_check_eod: 2 callbacks suppressed [ 99.689863][ T7435] syz.3.1253: attempt to access beyond end of device [ 99.689863][ T7435] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 99.708975][ T7435] syz.3.1253: attempt to access beyond end of device [ 99.708975][ T7435] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 99.768966][ T7436] __nla_validate_parse: 20 callbacks suppressed [ 99.768984][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.784504][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.793569][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.869514][ T7445] loop4: detected capacity change from 0 to 1024 [ 99.876504][ T7445] EXT4-fs: Ignoring removed bh option [ 99.881253][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.881933][ T7445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.890977][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.906859][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 99.943144][ T7445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.961473][ T7440] loop1: detected capacity change from 0 to 512 [ 99.985645][ T7440] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 99.997679][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 100.006926][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 100.015996][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 100.034473][ T7440] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 100.104992][ T7459] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1259'. [ 100.427276][ T7464] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 100.446973][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 100.447046][ T29] audit: type=1326 audit(1749233854.234:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.483775][ T7466] loop2: detected capacity change from 0 to 512 [ 100.485817][ T29] audit: type=1326 audit(1749233854.264:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.492934][ T7466] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.513657][ T29] audit: type=1326 audit(1749233854.264:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.547026][ T29] audit: type=1326 audit(1749233854.264:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.570533][ T29] audit: type=1326 audit(1749233854.264:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.594115][ T29] audit: type=1326 audit(1749233854.264:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.617654][ T29] audit: type=1326 audit(1749233854.264:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.641137][ T29] audit: type=1326 audit(1749233854.264:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.664664][ T29] audit: type=1326 audit(1749233854.264:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.688124][ T29] audit: type=1326 audit(1749233854.264:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.1.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d24ee929 code=0x7ffc0000 [ 100.722816][ T7466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 100.731606][ T7466] System zones: 1-12 [ 100.741476][ T7466] EXT4-fs (loop2): 1 truncate cleaned up [ 100.762022][ T7466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.803974][ T7469] SELinux: ebitmap: truncated map [ 100.810102][ T7469] SELinux: failed to load policy [ 100.852516][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.883232][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.156335][ T7510] lo speed is unknown, defaulting to 1000 [ 101.221948][ T7513] program syz.4.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.242076][ T7517] vhci_hcd: invalid port number 96 [ 101.247527][ T7517] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 101.270478][ T7514] SELinux: ebitmap: truncated map [ 101.303447][ T7514] SELinux: failed to load policy [ 101.349718][ T7521] loop1: detected capacity change from 0 to 512 [ 101.374580][ T7521] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.400801][ T7523] loop3: detected capacity change from 0 to 128 [ 101.420092][ T7523] FAT-fs (loop3): Directory bread(block 162) failed [ 101.431540][ T7523] FAT-fs (loop3): Directory bread(block 163) failed [ 101.438566][ T7523] FAT-fs (loop3): Directory bread(block 164) failed [ 101.447299][ T7521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 101.455567][ T7521] System zones: 1-12 [ 101.460331][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 101.467677][ T7523] FAT-fs (loop3): Directory bread(block 165) failed [ 101.475228][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.487766][ T7523] FAT-fs (loop3): Directory bread(block 166) failed [ 101.494381][ T7523] FAT-fs (loop3): Directory bread(block 167) failed [ 101.502873][ T7523] FAT-fs (loop3): Directory bread(block 168) failed [ 101.519546][ T7523] FAT-fs (loop3): Directory bread(block 169) failed [ 101.527013][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.537361][ T7523] FAT-fs (loop3): Directory bread(block 162) failed [ 101.543994][ T7523] FAT-fs (loop3): Directory bread(block 163) failed [ 101.554915][ T7523] syz.3.1277: attempt to access beyond end of device [ 101.554915][ T7523] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 101.569390][ T7523] syz.3.1277: attempt to access beyond end of device [ 101.569390][ T7523] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 101.661746][ T7526] SELinux: ebitmap: truncated map [ 101.674573][ T7526] SELinux: failed to load policy [ 101.730831][ T7538] loop0: detected capacity change from 0 to 2048 [ 101.754541][ T7539] loop3: detected capacity change from 0 to 1024 [ 101.762521][ T7538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.780664][ T7538] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.1283: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 101.808859][ T7539] EXT4-fs: Ignoring removed bh option [ 101.814305][ T7539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.823160][ T7538] EXT4-fs (loop0): Remounting filesystem read-only [ 101.832268][ T7539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.871202][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.912706][ T7546] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.114806][ T7557] loop4: detected capacity change from 0 to 2048 [ 102.138489][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.188290][ T7557] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1289: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 102.205309][ T7557] EXT4-fs (loop4): Remounting filesystem read-only [ 102.225312][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.236566][ T7564] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 102.327866][ T7572] FAULT_INJECTION: forcing a failure. [ 102.327866][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.341121][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.2.1292 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 102.341165][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.341181][ T7572] Call Trace: [ 102.341199][ T7572] [ 102.341208][ T7572] __dump_stack+0x1d/0x30 [ 102.341234][ T7572] dump_stack_lvl+0xe8/0x140 [ 102.341257][ T7572] dump_stack+0x15/0x1b [ 102.341272][ T7572] should_fail_ex+0x265/0x280 [ 102.341296][ T7572] should_fail+0xb/0x20 [ 102.341337][ T7572] should_fail_usercopy+0x1a/0x20 [ 102.341358][ T7572] _copy_from_user+0x1c/0xb0 [ 102.341392][ T7572] do_sock_getsockopt+0xf1/0x240 [ 102.341505][ T7572] __x64_sys_getsockopt+0x11e/0x1a0 [ 102.341536][ T7572] x64_sys_call+0x12aa/0x2fb0 [ 102.341628][ T7572] do_syscall_64+0xd2/0x200 [ 102.341691][ T7572] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.341725][ T7572] ? clear_bhb_loop+0x40/0x90 [ 102.341796][ T7572] ? clear_bhb_loop+0x40/0x90 [ 102.341817][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.341837][ T7572] RIP: 0033:0x7f3e2fdde929 [ 102.341855][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.341877][ T7572] RSP: 002b:00007f3e2e447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 102.341955][ T7572] RAX: ffffffffffffffda RBX: 00007f3e30005fa0 RCX: 00007f3e2fdde929 [ 102.341971][ T7572] RDX: 0000000000000040 RSI: 000000000000011e RDI: 0000000000000003 [ 102.341986][ T7572] RBP: 00007f3e2e447090 R08: 0000000000000000 R09: 0000000000000000 [ 102.342026][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.342037][ T7572] R13: 0000000000000000 R14: 00007f3e30005fa0 R15: 00007ffec4d6e088 [ 102.342055][ T7572] [ 102.562442][ T7580] loop2: detected capacity change from 0 to 1024 [ 102.569436][ T7580] EXT4-fs: Ignoring removed bh option [ 102.574963][ T7580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.605961][ T7581] SELinux: ebitmap: truncated map [ 102.611830][ T7581] SELinux: failed to load policy [ 102.621107][ T7580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.695677][ T7587] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.703764][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.847046][ T7606] loop3: detected capacity change from 0 to 512 [ 102.854080][ T7606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.866586][ T7606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 102.875350][ T7606] System zones: 1-12 [ 102.880487][ T7606] EXT4-fs (loop3): 1 truncate cleaned up [ 102.892698][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.907577][ T7606] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 102.936478][ T7606] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 103.047643][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.151920][ T7623] FAULT_INJECTION: forcing a failure. [ 103.151920][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 103.164671][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.3.1305 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 103.164747][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.164761][ T7623] Call Trace: [ 103.164767][ T7623] [ 103.164774][ T7623] __dump_stack+0x1d/0x30 [ 103.164798][ T7623] dump_stack_lvl+0xe8/0x140 [ 103.164822][ T7623] dump_stack+0x15/0x1b [ 103.164850][ T7623] should_fail_ex+0x265/0x280 [ 103.164869][ T7623] ? __hw_addr_add_ex+0x162/0x440 [ 103.164970][ T7623] should_failslab+0x8c/0xb0 [ 103.164998][ T7623] __kmalloc_cache_noprof+0x4c/0x320 [ 103.165034][ T7623] __hw_addr_add_ex+0x162/0x440 [ 103.165126][ T7623] dev_addr_init+0xb1/0x120 [ 103.165165][ T7623] alloc_netdev_mqs+0x212/0xab0 [ 103.165206][ T7623] ? __pfx_vlan_setup+0x10/0x10 [ 103.165318][ T7623] rtnl_create_link+0x239/0x710 [ 103.165356][ T7623] rtnl_newlink_create+0x14c/0x620 [ 103.165410][ T7623] ? security_capable+0x83/0x90 [ 103.165442][ T7623] ? netlink_ns_capable+0x86/0xa0 [ 103.165470][ T7623] rtnl_newlink+0xf29/0x12d0 [ 103.165543][ T7623] ? __skb_clone+0x2a6/0x2d0 [ 103.165571][ T7623] ? __rcu_read_unlock+0x34/0x70 [ 103.165626][ T7623] ? __memcg_slab_free_hook+0x135/0x230 [ 103.165668][ T7623] ? __kfree_skb+0x109/0x150 [ 103.165698][ T7623] ? __rcu_read_unlock+0x4f/0x70 [ 103.165725][ T7623] ? avc_has_perm_noaudit+0x1b1/0x200 [ 103.165806][ T7623] ? selinux_capable+0x1f9/0x270 [ 103.165828][ T7623] ? security_capable+0x83/0x90 [ 103.165875][ T7623] ? ns_capable+0x7d/0xb0 [ 103.165954][ T7623] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.165989][ T7623] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 103.166025][ T7623] netlink_rcv_skb+0x123/0x220 [ 103.166056][ T7623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.166178][ T7623] rtnetlink_rcv+0x1c/0x30 [ 103.166218][ T7623] netlink_unicast+0x59e/0x670 [ 103.166269][ T7623] netlink_sendmsg+0x58b/0x6b0 [ 103.166314][ T7623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.166354][ T7623] __sock_sendmsg+0x145/0x180 [ 103.166379][ T7623] ____sys_sendmsg+0x31e/0x4e0 [ 103.166501][ T7623] ___sys_sendmsg+0x17b/0x1d0 [ 103.166572][ T7623] __x64_sys_sendmsg+0xd4/0x160 [ 103.166615][ T7623] x64_sys_call+0x2999/0x2fb0 [ 103.166645][ T7623] do_syscall_64+0xd2/0x200 [ 103.166682][ T7623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.166778][ T7623] ? clear_bhb_loop+0x40/0x90 [ 103.166806][ T7623] ? clear_bhb_loop+0x40/0x90 [ 103.166829][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.166893][ T7623] RIP: 0033:0x7f7d2b1ee929 [ 103.166913][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.166937][ T7623] RSP: 002b:00007f7d29857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.166963][ T7623] RAX: ffffffffffffffda RBX: 00007f7d2b415fa0 RCX: 00007f7d2b1ee929 [ 103.166979][ T7623] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 103.167020][ T7623] RBP: 00007f7d29857090 R08: 0000000000000000 R09: 0000000000000000 [ 103.167037][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.167053][ T7623] R13: 0000000000000000 R14: 00007f7d2b415fa0 R15: 00007ffe878d2018 [ 103.167100][ T7623] [ 103.528090][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.540772][ T7633] loop3: detected capacity change from 0 to 128 [ 103.563296][ T7633] FAT-fs (loop3): Directory bread(block 162) failed [ 103.571930][ T7633] FAT-fs (loop3): Directory bread(block 163) failed [ 103.587145][ T7633] FAT-fs (loop3): Directory bread(block 164) failed [ 103.595222][ T7633] FAT-fs (loop3): Directory bread(block 165) failed [ 103.602163][ T7633] FAT-fs (loop3): Directory bread(block 166) failed [ 103.609410][ T7633] FAT-fs (loop3): Directory bread(block 167) failed [ 103.617545][ T7633] FAT-fs (loop3): Directory bread(block 168) failed [ 103.625148][ T7633] FAT-fs (loop3): Directory bread(block 169) failed [ 103.635649][ T7633] FAT-fs (loop3): Directory bread(block 162) failed [ 103.642538][ T7633] FAT-fs (loop3): Directory bread(block 163) failed [ 103.659729][ T7633] syz.3.1308: attempt to access beyond end of device [ 103.659729][ T7633] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 103.681675][ T7633] syz.3.1308: attempt to access beyond end of device [ 103.681675][ T7633] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 103.756985][ T7647] lo speed is unknown, defaulting to 1000 [ 103.916794][ T7662] loop4: detected capacity change from 0 to 1024 [ 103.924067][ T7662] EXT4-fs: Ignoring removed bh option [ 103.929718][ T7662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.957586][ T7664] loop0: detected capacity change from 0 to 1024 [ 103.970035][ T7664] EXT4-fs: Ignoring removed bh option [ 103.975557][ T7664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.999723][ T7662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.017579][ T7664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.154373][ T7643] loop2: detected capacity change from 0 to 512 [ 104.196556][ T7643] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 104.245569][ T7643] EXT4-fs (loop2): failed to open journal device unknown-block(11,131) -6 [ 104.658733][ T7692] loop1: detected capacity change from 0 to 2048 [ 104.705635][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.720630][ T7692] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1328: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 104.749664][ T7692] EXT4-fs (loop1): Remounting filesystem read-only [ 104.757422][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.845681][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.893110][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.897084][ T7699] SELinux: syz.1.1330 (7699) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.955522][ T7699] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.981033][ T7702] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 105.035970][ T7699] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.049859][ T7716] vhci_hcd: invalid port number 96 [ 105.055101][ T7716] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 105.127908][ T7699] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.216128][ T7699] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.257766][ T7726] loop0: detected capacity change from 0 to 128 [ 105.266718][ T7726] FAT-fs (loop0): Directory bread(block 162) failed [ 105.273477][ T7726] FAT-fs (loop0): Directory bread(block 163) failed [ 105.280878][ T7726] FAT-fs (loop0): Directory bread(block 164) failed [ 105.287773][ T7726] FAT-fs (loop0): Directory bread(block 165) failed [ 105.296283][ T7726] FAT-fs (loop0): Directory bread(block 166) failed [ 105.302996][ T7726] FAT-fs (loop0): Directory bread(block 167) failed [ 105.309806][ T7726] FAT-fs (loop0): Directory bread(block 168) failed [ 105.316857][ T7726] FAT-fs (loop0): Directory bread(block 169) failed [ 105.324551][ T7726] FAT-fs (loop0): Directory bread(block 162) failed [ 105.332262][ T7726] FAT-fs (loop0): Directory bread(block 163) failed [ 105.345499][ T7699] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.361035][ T7699] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.370958][ T7726] syz.0.1339: attempt to access beyond end of device [ 105.370958][ T7726] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 105.383622][ T7728] loop3: detected capacity change from 0 to 2048 [ 105.389634][ T7699] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.399687][ T7726] syz.0.1339: attempt to access beyond end of device [ 105.399687][ T7726] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 105.418685][ T7699] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.429400][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.455327][ T7728] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.1340: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 105.471942][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 105.472028][ T29] audit: type=1326 audit(1749233859.244:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313ed458e7 code=0x7ffc0000 [ 105.479108][ T7728] EXT4-fs (loop3): Remounting filesystem read-only [ 105.501780][ T29] audit: type=1326 audit(1749233859.244:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313eceab19 code=0x7ffc0000 [ 105.531781][ T29] audit: type=1326 audit(1749233859.244:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f313ed4e929 code=0x7ffc0000 [ 105.555209][ T29] audit: type=1326 audit(1749233859.244:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313ed458e7 code=0x7ffc0000 [ 105.578652][ T29] audit: type=1326 audit(1749233859.244:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313eceab19 code=0x7ffc0000 [ 105.602078][ T29] audit: type=1326 audit(1749233859.244:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f313ed4e929 code=0x7ffc0000 [ 105.654301][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.713693][ T7739] loop3: detected capacity change from 0 to 512 [ 105.724685][ T29] audit: type=1326 audit(1749233859.264:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313ed458e7 code=0x7ffc0000 [ 105.729792][ T7739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.748283][ T29] audit: type=1326 audit(1749233859.274:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313eceab19 code=0x7ffc0000 [ 105.781534][ T29] audit: type=1326 audit(1749233859.274:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f313ed4e929 code=0x7ffc0000 [ 105.805078][ T29] audit: type=1326 audit(1749233859.394:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.4.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313ed458e7 code=0x7ffc0000 [ 105.833905][ T7739] EXT4-fs (loop3): 1 truncate cleaned up [ 105.840240][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.863390][ T7739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.894796][ T2969] page_pool_release_retry() stalled pool shutdown: id 23, 2 inflight 60 sec [ 106.059232][ T7769] loop2: detected capacity change from 0 to 512 [ 106.084256][ T7769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.087700][ T7768] __nla_validate_parse: 34 callbacks suppressed [ 106.087719][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 106.110678][ T7769] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 106.132409][ T7769] System zones: 1-12 [ 106.136823][ T7774] capability: warning: `syz.1.1346' uses deprecated v2 capabilities in a way that may be insecure [ 106.149084][ T7769] EXT4-fs (loop2): 1 truncate cleaned up [ 106.155461][ T7769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.180781][ T7768] SELinux: ebitmap: truncated map [ 106.187164][ T7769] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 106.198762][ T7769] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 106.205198][ T7768] SELinux: failed to load policy [ 106.232424][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.248023][ T7779] loop4: detected capacity change from 0 to 128 [ 106.252723][ T7777] loop1: detected capacity change from 0 to 2048 [ 106.256559][ T7779] FAT-fs (loop4): Directory bread(block 162) failed [ 106.267993][ T7779] FAT-fs (loop4): Directory bread(block 163) failed [ 106.269368][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.274912][ T7779] FAT-fs (loop4): Directory bread(block 164) failed [ 106.283746][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.292005][ T7779] FAT-fs (loop4): Directory bread(block 165) failed [ 106.299355][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.307514][ T7779] FAT-fs (loop4): Directory bread(block 166) failed [ 106.327576][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 106.331493][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.345618][ T7779] FAT-fs (loop4): Directory bread(block 167) failed [ 106.345720][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.352363][ T7779] FAT-fs (loop4): Directory bread(block 168) failed [ 106.361328][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.363321][ T7777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.397279][ T7779] FAT-fs (loop4): Directory bread(block 169) failed [ 106.410437][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.419478][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 106.425018][ T7779] FAT-fs (loop4): Directory bread(block 162) failed [ 106.429185][ T7777] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1353: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 106.443965][ T7779] FAT-fs (loop4): Directory bread(block 163) failed [ 106.453524][ T7777] EXT4-fs (loop1): Remounting filesystem read-only [ 106.464120][ T7790] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 106.475477][ T7779] syz.4.1352: attempt to access beyond end of device [ 106.475477][ T7779] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 106.488983][ T7779] syz.4.1352: attempt to access beyond end of device [ 106.488983][ T7779] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 106.502723][ T7792] loop2: detected capacity change from 0 to 512 [ 106.526414][ T7792] EXT4-fs (loop2): 1 orphan inode deleted [ 106.532713][ T7792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.545621][ T5551] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 1 [ 106.546086][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.558565][ T7792] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.588563][ T7799] loop4: detected capacity change from 0 to 128 [ 106.624937][ T7799] FAT-fs (loop4): Directory bread(block 162) failed [ 106.631752][ T7799] FAT-fs (loop4): Directory bread(block 163) failed [ 106.656077][ T7799] FAT-fs (loop4): Directory bread(block 164) failed [ 106.664840][ T7790] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1355: iget: bad i_size value: 360287970189639690 [ 106.684716][ T7799] FAT-fs (loop4): Directory bread(block 165) failed [ 106.691695][ T7799] FAT-fs (loop4): Directory bread(block 166) failed [ 106.706862][ T7799] FAT-fs (loop4): Directory bread(block 167) failed [ 106.720159][ T7799] FAT-fs (loop4): Directory bread(block 168) failed [ 106.732382][ T7799] FAT-fs (loop4): Directory bread(block 169) failed [ 106.746918][ T7799] FAT-fs (loop4): Directory bread(block 162) failed [ 106.762300][ T7799] FAT-fs (loop4): Directory bread(block 163) failed [ 106.795409][ T7799] syz.4.1358: attempt to access beyond end of device [ 106.795409][ T7799] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 106.831450][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.844698][ T7799] syz.4.1358: attempt to access beyond end of device [ 106.844698][ T7799] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 106.892722][ T7809] loop3: detected capacity change from 0 to 128 [ 106.908227][ T7811] loop2: detected capacity change from 0 to 512 [ 106.916583][ T7811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.927736][ T7809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.942650][ T7816] loop4: detected capacity change from 0 to 128 [ 106.995843][ T7809] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.037494][ T7817] lo speed is unknown, defaulting to 1000 [ 107.091022][ T7818] program syz.1.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.102489][ T7816] FAT-fs (loop4): Directory bread(block 162) failed [ 107.109274][ T7816] FAT-fs (loop4): Directory bread(block 163) failed [ 107.117172][ T7816] FAT-fs (loop4): Directory bread(block 164) failed [ 107.136455][ T7816] FAT-fs (loop4): Directory bread(block 165) failed [ 107.143148][ T7816] FAT-fs (loop4): Directory bread(block 166) failed [ 107.167819][ T7816] FAT-fs (loop4): Directory bread(block 167) failed [ 107.190138][ T7816] FAT-fs (loop4): Directory bread(block 168) failed [ 107.211558][ T7816] FAT-fs (loop4): Directory bread(block 169) failed [ 107.241808][ T7816] FAT-fs (loop4): Directory bread(block 162) failed [ 107.264338][ T7816] FAT-fs (loop4): Directory bread(block 163) failed [ 107.291521][ T7811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 107.303885][ T7811] System zones: 1-12 [ 107.311313][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.321234][ T7816] syz.4.1363: attempt to access beyond end of device [ 107.321234][ T7816] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 107.336102][ T7811] EXT4-fs (loop2): 1 truncate cleaned up [ 107.344155][ T7811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.362956][ T7816] syz.4.1363: attempt to access beyond end of device [ 107.362956][ T7816] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 107.387376][ T7811] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 107.401256][ T7811] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 107.425607][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.637274][ T7833] loop4: detected capacity change from 0 to 2048 [ 107.657155][ T7833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.694516][ T7833] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1368: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 107.712490][ T7833] EXT4-fs (loop4): Remounting filesystem read-only [ 107.757975][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.796181][ T7844] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 108.617695][ T7966] vhci_hcd: invalid port number 96 [ 108.622861][ T7966] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 108.691190][ T7973] loop4: detected capacity change from 0 to 2048 [ 108.706829][ T7973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.722080][ T7973] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1382: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 108.738883][ T7973] EXT4-fs (loop4): Remounting filesystem read-only [ 108.758092][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.968640][ T7979] loop4: detected capacity change from 0 to 512 [ 108.976371][ T7979] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 109.004515][ T7979] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 109.418528][ T8003] SELinux: syz.4.1389 (8003) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.467292][ T8009] netlink: 'syz.0.1390': attribute type 3 has an invalid length. [ 109.512738][ T8003] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.576948][ T8003] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.618149][ T8003] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.623058][ T8028] loop0: detected capacity change from 0 to 1024 [ 109.636448][ T8028] EXT4-fs: Ignoring removed bh option [ 109.641931][ T8028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.649504][ T8003] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.669844][ T8032] loop3: detected capacity change from 0 to 128 [ 109.679340][ T8032] FAT-fs (loop3): Directory bread(block 162) failed [ 109.679961][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.685993][ T8032] FAT-fs (loop3): Directory bread(block 163) failed [ 109.713053][ T8003] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.722658][ T8032] FAT-fs (loop3): Directory bread(block 164) failed [ 109.729485][ T8032] FAT-fs (loop3): Directory bread(block 165) failed [ 109.736274][ T8032] FAT-fs (loop3): Directory bread(block 166) failed [ 109.743049][ T8032] FAT-fs (loop3): Directory bread(block 167) failed [ 109.749840][ T8032] FAT-fs (loop3): Directory bread(block 168) failed [ 109.756703][ T8032] FAT-fs (loop3): Directory bread(block 169) failed [ 109.767515][ T8003] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.779466][ T8003] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.791717][ T8003] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.820389][ T8032] FAT-fs (loop3): Directory bread(block 162) failed [ 109.831671][ T8032] FAT-fs (loop3): Directory bread(block 163) failed [ 109.847333][ T8032] syz.3.1396: attempt to access beyond end of device [ 109.847333][ T8032] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 109.876078][ T8032] syz.3.1396: attempt to access beyond end of device [ 109.876078][ T8032] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 110.018937][ T8058] loop4: detected capacity change from 0 to 2048 [ 110.069654][ T8058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.086238][ T8058] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1402: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 110.104308][ T8058] EXT4-fs (loop4): Remounting filesystem read-only [ 110.127315][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.153819][ T8068] loop3: detected capacity change from 0 to 1024 [ 110.163250][ T8070] loop4: detected capacity change from 0 to 128 [ 110.170592][ T8070] FAT-fs (loop4): Directory bread(block 162) failed [ 110.178064][ T8068] EXT4-fs: Ignoring removed bh option [ 110.183551][ T8068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.190326][ T8070] FAT-fs (loop4): Directory bread(block 163) failed [ 110.197186][ T8070] FAT-fs (loop4): Directory bread(block 164) failed [ 110.205416][ T8064] loop2: detected capacity change from 0 to 128 [ 110.212727][ T8070] FAT-fs (loop4): Directory bread(block 165) failed [ 110.220038][ T8064] FAT-fs (loop2): Directory bread(block 162) failed [ 110.238430][ T8068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.251108][ T8070] FAT-fs (loop4): Directory bread(block 166) failed [ 110.258518][ T8070] FAT-fs (loop4): Directory bread(block 167) failed [ 110.263505][ T8064] FAT-fs (loop2): Directory bread(block 163) failed [ 110.265459][ T8070] FAT-fs (loop4): Directory bread(block 168) failed [ 110.278615][ T8070] FAT-fs (loop4): Directory bread(block 169) failed [ 110.285987][ T8064] FAT-fs (loop2): Directory bread(block 164) failed [ 110.292763][ T8064] FAT-fs (loop2): Directory bread(block 165) failed [ 110.299452][ T8064] FAT-fs (loop2): Directory bread(block 166) failed [ 110.306250][ T8064] FAT-fs (loop2): Directory bread(block 167) failed [ 110.312902][ T8064] FAT-fs (loop2): Directory bread(block 168) failed [ 110.319628][ T8064] FAT-fs (loop2): Directory bread(block 169) failed [ 110.328096][ T8064] FAT-fs (loop2): Directory bread(block 162) failed [ 110.334825][ T8064] FAT-fs (loop2): Directory bread(block 163) failed [ 110.368163][ T8070] FAT-fs (loop4): Directory bread(block 162) failed [ 110.375153][ T8070] FAT-fs (loop4): Directory bread(block 163) failed [ 110.382645][ T8070] bio_check_eod: 2 callbacks suppressed [ 110.382662][ T8070] syz.4.1405: attempt to access beyond end of device [ 110.382662][ T8070] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 110.402087][ T8070] syz.4.1405: attempt to access beyond end of device [ 110.402087][ T8070] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 110.498739][ T8068] ================================================================== [ 110.506870][ T8068] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 110.516097][ T8068] [ 110.518437][ T8068] write to 0xffff888106b99bb0 of 4 bytes by task 8076 on cpu 0: [ 110.526066][ T8068] writeback_single_inode+0x14a/0x3e0 [ 110.531449][ T8068] sync_inode_metadata+0x5b/0x90 [ 110.536403][ T8068] generic_buffers_fsync_noflush+0xd9/0x120 [ 110.542319][ T8068] ext4_sync_file+0x1ab/0x690 [ 110.547008][ T8068] vfs_fsync_range+0x10d/0x130 [ 110.551789][ T8068] ext4_buffered_write_iter+0x34f/0x3c0 [ 110.557381][ T8068] ext4_file_write_iter+0x383/0xf00 [ 110.562597][ T8068] iter_file_splice_write+0x5f2/0x970 [ 110.567993][ T8068] direct_splice_actor+0x156/0x2a0 [ 110.573122][ T8068] splice_direct_to_actor+0x312/0x680 [ 110.578517][ T8068] do_splice_direct+0xda/0x150 [ 110.583296][ T8068] do_sendfile+0x380/0x650 [ 110.587727][ T8068] __x64_sys_sendfile64+0x105/0x150 [ 110.592940][ T8068] x64_sys_call+0xb39/0x2fb0 [ 110.597536][ T8068] do_syscall_64+0xd2/0x200 [ 110.602058][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.607961][ T8068] [ 110.610287][ T8068] read to 0xffff888106b99bb0 of 4 bytes by task 8068 on cpu 1: [ 110.617841][ T8068] generic_buffers_fsync_noflush+0x80/0x120 [ 110.623803][ T8068] ext4_sync_file+0x1ab/0x690 [ 110.628512][ T8068] vfs_fsync_range+0x10d/0x130 [ 110.633339][ T8068] ext4_buffered_write_iter+0x34f/0x3c0 [ 110.638908][ T8068] ext4_file_write_iter+0x383/0xf00 [ 110.644128][ T8068] iter_file_splice_write+0x5f2/0x970 [ 110.649530][ T8068] direct_splice_actor+0x156/0x2a0 [ 110.654672][ T8068] splice_direct_to_actor+0x312/0x680 [ 110.660155][ T8068] do_splice_direct+0xda/0x150 [ 110.664941][ T8068] do_sendfile+0x380/0x650 [ 110.669372][ T8068] __x64_sys_sendfile64+0x105/0x150 [ 110.674597][ T8068] x64_sys_call+0xb39/0x2fb0 [ 110.679208][ T8068] do_syscall_64+0xd2/0x200 [ 110.683733][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.689653][ T8068] [ 110.691980][ T8068] value changed: 0x00000038 -> 0x00000002 [ 110.697697][ T8068] [ 110.700022][ T8068] Reported by Kernel Concurrency Sanitizer on: [ 110.706178][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.3.1403 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 110.718256][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.728332][ T8068] ================================================================== [ 110.743643][ T8085] loop1: detected capacity change from 0 to 128 [ 110.751377][ T8085] FAT-fs (loop1): Directory bread(block 162) failed [ 110.763029][ T8085] FAT-fs (loop1): Directory bread(block 163) failed [ 110.786277][ T8085] FAT-fs (loop1): Directory bread(block 164) failed [ 110.792926][ T8085] FAT-fs (loop1): Directory bread(block 165) failed [ 110.800248][ T8085] FAT-fs (loop1): Directory bread(block 166) failed [ 110.807536][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.816790][ T8085] FAT-fs (loop1): Directory bread(block 167) failed [ 110.820412][ T8087] SELinux: ebitmap: truncated map [ 110.823534][ T8085] FAT-fs (loop1): Directory bread(block 168) failed [ 110.829494][ T8087] SELinux: failed to load policy [ 110.835702][ T8085] FAT-fs (loop1): Directory bread(block 169) failed [ 110.855828][ T8085] FAT-fs (loop1): Directory bread(block 162) failed [ 110.862515][ T8085] FAT-fs (loop1): Directory bread(block 163) failed [ 110.869875][ T8085] syz.1.1410: attempt to access beyond end of device [ 110.869875][ T8085] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 110.883202][ T8085] syz.1.1410: attempt to access beyond end of device [ 110.883202][ T8085] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 111.002741][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.