last executing test programs: 3.875165982s ago: executing program 4 (id=612): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0], 0x3, 0x343, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 3.831442484s ago: executing program 4 (id=613): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x1a09, 0x2, 0x10001, 0x9, 0xe, "3a964e3a2be5c7407e822f95bc12b8ba9a1836"}) 3.151761604s ago: executing program 0 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)={'b', ' *:* ', 'rm\x00'}, 0x9) r5 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000940)=ANY=[@ANYBLOB='a *:* r'], 0x8) 3.151171744s ago: executing program 3 (id=621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.965366581s ago: executing program 4 (id=623): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.906994494s ago: executing program 4 (id=624): r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.822953798s ago: executing program 3 (id=625): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x6, {{0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, {{0xa, 0x4e21, 0x624, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.695651203s ago: executing program 1 (id=626): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r0], 0x38}}, 0x0) 2.661497005s ago: executing program 1 (id=628): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 2.200038884s ago: executing program 0 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) 2.199196875s ago: executing program 0 (id=631): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) 2.109972398s ago: executing program 1 (id=632): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x833e) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}}}, 0x24}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0xc, 0x8, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x7, 0xd8, [@local]}, @generic={0x88, 0xc, "73bb87bc42f0ab9d9151"}, @rr={0x7, 0x3, 0x58}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0x8, [{@local, 0x401}]}, @timestamp_prespec={0x44, 0x4c, 0x3a, 0x3, 0x1, [{@broadcast, 0x53cc}, {@multicast1, 0x8}, {@private=0xa010100, 0xf3c6}, {@multicast2, 0x400}, {@private=0xa010100, 0x4}, {@broadcast, 0x3714}, {@loopback, 0x3083}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0xd78a}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf25090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000040000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002007465616d3000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="88000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e64000000140002007465616d3000000000000000000000000800030000000000140002006261746165765f736c6176655f310000140002006261746164763000000000000000000008000300020000001400020076657468305f746f5f7465616d0000005000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200687372300000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300030000000800030000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.054954421s ago: executing program 4 (id=633): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='rpcgss_bad_seqno\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000001b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="bf183c8b57daf69c22efaf51fe9e7c00cce5cf00054a16d47ac79e94820dd14a7b61a14e727b6fd40d6b66a37c006bcbbe3ace618f0b48f5d0c62b8286e2a15ceaa5664ddb22d25f954b23bb37f1973a19e153d8"]) 1.933523906s ago: executing program 3 (id=635): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200), 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)={@broadcast, @random="2109c91c46f9", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "2939007fe44a4bfc252e0993dd7763cb0b095452e6b63472a260bae94ba6d8a5", "583a882771db9546d9958609810ddd3d768651469d73e461f0408b7053f46de3a3dc6d435a976b798b6a69e19f7944a3", "3b9fd873bee8b816cf4e30bac409f8d8533c08136eca65ae8208aa6f", {"633e897505c3db888947b64b4e906703", "3688418140a671b04cfcf60ce45192ed"}}}}}}}}, 0x0) 1.920420557s ago: executing program 3 (id=636): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000000000001000000100000001700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004ca756650c2047739271c8541646ea4fa53aaea345e0d3391b12452063b7a235125a9696cf3ad5e51b453b493bdd0a6c2e3504af91aed8eb06d662613d394d928968fd07db6e812f811d468d16e52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.020008515s ago: executing program 3 (id=638): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x1, 0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x21, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000ffffffff00"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c0001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$qrtr(0x2a, 0x2, 0x0) 1.000217836s ago: executing program 0 (id=639): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) 967.907338ms ago: executing program 1 (id=640): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x833e) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}}}, 0x24}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0xc, 0x8, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x7, 0xd8, [@local]}, @generic={0x88, 0xc, "73bb87bc42f0ab9d9151"}, @rr={0x7, 0x3, 0x58}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0x8, [{@local, 0x401}]}, @timestamp_prespec={0x44, 0x3c, 0x3a, 0x3, 0x1, [{@broadcast, 0x53cc}, {@multicast1, 0x8}, {@multicast2, 0x400}, {@private=0xa010100, 0x4}, {@loopback, 0x3083}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0xd78a}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf25090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000040000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d7930000000000000000000000800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002007465616d3000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="88000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e64000000140002007465616d3000000000000000000000000800030000000000140002006261746165765f736c6176655f310000140002006261746164763000000000000000000008000300020000001400020076657468305f746f5f7465616d0000005000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200687372300000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300030000000800030000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 966.063928ms ago: executing program 0 (id=641): pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) 768.129576ms ago: executing program 2 (id=642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 694.762069ms ago: executing program 2 (id=643): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="e5bb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 694.19461ms ago: executing program 2 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 678.22514ms ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0xffffffffffffffdb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000500000000020000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@grpjquota}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 577.626764ms ago: executing program 4 (id=646): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x6, {{0xa, 0x4e22, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, {{0xa, 0x4e21, 0x624, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 487.680728ms ago: executing program 1 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 309.718766ms ago: executing program 2 (id=648): symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 226.06722ms ago: executing program 2 (id=649): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="000000000000000001000000100000001700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004ca756650c2047739271c8541646ea4fa53aaea345e0d3391b12452063b7a235125a9696cf3ad5e51b453b493bdd0a6c2e3504af91aed8eb06d662613d394d928968fd07db6e812f811d468d16e52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 153.255493ms ago: executing program 3 (id=650): socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) dup(r3) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 719.71µs ago: executing program 0 (id=651): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x833e) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}}}, 0x24}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0xc, 0x8, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x7, 0xd8, [@local]}, @generic={0x88, 0xc, "73bb87bc42f0ab9d9151"}, @rr={0x7, 0x3, 0x58}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0x8, [{@local, 0x401}]}, @timestamp_prespec={0x44, 0x4c, 0x3a, 0x3, 0x1, [{@broadcast, 0x53cc}, {@multicast1, 0x8}, {@private=0xa010100, 0xf3c6}, {@multicast2, 0x400}, {@private=0xa010100, 0x4}, {@broadcast, 0x3714}, {@loopback, 0x3083}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0xd78a}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf25090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000040000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002007465616d3000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="88000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e64000000140002007465616d3000000000000000000000000800030000000000140002006261746165765f736c6176655f310000140002006261746164763000000000000000000008000300020000001400020076657468305f746f5f7465616d0000005000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200687372300000000000000000000000000800030000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300030000000800030000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 0s ago: executing program 1 (id=652): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004ca756650c2047739271c8541646ea4fa53aaea345e0d3391b12452063b7a235125a9696cf3ad5e51b453b493bdd0a6c2e3504af91aed8eb06d662613d394d928968fd07db6e812f811d468d16e52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 7][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 62.761537][ T4252] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 62.769287][ T4252] netlink: 244 bytes leftover after parsing attributes in process `syz.1.222'. [ 63.326839][ T4264] loop1: detected capacity change from 0 to 128 [ 63.340280][ T4261] loop2: detected capacity change from 0 to 8192 [ 63.474705][ T4261] loop2: p1 p2 p3 p4 [ 63.479452][ T4261] loop2: p1 size 196608 extends beyond EOD, truncated [ 63.519430][ T4253] syz.0.223: attempt to access beyond end of device [ 63.519430][ T4253] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.532822][ T4253] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.558632][ T4261] loop2: p2 start 164919041 is beyond EOD, truncated [ 63.565419][ T4261] loop2: p3 size 66846464 extends beyond EOD, truncated [ 63.573367][ T4261] loop2: p4 size 37048832 extends beyond EOD, truncated [ 63.595190][ T4268] loop1: detected capacity change from 0 to 256 [ 63.601899][ T4268] msdos: Unknown parameter 'ÿÿÿÿ' [ 63.630760][ T4268] lo speed is unknown, defaulting to 1000 [ 63.714008][ T4250] syz.0.223: attempt to access beyond end of device [ 63.714008][ T4250] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.727997][ T4250] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 63.997448][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.006462][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.187891][ T4275] loop2: detected capacity change from 0 to 2048 [ 64.205833][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 64.286325][ T4275] loop2: p1 < > p4 [ 64.310537][ T4275] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.369600][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.378604][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.455986][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 64.456014][ T29] audit: type=1400 audit(1764637381.849:952): avc: denied { read write } for pid=4274 comm="syz.2.230" name="loop2p4" dev="devtmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.485497][ T29] audit: type=1400 audit(1764637381.849:953): avc: denied { open } for pid=4274 comm="syz.2.230" path="/dev/loop2p4" dev="devtmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.509700][ T4280] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.639358][ T4280] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.664781][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.674069][ T4273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.229'. [ 64.726863][ T4280] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.836568][ T4280] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.894317][ T4284] loop3: detected capacity change from 0 to 2048 [ 64.911421][ T4050] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.913619][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'. [ 65.081571][ T4050] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.081626][ T4284] loop3: p1 < > p4 [ 65.089826][ T4050] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.145028][ T4284] loop3: p4 size 8388608 extends beyond EOD, truncated [ 65.299515][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 65.332088][ T4291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 65.366375][ T29] audit: type=1326 audit(1764637382.759:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.390965][ T29] audit: type=1326 audit(1764637382.759:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.414283][ T29] audit: type=1326 audit(1764637382.769:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.438135][ T29] audit: type=1326 audit(1764637382.769:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.461672][ T29] audit: type=1326 audit(1764637382.769:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.485141][ T29] audit: type=1326 audit(1764637382.769:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.508370][ T29] audit: type=1326 audit(1764637382.769:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.531686][ T29] audit: type=1326 audit(1764637382.769:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 65.592884][ T4297] loop4: detected capacity change from 0 to 512 [ 65.601426][ T4297] EXT4-fs: Ignoring removed i_version option [ 65.607524][ T4297] EXT4-fs: Ignoring removed bh option [ 65.619126][ T4297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.632032][ T4297] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.659265][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.461349][ T4316] loop3: detected capacity change from 0 to 128 [ 66.470994][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 66.565589][ T4287] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.616142][ T4287] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.666652][ T4287] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.760863][ T4320] syz.3.241: attempt to access beyond end of device [ 66.760863][ T4320] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 66.774284][ T4320] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 66.804920][ T4316] syz.3.241: attempt to access beyond end of device [ 66.804920][ T4316] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 66.818320][ T4316] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 66.891469][ T4325] loop3: detected capacity change from 0 to 2048 [ 66.925886][ T4325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.251586][ T4332] loop2: detected capacity change from 0 to 2048 [ 67.262931][ T4325] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.277816][ T4325] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 67.290339][ T4325] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.290339][ T4325] [ 67.300449][ T4325] EXT4-fs (loop3): Total free blocks count 0 [ 67.306441][ T4325] EXT4-fs (loop3): Free/Dirty block details [ 67.312334][ T4325] EXT4-fs (loop3): free_blocks=2415919104 [ 67.318114][ T4325] EXT4-fs (loop3): dirty_blocks=8208 [ 67.323462][ T4325] EXT4-fs (loop3): Block reservation details [ 67.329061][ T4332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.329505][ T4325] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 67.367990][ T4338] loop1: detected capacity change from 0 to 128 [ 67.378341][ T4338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.386225][ T4338] FAT-fs (loop1): Filesystem has been set read-only [ 67.400203][ T4338] syz.1.247: attempt to access beyond end of device [ 67.400203][ T4338] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.421954][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 67.439098][ T4338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.446975][ T4338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.480339][ T4338] syz.1.247: attempt to access beyond end of device [ 67.480339][ T4338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.534943][ T4338] syz.1.247: attempt to access beyond end of device [ 67.534943][ T4338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.596125][ T4332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.611611][ T4332] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 67.624269][ T4332] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.624269][ T4332] [ 67.634106][ T4332] EXT4-fs (loop2): Total free blocks count 0 [ 67.640171][ T4332] EXT4-fs (loop2): Free/Dirty block details [ 67.646303][ T4332] EXT4-fs (loop2): free_blocks=2415919104 [ 67.652032][ T4332] EXT4-fs (loop2): dirty_blocks=8208 [ 67.657351][ T4332] EXT4-fs (loop2): Block reservation details [ 67.663327][ T4332] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 67.678782][ T4343] loop3: detected capacity change from 0 to 2048 [ 67.695304][ T4345] loop4: detected capacity change from 0 to 2048 [ 67.724931][ T4345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 67.745138][ T3568] loop3: p1 < > p4 [ 67.749975][ T3568] loop3: p4 size 8388608 extends beyond EOD, truncated [ 67.766116][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 67.780902][ T4343] loop3: p1 < > p4 [ 67.785973][ T4343] loop3: p4 size 8388608 extends beyond EOD, truncated [ 67.862539][ T4349] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.878342][ T4349] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1914 with error 28 [ 67.890815][ T4349] EXT4-fs (loop4): This should not happen!! Data will be lost [ 67.890815][ T4349] [ 67.900607][ T4349] EXT4-fs (loop4): Total free blocks count 0 [ 67.906616][ T4349] EXT4-fs (loop4): Free/Dirty block details [ 67.912555][ T4349] EXT4-fs (loop4): free_blocks=2415919104 [ 67.918369][ T4349] EXT4-fs (loop4): dirty_blocks=1920 [ 67.923652][ T4349] EXT4-fs (loop4): Block reservation details [ 67.929818][ T4349] EXT4-fs (loop4): i_reserved_data_blocks=120 [ 68.163785][ T4357] loop2: detected capacity change from 0 to 256 [ 68.170624][ T4357] msdos: Unknown parameter 'ÿÿÿÿ' [ 68.256453][ T4358] lo speed is unknown, defaulting to 1000 [ 68.572640][ T4053] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 68.638064][ T4362] loop1: detected capacity change from 0 to 128 [ 68.646481][ T4362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.646801][ T4362] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.741791][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.886020][ T4369] loop1: detected capacity change from 0 to 8192 [ 70.049096][ T4380] __nla_validate_parse: 3 callbacks suppressed [ 70.049113][ T4380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'. [ 70.100287][ T4369] loop1: p1 p2 p3 p4 [ 70.104882][ T4369] loop1: p1 size 196608 extends beyond EOD, truncated [ 70.123265][ T4384] loop4: detected capacity change from 0 to 128 [ 70.129816][ T4369] loop1: p2 start 164919041 is beyond EOD, truncated [ 70.136636][ T4369] loop1: p3 size 66846464 extends beyond EOD, truncated [ 70.147755][ T4369] loop1: p4 size 37048832 extends beyond EOD, truncated [ 70.177545][ T4384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 70.185457][ T4384] FAT-fs (loop4): Filesystem has been set read-only [ 70.192432][ T4384] syz.4.259: attempt to access beyond end of device [ 70.192432][ T4384] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 70.210062][ T4385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.220667][ T4384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 70.228574][ T4384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 70.247645][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 70.248325][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 70.257820][ T4384] syz.4.259: attempt to access beyond end of device [ 70.257820][ T4384] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.282677][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 70.292613][ T4384] syz.4.259: attempt to access beyond end of device [ 70.292613][ T4384] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.446801][ T4385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.519715][ T4391] loop1: detected capacity change from 0 to 256 [ 70.526569][ T4391] msdos: Unknown parameter 'ÿÿÿÿ' [ 70.567262][ T4391] lo speed is unknown, defaulting to 1000 [ 70.683200][ T4385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.769317][ T4385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.850192][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.885727][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.932428][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.979531][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.060268][ T4396] loop3: detected capacity change from 0 to 512 [ 71.227048][ T4396] EXT4-fs: Ignoring removed i_version option [ 71.233078][ T4396] EXT4-fs: Ignoring removed bh option [ 71.347824][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.395835][ T4400] loop2: detected capacity change from 0 to 2048 [ 71.414953][ T4396] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.458369][ T4400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 71.536375][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 71.536387][ T29] audit: type=1326 audit(1764637388.929:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.588236][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.615877][ T29] audit: type=1326 audit(1764637388.959:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.639352][ T29] audit: type=1326 audit(1764637388.959:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.662671][ T29] audit: type=1326 audit(1764637388.959:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.685986][ T29] audit: type=1326 audit(1764637388.959:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.709295][ T29] audit: type=1326 audit(1764637388.969:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.732718][ T29] audit: type=1326 audit(1764637388.969:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.756550][ T29] audit: type=1326 audit(1764637388.969:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.779859][ T29] audit: type=1326 audit(1764637388.969:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 71.964928][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 72.001831][ T4406] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.062051][ T4413] loop3: detected capacity change from 0 to 2048 [ 72.075503][ T4406] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 310 with max blocks 1726 with error 28 [ 72.088169][ T4406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.088169][ T4406] [ 72.098009][ T4406] EXT4-fs (loop2): Total free blocks count 0 [ 72.104044][ T4406] EXT4-fs (loop2): Free/Dirty block details [ 72.110005][ T4406] EXT4-fs (loop2): free_blocks=2415919104 [ 72.115762][ T4406] EXT4-fs (loop2): dirty_blocks=2048 [ 72.116115][ T4415] loop1: detected capacity change from 0 to 2048 [ 72.121038][ T4406] EXT4-fs (loop2): Block reservation details [ 72.133523][ T4406] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 72.147374][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 72.154025][ T4418] loop4: detected capacity change from 0 to 2048 [ 72.167209][ T29] audit: type=1326 audit(1764637389.559:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 72.199255][ T3568] loop1: p1 < > p4 [ 72.203836][ T3568] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.211371][ T3299] loop4: p1 < > p4 [ 72.216930][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 72.221354][ T4050] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.235038][ T4415] loop1: p1 < > p4 [ 72.242369][ T4050] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250925][ T3299] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.258455][ T4415] loop1: p4 size 8388608 extends beyond EOD, truncated [ 72.260834][ T4050] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.274460][ T4421] loop3: detected capacity change from 0 to 128 [ 72.275005][ T4050] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.295837][ T4418] loop4: p1 < > p4 [ 72.304941][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 72.314934][ T4418] loop4: p4 size 8388608 extends beyond EOD, truncated [ 72.327727][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 72.481511][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 72.502382][ T4425] lo speed is unknown, defaulting to 1000 [ 72.622820][ T4431] loop2: detected capacity change from 0 to 2048 [ 72.646603][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 72.675515][ T3299] loop2: p1 < > p4 [ 72.680020][ T3299] loop2: p4 size 8388608 extends beyond EOD, truncated [ 72.705523][ T4431] loop2: p1 < > p4 [ 72.708928][ T4424] syz.3.270: attempt to access beyond end of device [ 72.708928][ T4424] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.722693][ T4424] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 72.732068][ T4431] loop2: p4 size 8388608 extends beyond EOD, truncated [ 72.732504][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.274'. [ 72.744879][ T4421] syz.3.270: attempt to access beyond end of device [ 72.744879][ T4421] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.747966][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.274'. [ 72.761666][ T4421] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 72.788199][ T4421] syz.3.270: attempt to access beyond end of device [ 72.788199][ T4421] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.801608][ T4421] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 72.805076][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.274'. [ 72.819183][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.274'. [ 72.878742][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 72.878808][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.938888][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.274'. [ 73.099106][ T4445] 9pnet_fd: Insufficient options for proto=fd [ 73.276543][ T4455] loop1: detected capacity change from 0 to 256 [ 73.283411][ T4455] msdos: Unknown parameter 'ÿÿÿÿ' [ 73.308605][ T4455] lo speed is unknown, defaulting to 1000 [ 73.720076][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.731178][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 74.039674][ T4464] loop2: detected capacity change from 0 to 2048 [ 74.106840][ T4464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.276973][ T4469] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.356184][ T4460] loop3: detected capacity change from 0 to 8192 [ 74.368843][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.417168][ T4469] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.427978][ T4460] loop3: p1 p2 p3 p4 [ 74.458116][ T4460] loop3: p1 size 196608 extends beyond EOD, truncated [ 74.524940][ T4460] loop3: p2 start 164919041 is beyond EOD, truncated [ 74.531703][ T4460] loop3: p3 size 66846464 extends beyond EOD, truncated [ 75.012143][ T4460] loop3: p4 size 37048832 extends beyond EOD, truncated [ 75.027194][ T4469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.067672][ T4469] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.086876][ T4481] loop4: detected capacity change from 0 to 128 [ 75.095153][ T4479] __nla_validate_parse: 2 callbacks suppressed [ 75.095172][ T4479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.286'. [ 75.099588][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 75.102487][ T3775] udevd[3775]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.121812][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.909739][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 75.966789][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 75.991961][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.000943][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.208491][ T4511] loop1: detected capacity change from 0 to 256 [ 76.215615][ T4511] msdos: Unknown parameter 'ÿÿÿÿ' [ 76.240312][ T4511] lo speed is unknown, defaulting to 1000 [ 77.067113][ T4515] loop3: detected capacity change from 0 to 8192 [ 77.125172][ T3299] loop3: p1 p2 p3 p4 [ 77.139813][ T3299] loop3: p1 size 196608 extends beyond EOD, truncated [ 77.172978][ T3299] loop3: p2 start 164919041 is beyond EOD, truncated [ 77.179762][ T3299] loop3: p3 size 66846464 extends beyond EOD, truncated [ 77.223582][ T3299] loop3: p4 size 37048832 extends beyond EOD, truncated [ 77.255432][ T4515] loop3: p1 p2 p3 p4 [ 77.263404][ T4515] loop3: p1 size 196608 extends beyond EOD, truncated [ 77.290255][ T4515] loop3: p2 start 164919041 is beyond EOD, truncated [ 77.297249][ T4515] loop3: p3 size 66846464 extends beyond EOD, truncated [ 77.340484][ T4515] loop3: p4 size 37048832 extends beyond EOD, truncated [ 77.474713][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.474794][ T4493] Bluetooth: hci0: command 0x1003 tx timeout [ 77.620587][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.638547][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.647499][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.683040][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691441][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.699841][ T4050] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.707137][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.716946][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.719775][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 77.739223][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 77.752604][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 77.782545][ T4525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.797083][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.806149][ T4521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 77.806528][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 77.816724][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 77.828313][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 77.907209][ T4532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'. [ 77.918898][ T4530] loop0: detected capacity change from 0 to 2048 [ 77.935746][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 77.935759][ T29] audit: type=1326 audit(1764637395.329:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 77.968339][ T29] audit: type=1326 audit(1764637395.329:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 77.991966][ T29] audit: type=1326 audit(1764637395.329:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.015475][ T29] audit: type=1326 audit(1764637395.329:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.038973][ T29] audit: type=1326 audit(1764637395.329:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.062277][ T29] audit: type=1326 audit(1764637395.329:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.085702][ T29] audit: type=1326 audit(1764637395.329:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.109022][ T29] audit: type=1326 audit(1764637395.329:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.132485][ T29] audit: type=1326 audit(1764637395.329:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.155820][ T29] audit: type=1326 audit(1764637395.329:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 78.165731][ T3568] loop0: p1 < > p4 [ 78.205062][ T3568] loop0: p4 size 8388608 extends beyond EOD, truncated [ 78.243039][ T4530] loop0: p1 < > p4 [ 78.327126][ T4530] loop0: p4 size 8388608 extends beyond EOD, truncated [ 78.818291][ T4558] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 78.851510][ T4558] ipvlan2: entered promiscuous mode [ 78.875022][ T4558] bridge0: port 3(ipvlan2) entered blocking state [ 78.881580][ T4558] bridge0: port 3(ipvlan2) entered disabled state [ 78.911926][ T4558] ipvlan2: entered allmulticast mode [ 78.917290][ T4558] bridge0: entered allmulticast mode [ 78.936485][ T4554] loop4: detected capacity change from 0 to 8192 [ 78.948650][ T4558] ipvlan2: left allmulticast mode [ 78.953736][ T4558] bridge0: left allmulticast mode [ 79.021665][ T3299] loop4: p1 p2 p3 p4 [ 79.058434][ T3299] loop4: p1 size 196608 extends beyond EOD, truncated [ 79.071226][ T4563] loop1: detected capacity change from 0 to 128 [ 79.083264][ T3299] loop4: p2 start 164919041 is beyond EOD, truncated [ 79.090142][ T3299] loop4: p3 size 66846464 extends beyond EOD, truncated [ 79.115127][ T3299] loop4: p4 size 37048832 extends beyond EOD, truncated [ 79.132614][ T4554] loop4: p1 p2 p3 p4 [ 79.142618][ T4554] loop4: p1 size 196608 extends beyond EOD, truncated [ 79.150799][ T4565] loop2: detected capacity change from 0 to 2048 [ 79.152836][ T4554] loop4: p2 start 164919041 is beyond EOD, truncated [ 79.163921][ T4554] loop4: p3 size 66846464 extends beyond EOD, truncated [ 79.185526][ T4554] loop4: p4 size 37048832 extends beyond EOD, truncated [ 79.196362][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.330292][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 79.343293][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.345548][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.363295][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.372095][ T4563] syz.1.310: attempt to access beyond end of device [ 79.372095][ T4563] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.386349][ T4563] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 79.402598][ T4566] syz.1.310: attempt to access beyond end of device [ 79.402598][ T4566] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.416030][ T4566] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 79.426429][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.631233][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.671335][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.681081][ T4590] loop3: detected capacity change from 0 to 2048 [ 79.841703][ T4594] loop2: detected capacity change from 0 to 256 [ 79.848503][ T4594] msdos: Unknown parameter 'ÿÿÿÿ' [ 79.874433][ T4594] lo speed is unknown, defaulting to 1000 [ 80.696091][ T4597] loop1: detected capacity change from 0 to 256 [ 80.702581][ T4597] msdos: Unknown parameter 'ÿÿÿÿ' [ 80.870646][ T4593] loop0: detected capacity change from 0 to 2048 [ 81.353532][ T4590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 81.453637][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 81.557542][ T4605] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.615330][ T4605] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28 [ 81.628040][ T4605] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.628040][ T4605] [ 81.637866][ T4605] EXT4-fs (loop3): Total free blocks count 0 [ 81.644213][ T4605] EXT4-fs (loop3): Free/Dirty block details [ 81.650174][ T4605] EXT4-fs (loop3): free_blocks=2415919104 [ 81.655953][ T4605] EXT4-fs (loop3): dirty_blocks=576 [ 81.661233][ T4605] EXT4-fs (loop3): Block reservation details [ 81.667248][ T4605] EXT4-fs (loop3): i_reserved_data_blocks=36 [ 81.904430][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 81.918146][ T4609] 9pnet_fd: Insufficient options for proto=fd [ 81.990067][ T4597] lo speed is unknown, defaulting to 1000 [ 82.319735][ T4050] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 82.376413][ T4617] loop3: detected capacity change from 0 to 2048 [ 82.401390][ T4617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 82.541687][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 82.723951][ T4621] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.743517][ T4625] loop2: detected capacity change from 0 to 512 [ 82.750257][ T4625] EXT4-fs: Ignoring removed i_version option [ 82.756302][ T4625] EXT4-fs: Ignoring removed bh option [ 82.776397][ T4621] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.788703][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.801803][ T4625] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.816530][ T4621] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.838048][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.866380][ T4621] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.867783][ T4629] __nla_validate_parse: 11 callbacks suppressed [ 82.867864][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 82.891598][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 82.933590][ T4637] loop0: detected capacity change from 0 to 128 [ 82.947320][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 82.948094][ T4050] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.956413][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 82.987987][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 83.005943][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 83.014711][ T4050] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.014988][ T4629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.328'. [ 83.023073][ T4050] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.201287][ T4050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.460916][ T4649] loop2: detected capacity change from 0 to 256 [ 83.467714][ T4649] msdos: Unknown parameter 'ÿÿÿÿ' [ 83.492768][ T4649] lo speed is unknown, defaulting to 1000 [ 84.249594][ T4656] loop4: detected capacity change from 0 to 128 [ 84.931861][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 84.931932][ T29] audit: type=1326 audit(1764637402.319:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.016378][ T4667] loop4: detected capacity change from 0 to 512 [ 85.022593][ T4668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 85.023056][ T4667] EXT4-fs: Ignoring removed i_version option [ 85.037566][ T4667] EXT4-fs: Ignoring removed bh option [ 85.067728][ T29] audit: type=1326 audit(1764637402.359:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.091250][ T29] audit: type=1326 audit(1764637402.359:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.114619][ T29] audit: type=1326 audit(1764637402.359:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.138198][ T29] audit: type=1326 audit(1764637402.359:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.161572][ T29] audit: type=1326 audit(1764637402.359:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.351986][ T4667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.375076][ T4667] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.387566][ T29] audit: type=1326 audit(1764637402.529:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.410960][ T29] audit: type=1326 audit(1764637402.529:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.1.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64222f749 code=0x7ffc0000 [ 85.581155][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.618841][ T4683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.738952][ T4687] loop3: detected capacity change from 0 to 2048 [ 86.147930][ T4687] loop3: p1 < > p4 [ 86.169123][ T4696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.344'. [ 86.174847][ T4687] loop3: p4 size 8388608 extends beyond EOD, truncated [ 86.178093][ T4696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.344'. [ 86.286781][ T4702] loop0: detected capacity change from 0 to 128 [ 86.489523][ T4705] loop0: detected capacity change from 0 to 8192 [ 86.579929][ T4712] loop4: detected capacity change from 0 to 256 [ 86.586690][ T4712] msdos: Unknown parameter 'ÿÿÿÿ' [ 86.611656][ T4712] lo speed is unknown, defaulting to 1000 [ 86.785887][ T3299] loop0: p1 p2 p3 p4 [ 86.821793][ T3299] loop0: p1 size 196608 extends beyond EOD, truncated [ 86.935009][ T3299] loop0: p2 start 164919041 is beyond EOD, truncated [ 86.942447][ T3299] loop0: p3 size 66846464 extends beyond EOD, truncated [ 87.555238][ T3299] loop0: p4 size 37048832 extends beyond EOD, truncated [ 87.591601][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 87.602289][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 88.160159][ T4705] loop0: p1 p2 p3 p4 [ 88.164221][ T4705] loop0: p1 size 196608 extends beyond EOD, truncated [ 88.177841][ T4722] loop4: detected capacity change from 0 to 512 [ 88.184360][ T4705] loop0: p2 start 164919041 is beyond EOD, truncated [ 88.186111][ T4722] EXT4-fs: Ignoring removed i_version option [ 88.191190][ T4705] loop0: p3 size 66846464 extends beyond EOD, [ 88.197254][ T4722] EXT4-fs: Ignoring removed bh option [ 88.208817][ T4705] truncated [ 88.249351][ T4722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.265377][ T4705] loop0: p4 size 37048832 extends beyond EOD, truncated [ 88.275594][ T4722] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.309128][ T4728] loop3: detected capacity change from 0 to 128 [ 88.331539][ T4728] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 88.339413][ T4728] FAT-fs (loop3): Filesystem has been set read-only [ 88.404436][ T29] audit: type=1400 audit(1764637405.789:1222): avc: denied { map_create } for pid=4730 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.409482][ T4731] loop1: detected capacity change from 0 to 128 [ 88.450695][ T4734] loop0: detected capacity change from 0 to 4096 [ 88.469622][ T4734] EXT4-fs: Ignoring removed nobh option [ 88.484842][ T4728] syz.3.357: attempt to access beyond end of device [ 88.484842][ T4728] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 88.511689][ T4728] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 88.519649][ T4728] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 88.520983][ T29] audit: type=1400 audit(1764637405.789:1223): avc: denied { bpf } for pid=4730 comm="syz.1.354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.535927][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.567750][ T4731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 88.573896][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 88.575639][ T4731] FAT-fs (loop1): Filesystem has been set read-only [ 88.576182][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.586938][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 88.592552][ T4731] syz.1.354: attempt to access beyond end of device [ 88.592552][ T4731] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 88.603390][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 88.613327][ T4731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 88.624681][ T4728] syz.3.357: attempt to access beyond end of device [ 88.624681][ T4728] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.634364][ T4731] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 88.673812][ T4728] syz.3.357: attempt to access beyond end of device [ 88.673812][ T4728] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.675280][ T4736] lo speed is unknown, defaulting to 1000 [ 88.687911][ T4731] syz.1.354: attempt to access beyond end of device [ 88.687911][ T4731] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.740847][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 88.752157][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 88.763285][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 88.781986][ T4731] syz.1.354: attempt to access beyond end of device [ 88.781986][ T4731] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 88.810945][ T4742] loop4: detected capacity change from 0 to 128 [ 89.029259][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.097431][ T4752] loop4: detected capacity change from 0 to 128 [ 89.130400][ T4752] __nla_validate_parse: 5 callbacks suppressed [ 89.130416][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 89.163088][ T4751] loop1: detected capacity change from 0 to 2048 [ 89.549402][ T4755] syz.4.365: attempt to access beyond end of device [ 89.549402][ T4755] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.562982][ T4755] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 89.608530][ T4751] loop1: p1 < > p4 [ 89.613000][ T4755] syz.4.365: attempt to access beyond end of device [ 89.613000][ T4755] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.626497][ T4755] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 89.659248][ T4751] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.816611][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 90.195833][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 90.195849][ T29] audit: type=1400 audit(1764637407.589:1260): avc: denied { write } for pid=4749 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 90.253487][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.272988][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.292449][ T29] audit: type=1400 audit(1764637407.639:1261): avc: denied { read write } for pid=4770 comm="syz.4.370" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.315970][ T29] audit: type=1400 audit(1764637407.639:1262): avc: denied { open } for pid=4770 comm="syz.4.370" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.339380][ T29] audit: type=1400 audit(1764637407.639:1263): avc: denied { ioctl } for pid=4770 comm="syz.4.370" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.413241][ T4766] loop3: detected capacity change from 0 to 8192 [ 90.475981][ T3299] loop3: p1 p2 p3 p4 [ 90.480130][ T3299] loop3: p1 size 196608 extends beyond EOD, truncated [ 90.504568][ T3299] loop3: p2 start 164919041 is beyond EOD, truncated [ 90.511341][ T3299] loop3: p3 size 66846464 extends beyond EOD, truncated [ 90.522155][ T4774] loop4: detected capacity change from 0 to 256 [ 90.528924][ T4774] msdos: Unknown parameter 'ÿÿÿÿ' [ 90.553600][ T4774] lo speed is unknown, defaulting to 1000 [ 91.337611][ T3299] loop3: p4 size 37048832 extends beyond EOD, truncated [ 91.413932][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 91.445429][ T4766] loop3: p1 p2 p3 p4 [ 91.454938][ T4766] loop3: p1 size 196608 extends beyond EOD, truncated [ 91.466423][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 91.479383][ T4766] loop3: p2 start 164919041 is beyond EOD, truncated [ 91.486287][ T4766] loop3: p3 size 66846464 extends beyond EOD, truncated [ 91.519727][ T4766] loop3: p4 size 37048832 extends beyond EOD, truncated [ 92.089429][ T29] audit: type=1326 audit(1764637409.479:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.113908][ T29] audit: type=1326 audit(1764637409.479:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.139668][ T29] audit: type=1326 audit(1764637409.479:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.163023][ T29] audit: type=1326 audit(1764637409.529:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.186551][ T29] audit: type=1326 audit(1764637409.529:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.209927][ T29] audit: type=1326 audit(1764637409.529:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 92.282514][ T4787] wireguard0: entered promiscuous mode [ 92.288018][ T4787] wireguard0: entered allmulticast mode [ 92.402352][ T4791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.374'. [ 92.707961][ T4795] loop1: detected capacity change from 0 to 128 [ 92.716216][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 92.765804][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 92.784779][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 92.799298][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 92.893525][ T4798] loop1: detected capacity change from 0 to 128 [ 92.922893][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 92.933427][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 92.944646][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 93.031223][ T4801] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.156099][ T4801] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.214223][ T4801] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.226625][ T4808] loop0: detected capacity change from 0 to 128 [ 93.245859][ T4808] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.253823][ T4808] FAT-fs (loop0): Filesystem has been set read-only [ 93.274705][ T4808] syz.0.381: attempt to access beyond end of device [ 93.274705][ T4808] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 93.296137][ T4801] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.309378][ T4808] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.317342][ T4808] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 93.326234][ T4808] syz.0.381: attempt to access beyond end of device [ 93.326234][ T4808] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 93.374776][ T149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393555][ T149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426777][ T149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.437297][ T4813] loop3: detected capacity change from 0 to 256 [ 93.443952][ T4813] vfat: Bad value for 'dmask' [ 93.448641][ T149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684821][ T4824] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.849499][ T4826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.384'. [ 93.952601][ T4828] loop3: detected capacity change from 0 to 128 [ 94.039231][ T4824] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.077478][ T4830] loop3: detected capacity change from 0 to 2048 [ 94.256432][ T3299] loop3: p1 < > p4 [ 94.265416][ T3299] loop3: p4 size 8388608 extends beyond EOD, truncated [ 94.305396][ T4824] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.334103][ T4830] loop3: p1 < > p4 [ 94.355579][ T4830] loop3: p4 size 8388608 extends beyond EOD, truncated [ 94.376629][ T4824] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.561597][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 94.570597][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 94.598558][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 94.607642][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 94.909770][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 94.944945][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 94.953864][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 95.032996][ T4847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 95.051559][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.086457][ T3568] udevd[3568]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.113811][ T4852] loop4: detected capacity change from 0 to 512 [ 95.122400][ T4852] EXT4-fs: Ignoring removed i_version option [ 95.128493][ T4852] EXT4-fs: Ignoring removed bh option [ 95.146782][ T4852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.159539][ T4852] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.183171][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.206853][ T4861] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.246237][ T4861] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.311543][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 95.311558][ T29] audit: type=1400 audit(1764637412.689:1337): avc: denied { append } for pid=4851 comm="syz.3.394" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.346157][ T4861] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.359107][ T4865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 95.368003][ T4865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 95.508663][ T4861] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.666069][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.686520][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.701205][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729486][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.987142][ T4882] loop3: detected capacity change from 0 to 128 [ 96.070739][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 96.078670][ T4882] FAT-fs (loop3): Filesystem has been set read-only [ 96.100326][ T4882] bio_check_eod: 1 callbacks suppressed [ 96.100344][ T4882] syz.3.401: attempt to access beyond end of device [ 96.100344][ T4882] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 96.127783][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 96.135680][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 96.144284][ T4882] syz.3.401: attempt to access beyond end of device [ 96.144284][ T4882] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 96.158336][ T4882] syz.3.401: attempt to access beyond end of device [ 96.158336][ T4882] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 96.319739][ T4887] loop3: detected capacity change from 0 to 2048 [ 96.345581][ T3299] loop3: p1 < > p4 [ 96.355966][ T4893] loop1: detected capacity change from 0 to 512 [ 96.356007][ T3299] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.369793][ T4887] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 96.389299][ T4893] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.404: inode has both inline data and extents flags [ 96.402790][ T4893] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.404: couldn't read orphan inode 15 (err -117) [ 96.473228][ T4893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.485598][ T4895] loop0: detected capacity change from 0 to 256 [ 96.492121][ T4895] vfat: Bad value for 'dmask' [ 96.494423][ T4893] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 96.497827][ T29] audit: type=1400 audit(1764637413.879:1338): avc: denied { create } for pid=4892 comm="syz.1.404" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 96.664425][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.723752][ T4905] loop1: detected capacity change from 0 to 512 [ 96.743294][ T4905] EXT4-fs: Ignoring removed i_version option [ 96.749365][ T4905] EXT4-fs: Ignoring removed bh option [ 96.816290][ T4905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.843992][ T4905] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.914045][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.125753][ T4923] loop1: detected capacity change from 0 to 128 [ 98.185445][ T4923] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.193286][ T4923] FAT-fs (loop1): Filesystem has been set read-only [ 99.009679][ T4923] syz.1.413: attempt to access beyond end of device [ 99.009679][ T4923] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.030320][ T4923] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.038206][ T4923] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.046428][ T4923] syz.1.413: attempt to access beyond end of device [ 99.046428][ T4923] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.059734][ T4923] syz.1.413: attempt to access beyond end of device [ 99.059734][ T4923] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.182648][ T4942] loop1: detected capacity change from 0 to 2048 [ 99.192747][ T4943] loop3: detected capacity change from 0 to 2048 [ 99.254705][ T4940] loop0: detected capacity change from 0 to 256 [ 99.261397][ T4940] vfat: Bad value for 'dmask' [ 99.267837][ T4943] loop3: p1 < > p4 [ 99.275175][ T4942] loop1: p1 < > p4 [ 99.305136][ T4943] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.314480][ T4942] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.329124][ T3003] loop3: p1 < > p4 [ 99.332129][ T4946] loop0: detected capacity change from 0 to 128 [ 99.336001][ T3003] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.349437][ T4948] loop4: detected capacity change from 0 to 512 [ 99.360906][ T4948] EXT4-fs: Ignoring removed i_version option [ 99.367100][ T4948] EXT4-fs: Ignoring removed bh option [ 99.400260][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.435083][ T4948] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.515573][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.589774][ T4942] __nla_validate_parse: 19 callbacks suppressed [ 99.589791][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 99.605447][ T4956] loop4: detected capacity change from 0 to 2048 [ 99.705398][ T4952] syz.0.420: attempt to access beyond end of device [ 99.705398][ T4952] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.718931][ T4952] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.728591][ T4946] syz.0.420: attempt to access beyond end of device [ 99.728591][ T4946] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.742036][ T4946] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.775754][ T4956] loop4: p1 < > p4 [ 99.785652][ T4956] loop4: p4 size 8388608 extends beyond EOD, truncated [ 99.807393][ T3299] printk: udevd: 14 output lines suppressed due to ratelimiting [ 99.827505][ T29] audit: type=1326 audit(1764637417.219:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 99.850913][ T29] audit: type=1326 audit(1764637417.219:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 99.890243][ T4964] loop3: detected capacity change from 0 to 256 [ 99.897010][ T4964] msdos: Unknown parameter 'ÿÿÿÿ' [ 99.920806][ T4964] lo speed is unknown, defaulting to 1000 [ 100.022648][ T29] audit: type=1326 audit(1764637417.399:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.046550][ T29] audit: type=1326 audit(1764637417.399:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.069859][ T29] audit: type=1326 audit(1764637417.399:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.268007][ T4970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.275381][ T4970] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 100.283209][ T4970] audit: backlog limit exceeded [ 100.413795][ T4970] audit_log_start: 3 callbacks suppressed [ 100.413885][ T4970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.427787][ T4970] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 100.437336][ T4970] audit: backlog limit exceeded [ 100.597642][ T29] audit: type=1326 audit(1764637417.489:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.621041][ T29] audit: type=1326 audit(1764637417.489:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.645094][ T29] audit: type=1326 audit(1764637417.489:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.668476][ T29] audit: type=1326 audit(1764637417.499:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.691695][ T29] audit: type=1326 audit(1764637417.499:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.715047][ T29] audit: type=1326 audit(1764637417.499:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.738355][ T29] audit: type=1326 audit(1764637417.499:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.0.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 100.946843][ T4977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.955576][ T4977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.066576][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 101.091019][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.099966][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.397642][ T4983] loop1: detected capacity change from 0 to 256 [ 101.404127][ T4983] msdos: Unknown parameter 'ÿÿÿÿ' [ 101.421511][ T4983] lo speed is unknown, defaulting to 1000 [ 101.473740][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.482751][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.692028][ T4992] loop3: detected capacity change from 0 to 128 [ 101.698654][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.707704][ T4980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.428'. [ 101.720661][ T4992] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.728614][ T4992] FAT-fs (loop3): Filesystem has been set read-only [ 101.736176][ T4992] syz.3.430: attempt to access beyond end of device [ 101.736176][ T4992] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 101.754441][ T4992] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.762350][ T4992] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 101.940550][ T4994] loop4: detected capacity change from 0 to 256 [ 101.947123][ T4994] vfat: Bad value for 'dmask' [ 102.036657][ T4996] loop4: detected capacity change from 0 to 512 [ 102.061153][ T4996] EXT4-fs: Ignoring removed i_version option [ 102.067345][ T4996] EXT4-fs: Ignoring removed bh option [ 102.078001][ T4992] syz.3.430: attempt to access beyond end of device [ 102.078001][ T4992] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.127858][ T4996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.143311][ T4992] syz.3.430: attempt to access beyond end of device [ 102.143311][ T4992] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 102.172833][ T4996] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.307347][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.424423][ T5007] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 102.432184][ T5007] netlink: 244 bytes leftover after parsing attributes in process `syz.3.436'. [ 102.501932][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 102.909254][ T5015] loop4: detected capacity change from 0 to 512 [ 102.916278][ T5015] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 103.090585][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.110397][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.125341][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.142953][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.200518][ T5019] loop2: detected capacity change from 0 to 8192 [ 103.257655][ T5019] loop2: p1 p2 p3 p4 [ 103.261696][ T5019] loop2: p1 size 196608 extends beyond EOD, truncated [ 103.285157][ T5019] loop2: p2 start 164919041 is beyond EOD, truncated [ 103.291885][ T5019] loop2: p3 size 66846464 extends beyond EOD, truncated [ 103.293570][ T5024] loop0: detected capacity change from 0 to 8192 [ 103.309687][ T5019] loop2: p4 size 37048832 extends beyond EOD, truncated [ 103.431130][ T5024] loop0: p1 p2 p3 p4 [ 103.435286][ T5024] loop0: p1 size 196608 extends beyond EOD, truncated [ 103.444834][ T5027] loop2: detected capacity change from 0 to 256 [ 103.451366][ T5027] vfat: Bad value for 'dmask' [ 103.456942][ T5024] loop0: p2 start 164919041 is beyond EOD, truncated [ 103.463653][ T5024] loop0: p3 size 66846464 extends beyond EOD, truncated [ 103.506283][ T5024] loop0: p4 size 37048832 extends beyond EOD, truncated [ 103.568605][ T5038] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 103.579934][ T5038] ipvlan2: entered promiscuous mode [ 103.586697][ T5038] bridge0: port 3(ipvlan2) entered blocking state [ 103.593173][ T5038] bridge0: port 3(ipvlan2) entered disabled state [ 103.600655][ T5038] ipvlan2: entered allmulticast mode [ 103.606088][ T5038] bridge0: entered allmulticast mode [ 103.612215][ T5038] ipvlan2: left allmulticast mode [ 103.617279][ T5038] bridge0: left allmulticast mode [ 103.692913][ T5044] loop0: detected capacity change from 0 to 2048 [ 103.745037][ T5044] loop0: p1 < > p4 [ 103.749389][ T5044] loop0: p4 size 8388608 extends beyond EOD, truncated [ 104.057095][ T5049] loop0: detected capacity change from 0 to 2048 [ 104.125335][ T5049] loop0: p1 < > p4 [ 104.129763][ T5049] loop0: p4 size 8388608 extends beyond EOD, truncated [ 104.490963][ T5063] loop2: detected capacity change from 0 to 2048 [ 104.613018][ T5062] loop3: detected capacity change from 0 to 256 [ 104.619862][ T5062] vfat: Bad value for 'dmask' [ 105.024865][ T5063] loop2: p1 < > p4 [ 105.066587][ T5063] loop2: p4 size 8388608 extends beyond EOD, truncated [ 105.140137][ T5075] lo speed is unknown, defaulting to 1000 [ 105.245855][ T5075] 9pnet_fd: Insufficient options for proto=fd [ 105.411276][ T5071] loop3: detected capacity change from 0 to 8192 [ 105.426660][ T5077] loop0: detected capacity change from 0 to 2048 [ 105.504939][ T5071] loop3: p1 p2 p3 p4 [ 105.510804][ T5077] loop0: p1 < > p4 [ 105.515993][ T5063] __nla_validate_parse: 3 callbacks suppressed [ 105.516005][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 105.531239][ T5071] loop3: p1 size 196608 extends beyond EOD, truncated [ 105.538835][ T5077] loop0: p4 size 8388608 extends beyond EOD, truncated [ 105.546481][ T5071] loop3: p2 start 164919041 is beyond EOD, truncated [ 105.553244][ T5071] loop3: p3 size 66846464 extends beyond EOD, truncated [ 105.562605][ T5071] loop3: p4 size 37048832 extends beyond EOD, truncated [ 105.675852][ T5080] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.776223][ T5080] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.810316][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 105.820227][ T5083] loop1: detected capacity change from 0 to 2048 [ 105.839946][ T5080] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.850341][ T5083] loop1: p1 < > p4 [ 105.854788][ T5083] loop1: p4 size 8388608 extends beyond EOD, truncated [ 105.976511][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 105.998174][ T5080] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.023996][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 106.024010][ T29] audit: type=1326 audit(1764637423.409:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.064252][ T5094] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 106.071998][ T5094] netlink: 244 bytes leftover after parsing attributes in process `syz.0.463'. [ 106.165341][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213387][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.274700][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.352178][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.394596][ T29] audit: type=1326 audit(1764637423.449:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.418003][ T29] audit: type=1326 audit(1764637423.449:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.441345][ T29] audit: type=1326 audit(1764637423.449:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.465004][ T29] audit: type=1326 audit(1764637423.449:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.488318][ T29] audit: type=1326 audit(1764637423.449:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.511712][ T29] audit: type=1326 audit(1764637423.449:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.535309][ T29] audit: type=1326 audit(1764637423.449:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.558744][ T29] audit: type=1326 audit(1764637423.449:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.582063][ T29] audit: type=1326 audit(1764637423.449:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 106.662697][ T5106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.729164][ T5106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.817684][ T5110] loop1: detected capacity change from 0 to 256 [ 106.824223][ T5110] vfat: Bad value for 'dmask' [ 106.916342][ T5106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.114850][ T5119] wireguard1: entered promiscuous mode [ 107.120401][ T5119] wireguard1: entered allmulticast mode [ 107.217069][ T5106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.428740][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.438060][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.454594][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.463585][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.490550][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.499521][ T5123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.532904][ T5129] loop2: detected capacity change from 0 to 2048 [ 107.585029][ T5129] loop2: p1 < > p4 [ 107.589287][ T5129] loop2: p4 size 8388608 extends beyond EOD, truncated [ 107.692043][ T5134] loop4: detected capacity change from 0 to 2048 [ 107.744998][ T5134] loop4: p1 < > p4 [ 107.749980][ T5134] loop4: p4 size 8388608 extends beyond EOD, truncated [ 107.881020][ T5138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.946178][ T5138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.976374][ T5138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.022801][ T5140] loop4: detected capacity change from 0 to 128 [ 108.030151][ T5138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.080940][ T5144] loop4: detected capacity change from 0 to 128 [ 108.088960][ T5144] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.096832][ T5144] FAT-fs (loop4): Filesystem has been set read-only [ 108.103594][ T5144] syz.4.478: attempt to access beyond end of device [ 108.103594][ T5144] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 108.117467][ T5144] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.125313][ T5144] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 108.134286][ T5144] syz.4.478: attempt to access beyond end of device [ 108.134286][ T5144] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.147981][ T5144] syz.4.478: attempt to access beyond end of device [ 108.147981][ T5144] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.255618][ T5150] loop4: detected capacity change from 0 to 8192 [ 108.294859][ T5150] loop4: p1 p2 p3 p4 [ 108.299050][ T5150] loop4: p1 size 196608 extends beyond EOD, truncated [ 108.306804][ T5150] loop4: p2 start 164919041 is beyond EOD, truncated [ 108.313519][ T5150] loop4: p3 size 66846464 extends beyond EOD, truncated [ 108.321202][ T5150] loop4: p4 size 37048832 extends beyond EOD, truncated [ 108.465490][ T149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.473820][ T149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.489394][ T149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.504372][ T149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.520957][ T5166] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 108.528994][ T5166] ipvlan0: entered allmulticast mode [ 108.534337][ T5166] veth0_vlan: entered allmulticast mode [ 108.541426][ T5166] team0: Device ipvlan0 failed to register rx_handler [ 109.213384][ T5173] loop4: detected capacity change from 0 to 2048 [ 109.265213][ T5173] loop4: p1 < > p4 [ 109.273200][ T5173] loop4: p4 size 8388608 extends beyond EOD, truncated [ 109.417767][ T5177] loop0: detected capacity change from 0 to 512 [ 109.439935][ T5177] EXT4-fs: Ignoring removed i_version option [ 109.446090][ T5177] EXT4-fs: Ignoring removed bh option [ 109.478827][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.492727][ T5177] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.528302][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.539235][ T5183] loop2: detected capacity change from 0 to 8192 [ 109.584865][ T5183] loop2: p1 p2 p3 p4 [ 109.594226][ T5183] loop2: p1 size 196608 extends beyond EOD, truncated [ 109.595980][ T5192] loop4: detected capacity change from 0 to 2048 [ 109.609514][ T5183] loop2: p2 start 164919041 is beyond EOD, truncated [ 109.616355][ T5183] loop2: p3 size 66846464 extends beyond EOD, truncated [ 109.654698][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 109.667316][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.677938][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.695827][ T5183] loop2: p4 size 37048832 extends beyond EOD, truncated [ 109.741312][ T5192] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.803830][ T5192] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1276 with error 28 [ 109.816981][ T5192] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.816981][ T5192] [ 109.826641][ T5192] EXT4-fs (loop4): Total free blocks count 0 [ 109.832614][ T5192] EXT4-fs (loop4): Free/Dirty block details [ 109.838527][ T5192] EXT4-fs (loop4): free_blocks=2415919104 [ 109.844386][ T5192] EXT4-fs (loop4): dirty_blocks=1280 [ 109.849687][ T5192] EXT4-fs (loop4): Block reservation details [ 109.855715][ T5192] EXT4-fs (loop4): i_reserved_data_blocks=80 [ 109.863258][ T5197] loop0: detected capacity change from 0 to 256 [ 109.869876][ T5197] msdos: Unknown parameter 'ÿÿÿÿ' [ 109.887699][ T5197] lo speed is unknown, defaulting to 1000 [ 109.972487][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 110.013479][ T5214] loop4: detected capacity change from 0 to 128 [ 110.212390][ T5216] syz.4.500: attempt to access beyond end of device [ 110.212390][ T5216] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.225790][ T5216] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 110.235211][ T5216] syz.4.500: attempt to access beyond end of device [ 110.235211][ T5216] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.248634][ T5216] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 110.303837][ T5224] loop4: detected capacity change from 0 to 512 [ 110.310468][ T5224] EXT4-fs: Ignoring removed i_version option [ 110.316559][ T5224] EXT4-fs: Ignoring removed bh option [ 110.326299][ T5224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.339106][ T5224] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.363587][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.635054][ T5236] loop0: detected capacity change from 0 to 8192 [ 110.675067][ T5236] loop0: p1 p2 p3 p4 [ 110.679223][ T5236] loop0: p1 size 196608 extends beyond EOD, truncated [ 110.686690][ T5236] loop0: p2 start 164919041 is beyond EOD, truncated [ 110.693407][ T5236] loop0: p3 size 66846464 extends beyond EOD, truncated [ 110.701194][ T5236] loop0: p4 size 37048832 extends beyond EOD, truncated [ 110.720444][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.732021][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.753130][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.774683][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.795760][ T5241] __nla_validate_parse: 19 callbacks suppressed [ 110.795777][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.811019][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.834190][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.843307][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.876669][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.885698][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 110.958712][ T5252] loop3: detected capacity change from 0 to 128 [ 110.975336][ T5252] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 110.983218][ T5252] FAT-fs (loop3): Filesystem has been set read-only [ 111.028692][ T5252] syz.3.511: attempt to access beyond end of device [ 111.028692][ T5252] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 111.042453][ T5252] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 111.050304][ T5252] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 111.058836][ T5253] 9pnet_fd: Insufficient options for proto=fd [ 111.075510][ T5252] syz.3.511: attempt to access beyond end of device [ 111.075510][ T5252] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 111.089054][ T5252] syz.3.511: attempt to access beyond end of device [ 111.089054][ T5252] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 111.236563][ T5259] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.624906][ T5263] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.637074][ T5265] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.658641][ T5259] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.686344][ T5263] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.763322][ T5265] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.776695][ T5259] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.796533][ T5263] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.836600][ T5265] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.856496][ T5259] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.897186][ T5263] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.931805][ T5269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.939228][ T5268] loop0: detected capacity change from 0 to 2048 [ 111.948002][ T5265] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.949324][ T5269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.973080][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.991708][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.009058][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.019739][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.041436][ T5271] loop1: detected capacity change from 0 to 2048 [ 112.048965][ T5268] loop0: p1 < > p4 [ 112.053430][ T5268] loop0: p4 size 8388608 extends beyond EOD, truncated [ 112.080082][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.095980][ T5271] loop1: p1 < > p4 [ 112.100602][ T5271] loop1: p4 size 8388608 extends beyond EOD, truncated [ 112.120711][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.183600][ T5273] loop2: detected capacity change from 0 to 256 [ 112.190441][ T5273] msdos: Unknown parameter 'ÿÿÿÿ' [ 112.214005][ T5273] lo speed is unknown, defaulting to 1000 [ 112.406010][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 112.463857][ T5277] loop4: detected capacity change from 0 to 2048 [ 112.535027][ T5277] loop4: p1 < > p4 [ 112.615148][ T5277] loop4: p4 size 8388608 extends beyond EOD, truncated [ 112.672090][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 112.969751][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 113.010315][ T5285] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.080192][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.088532][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.098226][ T5285] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.167060][ T5285] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.247095][ T5285] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.605522][ T5290] loop0: detected capacity change from 0 to 128 [ 113.687283][ T5295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.525'. [ 113.697203][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 113.697215][ T29] audit: type=1326 audit(1764637431.089:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.726837][ T29] audit: type=1326 audit(1764637431.089:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.751022][ T29] audit: type=1326 audit(1764637431.089:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.774747][ T29] audit: type=1326 audit(1764637431.089:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.798125][ T29] audit: type=1326 audit(1764637431.089:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.821420][ T29] audit: type=1326 audit(1764637431.089:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.844805][ T29] audit: type=1326 audit(1764637431.089:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.868099][ T29] audit: type=1326 audit(1764637431.089:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.891411][ T29] audit: type=1326 audit(1764637431.089:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 113.914710][ T29] audit: type=1326 audit(1764637431.089:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5abdff749 code=0x7ffc0000 [ 114.707832][ T5306] 9pnet_fd: Insufficient options for proto=fd [ 115.019827][ T5308] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.077932][ T5311] lo speed is unknown, defaulting to 1000 [ 115.086346][ T5308] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.126651][ T5308] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.166575][ T5308] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.212871][ T4050] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.224821][ T4050] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.238086][ T4050] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.255443][ T4050] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.295599][ T5315] loop2: detected capacity change from 0 to 2048 [ 115.315076][ T5315] loop2: p1 < > p4 [ 115.321709][ T5315] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.460221][ T5320] loop0: detected capacity change from 0 to 128 [ 115.682236][ T5329] wireguard0: entered promiscuous mode [ 115.687831][ T5329] wireguard0: entered allmulticast mode [ 115.900797][ T5333] __nla_validate_parse: 2 callbacks suppressed [ 115.900811][ T5333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 116.060839][ T4050] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.081530][ T4050] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098778][ T4050] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.107357][ T4050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.144276][ T5340] loop3: detected capacity change from 0 to 128 [ 116.316220][ T5343] lo speed is unknown, defaulting to 1000 [ 116.343509][ T5346] loop4: detected capacity change from 0 to 128 [ 116.352906][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 116.634500][ T5349] syz.4.541: attempt to access beyond end of device [ 116.634500][ T5349] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 116.648110][ T5349] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 116.657624][ T5346] syz.4.541: attempt to access beyond end of device [ 116.657624][ T5346] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 116.670959][ T5346] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 117.044523][ T5358] loop3: detected capacity change from 0 to 2048 [ 117.075133][ T5358] loop3: p1 < > p4 [ 117.079469][ T5358] loop3: p4 size 8388608 extends beyond EOD, truncated [ 117.162471][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 117.274466][ T5363] loop3: detected capacity change from 0 to 128 [ 117.284045][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 117.568572][ T5365] syz.3.547: attempt to access beyond end of device [ 117.568572][ T5365] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 117.581968][ T5365] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 117.591990][ T5363] syz.3.547: attempt to access beyond end of device [ 117.591990][ T5363] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 117.605365][ T5363] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 117.628550][ T5363] syz.3.547: attempt to access beyond end of device [ 117.628550][ T5363] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 117.641921][ T5363] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 117.727182][ T5368] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.753677][ T5370] loop3: detected capacity change from 0 to 2048 [ 117.776019][ T5368] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.795113][ T5370] loop3: p1 < > p4 [ 117.799641][ T5370] loop3: p4 size 8388608 extends beyond EOD, truncated [ 117.827310][ T5368] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.883345][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 117.906983][ T5368] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.961292][ T5373] loop3: detected capacity change from 0 to 512 [ 117.967930][ T5373] EXT4-fs: Ignoring removed i_version option [ 117.973928][ T5373] EXT4-fs: Ignoring removed bh option [ 117.986202][ T5373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.999831][ T5373] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.010256][ T4050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.018505][ T4050] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.026988][ T4050] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.030434][ T5378] loop1: detected capacity change from 0 to 128 [ 118.045891][ T4050] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.055944][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.074113][ T5382] loop3: detected capacity change from 0 to 128 [ 118.082910][ T5380] loop1: detected capacity change from 0 to 2048 [ 118.091269][ T5382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.099207][ T5382] FAT-fs (loop3): Filesystem has been set read-only [ 118.106415][ T5382] syz.3.552: attempt to access beyond end of device [ 118.106415][ T5382] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.120850][ T5382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.128705][ T5382] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.136964][ T5382] syz.3.552: attempt to access beyond end of device [ 118.136964][ T5382] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.146378][ T5384] loop0: detected capacity change from 0 to 2048 [ 118.150564][ T5380] loop1: p1 < > p4 [ 118.156661][ T5382] syz.3.552: attempt to access beyond end of device [ 118.156661][ T5382] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.161285][ T5380] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.196189][ T5386] loop3: detected capacity change from 0 to 128 [ 118.205133][ T5384] loop0: p1 < > p4 [ 118.210285][ T5384] loop0: p4 size 8388608 extends beyond EOD, truncated [ 118.217300][ T5386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.225677][ T5386] FAT-fs (loop3): Filesystem has been set read-only [ 118.232706][ T5386] syz.3.555: attempt to access beyond end of device [ 118.232706][ T5386] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.274710][ T5386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.282606][ T5386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.334721][ T5386] syz.3.555: attempt to access beyond end of device [ 118.334721][ T5386] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.342347][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'. [ 118.364439][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 118.451020][ T5390] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 118.458829][ T5390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 118.470331][ T5390] ipvlan2: entered promiscuous mode [ 118.478538][ T5390] bridge0: port 3(ipvlan2) entered blocking state [ 118.485064][ T5390] bridge0: port 3(ipvlan2) entered disabled state [ 118.492961][ T5390] ipvlan2: entered allmulticast mode [ 118.498327][ T5390] bridge0: entered allmulticast mode [ 118.504464][ T5390] ipvlan2: left allmulticast mode [ 118.509528][ T5390] bridge0: left allmulticast mode [ 118.709175][ T5398] lo speed is unknown, defaulting to 1000 [ 118.914755][ T4493] Bluetooth: hci0: command 0x1003 tx timeout [ 118.920831][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.993846][ T5408] loop4: detected capacity change from 0 to 128 [ 119.016088][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 119.125795][ T5409] lo speed is unknown, defaulting to 1000 [ 119.204155][ T5408] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 119.213235][ T5408] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 119.239670][ T5413] loop4: detected capacity change from 0 to 512 [ 119.246232][ T5413] EXT4-fs: Ignoring removed i_version option [ 119.252281][ T5413] EXT4-fs: Ignoring removed bh option [ 119.266239][ T5413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.278977][ T5413] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.300873][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.412031][ T5424] loop1: detected capacity change from 0 to 128 [ 119.421906][ T5423] loop3: detected capacity change from 0 to 2048 [ 119.430337][ T5424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 119.438244][ T5424] FAT-fs (loop1): Filesystem has been set read-only [ 119.449158][ T5424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 119.457073][ T5424] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 119.485070][ T5423] loop3: p1 < > p4 [ 119.489528][ T5423] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.664315][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.725489][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.802527][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.858825][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.869483][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 119.890063][ T5435] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 119.906459][ T5435] ipvlan2: entered promiscuous mode [ 119.919059][ T5435] bridge0: port 3(ipvlan2) entered blocking state [ 119.925735][ T5435] bridge0: port 3(ipvlan2) entered disabled state [ 119.932494][ T5435] ipvlan2: entered allmulticast mode [ 119.937860][ T5435] bridge0: entered allmulticast mode [ 119.943632][ T5435] ipvlan2: left allmulticast mode [ 119.948745][ T5435] bridge0: left allmulticast mode [ 119.954100][ T5432] loop0: detected capacity change from 0 to 8192 [ 119.999523][ T5438] loop3: detected capacity change from 0 to 2048 [ 120.006316][ T5432] loop0: p1 p2 p3 p4 [ 120.013408][ T5432] loop0: p1 size 196608 extends beyond EOD, truncated [ 120.021123][ T5432] loop0: p2 start 164919041 is beyond EOD, truncated [ 120.027900][ T5432] loop0: p3 size 66846464 extends beyond EOD, truncated [ 120.036509][ T5432] loop0: p4 size 37048832 extends beyond EOD, truncated [ 120.043940][ T5438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 120.058352][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 120.058366][ T29] audit: type=1326 audit(1764637437.449:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.063194][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.065439][ T29] audit: type=1326 audit(1764637437.459:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.117476][ T29] audit: type=1326 audit(1764637437.459:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.140788][ T29] audit: type=1326 audit(1764637437.459:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.144871][ T5445] loop0: detected capacity change from 0 to 128 [ 120.165937][ T29] audit: type=1326 audit(1764637437.459:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.195558][ T29] audit: type=1326 audit(1764637437.459:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8bf3f749 code=0x7ffc0000 [ 120.225954][ T5448] loop0: detected capacity change from 0 to 128 [ 120.288677][ T5446] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.304767][ T5451] loop4: detected capacity change from 0 to 512 [ 120.311279][ T5451] EXT4-fs: Ignoring removed i_version option [ 120.317344][ T5451] EXT4-fs: Ignoring removed bh option [ 120.370521][ T5454] loop1: detected capacity change from 0 to 128 [ 120.370841][ T5446] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.389384][ T5446] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.389384][ T5446] [ 120.399118][ T5446] EXT4-fs (loop3): Total free blocks count 0 [ 120.405198][ T5446] EXT4-fs (loop3): Free/Dirty block details [ 120.411101][ T5446] EXT4-fs (loop3): free_blocks=2415919104 [ 120.416946][ T5446] EXT4-fs (loop3): dirty_blocks=2720 [ 120.422281][ T5446] EXT4-fs (loop3): Block reservation details [ 120.428314][ T5446] EXT4-fs (loop3): i_reserved_data_blocks=170 [ 120.449384][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.462648][ T5451] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.478315][ T5452] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.504339][ T5452] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.505554][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.566767][ T29] audit: type=1400 audit(1764637437.959:1763): avc: denied { mount } for pid=5459 comm="syz.0.578" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.663816][ T5457] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 120.835357][ T5472] 9pnet_fd: Insufficient options for proto=fd [ 120.847321][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 120.887819][ T5476] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 120.899501][ T5476] ipvlan2: entered promiscuous mode [ 120.906679][ T5476] bridge0: port 3(ipvlan2) entered blocking state [ 120.913277][ T5476] bridge0: port 3(ipvlan2) entered disabled state [ 120.920368][ T5476] ipvlan2: entered allmulticast mode [ 120.925749][ T5476] bridge0: entered allmulticast mode [ 120.931809][ T5476] ipvlan2: left allmulticast mode [ 120.937096][ T5476] bridge0: left allmulticast mode [ 121.238231][ T5483] loop3: detected capacity change from 0 to 8192 [ 121.305138][ T5483] loop3: p1 p2 p3 p4 [ 121.318444][ T5483] loop3: p1 size 196608 extends beyond EOD, truncated [ 121.345601][ T5483] loop3: p2 start 164919041 is beyond EOD, truncated [ 121.352308][ T5483] loop3: p3 size 66846464 extends beyond EOD, truncated [ 121.401153][ T5483] loop3: p4 size 37048832 extends beyond EOD, truncated [ 121.493266][ T5485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.533635][ T5487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.556674][ T5487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.577018][ T5485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.685435][ T5485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.789108][ T5489] loop3: detected capacity change from 0 to 256 [ 121.795802][ T5489] msdos: Unknown parameter 'ÿÿÿÿ' [ 121.818902][ T5489] lo speed is unknown, defaulting to 1000 [ 121.896892][ T5485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.976266][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.986607][ T5492] loop4: detected capacity change from 0 to 512 [ 122.022373][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.041440][ T5492] EXT4-fs: Ignoring removed i_version option [ 122.047639][ T5492] EXT4-fs: Ignoring removed bh option [ 122.083216][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.124677][ T4493] Bluetooth: hci0: command 0x1003 tx timeout [ 122.137736][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.158357][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.204688][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.335764][ T5492] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.413564][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.426115][ T5499] loop2: detected capacity change from 0 to 128 [ 122.459895][ T5499] __nla_validate_parse: 4 callbacks suppressed [ 122.459913][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 122.522731][ T5505] loop4: detected capacity change from 0 to 128 [ 122.535685][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 122.575258][ T29] audit: type=1400 audit(1764637439.949:1764): avc: denied { name_bind } for pid=5502 comm="syz.1.592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.296252][ T5505] bio_check_eod: 11 callbacks suppressed [ 123.296298][ T5505] syz.4.591: attempt to access beyond end of device [ 123.296298][ T5505] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 123.315516][ T5505] buffer_io_error: 2 callbacks suppressed [ 123.315529][ T5505] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 123.330067][ T5509] syz.4.591: attempt to access beyond end of device [ 123.330067][ T5509] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 123.343468][ T5509] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 123.429617][ T29] audit: type=1400 audit(1764637440.819:1765): avc: denied { create } for pid=5530 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.481929][ T5525] loop4: detected capacity change from 0 to 256 [ 123.482018][ T29] audit: type=1400 audit(1764637440.839:1766): avc: denied { write } for pid=5530 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.488677][ T5525] vfat: Bad value for 'dmask' [ 123.561485][ T5538] loop4: detected capacity change from 0 to 2048 [ 123.577370][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 123.599000][ T5543] loop1: detected capacity change from 0 to 2048 [ 123.645571][ T5538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.655038][ T5543] loop1: p1 < > p4 [ 123.660870][ T5538] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.665101][ T5543] loop1: p4 size 8388608 extends beyond EOD, [ 123.676867][ T5538] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.676867][ T5538] [ 123.676887][ T5538] EXT4-fs (loop4): Total free blocks count 0 [ 123.676920][ T5538] EXT4-fs (loop4): Free/Dirty block details [ 123.676931][ T5538] EXT4-fs (loop4): free_blocks=2415919104 [ 123.682982][ T5543] truncated [ 123.713440][ T5538] EXT4-fs (loop4): dirty_blocks=2352 [ 123.718778][ T5538] EXT4-fs (loop4): Block reservation details [ 123.724771][ T5538] EXT4-fs (loop4): i_reserved_data_blocks=147 [ 123.787671][ T149] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 123.812624][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 123.838500][ T5551] loop4: detected capacity change from 0 to 128 [ 123.848107][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 124.051035][ T5551] syz.4.608: attempt to access beyond end of device [ 124.051035][ T5551] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.064501][ T5551] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 124.073381][ T5554] syz.4.608: attempt to access beyond end of device [ 124.073381][ T5554] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.086706][ T5554] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 124.095611][ T5554] syz.4.608: attempt to access beyond end of device [ 124.095611][ T5554] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.108966][ T5554] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 124.144363][ T5563] loop4: detected capacity change from 0 to 128 [ 124.151384][ T5563] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 124.163217][ T5563] syz.4.612: attempt to access beyond end of device [ 124.163217][ T5563] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 124.441156][ T5570] loop2: detected capacity change from 0 to 256 [ 124.447721][ T5570] vfat: Bad value for 'dmask' [ 124.491117][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 124.584488][ T5576] loop3: detected capacity change from 0 to 2048 [ 124.598468][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 124.666911][ T5576] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.681832][ T5576] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.694352][ T5576] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.694352][ T5576] [ 124.704117][ T5576] EXT4-fs (loop3): Total free blocks count 0 [ 124.710175][ T5576] EXT4-fs (loop3): Free/Dirty block details [ 124.716084][ T5576] EXT4-fs (loop3): free_blocks=2415919104 [ 124.721796][ T5576] EXT4-fs (loop3): dirty_blocks=2544 [ 124.727103][ T5576] EXT4-fs (loop3): Block reservation details [ 124.733068][ T5576] EXT4-fs (loop3): i_reserved_data_blocks=159 [ 124.770884][ T5585] loop1: detected capacity change from 0 to 2048 [ 124.790946][ T5576] syz.3.617 (5576) used greatest stack depth: 10024 bytes left [ 124.795953][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 124.799032][ T149] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 124.873306][ T5585] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.888412][ T5585] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1966 with error 28 [ 124.889873][ T5594] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.900869][ T5585] EXT4-fs (loop1): This should not happen!! Data will be lost [ 124.900869][ T5585] [ 124.900888][ T5585] EXT4-fs (loop1): Total free blocks count 0 [ 124.926310][ T5585] EXT4-fs (loop1): Free/Dirty block details [ 124.932225][ T5585] EXT4-fs (loop1): free_blocks=2415919104 [ 124.937955][ T5585] EXT4-fs (loop1): dirty_blocks=1968 [ 124.943276][ T5585] EXT4-fs (loop1): Block reservation details [ 124.949341][ T5585] EXT4-fs (loop1): i_reserved_data_blocks=123 [ 124.981061][ T149] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 124.996004][ T5594] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.012913][ T5597] loop1: detected capacity change from 0 to 128 [ 125.022060][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 125.037438][ T5594] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.096776][ T5594] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.143364][ T149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.162046][ T149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.170460][ T149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.191024][ T149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.228817][ T5602] syz.1.622: attempt to access beyond end of device [ 125.228817][ T5602] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 125.242238][ T5602] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 125.251317][ T5597] syz.1.622: attempt to access beyond end of device [ 125.251317][ T5597] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 125.264784][ T5597] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 125.284163][ T5597] syz.1.622: attempt to access beyond end of device [ 125.284163][ T5597] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 125.297540][ T5597] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 125.328998][ T5609] netlink: 'syz.1.626': attribute type 29 has an invalid length. [ 125.336796][ T5609] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 125.353169][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 125.353184][ T29] audit: type=1400 audit(1764637442.739:1864): avc: denied { getopt } for pid=5610 comm="syz.2.627" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.440531][ T5614] loop2: detected capacity change from 0 to 2048 [ 125.497153][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.513193][ T29] audit: type=1326 audit(1764637442.899:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.583101][ T29] audit: type=1326 audit(1764637442.929:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.606602][ T29] audit: type=1326 audit(1764637442.929:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.629923][ T29] audit: type=1326 audit(1764637442.929:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.653347][ T29] audit: type=1326 audit(1764637442.929:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.676798][ T29] audit: type=1326 audit(1764637442.929:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.700217][ T29] audit: type=1326 audit(1764637442.929:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.723715][ T29] audit: type=1326 audit(1764637442.929:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.747040][ T29] audit: type=1326 audit(1764637442.929:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz.2.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc91f749 code=0x7ffc0000 [ 125.794298][ T5625] loop0: detected capacity change from 0 to 128 [ 125.800787][ T5614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.824326][ T5614] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1054 with error 28 [ 125.836878][ T5614] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.836878][ T5614] [ 125.846548][ T5614] EXT4-fs (loop2): Total free blocks count 0 [ 125.852524][ T5614] EXT4-fs (loop2): Free/Dirty block details [ 125.858464][ T5614] EXT4-fs (loop2): free_blocks=2415919104 [ 125.864309][ T5614] EXT4-fs (loop2): dirty_blocks=3088 [ 125.869639][ T5614] EXT4-fs (loop2): Block reservation details [ 125.875664][ T5614] EXT4-fs (loop2): i_reserved_data_blocks=193 [ 125.988023][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 126.105717][ T5638] loop3: detected capacity change from 0 to 128 [ 126.126924][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 126.728466][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 126.778414][ T5644] 9pnet_fd: Insufficient options for proto=fd [ 126.928751][ T5646] loop2: detected capacity change from 0 to 128 [ 126.957480][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 127.003020][ T5648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 127.192078][ T5652] syz.2.637: attempt to access beyond end of device [ 127.192078][ T5652] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.205434][ T5652] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 127.214331][ T5646] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 127.294595][ T5661] loop2: detected capacity change from 0 to 128 [ 127.351429][ T5666] loop2: detected capacity change from 0 to 2048 [ 127.379556][ T5666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 127.539116][ T5666] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.554841][ T5666] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 127.567377][ T5666] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.567377][ T5666] [ 127.574755][ T5674] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 127.577904][ T5666] EXT4-fs (loop2): Total free blocks count 0 [ 127.585670][ T5674] __nla_validate_parse: 1 callbacks suppressed [ 127.585682][ T5674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.647'. [ 127.591656][ T5666] EXT4-fs (loop2): Free/Dirty block details [ 127.591672][ T5666] EXT4-fs (loop2): free_blocks=2415919104 [ 127.601272][ T5674] ipvlan2: entered promiscuous mode [ 127.606712][ T5666] EXT4-fs (loop2): dirty_blocks=4912 [ 127.606729][ T5666] EXT4-fs (loop2): Block reservation details [ 127.606749][ T5666] EXT4-fs (loop2): i_reserved_data_blocks=307 [ 127.672307][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 127.707339][ T5674] bridge0: port 3(ipvlan2) entered blocking state [ 127.713824][ T5674] bridge0: port 3(ipvlan2) entered disabled state [ 127.724567][ T5674] ipvlan2: entered allmulticast mode [ 127.729983][ T5674] bridge0: entered allmulticast mode [ 127.763682][ T5674] ipvlan2: left allmulticast mode [ 127.768817][ T5674] bridge0: left allmulticast mode [ 127.801609][ T5681] loop2: detected capacity change from 0 to 128 [ 127.875283][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 128.022163][ T5686] loop0: detected capacity change from 0 to 2048 [ 128.022580][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 128.037797][ T5681] ================================================================== [ 128.045888][ T5681] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 128.054041][ T5681] [ 128.056387][ T5681] write to 0xffff888117505d68 of 8 bytes by task 5689 on cpu 0: [ 128.064015][ T5681] filemap_splice_read+0x4f4/0x740 [ 128.069211][ T5681] splice_direct_to_actor+0x26f/0x680 [ 128.074583][ T5681] do_splice_direct+0xda/0x150 [ 128.079372][ T5681] do_sendfile+0x380/0x650 [ 128.083783][ T5681] __x64_sys_sendfile64+0x105/0x150 [ 128.089000][ T5681] x64_sys_call+0x2db1/0x3000 [ 128.093681][ T5681] do_syscall_64+0xd2/0x200 [ 128.098183][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.104080][ T5681] [ 128.106452][ T5681] write to 0xffff888117505d68 of 8 bytes by task 5681 on cpu 1: [ 128.114081][ T5681] filemap_splice_read+0x4f4/0x740 [ 128.119287][ T5681] splice_direct_to_actor+0x26f/0x680 [ 128.124670][ T5681] do_splice_direct+0xda/0x150 [ 128.129456][ T5681] do_sendfile+0x380/0x650 [ 128.133880][ T5681] __x64_sys_sendfile64+0x105/0x150 [ 128.139088][ T5681] x64_sys_call+0x2db1/0x3000 [ 128.143778][ T5681] do_syscall_64+0xd2/0x200 [ 128.148290][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.154189][ T5681] [ 128.156508][ T5681] value changed: 0x0000000000000c0a -> 0x0000000000000c21 [ 128.163614][ T5681] [ 128.165937][ T5681] Reported by Kernel Concurrency Sanitizer on: [ 128.172101][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz.2.649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.183304][ T5681] Tainted: [W]=WARN [ 128.187106][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.197157][ T5681] ================================================================== [ 128.505513][ T5686] loop0: p1 < > p4 [ 128.580460][ T5689] bio_check_eod: 2 callbacks suppressed [ 128.580475][ T5689] syz.2.649: attempt to access beyond end of device [ 128.580475][ T5689] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.599446][ T5689] buffer_io_error: 1 callbacks suppressed [ 128.599460][ T5689] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 128.603050][ T5686] loop0: p4 size 8388608 extends beyond EOD, truncated [ 128.620937][ T5681] syz.2.649: attempt to access beyond end of device [ 128.620937][ T5681] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.634328][ T5681] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 128.704220][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'.