last executing test programs: 1.936178803s ago: executing program 3 (id=2026): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x17, 0x77, &(0x7f0000000040)="10606ddaed47c04dec174b547b1bfd9128a26cba02d8bac7af6dfcba9324a404194b04f2b615d05d75f9d8a1f43004a0f9273f74848a3b16e54e47dfbcf75ab28bb0905b774292729f417d5a503a9ea6d96f6c4e3678b9a2d9ade3c874e4634ee00bea9e72346b3197c2b4b269ae06737c6fdad5dbc390"}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.906967653s ago: executing program 3 (id=2027): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa08344, &(0x7f0000000200)={[{@nojournal_checksum}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@quota}, {@usrjquota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 1.792511063s ago: executing program 1 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) 1.587276602s ago: executing program 3 (id=2035): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 1.534617362s ago: executing program 1 (id=2037): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f00000003c0)='./file1\x00', 0x8000, 0xfffffff7) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000f00), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = gettid() gettid() tkill(r2, 0x12) tkill(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1.497027503s ago: executing program 1 (id=2039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70085000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) rt_sigsuspend(0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@dioread_nolock}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@data_err_abort}]}, 0x1, 0x236, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000380)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000580)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000540)='qnx6\x00', 0x90044, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(r2, r1, 0xde, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 1.154897242s ago: executing program 3 (id=2042): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f00000003c0)='./file1\x00', 0x8000, 0xfffffff7) setreuid(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = gettid() gettid() tkill(r1, 0x12) tkill(r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 967.019352ms ago: executing program 3 (id=2047): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = mq_open(&(0x7f0000000000)='({*@&,\\([-@]\x00', 0x40, 0x146, &(0x7f0000000040)={0x4402, 0xfffffffffffffff5, 0x4, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x40000010}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000007e9244be037c2529000000020000"], 0x0, 0x1a, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000440)=0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x67c8}, 0x0, 0x2, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r6}, 0x40) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x600) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 847.005371ms ago: executing program 4 (id=2049): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = mq_open(&(0x7f0000000000)='({*@&,\\([-@]\x00', 0x40, 0x146, &(0x7f0000000040)={0x4402, 0xfffffffffffffff5, 0x4, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x40000010}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000007e9244be037c2529000000020000"], &(0x7f0000000340)=""/66, 0x1a, 0x42, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000440)=0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x67c8}, 0x0, 0x2, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r6}, 0x40) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 807.834272ms ago: executing program 3 (id=2050): syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x404c000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 751.358391ms ago: executing program 4 (id=2052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000350001fffd"], 0x28}}, 0x0) 728.269651ms ago: executing program 4 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 700.030952ms ago: executing program 2 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) close_range(r2, r5, 0x0) 634.690321ms ago: executing program 4 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x48040) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000404000008010000010000008000fd0ad93ed1be3b15b2bf5e6751934888ae7947231e988e6bf3614a7c537e08590017202b6bae8219bbabae63697f2904f0b13f8294e96a7258971368f776496b6c6a86cc81ac86d913d6bf3ce08c8a969dfab1e3563677", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, 0x0, 0x60) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9135}, 0x18) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) r9 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x6) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r11 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) 622.053651ms ago: executing program 1 (id=2057): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000047c0), 0x1200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 583.578631ms ago: executing program 0 (id=2058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) bind$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x100}}, 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x38}}, 0x0) 583.194591ms ago: executing program 0 (id=2059): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) r2 = dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 533.820531ms ago: executing program 4 (id=2060): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod(&(0x7f00000003c0)='./file1\x00', 0x8000, 0xfffffff7) setreuid(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = gettid() gettid() tkill(r2, 0x12) tkill(r2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 533.436771ms ago: executing program 4 (id=2061): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) setfsgid(0xee00) 517.418231ms ago: executing program 1 (id=2062): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = mq_open(&(0x7f0000000000)='({*@&,\\([-@]\x00', 0x40, 0x146, &(0x7f0000000040)={0x4402, 0xfffffffffffffff5, 0x4, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x40000010}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000007e9244be037c2529000000020000"], &(0x7f0000000340)=""/66, 0x1a, 0x42, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000440)=0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x67c8}, 0x0, 0x2, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r6}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x600) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 516.936471ms ago: executing program 2 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) 436.488141ms ago: executing program 2 (id=2064): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = mq_open(&(0x7f0000000000)='({*@&,\\([-@]\x00', 0x40, 0x146, &(0x7f0000000040)={0x4402, 0xfffffffffffffff5, 0x4, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x40000010}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000007e9244be037c2529000000020000"], &(0x7f0000000340)=""/66, 0x1a, 0x42, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) set_mempolicy(0x0, &(0x7f0000000440)=0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x67c8}, 0x0, 0x2, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r6}, 0x40) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) 436.145761ms ago: executing program 0 (id=2065): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 403.955571ms ago: executing program 0 (id=2066): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0, 0x10}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 387.139151ms ago: executing program 1 (id=2067): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70085000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) rt_sigsuspend(0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@dioread_nolock}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@data_err_abort}]}, 0x1, 0x236, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000380)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000580)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000540)='qnx6\x00', 0x90044, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(r2, r1, 0xde, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 340.395541ms ago: executing program 2 (id=2068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x200000000200}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 186.511671ms ago: executing program 0 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) bind$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @loopback, 0x100}}, 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x8008000, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x38}}, 0x0) 158.381281ms ago: executing program 2 (id=2070): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) r2 = dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 83.2292ms ago: executing program 0 (id=2071): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240200, 0x0) r2 = dup3(r0, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r3, 0x2, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 2 (id=2072): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000047c0), 0x1200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 91.116588][ T29] audit: type=1326 audit(1737409693.619:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.140121][ T29] audit: type=1326 audit(1737409693.619:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.151233][ T6609] loop1: detected capacity change from 0 to 8192 [ 91.163520][ T29] audit: type=1326 audit(1737409693.629:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.193595][ T29] audit: type=1326 audit(1737409693.629:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.217237][ T29] audit: type=1326 audit(1737409693.629:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.240700][ T29] audit: type=1326 audit(1737409693.629:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.264204][ T29] audit: type=1326 audit(1737409693.629:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.287685][ T29] audit: type=1326 audit(1737409693.629:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.311131][ T29] audit: type=1326 audit(1737409693.629:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.3.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe748135d29 code=0x7ffc0000 [ 91.341934][ T6617] loop0: detected capacity change from 0 to 8192 [ 91.491986][ T6626] batadv1: entered promiscuous mode [ 91.498420][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.552823][ T6628] batadv1: entered promiscuous mode [ 91.559471][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.861787][ T6633] loop2: detected capacity change from 0 to 8192 [ 92.636325][ T6668] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.767784][ T6676] sel_write_user: 1 callbacks suppressed [ 92.767803][ T6676] SELinux: syz.1.1174 (6676) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.841618][ T6688] loop3: detected capacity change from 0 to 512 [ 92.885089][ T6688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.939480][ T6694] loop1: detected capacity change from 0 to 8192 [ 92.997901][ T6703] validate_nla: 38 callbacks suppressed [ 92.997915][ T6703] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 93.020137][ T6688] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 93.034097][ T6688] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 93.049519][ T6688] EXT4-fs (loop3): 1 truncate cleaned up [ 93.500215][ T6722] batadv1: entered promiscuous mode [ 93.506244][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 93.539392][ T6726] SELinux: syz.0.1191 (6726) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 93.585709][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.594660][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.604146][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.612969][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.621604][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.630180][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.638907][ T6731] netlink: 'syz.0.1193': attribute type 29 has an invalid length. [ 93.803438][ T6740] batadv1: entered promiscuous mode [ 93.809739][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 93.812206][ T6738] netlink: 'syz.0.1193': attribute type 39 has an invalid length. [ 93.899401][ T6737] loop3: detected capacity change from 0 to 8192 [ 93.915684][ T6744] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 93.984732][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1201'. [ 94.045310][ T6758] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.082730][ T6764] loop0: detected capacity change from 0 to 128 [ 94.089771][ T6764] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 94.230603][ T6778] FAULT_INJECTION: forcing a failure. [ 94.230603][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 94.243345][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.0.1211 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 94.253750][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.263818][ T6778] Call Trace: [ 94.267109][ T6778] [ 94.270073][ T6778] dump_stack_lvl+0xf2/0x150 [ 94.274723][ T6778] dump_stack+0x15/0x1a [ 94.279051][ T6778] should_fail_ex+0x223/0x230 [ 94.283768][ T6778] should_failslab+0x8f/0xb0 [ 94.288399][ T6778] kmem_cache_alloc_node_noprof+0x59/0x320 [ 94.294286][ T6778] ? __alloc_skb+0x10b/0x310 [ 94.298983][ T6778] __alloc_skb+0x10b/0x310 [ 94.303433][ T6778] tcp_stream_alloc_skb+0x2f/0x1e0 [ 94.308591][ T6778] tcp_sendmsg_locked+0x92f/0x2710 [ 94.313745][ T6778] ? __rcu_read_unlock+0x4e/0x70 [ 94.318716][ T6778] ? __pfx_tcp_sendmsg+0x10/0x10 [ 94.323703][ T6778] tcp_sendmsg+0x30/0x50 [ 94.327969][ T6778] inet_sendmsg+0x77/0xd0 [ 94.332322][ T6778] __sock_sendmsg+0x102/0x180 [ 94.337171][ T6778] __sys_sendto+0x1a8/0x230 [ 94.341700][ T6778] __x64_sys_sendto+0x78/0x90 [ 94.346395][ T6778] x64_sys_call+0x29fa/0x2dc0 [ 94.351079][ T6778] do_syscall_64+0xc9/0x1c0 [ 94.355658][ T6778] ? clear_bhb_loop+0x55/0xb0 [ 94.360433][ T6778] ? clear_bhb_loop+0x55/0xb0 [ 94.365132][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.371047][ T6778] RIP: 0033:0x7f9a2cc65d29 [ 94.375533][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.395216][ T6778] RSP: 002b:00007f9a2b2d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.403765][ T6778] RAX: ffffffffffffffda RBX: 00007f9a2ce55fa0 RCX: 00007f9a2cc65d29 [ 94.411758][ T6778] RDX: 0000000000000001 RSI: 0000000020001480 RDI: 0000000000000003 [ 94.419733][ T6778] RBP: 00007f9a2b2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.427717][ T6778] R10: 98076b246f72a741 R11: 0000000000000246 R12: 0000000000000001 [ 94.435702][ T6778] R13: 0000000000000000 R14: 00007f9a2ce55fa0 R15: 00007ffd9cecb0d8 [ 94.443691][ T6778] [ 94.619348][ T6793] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.662656][ T6796] loop3: detected capacity change from 0 to 1024 [ 94.743040][ T6809] EXT4-fs (loop3): shut down requested (0) [ 94.754838][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 94.788621][ T6811] loop0: detected capacity change from 0 to 4096 [ 94.811060][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 94.830766][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.843303][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.843303][ T50] [ 94.853044][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 94.859131][ T50] EXT4-fs (loop3): Free/Dirty block details [ 94.865090][ T50] EXT4-fs (loop3): free_blocks=68451041280 [ 94.870947][ T50] EXT4-fs (loop3): dirty_blocks=8400 [ 94.876352][ T50] EXT4-fs (loop3): Block reservation details [ 94.882432][ T50] EXT4-fs (loop3): i_reserved_data_blocks=525 [ 94.914182][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 94.992112][ T6796] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 94.992112][ T6796] program syz.3.1215 not setting count and/or reply_len properly [ 95.052083][ T6822] loop2: detected capacity change from 0 to 8192 [ 95.066900][ T6827] loop4: detected capacity change from 0 to 128 [ 95.073763][ T6827] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 95.093227][ T6828] batadv1: entered promiscuous mode [ 95.099599][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 95.283745][ T6842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.426627][ T6847] loop1: detected capacity change from 0 to 8192 [ 95.479212][ T6849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1235'. [ 95.900972][ T6858] loop2: detected capacity change from 0 to 512 [ 95.908047][ T6858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.919205][ T6858] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 95.928758][ T6858] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 95.937592][ T6858] EXT4-fs (loop2): 1 truncate cleaned up [ 96.217481][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 96.217497][ T29] audit: type=1326 audit(1737409698.749:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e63bf5d29 code=0x7ffc0000 [ 96.279776][ T29] audit: type=1326 audit(1737409698.759:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0e63bf5d29 code=0x7ffc0000 [ 96.303768][ T29] audit: type=1326 audit(1737409698.759:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.1249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e63bf5d29 code=0x7ffc0000 [ 96.330547][ T6888] loop2: detected capacity change from 0 to 8192 [ 96.375717][ T6894] batadv1: entered promiscuous mode [ 96.382159][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 96.423773][ T29] audit: type=1326 audit(1737409698.959:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.447682][ T29] audit: type=1326 audit(1737409698.959:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.472614][ T29] audit: type=1326 audit(1737409699.009:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.496232][ T29] audit: type=1326 audit(1737409699.009:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.519883][ T29] audit: type=1326 audit(1737409699.009:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.543554][ T29] audit: type=1326 audit(1737409699.009:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.566999][ T29] audit: type=1326 audit(1737409699.009:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 96.753729][ T6909] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.352705][ T6925] loop2: detected capacity change from 0 to 8192 [ 97.370104][ T6936] SELinux: syz.3.1263 (6936) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 97.419120][ T6939] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.573047][ T6955] batadv1: entered promiscuous mode [ 97.589532][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.607467][ T6952] loop1: detected capacity change from 0 to 8192 [ 97.964358][ T6979] loop3: detected capacity change from 0 to 256 [ 97.989310][ T6979] FAT-fs (loop3): Directory bread(block 64) failed [ 97.997425][ T6979] FAT-fs (loop3): Directory bread(block 65) failed [ 98.004269][ T6979] FAT-fs (loop3): Directory bread(block 66) failed [ 98.012849][ T6979] FAT-fs (loop3): Directory bread(block 67) failed [ 98.019850][ T6979] FAT-fs (loop3): Directory bread(block 68) failed [ 98.026596][ T6979] FAT-fs (loop3): Directory bread(block 69) failed [ 98.033558][ T6979] FAT-fs (loop3): Directory bread(block 70) failed [ 98.040364][ T6979] FAT-fs (loop3): Directory bread(block 71) failed [ 98.047102][ T6979] FAT-fs (loop3): Directory bread(block 72) failed [ 98.055239][ T6979] FAT-fs (loop3): Directory bread(block 73) failed [ 98.077072][ T6979] syz.3.1282: attempt to access beyond end of device [ 98.077072][ T6979] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 98.092548][ T6979] syz.3.1282: attempt to access beyond end of device [ 98.092548][ T6979] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 98.125304][ T6981] validate_nla: 1 callbacks suppressed [ 98.125321][ T6981] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 98.168923][ T6984] loop0: detected capacity change from 0 to 256 [ 98.206903][ T6984] FAT-fs (loop0): Directory bread(block 64) failed [ 98.215648][ T6984] FAT-fs (loop0): Directory bread(block 65) failed [ 98.224651][ T6984] FAT-fs (loop0): Directory bread(block 66) failed [ 98.231455][ T6984] FAT-fs (loop0): Directory bread(block 67) failed [ 98.238567][ T6984] FAT-fs (loop0): Directory bread(block 68) failed [ 98.245192][ T6984] FAT-fs (loop0): Directory bread(block 69) failed [ 98.252123][ T6984] FAT-fs (loop0): Directory bread(block 70) failed [ 98.258764][ T6984] FAT-fs (loop0): Directory bread(block 71) failed [ 98.265524][ T6984] FAT-fs (loop0): Directory bread(block 72) failed [ 98.272588][ T6984] FAT-fs (loop0): Directory bread(block 73) failed [ 98.291703][ T6984] syz.0.1286: attempt to access beyond end of device [ 98.291703][ T6984] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 98.313667][ T6984] syz.0.1286: attempt to access beyond end of device [ 98.313667][ T6984] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 98.366814][ T6991] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 98.413541][ T6994] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.670022][ T6999] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.706860][ T7001] loop3: detected capacity change from 0 to 512 [ 98.760159][ T7001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.828827][ T7001] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 98.852034][ T7001] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 98.890247][ T7001] EXT4-fs (loop3): 1 truncate cleaned up [ 98.909109][ T7001] EXT4-fs mount: 10 callbacks suppressed [ 98.909138][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.968854][ T7017] loop0: detected capacity change from 0 to 256 [ 98.979325][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.998232][ T7020] loop4: detected capacity change from 0 to 256 [ 99.024049][ T7017] FAT-fs (loop0): Directory bread(block 64) failed [ 99.033330][ T7017] FAT-fs (loop0): Directory bread(block 65) failed [ 99.044910][ T7020] FAT-fs (loop4): Directory bread(block 64) failed [ 99.047510][ T7017] FAT-fs (loop0): Directory bread(block 66) failed [ 99.051615][ T7020] FAT-fs (loop4): Directory bread(block 65) failed [ 99.058138][ T7022] SELinux: syz.3.1298 (7022) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 99.085973][ T7018] loop1: detected capacity change from 0 to 8192 [ 99.093374][ T7020] FAT-fs (loop4): Directory bread(block 66) failed [ 99.103924][ T7017] FAT-fs (loop0): Directory bread(block 67) failed [ 99.125208][ T7020] FAT-fs (loop4): Directory bread(block 67) failed [ 99.137493][ T7017] FAT-fs (loop0): Directory bread(block 68) failed [ 99.147564][ T7020] FAT-fs (loop4): Directory bread(block 68) failed [ 99.149926][ T7017] FAT-fs (loop0): Directory bread(block 69) failed [ 99.166258][ T7020] FAT-fs (loop4): Directory bread(block 69) failed [ 99.180709][ T7017] FAT-fs (loop0): Directory bread(block 70) failed [ 99.197413][ T7020] FAT-fs (loop4): Directory bread(block 70) failed [ 99.212216][ T7020] FAT-fs (loop4): Directory bread(block 71) failed [ 99.212229][ T7017] FAT-fs (loop0): Directory bread(block 71) failed [ 99.220353][ T7017] FAT-fs (loop0): Directory bread(block 72) failed [ 99.238761][ T7020] FAT-fs (loop4): Directory bread(block 72) failed [ 99.245462][ T7020] FAT-fs (loop4): Directory bread(block 73) failed [ 99.255557][ T7017] FAT-fs (loop0): Directory bread(block 73) failed [ 99.289994][ T7033] loop1: detected capacity change from 0 to 8192 [ 99.297922][ T7041] loop2: detected capacity change from 0 to 128 [ 99.304935][ T7041] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 99.311942][ T7020] syz.4.1299: attempt to access beyond end of device [ 99.311942][ T7020] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 99.329065][ T7020] syz.4.1299: attempt to access beyond end of device [ 99.329065][ T7020] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 99.474760][ T7058] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.596545][ T7062] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1311'. [ 99.997142][ T7066] loop4: detected capacity change from 0 to 8192 [ 100.072587][ T7070] batadv1: entered promiscuous mode [ 100.078943][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.137767][ T7077] loop1: detected capacity change from 0 to 512 [ 100.144444][ T7077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.173522][ T7077] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.182653][ T7077] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 100.201744][ T7077] EXT4-fs (loop1): 1 truncate cleaned up [ 100.212768][ T7085] loop2: detected capacity change from 0 to 256 [ 100.223257][ T7087] batadv1: entered promiscuous mode [ 100.244838][ T7085] FAT-fs (loop2): Directory bread(block 64) failed [ 100.252027][ T7077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.265209][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.268315][ T7085] FAT-fs (loop2): Directory bread(block 65) failed [ 100.278706][ T7085] FAT-fs (loop2): Directory bread(block 66) failed [ 100.317383][ T7085] FAT-fs (loop2): Directory bread(block 67) failed [ 100.326885][ T7085] FAT-fs (loop2): Directory bread(block 68) failed [ 100.338100][ T7085] FAT-fs (loop2): Directory bread(block 69) failed [ 100.344748][ T7085] FAT-fs (loop2): Directory bread(block 70) failed [ 100.353096][ T7085] FAT-fs (loop2): Directory bread(block 71) failed [ 100.359853][ T7085] FAT-fs (loop2): Directory bread(block 72) failed [ 100.366457][ T7085] FAT-fs (loop2): Directory bread(block 73) failed [ 100.368997][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.385086][ T7091] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 100.400460][ T7085] syz.2.1318: attempt to access beyond end of device [ 100.400460][ T7085] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 100.414942][ T7085] syz.2.1318: attempt to access beyond end of device [ 100.414942][ T7085] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 100.501089][ T7097] batadv1: entered promiscuous mode [ 100.520075][ T7097] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.585741][ T7106] loop0: detected capacity change from 0 to 8192 [ 100.718058][ T7121] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.983028][ T7128] loop1: detected capacity change from 0 to 512 [ 101.042111][ T7126] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 101.050542][ T7128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.091407][ T7128] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 101.131962][ T7128] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 101.168069][ T7128] EXT4-fs (loop1): 1 truncate cleaned up [ 101.171548][ T7138] batadv1: entered promiscuous mode [ 101.174350][ T7128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.196240][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.209388][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.253549][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 101.253563][ T29] audit: type=1326 audit(1737409703.789:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.285931][ T29] audit: type=1326 audit(1737409703.789:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.309594][ T29] audit: type=1326 audit(1737409703.789:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.333151][ T29] audit: type=1326 audit(1737409703.789:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.356655][ T29] audit: type=1326 audit(1737409703.789:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.380141][ T29] audit: type=1326 audit(1737409703.789:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.403566][ T29] audit: type=1326 audit(1737409703.789:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.427173][ T29] audit: type=1326 audit(1737409703.789:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.450695][ T29] audit: type=1326 audit(1737409703.789:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.474135][ T29] audit: type=1326 audit(1737409703.789:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 101.560410][ T7151] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.621372][ T7158] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 101.810445][ T7189] batadv1: entered promiscuous mode [ 101.816699][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.876176][ T7188] loop0: detected capacity change from 0 to 8192 [ 102.365485][ T7206] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 102.699032][ T7225] batadv1: entered promiscuous mode [ 102.712026][ T7225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.855267][ T7241] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1376'. [ 103.005021][ T7263] loop2: detected capacity change from 0 to 512 [ 103.013472][ T7263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.022004][ T7261] loop0: detected capacity change from 0 to 2048 [ 103.029965][ T7263] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 103.038266][ T7263] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 103.046978][ T7263] EXT4-fs (loop2): 1 truncate cleaned up [ 103.064397][ T7263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.112427][ T7261] GPT:first_usable_lbas don't match. [ 103.117853][ T7261] GPT:34 != 290 [ 103.121450][ T7261] GPT: Use GNU Parted to correct GPT errors. [ 103.127704][ T7261] loop0: p1 p2 p3 [ 103.242054][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.388798][ T2998] GPT:first_usable_lbas don't match. [ 103.394152][ T2998] GPT:34 != 290 [ 103.397760][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 103.403936][ T2998] loop0: p1 p2 p3 [ 103.552755][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 103.564089][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 103.575404][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 103.591943][ T7280] loop2: detected capacity change from 0 to 8192 [ 103.634834][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 103.678614][ T7289] loop0: detected capacity change from 0 to 4096 [ 103.689908][ T7289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.885714][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.010265][ T7312] atomic_op ffff88813bd93928 conn xmit_atomic 0000000000000000 [ 104.030038][ T7312] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 104.041827][ T7314] loop4: detected capacity change from 0 to 256 [ 104.048826][ T7316] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 104.068422][ T7314] FAT-fs (loop4): Directory bread(block 64) failed [ 104.079722][ T7314] FAT-fs (loop4): Directory bread(block 65) failed [ 104.093914][ T7316] netlink: 'syz.0.1403': attribute type 10 has an invalid length. [ 104.105631][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.118449][ T7314] FAT-fs (loop4): Directory bread(block 66) failed [ 104.125976][ T7316] batadv0: entered promiscuous mode [ 104.132477][ T7314] FAT-fs (loop4): Directory bread(block 67) failed [ 104.140351][ T7314] FAT-fs (loop4): Directory bread(block 68) failed [ 104.153162][ T7314] FAT-fs (loop4): Directory bread(block 69) failed [ 104.161077][ T7314] FAT-fs (loop4): Directory bread(block 70) failed [ 104.167846][ T7314] FAT-fs (loop4): Directory bread(block 71) failed [ 104.168566][ T7316] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 104.174591][ T7314] FAT-fs (loop4): Directory bread(block 72) failed [ 104.189967][ T7314] FAT-fs (loop4): Directory bread(block 73) failed [ 104.213524][ T7314] syz.4.1404: attempt to access beyond end of device [ 104.213524][ T7314] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 104.220470][ T7322] loop1: detected capacity change from 0 to 1024 [ 104.231377][ T7314] syz.4.1404: attempt to access beyond end of device [ 104.231377][ T7314] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 104.261252][ T7322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.532992][ T7345] loop3: detected capacity change from 0 to 512 [ 104.551247][ T7322] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 104.551247][ T7322] program syz.1.1406 not setting count and/or reply_len properly [ 104.560843][ T7345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.589654][ T7345] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 104.598176][ T7345] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 104.615288][ T7345] EXT4-fs (loop3): 1 truncate cleaned up [ 104.624748][ T7345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.649271][ T7357] loop2: detected capacity change from 0 to 2048 [ 104.657242][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.703751][ T7357] GPT:first_usable_lbas don't match. [ 104.709120][ T7357] GPT:34 != 290 [ 104.710142][ T7361] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.712586][ T7357] GPT: Use GNU Parted to correct GPT errors. [ 104.712663][ T7357] loop2: p1 p2 p3 [ 104.801865][ T7349] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 104.810252][ T7349] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 104.837439][ T7365] loop2: detected capacity change from 0 to 512 [ 104.845828][ T7365] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 104.854339][ T7365] EXT4-fs (loop2): 1 truncate cleaned up [ 104.860565][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.874137][ T7365] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.970525][ T7371] loop2: detected capacity change from 0 to 1024 [ 104.988488][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.025463][ T110] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.042191][ T110] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.055020][ T110] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.055020][ T110] [ 105.064823][ T110] EXT4-fs (loop1): Total free blocks count 0 [ 105.070883][ T110] EXT4-fs (loop1): Free/Dirty block details [ 105.076862][ T110] EXT4-fs (loop1): free_blocks=68451041280 [ 105.082774][ T110] EXT4-fs (loop1): dirty_blocks=7232 [ 105.088103][ T110] EXT4-fs (loop1): Block reservation details [ 105.094104][ T110] EXT4-fs (loop1): i_reserved_data_blocks=452 [ 105.102328][ T7375] EXT4-fs (loop2): shut down requested (0) [ 105.117027][ T110] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 105.165481][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.198514][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.211501][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 105.211501][ T50] [ 105.221368][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 105.227402][ T50] EXT4-fs (loop2): Free/Dirty block details [ 105.233355][ T50] EXT4-fs (loop2): free_blocks=68451041280 [ 105.239288][ T50] EXT4-fs (loop2): dirty_blocks=10592 [ 105.244716][ T50] EXT4-fs (loop2): Block reservation details [ 105.250807][ T50] EXT4-fs (loop2): i_reserved_data_blocks=662 [ 105.280740][ T7380] atomic_op ffff88810254ad28 conn xmit_atomic 0000000000000000 [ 105.291353][ T7371] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 105.291353][ T7371] program syz.2.1422 not setting count and/or reply_len properly [ 105.313360][ T7380] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 105.325123][ T7380] macvtap0: entered promiscuous mode [ 105.331228][ T7380] macvtap0: left promiscuous mode [ 105.366026][ T7384] macvtap0: entered promiscuous mode [ 105.373291][ T7384] macvtap0: left promiscuous mode [ 105.408413][ T7386] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 105.455049][ T7389] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 105.511247][ T7400] loop1: detected capacity change from 0 to 1024 [ 105.521413][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 105.530530][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 105.531806][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.545036][ T7402] loop4: detected capacity change from 0 to 512 [ 105.558936][ T7402] EXT4-fs: Ignoring removed oldalloc option [ 105.569711][ T7402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1432: Parent and EA inode have the same ino 15 [ 105.598866][ T7407] FAULT_INJECTION: forcing a failure. [ 105.598866][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 105.611583][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.0.1433 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 105.622018][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.632121][ T7407] Call Trace: [ 105.635419][ T7407] [ 105.638360][ T7407] dump_stack_lvl+0xf2/0x150 [ 105.643030][ T7407] dump_stack+0x15/0x1a [ 105.647218][ T7407] should_fail_ex+0x223/0x230 [ 105.651950][ T7407] should_failslab+0x8f/0xb0 [ 105.656727][ T7407] __kmalloc_noprof+0xab/0x3f0 [ 105.661587][ T7407] ? __se_sys_memfd_create+0x230/0x5c0 [ 105.667126][ T7407] __se_sys_memfd_create+0x230/0x5c0 [ 105.672445][ T7407] __x64_sys_memfd_create+0x31/0x40 [ 105.677691][ T7407] x64_sys_call+0x2d4c/0x2dc0 [ 105.682556][ T7407] do_syscall_64+0xc9/0x1c0 [ 105.687149][ T7407] ? clear_bhb_loop+0x55/0xb0 [ 105.691854][ T7407] ? clear_bhb_loop+0x55/0xb0 [ 105.696551][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.702484][ T7407] RIP: 0033:0x7f9a2cc65d29 [ 105.706943][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.726575][ T7407] RSP: 002b:00007f9a2b2d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 105.735196][ T7407] RAX: ffffffffffffffda RBX: 0000000000000451 RCX: 00007f9a2cc65d29 [ 105.743267][ T7407] RDX: 00007f9a2b2d6ef0 RSI: 0000000000000000 RDI: 00007f9a2cce2469 [ 105.751251][ T7407] RBP: 0000000020000d00 R08: 00007f9a2b2d6bb7 R09: 00007f9a2b2d6e40 [ 105.759233][ T7407] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000440 [ 105.767211][ T7407] R13: 00007f9a2b2d6ef0 R14: 00007f9a2b2d6eb0 R15: 0000000020000200 [ 105.775218][ T7407] [ 105.779418][ T7408] EXT4-fs (loop1): shut down requested (0) [ 105.801070][ T7402] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.823056][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.826122][ T7402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1432: Parent and EA inode have the same ino 15 [ 105.850681][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.863230][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.863230][ T11] [ 105.872953][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 105.879014][ T11] EXT4-fs (loop1): Free/Dirty block details [ 105.882986][ T7402] EXT4-fs (loop4): 1 orphan inode deleted [ 105.885628][ T11] EXT4-fs (loop1): free_blocks=68451041280 [ 105.895024][ T7402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.897171][ T11] EXT4-fs (loop1): dirty_blocks=16384 [ 105.913169][ T7402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.915122][ T11] EXT4-fs (loop1): Block reservation details [ 105.915136][ T11] EXT4-fs (loop1): i_reserved_data_blocks=1024 [ 106.053920][ T7400] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 106.053920][ T7400] program syz.1.1428 not setting count and/or reply_len properly [ 106.107388][ T7414] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 106.115754][ T7414] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 106.144747][ T7422] loop4: detected capacity change from 0 to 512 [ 106.145256][ T7414] vcan0: entered allmulticast mode [ 106.156803][ T7422] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 106.165622][ T7422] EXT4-fs (loop4): 1 truncate cleaned up [ 106.172415][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.186635][ T7422] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.186961][ T7414] vcan0 (unregistering): left allmulticast mode [ 106.318997][ T7434] FAULT_INJECTION: forcing a failure. [ 106.318997][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.332120][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.3.1441 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 106.342535][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.352828][ T7434] Call Trace: [ 106.356297][ T7434] [ 106.359249][ T7434] dump_stack_lvl+0xf2/0x150 [ 106.364149][ T7434] dump_stack+0x15/0x1a [ 106.365008][ T7430] loop0: detected capacity change from 0 to 8192 [ 106.368439][ T7434] should_fail_ex+0x223/0x230 [ 106.368496][ T7434] should_fail+0xb/0x10 [ 106.383883][ T7434] should_fail_usercopy+0x1a/0x20 [ 106.389070][ T7434] _copy_from_user+0x1c/0xa0 [ 106.393786][ T7434] __sys_bpf+0x14e/0x7a0 [ 106.398093][ T7434] __x64_sys_bpf+0x43/0x50 [ 106.402817][ T7434] x64_sys_call+0x2914/0x2dc0 [ 106.407654][ T7434] do_syscall_64+0xc9/0x1c0 [ 106.412204][ T7434] ? clear_bhb_loop+0x55/0xb0 [ 106.416982][ T7434] ? clear_bhb_loop+0x55/0xb0 [ 106.421682][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.427594][ T7434] RIP: 0033:0x7fe748135d29 [ 106.432019][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.451730][ T7434] RSP: 002b:00007fe7467a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.460163][ T7434] RAX: ffffffffffffffda RBX: 00007fe748325fa0 RCX: 00007fe748135d29 [ 106.468148][ T7434] RDX: 0000000000000094 RSI: 0000000020000440 RDI: 0000000000000005 [ 106.476129][ T7434] RBP: 00007fe7467a7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.484159][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.492183][ T7434] R13: 0000000000000000 R14: 00007fe748325fa0 R15: 00007fff16b7ba48 [ 106.500166][ T7434] [ 106.512351][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 106.512367][ T29] audit: type=1326 audit(1737409709.049:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.542107][ T7434] loop3: detected capacity change from 0 to 1764 [ 106.545352][ T29] audit: type=1326 audit(1737409709.049:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.571915][ T29] audit: type=1326 audit(1737409709.049:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.595341][ T29] audit: type=1326 audit(1737409709.049:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.618996][ T29] audit: type=1326 audit(1737409709.049:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.622383][ T7434] ISOFS: unable to read i-node block [ 106.642474][ T29] audit: type=1326 audit(1737409709.049:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.647883][ T7434] isofs_fill_super: get root inode failed [ 106.671240][ T29] audit: type=1326 audit(1737409709.049:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.700439][ T29] audit: type=1326 audit(1737409709.049:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.730153][ T7436] batadv1: entered promiscuous mode [ 106.748250][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.779655][ T7441] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 106.820806][ T29] audit: type=1326 audit(1737409709.339:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.844673][ T29] audit: type=1326 audit(1737409709.339:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7440 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 106.884807][ T7443] loop3: detected capacity change from 0 to 1764 [ 106.892392][ T7443] ISOFS: unable to read i-node block [ 106.897963][ T7443] isofs_fill_super: get root inode failed [ 106.929031][ T7451] loop1: detected capacity change from 0 to 1024 [ 106.953319][ T7451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.061542][ T7465] EXT4-fs (loop1): shut down requested (0) [ 107.125141][ T7471] loop3: detected capacity change from 0 to 2048 [ 107.145512][ T169] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.182525][ T7475] batadv1: entered promiscuous mode [ 107.185157][ T169] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.200543][ T169] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.200543][ T169] [ 107.210247][ T169] EXT4-fs (loop1): Total free blocks count 0 [ 107.214620][ T7475] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.216233][ T169] EXT4-fs (loop1): Free/Dirty block details [ 107.216249][ T169] EXT4-fs (loop1): free_blocks=68451041280 [ 107.234759][ T169] EXT4-fs (loop1): dirty_blocks=10608 [ 107.240169][ T169] EXT4-fs (loop1): Block reservation details [ 107.243392][ T7471] GPT:first_usable_lbas don't match. [ 107.246145][ T169] EXT4-fs (loop1): i_reserved_data_blocks=663 [ 107.251519][ T7471] GPT:34 != 290 [ 107.261120][ T7471] GPT: Use GNU Parted to correct GPT errors. [ 107.267294][ T7471] loop3: p1 p2 p3 [ 107.285824][ T7477] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 107.307812][ T7477] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 107.318483][ T7477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.326582][ T7477] batadv0: entered promiscuous mode [ 107.362833][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 107.374677][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 107.386690][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 107.412618][ T7479] loop3: detected capacity change from 0 to 8192 [ 107.414153][ T7481] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.446434][ T7483] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.476991][ T7485] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 107.682121][ T7515] syz!: rxe_newlink: already configured on team_slave_0 [ 107.940875][ T7555] syz!: rxe_newlink: already configured on team_slave_0 [ 108.033719][ T7546] loop2: detected capacity change from 0 to 8192 [ 108.049940][ T7565] loop1: detected capacity change from 0 to 1764 [ 108.059825][ T7565] ISOFS: unable to read i-node block [ 108.065193][ T7565] isofs_fill_super: get root inode failed [ 108.174149][ T7576] loop0: detected capacity change from 0 to 8192 [ 108.524532][ T7595] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.781932][ T7598] loop0: detected capacity change from 0 to 1024 [ 108.809256][ T7598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.909065][ T7606] EXT4-fs (loop0): shut down requested (0) [ 108.993591][ T169] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.055128][ T169] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 109.067667][ T169] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.067667][ T169] [ 109.077353][ T169] EXT4-fs (loop0): Total free blocks count 0 [ 109.083362][ T169] EXT4-fs (loop0): Free/Dirty block details [ 109.089300][ T169] EXT4-fs (loop0): free_blocks=68451041280 [ 109.095133][ T169] EXT4-fs (loop0): dirty_blocks=10192 [ 109.100580][ T169] EXT4-fs (loop0): Block reservation details [ 109.106638][ T169] EXT4-fs (loop0): i_reserved_data_blocks=637 [ 109.150734][ T7614] batadv1: entered promiscuous mode [ 109.174313][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.193040][ T7598] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 109.193040][ T7598] program syz.0.1500 not setting count and/or reply_len properly [ 109.216432][ T7618] batadv1: entered promiscuous mode [ 109.222444][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.236410][ T7620] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.236527][ T7622] batadv1: entered promiscuous mode [ 109.250593][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.299656][ T7628] loop1: detected capacity change from 0 to 512 [ 109.307003][ T7628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.324346][ T7628] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 109.332946][ T7628] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 109.348848][ T7628] EXT4-fs (loop1): 1 truncate cleaned up [ 109.354958][ T7628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.382009][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.435422][ T7636] loop4: detected capacity change from 0 to 8192 [ 109.458006][ T7645] batadv1: entered promiscuous mode [ 109.468446][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.510057][ T7649] loop2: detected capacity change from 0 to 256 [ 109.526394][ T7649] FAT-fs (loop2): Directory bread(block 64) failed [ 109.533598][ T7649] FAT-fs (loop2): Directory bread(block 65) failed [ 109.540552][ T7649] FAT-fs (loop2): Directory bread(block 66) failed [ 109.547195][ T7649] FAT-fs (loop2): Directory bread(block 67) failed [ 109.553818][ T7649] FAT-fs (loop2): Directory bread(block 68) failed [ 109.560780][ T7649] FAT-fs (loop2): Directory bread(block 69) failed [ 109.567973][ T7649] FAT-fs (loop2): Directory bread(block 70) failed [ 109.574810][ T7649] FAT-fs (loop2): Directory bread(block 71) failed [ 109.582031][ T7649] FAT-fs (loop2): Directory bread(block 72) failed [ 109.590004][ T7649] FAT-fs (loop2): Directory bread(block 73) failed [ 109.622266][ T7649] syz.2.1518: attempt to access beyond end of device [ 109.622266][ T7649] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 109.687321][ T7649] syz.2.1518: attempt to access beyond end of device [ 109.687321][ T7649] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 109.723932][ T7659] batadv1: entered promiscuous mode [ 109.732341][ T7659] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.820642][ T7668] loop2: detected capacity change from 0 to 512 [ 109.827595][ T7668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.846184][ T7668] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.854864][ T7668] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 109.859673][ T7669] loop3: detected capacity change from 0 to 2048 [ 109.864108][ T7668] EXT4-fs (loop2): 1 truncate cleaned up [ 109.875904][ T7668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.901946][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.928515][ T7669] GPT:first_usable_lbas don't match. [ 109.933911][ T7669] GPT:34 != 290 [ 109.937480][ T7669] GPT: Use GNU Parted to correct GPT errors. [ 109.943716][ T7669] loop3: p1 p2 p3 [ 110.049992][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 110.061889][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.072083][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 110.100162][ T7682] loop0: detected capacity change from 0 to 8192 [ 110.112248][ T7688] batadv1: entered promiscuous mode [ 110.119793][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.158677][ T7686] loop3: detected capacity change from 0 to 2048 [ 110.184438][ T7694] validate_nla: 2 callbacks suppressed [ 110.184458][ T7694] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 110.205399][ T7686] GPT:first_usable_lbas don't match. [ 110.210802][ T7686] GPT:34 != 290 [ 110.214274][ T7686] GPT: Use GNU Parted to correct GPT errors. [ 110.220503][ T7686] loop3: p1 p2 p3 [ 110.348962][ T7710] loop0: detected capacity change from 0 to 1024 [ 110.350471][ T7712] netlink: 'syz.3.1542': attribute type 29 has an invalid length. [ 110.387100][ T7712] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 110.387511][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.410741][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.442347][ T7712] batadv0: entered promiscuous mode [ 110.486860][ T7718] netlink: 'syz.3.1542': attribute type 29 has an invalid length. [ 110.506368][ T7721] EXT4-fs (loop0): shut down requested (0) [ 110.569020][ T7728] loop2: detected capacity change from 0 to 128 [ 110.575775][ T7728] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 110.584673][ T169] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 110.635847][ T169] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 110.648454][ T169] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.648454][ T169] [ 110.658193][ T169] EXT4-fs (loop0): Total free blocks count 0 [ 110.664243][ T169] EXT4-fs (loop0): Free/Dirty block details [ 110.670216][ T169] EXT4-fs (loop0): free_blocks=68451041280 [ 110.676060][ T169] EXT4-fs (loop0): dirty_blocks=9296 [ 110.681405][ T169] EXT4-fs (loop0): Block reservation details [ 110.687455][ T169] EXT4-fs (loop0): i_reserved_data_blocks=581 [ 110.721307][ T7730] loop4: detected capacity change from 0 to 8192 [ 110.767997][ T7735] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 110.781676][ T7710] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 110.781676][ T7710] program syz.0.1539 not setting count and/or reply_len properly [ 110.840039][ T7738] loop2: detected capacity change from 0 to 8192 [ 110.853612][ T7741] batadv1: entered promiscuous mode [ 110.868392][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.894421][ T7744] atomic_op ffff888100e28528 conn xmit_atomic 0000000000000000 [ 111.138357][ T7759] SELinux: syz.1.1557 (7759) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.217688][ T7766] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 111.286196][ T7769] batadv1: entered promiscuous mode [ 111.336529][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.358692][ T7775] atomic_op ffff88813bd91928 conn xmit_atomic 0000000000000000 [ 111.465486][ T7780] batadv1: entered promiscuous mode [ 111.494400][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.513904][ T7778] loop3: detected capacity change from 0 to 8192 [ 111.549988][ T7782] loop0: detected capacity change from 0 to 8192 [ 111.593674][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 111.593693][ T29] audit: type=1326 audit(1737409714.129:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.637437][ T29] audit: type=1326 audit(1737409714.129:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.660956][ T29] audit: type=1326 audit(1737409714.129:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.684679][ T29] audit: type=1326 audit(1737409714.129:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.708294][ T29] audit: type=1326 audit(1737409714.129:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.731889][ T29] audit: type=1326 audit(1737409714.129:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.755667][ T29] audit: type=1326 audit(1737409714.129:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.807835][ T7793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.862364][ T7797] loop0: detected capacity change from 0 to 8192 [ 111.885196][ T29] audit: type=1326 audit(1737409714.419:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.910286][ T29] audit: type=1326 audit(1737409714.449:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 111.935723][ T7801] atomic_op ffff8881350c8928 conn xmit_atomic 0000000000000000 [ 111.943766][ T29] audit: type=1326 audit(1737409714.449:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 112.001037][ T7809] batadv1: entered promiscuous mode [ 112.007099][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.084022][ T7819] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 112.184813][ T7835] netlink: 'syz.0.1588': attribute type 29 has an invalid length. [ 112.212051][ T7841] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.212120][ T7844] netlink: 'syz.4.1591': attribute type 29 has an invalid length. [ 112.230726][ T7835] netlink: 'syz.0.1588': attribute type 29 has an invalid length. [ 112.241702][ T7846] macvtap0: entered promiscuous mode [ 112.247926][ T7846] macvtap0: left promiscuous mode [ 112.262519][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.511198][ T7875] loop1: detected capacity change from 0 to 1024 [ 112.529639][ T7875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.579638][ T7882] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 112.588002][ T7882] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 112.660938][ T7892] EXT4-fs (loop1): shut down requested (0) [ 112.793102][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 112.815048][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.827700][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 112.827700][ T11] [ 112.832892][ T7901] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.837378][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 112.850674][ T11] EXT4-fs (loop1): Free/Dirty block details [ 112.856727][ T11] EXT4-fs (loop1): free_blocks=68451041280 [ 112.862689][ T11] EXT4-fs (loop1): dirty_blocks=16384 [ 112.868113][ T11] EXT4-fs (loop1): Block reservation details [ 112.874127][ T11] EXT4-fs (loop1): i_reserved_data_blocks=1024 [ 112.971012][ T7875] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 112.971012][ T7875] program syz.1.1599 not setting count and/or reply_len properly [ 112.994776][ T7909] loop4: detected capacity change from 0 to 8192 [ 113.031666][ T7911] loop3: detected capacity change from 0 to 8192 [ 113.265711][ T7927] loop4: detected capacity change from 0 to 8192 [ 113.452863][ T7925] loop3: detected capacity change from 0 to 2048 [ 113.593825][ T7925] GPT:first_usable_lbas don't match. [ 113.599197][ T7925] GPT:34 != 290 [ 113.602695][ T7925] GPT: Use GNU Parted to correct GPT errors. [ 113.609495][ T7925] loop3: p1 p2 p3 [ 113.728296][ T7934] loop0: detected capacity change from 0 to 256 [ 113.786806][ T7934] FAT-fs (loop0): Directory bread(block 64) failed [ 113.807753][ T7934] FAT-fs (loop0): Directory bread(block 65) failed [ 113.816908][ T7936] loop3: detected capacity change from 0 to 128 [ 113.835802][ T7934] FAT-fs (loop0): Directory bread(block 66) failed [ 113.847598][ T7936] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 113.877414][ T7934] FAT-fs (loop0): Directory bread(block 67) failed [ 113.884184][ T7934] FAT-fs (loop0): Directory bread(block 68) failed [ 113.890884][ T7934] FAT-fs (loop0): Directory bread(block 69) failed [ 113.897715][ T7934] FAT-fs (loop0): Directory bread(block 70) failed [ 113.904321][ T7934] FAT-fs (loop0): Directory bread(block 71) failed [ 113.911012][ T7934] FAT-fs (loop0): Directory bread(block 72) failed [ 113.952231][ T7934] FAT-fs (loop0): Directory bread(block 73) failed [ 114.089628][ T7934] syz.0.1621: attempt to access beyond end of device [ 114.089628][ T7934] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 114.106248][ T7945] loop3: detected capacity change from 0 to 8192 [ 114.106553][ T7934] syz.0.1621: attempt to access beyond end of device [ 114.106553][ T7934] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 114.168797][ T7947] SELinux: syz.4.1626 (7947) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.274608][ T7959] loop4: detected capacity change from 0 to 256 [ 114.305847][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.319197][ T7959] FAT-fs (loop4): Directory bread(block 64) failed [ 114.351435][ T7966] batadv1: entered promiscuous mode [ 114.351704][ T7955] loop0: detected capacity change from 0 to 8192 [ 114.357558][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.365217][ T7959] FAT-fs (loop4): Directory bread(block 65) failed [ 114.376906][ T7959] FAT-fs (loop4): Directory bread(block 66) failed [ 114.390137][ T7959] FAT-fs (loop4): Directory bread(block 67) failed [ 114.398919][ T7959] FAT-fs (loop4): Directory bread(block 68) failed [ 114.405538][ T7959] FAT-fs (loop4): Directory bread(block 69) failed [ 114.414070][ T7959] FAT-fs (loop4): Directory bread(block 70) failed [ 114.420969][ T7959] FAT-fs (loop4): Directory bread(block 71) failed [ 114.441577][ T7959] FAT-fs (loop4): Directory bread(block 72) failed [ 114.448292][ T7959] FAT-fs (loop4): Directory bread(block 73) failed [ 114.458799][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.475273][ T7959] syz.4.1629: attempt to access beyond end of device [ 114.475273][ T7959] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 114.498394][ T7959] syz.4.1629: attempt to access beyond end of device [ 114.498394][ T7959] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 114.573613][ T7981] SELinux: syz.2.1639 (7981) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.614975][ T7979] loop4: detected capacity change from 0 to 8192 [ 114.618748][ T7976] loop1: detected capacity change from 0 to 8192 [ 114.781483][ T7996] loop2: detected capacity change from 0 to 512 [ 114.796003][ T7998] loop3: detected capacity change from 0 to 2048 [ 114.809116][ T7996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.826801][ T7996] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 114.837452][ T7996] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 114.855569][ T7999] loop0: detected capacity change from 0 to 8192 [ 114.864451][ T7998] GPT:first_usable_lbas don't match. [ 114.867921][ T7996] EXT4-fs (loop2): 1 truncate cleaned up [ 114.869844][ T7998] GPT:34 != 290 [ 114.878907][ T7998] GPT: Use GNU Parted to correct GPT errors. [ 114.885041][ T7998] loop3: p1 p2 p3 [ 114.911799][ T7996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.951039][ T2998] GPT:first_usable_lbas don't match. [ 114.956510][ T2998] GPT:34 != 290 [ 114.960054][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 114.966259][ T2998] loop3: p1 p2 p3 [ 115.015035][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.017936][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.068635][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.073367][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.141977][ T8017] loop2: detected capacity change from 0 to 1024 [ 115.162069][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.173675][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.185138][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.200028][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.210125][ T8017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.216062][ T8015] loop3: detected capacity change from 0 to 8192 [ 115.230543][ T8021] batadv0: entered promiscuous mode [ 115.252297][ T8027] validate_nla: 41 callbacks suppressed [ 115.252314][ T8027] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 115.262016][ T8021] netlink: 'syz.1.1654': attribute type 29 has an invalid length. [ 115.287009][ T8027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.339020][ T8023] netlink: 'syz.0.1655': attribute type 29 has an invalid length. [ 115.354696][ T8034] batadv1: entered promiscuous mode [ 115.361655][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 115.431436][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.465203][ T8042] macvtap0: entered promiscuous mode [ 115.471714][ T8042] macvtap0: left promiscuous mode [ 115.502963][ T8045] loop3: detected capacity change from 0 to 1024 [ 115.521783][ T8045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.619985][ T8056] EXT4-fs (loop3): shut down requested (0) [ 115.729185][ T8053] netlink: 'syz.4.1664': attribute type 29 has an invalid length. [ 115.761047][ T8058] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 115.769311][ T8058] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 115.782739][ T8053] netlink: 'syz.4.1664': attribute type 10 has an invalid length. [ 115.792039][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.816281][ T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 115.844276][ T8053] netlink: 'syz.4.1664': attribute type 29 has an invalid length. [ 116.017043][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 116.029564][ T28] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.029564][ T28] [ 116.039317][ T28] EXT4-fs (loop3): Total free blocks count 0 [ 116.045332][ T28] EXT4-fs (loop3): Free/Dirty block details [ 116.051252][ T28] EXT4-fs (loop3): free_blocks=68451041280 [ 116.057068][ T28] EXT4-fs (loop3): dirty_blocks=16384 [ 116.062547][ T28] EXT4-fs (loop3): Block reservation details [ 116.068630][ T28] EXT4-fs (loop3): i_reserved_data_blocks=1024 [ 116.194013][ T8063] loop1: detected capacity change from 0 to 8192 [ 116.209578][ T8045] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 116.209578][ T8045] program syz.3.1661 not setting count and/or reply_len properly [ 116.293216][ T8075] loop4: detected capacity change from 0 to 512 [ 116.303735][ T8075] EXT4-fs: Ignoring removed oldalloc option [ 116.313515][ T8075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1672: Parent and EA inode have the same ino 15 [ 116.331144][ T8075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1672: Parent and EA inode have the same ino 15 [ 116.343911][ T8075] EXT4-fs (loop4): 1 orphan inode deleted [ 116.345603][ T8071] loop2: detected capacity change from 0 to 2048 [ 116.350326][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.376846][ T8075] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.411182][ T8071] GPT:first_usable_lbas don't match. [ 116.416543][ T8071] GPT:34 != 290 [ 116.420073][ T8071] GPT: Use GNU Parted to correct GPT errors. [ 116.426154][ T8071] loop2: p1 p2 p3 [ 116.581279][ T8090] batadv1: entered promiscuous mode [ 116.587889][ T8079] loop1: detected capacity change from 0 to 8192 [ 116.588429][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.612235][ T5556] udevd[5556]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 116.624934][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.635028][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 116.652924][ T8088] loop2: detected capacity change from 0 to 8192 [ 116.730510][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 116.730528][ T29] audit: type=1326 audit(1737409719.269:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8102 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e63bf5d29 code=0x7ffc0000 [ 116.798737][ T29] audit: type=1326 audit(1737409719.279:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.822285][ T29] audit: type=1326 audit(1737409719.279:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.845787][ T29] audit: type=1326 audit(1737409719.279:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.869322][ T29] audit: type=1326 audit(1737409719.279:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.892948][ T29] audit: type=1326 audit(1737409719.279:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.916458][ T29] audit: type=1326 audit(1737409719.279:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 116.940078][ T29] audit: type=1326 audit(1737409719.309:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8085 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 116.963614][ T29] audit: type=1326 audit(1737409719.309:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8085 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 116.987114][ T29] audit: type=1326 audit(1737409719.309:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8085 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 117.022959][ T8101] loop0: detected capacity change from 0 to 8192 [ 117.110342][ T8115] batadv1: entered promiscuous mode [ 117.116517][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.632489][ T8124] SELinux: syz.4.1690 (8124) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.672631][ T8129] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.775508][ T8139] batadv1: entered promiscuous mode [ 117.781989][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.832557][ T8145] macvtap0: entered promiscuous mode [ 117.838737][ T8145] macvtap0: left promiscuous mode [ 117.868171][ T8142] loop3: detected capacity change from 0 to 8192 [ 117.927632][ T8150] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 117.935938][ T8150] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 117.948003][ T8151] loop4: detected capacity change from 0 to 8192 [ 117.959241][ T8153] SELinux: syz.2.1703 (8153) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.989831][ T8160] vcan0: entered allmulticast mode [ 118.142791][ T8172] loop2: detected capacity change from 0 to 1024 [ 118.160301][ T8172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.194058][ T8177] loop0: detected capacity change from 0 to 1024 [ 118.277718][ T8180] EXT4-fs (loop2): shut down requested (0) [ 118.341578][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.374159][ T8179] loop1: detected capacity change from 0 to 1024 [ 118.415722][ T8179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.432202][ T169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 118.458340][ T169] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 118.470899][ T169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.470899][ T169] [ 118.480942][ T169] EXT4-fs (loop2): Total free blocks count 0 [ 118.486941][ T169] EXT4-fs (loop2): Free/Dirty block details [ 118.492969][ T169] EXT4-fs (loop2): free_blocks=68451041280 [ 118.498825][ T169] EXT4-fs (loop2): dirty_blocks=16384 [ 118.504219][ T169] EXT4-fs (loop2): Block reservation details [ 118.510228][ T169] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 118.554484][ T8172] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 118.554484][ T8172] program syz.2.1705 not setting count and/or reply_len properly [ 118.580943][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.622479][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.666038][ T8189] batadv1: entered promiscuous mode [ 118.672705][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 118.703645][ T8191] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.878797][ T8197] SELinux: syz.3.1716 (8197) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.940079][ T8207] loop0: detected capacity change from 0 to 128 [ 118.971048][ T8207] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 118.981720][ T8209] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 118.989993][ T8209] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 119.075786][ T8213] netlink: 'syz.0.1723': attribute type 29 has an invalid length. [ 119.132071][ T8213] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 119.143432][ T8220] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 119.147454][ T8218] loop3: detected capacity change from 0 to 512 [ 119.152439][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.168131][ T8218] EXT4-fs: Ignoring removed oldalloc option [ 119.186585][ T8218] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1724: Parent and EA inode have the same ino 15 [ 119.200327][ T8218] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1724: Parent and EA inode have the same ino 15 [ 119.213789][ T8218] EXT4-fs (loop3): 1 orphan inode deleted [ 119.220034][ T8218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.223288][ T8213] netlink: 'syz.0.1723': attribute type 29 has an invalid length. [ 119.244085][ T8218] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.272797][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.338072][ T8227] loop1: detected capacity change from 0 to 8192 [ 119.427503][ T8238] loop3: detected capacity change from 0 to 256 [ 119.448984][ T8238] FAT-fs (loop3): Directory bread(block 64) failed [ 119.456257][ T8238] FAT-fs (loop3): Directory bread(block 65) failed [ 119.461121][ T8235] loop0: detected capacity change from 0 to 8192 [ 119.469801][ T8238] FAT-fs (loop3): Directory bread(block 66) failed [ 119.476559][ T8238] FAT-fs (loop3): Directory bread(block 67) failed [ 119.483409][ T8238] FAT-fs (loop3): Directory bread(block 68) failed [ 119.492535][ T8238] FAT-fs (loop3): Directory bread(block 69) failed [ 119.509670][ T8238] FAT-fs (loop3): Directory bread(block 70) failed [ 119.516657][ T8238] FAT-fs (loop3): Directory bread(block 71) failed [ 119.523825][ T8238] FAT-fs (loop3): Directory bread(block 72) failed [ 119.530575][ T8238] FAT-fs (loop3): Directory bread(block 73) failed [ 119.564179][ T8238] syz.3.1732: attempt to access beyond end of device [ 119.564179][ T8238] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 119.582993][ T8238] syz.3.1732: attempt to access beyond end of device [ 119.582993][ T8238] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 119.686610][ T8246] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 119.688989][ T8251] loop2: detected capacity change from 0 to 512 [ 119.695219][ T8246] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 119.704868][ T8251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.729175][ T8251] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 119.737520][ T8251] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 119.737675][ T8248] loop0: detected capacity change from 0 to 2048 [ 119.746542][ T8251] EXT4-fs (loop2): 1 truncate cleaned up [ 119.758724][ T8251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.817852][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.879610][ T8248] GPT:first_usable_lbas don't match. [ 119.885101][ T8248] GPT:34 != 290 [ 119.888698][ T8248] GPT: Use GNU Parted to correct GPT errors. [ 119.894759][ T8248] loop0: p1 p2 p3 [ 119.919128][ T8262] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.943264][ T2998] GPT:first_usable_lbas don't match. [ 119.948668][ T2998] GPT:34 != 290 [ 119.952169][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 119.958345][ T2998] loop0: p1 p2 p3 [ 120.000386][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 120.010012][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 120.038337][ T8266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.062202][ T8268] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.071356][ T8264] loop2: detected capacity change from 0 to 2048 [ 120.085767][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 120.105886][ T8270] loop4: detected capacity change from 0 to 256 [ 120.108301][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 120.119168][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 120.141203][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.173559][ T8270] FAT-fs (loop4): Directory bread(block 64) failed [ 120.174728][ T8264] GPT:first_usable_lbas don't match. [ 120.185541][ T8264] GPT:34 != 290 [ 120.189048][ T8264] GPT: Use GNU Parted to correct GPT errors. [ 120.195162][ T8270] FAT-fs (loop4): Directory bread(block 65) failed [ 120.195335][ T8264] loop2: p1 p2 p3 [ 120.202602][ T8275] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.220717][ T8270] FAT-fs (loop4): Directory bread(block 66) failed [ 120.228007][ T8270] FAT-fs (loop4): Directory bread(block 67) failed [ 120.235062][ T8270] FAT-fs (loop4): Directory bread(block 68) failed [ 120.242612][ T8270] FAT-fs (loop4): Directory bread(block 69) failed [ 120.249576][ T8270] FAT-fs (loop4): Directory bread(block 70) failed [ 120.256284][ T8270] FAT-fs (loop4): Directory bread(block 71) failed [ 120.263820][ T8270] FAT-fs (loop4): Directory bread(block 72) failed [ 120.264783][ T2998] GPT:first_usable_lbas don't match. [ 120.271462][ T8270] FAT-fs (loop4): Directory bread(block 73) failed [ 120.275745][ T2998] GPT:34 != 290 [ 120.285756][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 120.292239][ T8270] syz.4.1746: attempt to access beyond end of device [ 120.292239][ T8270] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 120.292906][ T2998] loop2: p1 p2 p3 [ 120.310855][ T8270] syz.4.1746: attempt to access beyond end of device [ 120.310855][ T8270] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 120.360599][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.400219][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.405976][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.483362][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.488675][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.515287][ T8300] batadv1: entered promiscuous mode [ 120.526135][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.534348][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.535542][ T8302] loop3: detected capacity change from 0 to 1024 [ 120.558966][ T8302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.615708][ T8311] validate_nla: 8 callbacks suppressed [ 120.615724][ T8311] netlink: 'syz.4.1760': attribute type 29 has an invalid length. [ 120.633149][ T8312] EXT4-fs (loop3): shut down requested (0) [ 120.664581][ T8311] netlink: 'syz.4.1760': attribute type 10 has an invalid length. [ 120.684187][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.709010][ T7932] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 120.709894][ T8315] loop2: detected capacity change from 0 to 2048 [ 120.730275][ T7932] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.730304][ T7932] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.730304][ T7932] [ 120.744834][ T8316] netlink: 'syz.4.1760': attribute type 29 has an invalid length. [ 120.752488][ T7932] EXT4-fs (loop3): Total free blocks count 0 [ 120.766526][ T7932] EXT4-fs (loop3): Free/Dirty block details [ 120.772532][ T7932] EXT4-fs (loop3): free_blocks=68451041280 [ 120.778555][ T7932] EXT4-fs (loop3): dirty_blocks=7584 [ 120.783851][ T7932] EXT4-fs (loop3): Block reservation details [ 120.789893][ T7932] EXT4-fs (loop3): i_reserved_data_blocks=474 [ 120.798683][ T8318] loop1: detected capacity change from 0 to 256 [ 120.821880][ T8318] FAT-fs (loop1): Directory bread(block 64) failed [ 120.831169][ T8302] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 120.831169][ T8302] program syz.3.1756 not setting count and/or reply_len properly [ 120.833637][ T8318] FAT-fs (loop1): Directory bread(block 65) failed [ 120.856075][ T3288] GPT:first_usable_lbas don't match. [ 120.861526][ T3288] GPT:34 != 290 [ 120.865014][ T3288] GPT: Use GNU Parted to correct GPT errors. [ 120.871368][ T3288] loop2: p1 p2 p3 [ 120.876565][ T8318] FAT-fs (loop1): Directory bread(block 66) failed [ 120.888012][ T8318] FAT-fs (loop1): Directory bread(block 67) failed [ 120.894816][ T8318] FAT-fs (loop1): Directory bread(block 68) failed [ 120.901715][ T8318] FAT-fs (loop1): Directory bread(block 69) failed [ 120.909174][ T8318] FAT-fs (loop1): Directory bread(block 70) failed [ 120.910574][ T8315] GPT:first_usable_lbas don't match. [ 120.915975][ T8318] FAT-fs (loop1): Directory bread(block 71) failed [ 120.921109][ T8315] GPT:34 != 290 [ 120.927861][ T8318] FAT-fs (loop1): Directory bread(block 72) failed [ 120.931114][ T8315] GPT: Use GNU Parted to correct GPT errors. [ 120.931226][ T8315] loop2: p1 p2 p3 [ 120.946622][ T8318] FAT-fs (loop1): Directory bread(block 73) failed [ 120.953268][ T8323] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 120.998914][ T8318] syz.1.1762: attempt to access beyond end of device [ 120.998914][ T8318] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 121.024085][ T8318] syz.1.1762: attempt to access beyond end of device [ 121.024085][ T8318] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 121.050020][ T8329] netlink: 'syz.4.1768': attribute type 29 has an invalid length. [ 121.058751][ T8332] netlink: 'syz.0.1766': attribute type 29 has an invalid length. [ 121.071073][ T8329] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 121.080290][ T8332] netlink: 'syz.0.1766': attribute type 29 has an invalid length. [ 121.089447][ T8332] netlink: 'syz.0.1766': attribute type 29 has an invalid length. [ 121.099445][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 121.109939][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.132371][ T8332] netlink: 'syz.0.1766': attribute type 29 has an invalid length. [ 121.197421][ T8337] loop2: detected capacity change from 0 to 8192 [ 121.581168][ T8346] loop3: detected capacity change from 0 to 8192 [ 121.694045][ T8349] loop0: detected capacity change from 0 to 512 [ 121.700610][ T8349] EXT4-fs: Ignoring removed oldalloc option [ 121.730744][ T8349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1773: Parent and EA inode have the same ino 15 [ 121.764954][ T8360] loop4: detected capacity change from 0 to 2048 [ 121.771990][ T8349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1773: Parent and EA inode have the same ino 15 [ 121.785810][ T8349] EXT4-fs (loop0): 1 orphan inode deleted [ 121.792219][ T8349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.818819][ T8360] GPT:first_usable_lbas don't match. [ 121.824162][ T8360] GPT:34 != 290 [ 121.827772][ T8360] GPT: Use GNU Parted to correct GPT errors. [ 121.829949][ T8349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.833838][ T8360] loop4: p1 p2 p3 [ 121.854014][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.955468][ T8364] loop4: detected capacity change from 0 to 256 [ 121.985150][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.010002][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 122.010016][ T29] audit: type=1326 audit(1737409724.549:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.042192][ T8364] FAT-fs (loop4): Directory bread(block 64) failed [ 122.049214][ T8364] FAT-fs (loop4): Directory bread(block 65) failed [ 122.064105][ T8364] FAT-fs (loop4): Directory bread(block 66) failed [ 122.077568][ T8364] FAT-fs (loop4): Directory bread(block 67) failed [ 122.086695][ T29] audit: type=1326 audit(1737409724.569:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.109681][ T8364] FAT-fs (loop4): Directory bread(block 68) failed [ 122.110260][ T29] audit: type=1326 audit(1737409724.569:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.116725][ T8364] FAT-fs (loop4): Directory bread(block 69) failed [ 122.140514][ T29] audit: type=1326 audit(1737409724.569:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.147158][ T8364] FAT-fs (loop4): Directory bread(block 70) failed [ 122.170410][ T29] audit: type=1326 audit(1737409724.569:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.177071][ T8364] FAT-fs (loop4): Directory bread(block 71) failed [ 122.200266][ T29] audit: type=1326 audit(1737409724.569:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.216700][ T8364] FAT-fs (loop4): Directory bread(block 72) failed [ 122.230339][ T29] audit: type=1326 audit(1737409724.569:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.260363][ T29] audit: type=1326 audit(1737409724.579:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.283824][ T29] audit: type=1326 audit(1737409724.579:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.307335][ T29] audit: type=1326 audit(1737409724.579:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8367 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 122.335644][ T8364] FAT-fs (loop4): Directory bread(block 73) failed [ 122.394766][ T8364] syz.4.1779: attempt to access beyond end of device [ 122.394766][ T8364] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 122.451190][ T8364] syz.4.1779: attempt to access beyond end of device [ 122.451190][ T8364] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 122.512705][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.580660][ T8391] loop3: detected capacity change from 0 to 1024 [ 122.583283][ T8393] loop4: detected capacity change from 0 to 1024 [ 122.646621][ T8393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.720818][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.725609][ T8401] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.731248][ T8391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.840829][ T8409] loop4: detected capacity change from 0 to 1024 [ 122.909468][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.922018][ T8409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.239715][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.250388][ T8426] batadv1: entered promiscuous mode [ 123.256390][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.278695][ T8428] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 123.286911][ T8428] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 123.297120][ T8430] loop4: detected capacity change from 0 to 256 [ 123.303954][ T8428] vcan0 (unregistering): left allmulticast mode [ 123.319474][ T8430] FAT-fs (loop4): Directory bread(block 64) failed [ 123.326181][ T8430] FAT-fs (loop4): Directory bread(block 65) failed [ 123.332877][ T8430] FAT-fs (loop4): Directory bread(block 66) failed [ 123.339590][ T8430] FAT-fs (loop4): Directory bread(block 67) failed [ 123.346172][ T8430] FAT-fs (loop4): Directory bread(block 68) failed [ 123.353114][ T8430] FAT-fs (loop4): Directory bread(block 69) failed [ 123.371901][ T8430] FAT-fs (loop4): Directory bread(block 70) failed [ 123.392693][ T8430] FAT-fs (loop4): Directory bread(block 71) failed [ 123.399513][ T8430] FAT-fs (loop4): Directory bread(block 72) failed [ 123.406184][ T8430] FAT-fs (loop4): Directory bread(block 73) failed [ 123.421979][ T8430] syz.4.1801: attempt to access beyond end of device [ 123.421979][ T8430] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 123.436360][ T8430] syz.4.1801: attempt to access beyond end of device [ 123.436360][ T8430] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 123.529858][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.551100][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.664781][ T8457] loop3: detected capacity change from 0 to 1024 [ 123.676421][ T8459] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.706807][ T8465] loop2: detected capacity change from 0 to 1024 [ 123.963740][ T8470] vlan2: entered promiscuous mode [ 124.045151][ T8479] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 124.053482][ T8479] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 124.275967][ T8482] loop2: detected capacity change from 0 to 8192 [ 124.330019][ T8493] loop1: detected capacity change from 0 to 512 [ 124.337013][ T8493] EXT4-fs: Ignoring removed oldalloc option [ 124.346977][ T8493] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1824: Parent and EA inode have the same ino 15 [ 124.374526][ T8493] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1824: Parent and EA inode have the same ino 15 [ 124.401241][ T8498] batadv1: entered promiscuous mode [ 124.408436][ T8493] EXT4-fs (loop1): 1 orphan inode deleted [ 124.414934][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.436498][ T8502] batadv1: entered promiscuous mode [ 124.448073][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.466578][ T8499] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 124.474966][ T8499] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 124.581112][ T8513] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.598238][ T8516] loop2: detected capacity change from 0 to 1024 [ 124.610494][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.690779][ T8524] EXT4-fs (loop2): shut down requested (0) [ 124.728791][ T8522] loop0: detected capacity change from 0 to 8192 [ 124.766735][ T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 124.815881][ T8534] loop0: detected capacity change from 0 to 128 [ 124.842621][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.855177][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.855177][ T11] [ 124.865153][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 124.871314][ T11] EXT4-fs (loop2): Free/Dirty block details [ 124.877321][ T11] EXT4-fs (loop2): free_blocks=68451041280 [ 124.883190][ T11] EXT4-fs (loop2): dirty_blocks=7728 [ 124.888662][ T11] EXT4-fs (loop2): Block reservation details [ 124.894669][ T11] EXT4-fs (loop2): i_reserved_data_blocks=483 [ 124.905600][ T8534] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 124.988943][ T7932] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 125.007149][ T8548] batadv1: entered promiscuous mode [ 125.013478][ T8548] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.022208][ T8550] loop1: detected capacity change from 0 to 128 [ 125.029313][ T8550] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 125.113705][ T8552] loop4: detected capacity change from 0 to 8192 [ 125.118012][ T8559] syz!: rxe_newlink: already configured on team_slave_0 [ 125.174234][ T8565] loop3: detected capacity change from 0 to 128 [ 125.182030][ T8565] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 125.183470][ T8562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.349163][ T8574] macvtap0: entered promiscuous mode [ 125.355497][ T8574] macvtap0: left promiscuous mode [ 125.379092][ T8580] loop1: detected capacity change from 0 to 512 [ 125.385746][ T8580] EXT4-fs: Ignoring removed oldalloc option [ 125.395970][ T8580] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1859: Parent and EA inode have the same ino 15 [ 125.414718][ T8580] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1859: Parent and EA inode have the same ino 15 [ 125.434103][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.444397][ T8580] EXT4-fs (loop1): 1 orphan inode deleted [ 125.484160][ T8583] loop3: detected capacity change from 0 to 256 [ 125.532649][ T8583] FAT-fs (loop3): Directory bread(block 64) failed [ 125.557797][ T8583] FAT-fs (loop3): Directory bread(block 65) failed [ 125.565743][ T8583] FAT-fs (loop3): Directory bread(block 66) failed [ 125.575219][ T8588] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.585194][ T8590] loop2: detected capacity change from 0 to 128 [ 125.592474][ T8583] FAT-fs (loop3): Directory bread(block 67) failed [ 125.600066][ T8590] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 125.618828][ T8583] FAT-fs (loop3): Directory bread(block 68) failed [ 125.644205][ T8583] FAT-fs (loop3): Directory bread(block 69) failed [ 125.668260][ T8583] FAT-fs (loop3): Directory bread(block 70) failed [ 125.683219][ T8583] FAT-fs (loop3): Directory bread(block 71) failed [ 125.690012][ T8583] FAT-fs (loop3): Directory bread(block 72) failed [ 125.696616][ T8583] FAT-fs (loop3): Directory bread(block 73) failed [ 125.726454][ T8583] syz.3.1861: attempt to access beyond end of device [ 125.726454][ T8583] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 125.757321][ T8583] syz.3.1861: attempt to access beyond end of device [ 125.757321][ T8583] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 125.785802][ T8599] validate_nla: 39 callbacks suppressed [ 125.785820][ T8599] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 125.830892][ T8607] loop0: detected capacity change from 0 to 2048 [ 125.842472][ T8610] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.873440][ T8607] GPT:first_usable_lbas don't match. [ 125.878796][ T8607] GPT:34 != 290 [ 125.882284][ T8607] GPT: Use GNU Parted to correct GPT errors. [ 125.888450][ T8607] loop0: p1 p2 p3 [ 125.919034][ T8613] vlan2: entered promiscuous mode [ 125.963769][ T8616] netlink: 'syz.4.1873': attribute type 29 has an invalid length. [ 125.986521][ T8618] loop2: detected capacity change from 0 to 512 [ 126.001276][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 126.007989][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 126.012081][ T8618] EXT4-fs: Ignoring removed oldalloc option [ 126.021834][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 126.066775][ T8618] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1874: Parent and EA inode have the same ino 15 [ 126.105294][ T8618] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1874: Parent and EA inode have the same ino 15 [ 126.106371][ T8631] loop4: detected capacity change from 0 to 128 [ 126.134324][ T8634] netlink: 'syz.0.1880': attribute type 29 has an invalid length. [ 126.135252][ T8631] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 126.144878][ T8618] EXT4-fs (loop2): 1 orphan inode deleted [ 126.165974][ T8635] netlink: 'syz.3.1879': attribute type 29 has an invalid length. [ 126.184127][ T8635] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 126.206780][ T8634] netlink: 'syz.0.1880': attribute type 29 has an invalid length. [ 126.215464][ T8634] netlink: 'syz.0.1880': attribute type 29 has an invalid length. [ 126.224283][ T8634] netlink: 'syz.0.1880': attribute type 29 has an invalid length. [ 126.233479][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.245612][ T8634] netlink: 'syz.0.1880': attribute type 29 has an invalid length. [ 126.254115][ T8640] netlink: 'syz.1.1882': attribute type 29 has an invalid length. [ 126.271490][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.383058][ T8650] vlan2: entered promiscuous mode [ 126.412086][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.460129][ T8653] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.524812][ T8657] macvtap0: entered promiscuous mode [ 126.531239][ T8657] macvtap0: left promiscuous mode [ 126.628892][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.707000][ T8669] loop3: detected capacity change from 0 to 1024 [ 126.726153][ T8672] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 126.734453][ T8672] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 126.846194][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.860721][ T8686] loop0: detected capacity change from 0 to 1024 [ 126.869818][ T8688] loop1: detected capacity change from 0 to 256 [ 126.889464][ T8688] FAT-fs (loop1): Directory bread(block 64) failed [ 126.896058][ T8688] FAT-fs (loop1): Directory bread(block 65) failed [ 126.903052][ T8688] FAT-fs (loop1): Directory bread(block 66) failed [ 126.910132][ T8688] FAT-fs (loop1): Directory bread(block 67) failed [ 126.916821][ T8688] FAT-fs (loop1): Directory bread(block 68) failed [ 126.923815][ T8688] FAT-fs (loop1): Directory bread(block 69) failed [ 126.930546][ T8688] FAT-fs (loop1): Directory bread(block 70) failed [ 126.937165][ T8688] FAT-fs (loop1): Directory bread(block 71) failed [ 126.953684][ T8688] FAT-fs (loop1): Directory bread(block 72) failed [ 126.966566][ T8688] FAT-fs (loop1): Directory bread(block 73) failed [ 126.989132][ T8688] syz.1.1901: attempt to access beyond end of device [ 126.989132][ T8688] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 127.009618][ T8688] syz.1.1901: attempt to access beyond end of device [ 127.009618][ T8688] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 127.042728][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 127.042743][ T29] audit: type=1326 audit(1737409729.579:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.079755][ T8694] loop0: detected capacity change from 0 to 8192 [ 127.092805][ T29] audit: type=1326 audit(1737409729.579:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.116345][ T29] audit: type=1326 audit(1737409729.579:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.139875][ T29] audit: type=1326 audit(1737409729.579:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.163476][ T29] audit: type=1326 audit(1737409729.579:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.187602][ T29] audit: type=1326 audit(1737409729.579:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.211385][ T29] audit: type=1326 audit(1737409729.579:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.234952][ T29] audit: type=1326 audit(1737409729.589:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8687 comm="syz.1.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 127.258466][ T29] audit: type=1326 audit(1737409729.709:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 127.261620][ T8699] batadv1: entered promiscuous mode [ 127.282087][ T29] audit: type=1326 audit(1737409729.709:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a2cc65d29 code=0x7ffc0000 [ 127.291414][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 127.343284][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.447884][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.492344][ T8716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.515446][ T8718] loop3: detected capacity change from 0 to 2048 [ 127.534924][ T8720] macvtap0: entered promiscuous mode [ 127.546711][ T8720] macvtap0: left promiscuous mode [ 127.580611][ T8718] GPT:first_usable_lbas don't match. [ 127.585974][ T8718] GPT:34 != 290 [ 127.589539][ T8718] GPT: Use GNU Parted to correct GPT errors. [ 127.595732][ T8718] loop3: p1 p2 p3 [ 127.687768][ T8732] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 127.693506][ T8728] loop4: detected capacity change from 0 to 8192 [ 127.696071][ T8732] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 127.736359][ T8732] vcan0: entered allmulticast mode [ 127.768047][ T8732] vcan0 (unregistering): left allmulticast mode [ 127.898292][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.910595][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.074687][ T8761] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.095899][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.290968][ T8779] vlan2: entered promiscuous mode [ 128.294738][ T8781] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.423932][ T8791] loop0: detected capacity change from 0 to 2048 [ 128.435139][ T8786] loop3: detected capacity change from 0 to 8192 [ 128.515072][ T8791] GPT:first_usable_lbas don't match. [ 128.520516][ T8791] GPT:34 != 290 [ 128.524051][ T8791] GPT: Use GNU Parted to correct GPT errors. [ 128.530279][ T8791] loop0: p1 p2 p3 [ 128.558741][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.658120][ T8803] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.706574][ T8812] loop0: detected capacity change from 0 to 128 [ 128.713402][ T8812] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 128.752693][ T8814] loop0: detected capacity change from 0 to 1024 [ 128.851099][ T8821] loop4: detected capacity change from 0 to 1024 [ 128.862363][ T8823] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.908714][ T8826] batadv1: entered promiscuous mode [ 128.915080][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.918135][ T8821] EXT4-fs mount: 18 callbacks suppressed [ 128.918151][ T8821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.929643][ T8830] loop3: detected capacity change from 0 to 2048 [ 128.977771][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.989838][ T8830] GPT:first_usable_lbas don't match. [ 128.995222][ T8830] GPT:34 != 290 [ 128.998743][ T8830] GPT: Use GNU Parted to correct GPT errors. [ 129.004887][ T8830] loop3: p1 p2 p3 [ 129.108862][ T8843] loop3: detected capacity change from 0 to 1024 [ 129.120690][ T8845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.140074][ T8843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.251065][ T8857] loop0: detected capacity change from 0 to 1024 [ 129.278678][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.294350][ T8863] loop1: detected capacity change from 0 to 2048 [ 129.318175][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.350144][ T2998] GPT:first_usable_lbas don't match. [ 129.355516][ T2998] GPT:34 != 290 [ 129.359063][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 129.365196][ T2998] loop1: p1 p2 p3 [ 129.377461][ T8863] GPT:first_usable_lbas don't match. [ 129.382881][ T8863] GPT:34 != 290 [ 129.386486][ T8863] GPT: Use GNU Parted to correct GPT errors. [ 129.392695][ T8863] loop1: p1 p2 p3 [ 129.402913][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.452140][ T8874] loop2: detected capacity change from 0 to 1024 [ 129.474738][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.495103][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 129.495440][ T5556] udevd[5556]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 129.517461][ T3549] udevd[3549]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.533475][ T8880] macvtap0: entered promiscuous mode [ 129.540732][ T8880] macvtap0: left promiscuous mode [ 129.543760][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 129.547540][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 129.556881][ T8874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.567173][ T5556] udevd[5556]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 129.594810][ T8882] macvtap0: entered promiscuous mode [ 129.600940][ T8882] macvtap0: left promiscuous mode [ 129.655429][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.666912][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.682788][ T8892] loop4: detected capacity change from 0 to 1024 [ 129.723501][ T8894] batadv1: entered promiscuous mode [ 129.729908][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 129.737506][ T8892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.760755][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.773174][ T8902] loop2: detected capacity change from 0 to 1024 [ 129.791331][ T8902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.830588][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.921699][ T8909] loop3: detected capacity change from 0 to 1024 [ 129.946995][ T8905] EXT4-fs (loop2): shut down requested (0) [ 130.026555][ T8915] vlan2: entered promiscuous mode [ 130.034566][ T8909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.055641][ T8916] loop0: detected capacity change from 0 to 512 [ 130.061457][ T7932] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 130.062594][ T8916] EXT4-fs: Ignoring removed oldalloc option [ 130.082289][ T8919] loop4: detected capacity change from 0 to 1024 [ 130.093527][ T7932] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.106092][ T7932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.106092][ T7932] [ 130.109335][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.115776][ T7932] EXT4-fs (loop2): Total free blocks count 0 [ 130.133712][ T7932] EXT4-fs (loop2): Free/Dirty block details [ 130.139672][ T7932] EXT4-fs (loop2): free_blocks=68451041280 [ 130.145583][ T7932] EXT4-fs (loop2): dirty_blocks=16384 [ 130.151057][ T7932] EXT4-fs (loop2): Block reservation details [ 130.157039][ T7932] EXT4-fs (loop2): i_reserved_data_blocks=1024 [ 130.182868][ T8916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1990: Parent and EA inode have the same ino 15 [ 130.238966][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.249845][ T8916] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1990: Parent and EA inode have the same ino 15 [ 130.262872][ T8923] EXT4-fs (loop4): shut down requested (0) [ 130.335151][ T8902] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 130.335151][ T8902] program syz.2.1983 not setting count and/or reply_len properly [ 130.375759][ T8916] EXT4-fs (loop0): 1 orphan inode deleted [ 130.387101][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.401929][ T8916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.414599][ T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 130.416324][ T8919] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 130.416324][ T8919] program syz.4.1989 not setting count and/or reply_len properly [ 130.447165][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.447776][ T8929] loop3: detected capacity change from 0 to 128 [ 130.459649][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.459649][ T50] [ 130.471729][ T8929] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 130.475532][ T50] EXT4-fs (loop4): Total free blocks count 0 [ 130.487491][ T50] EXT4-fs (loop4): Free/Dirty block details [ 130.493403][ T50] EXT4-fs (loop4): free_blocks=68451041280 [ 130.499241][ T50] EXT4-fs (loop4): dirty_blocks=16384 [ 130.504627][ T50] EXT4-fs (loop4): Block reservation details [ 130.510703][ T50] EXT4-fs (loop4): i_reserved_data_blocks=1024 [ 130.641129][ T8938] loop3: detected capacity change from 0 to 8192 [ 130.726359][ T8945] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 130.734701][ T8945] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 130.800326][ T8955] loop1: detected capacity change from 0 to 128 [ 130.807132][ T8955] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 130.831333][ T8960] loop1: detected capacity change from 0 to 128 [ 130.837919][ T8960] vfat: Unknown parameter '@R!áÏMý€wúutf8' [ 130.901849][ T8964] validate_nla: 54 callbacks suppressed [ 130.901868][ T8964] netlink: 'syz.2.1999': attribute type 29 has an invalid length. [ 130.933609][ T8968] netlink: 'syz.1.2008': attribute type 29 has an invalid length. [ 130.968669][ T8968] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 130.997916][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.022142][ T8971] loop0: detected capacity change from 0 to 1024 [ 131.040626][ T8968] netlink: 'syz.1.2008': attribute type 29 has an invalid length. [ 131.050463][ T8971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.159246][ T8976] EXT4-fs (loop0): shut down requested (0) [ 131.242656][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 131.259312][ T8979] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 131.267584][ T8979] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 131.294538][ T8979] vcan0: entered allmulticast mode [ 131.305703][ T8981] loop2: detected capacity change from 0 to 8192 [ 131.323016][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 131.335586][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.335586][ T50] [ 131.345284][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 131.351302][ T50] EXT4-fs (loop0): Free/Dirty block details [ 131.357209][ T50] EXT4-fs (loop0): free_blocks=68451041280 [ 131.363133][ T50] EXT4-fs (loop0): dirty_blocks=11408 [ 131.368527][ T50] EXT4-fs (loop0): Block reservation details [ 131.374535][ T50] EXT4-fs (loop0): i_reserved_data_blocks=713 [ 131.382459][ T8979] vcan0 (unregistering): left allmulticast mode [ 131.438224][ T8971] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 131.438224][ T8971] program syz.0.2010 not setting count and/or reply_len properly [ 131.527788][ T8992] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 131.536102][ T8992] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 131.555647][ T8993] vlan2: entered promiscuous mode [ 131.698640][ T9002] macvtap0: entered promiscuous mode [ 131.709012][ T9002] macvtap0: left promiscuous mode [ 131.722695][ T9005] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 131.732127][ T9006] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 131.736031][ T9008] batadv1: entered promiscuous mode [ 131.746059][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.774751][ T9011] syz!: rxe_newlink: already configured on team_slave_0 [ 131.786722][ T9013] loop2: detected capacity change from 0 to 256 [ 131.828530][ T9013] FAT-fs (loop2): Directory bread(block 64) failed [ 131.843927][ T9017] loop3: detected capacity change from 0 to 512 [ 131.860276][ T9013] FAT-fs (loop2): Directory bread(block 65) failed [ 131.866983][ T9013] FAT-fs (loop2): Directory bread(block 66) failed [ 131.878176][ T9017] EXT4-fs: Ignoring removed oldalloc option [ 131.891459][ T9013] FAT-fs (loop2): Directory bread(block 67) failed [ 131.898734][ T9013] FAT-fs (loop2): Directory bread(block 68) failed [ 131.905960][ T9013] FAT-fs (loop2): Directory bread(block 69) failed [ 131.913064][ T9017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2027: Parent and EA inode have the same ino 15 [ 131.925775][ T9013] FAT-fs (loop2): Directory bread(block 70) failed [ 131.932778][ T9017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.2027: Parent and EA inode have the same ino 15 [ 131.945621][ T9013] FAT-fs (loop2): Directory bread(block 71) failed [ 131.952495][ T9017] EXT4-fs (loop3): 1 orphan inode deleted [ 131.958367][ T9013] FAT-fs (loop2): Directory bread(block 72) failed [ 131.959424][ T9017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.977728][ T9013] FAT-fs (loop2): Directory bread(block 73) failed [ 131.979400][ T9024] batadv1: entered promiscuous mode [ 132.009252][ T9017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.017009][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.027862][ T9013] syz.2.2025: attempt to access beyond end of device [ 132.027862][ T9013] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 132.043690][ T9013] syz.2.2025: attempt to access beyond end of device [ 132.043690][ T9013] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 132.049065][ T9028] loop4: detected capacity change from 0 to 1024 [ 132.087923][ T9032] netlink: 'syz.0.2034': attribute type 1 has an invalid length. [ 132.093139][ T9028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.099145][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 132.099160][ T29] audit: type=1326 audit(1737409734.639:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.2.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 132.137735][ T29] audit: type=1326 audit(1737409734.649:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9012 comm="syz.2.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb877d45d29 code=0x7ffc0000 [ 132.196586][ T9038] vlan2: entered promiscuous mode [ 132.219774][ T29] audit: type=1326 audit(1737409734.749:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.243267][ T29] audit: type=1326 audit(1737409734.749:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.266715][ T29] audit: type=1326 audit(1737409734.759:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.290230][ T29] audit: type=1326 audit(1737409734.759:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.315764][ T29] audit: type=1326 audit(1737409734.759:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.317535][ T9041] vlan2: entered promiscuous mode [ 132.339245][ T29] audit: type=1326 audit(1737409734.759:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.339276][ T29] audit: type=1326 audit(1737409734.759:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.339301][ T29] audit: type=1326 audit(1737409734.759:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9042 comm="syz.1.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7721815d29 code=0x7ffc0000 [ 132.416782][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.429575][ T9050] loop1: detected capacity change from 0 to 1024 [ 132.452042][ T9052] netlink: 'syz.4.2040': attribute type 29 has an invalid length. [ 132.462674][ T9052] netlink: 'syz.4.2040': attribute type 29 has an invalid length. [ 132.466715][ T9050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.472707][ T9052] netlink: 'syz.4.2040': attribute type 29 has an invalid length. [ 132.562365][ T9056] EXT4-fs (loop1): shut down requested (0) [ 132.625121][ T169] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 132.706701][ T169] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 132.719231][ T169] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.719231][ T169] [ 132.728980][ T169] EXT4-fs (loop1): Total free blocks count 0 [ 132.735066][ T169] EXT4-fs (loop1): Free/Dirty block details [ 132.741081][ T169] EXT4-fs (loop1): free_blocks=68451041280 [ 132.746569][ T9065] batadv1: entered promiscuous mode [ 132.746989][ T169] EXT4-fs (loop1): dirty_blocks=9136 [ 132.757539][ T169] EXT4-fs (loop1): Block reservation details [ 132.763610][ T169] EXT4-fs (loop1): i_reserved_data_blocks=571 [ 132.764529][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.821886][ T9050] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 132.821886][ T9050] program syz.1.2039 not setting count and/or reply_len properly [ 132.851154][ T9073] batadv1: entered promiscuous mode [ 132.857247][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.960943][ T9081] loop0: detected capacity change from 0 to 1024 [ 132.992521][ T9081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.026504][ T9087] vlan2: entered promiscuous mode [ 133.046510][ T9089] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.066081][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.176033][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.274859][ T9107] loop4: detected capacity change from 0 to 8192 [ 133.411544][ T9120] vlan2: entered promiscuous mode [ 133.427538][ T9122] loop1: detected capacity change from 0 to 1024 [ 133.439742][ T9122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.603251][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.618508][ T9122] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 133.618508][ T9122] program syz.1.2067 not setting count and/or reply_len properly [ 133.670134][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.770230][ T9107] ================================================================== [ 133.778366][ T9107] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 133.786519][ T9107] [ 133.788859][ T9107] write to 0xffff88810a4576b0 of 8 bytes by task 9114 on cpu 1: [ 133.796512][ T9107] filemap_splice_read+0x6c4/0x910 [ 133.801661][ T9107] splice_direct_to_actor+0x269/0x670 [ 133.807071][ T9107] do_splice_direct+0xd7/0x150 [ 133.811860][ T9107] do_sendfile+0x398/0x660 [ 133.816383][ T9107] __x64_sys_sendfile64+0x110/0x150 [ 133.821598][ T9107] x64_sys_call+0xfbd/0x2dc0 [ 133.826205][ T9107] do_syscall_64+0xc9/0x1c0 [ 133.830737][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.836658][ T9107] [ 133.838999][ T9107] write to 0xffff88810a4576b0 of 8 bytes by task 9107 on cpu 0: [ 133.846762][ T9107] filemap_splice_read+0x6c4/0x910 [ 133.851919][ T9107] splice_direct_to_actor+0x269/0x670 [ 133.857328][ T9107] do_splice_direct+0xd7/0x150 [ 133.862129][ T9107] do_sendfile+0x398/0x660 [ 133.867003][ T9107] __x64_sys_sendfile64+0x110/0x150 [ 133.872261][ T9107] x64_sys_call+0xfbd/0x2dc0 [ 133.876885][ T9107] do_syscall_64+0xc9/0x1c0 [ 133.881407][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.887338][ T9107] [ 133.889669][ T9107] value changed: 0x00000000000005ac -> 0x00000000000005ad [ 133.896885][ T9107] [ 133.899232][ T9107] Reported by Kernel Concurrency Sanitizer on: [ 133.905396][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.4.2061 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 133.915748][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.925836][ T9107] ================================================================== [ 134.218480][ T169] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 134.233723][ T169] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.246284][ T169] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.246284][ T169] [ 134.255991][ T169] EXT4-fs (loop1): Total free blocks count 0 [ 134.262089][ T169] EXT4-fs (loop1): Free/Dirty block details [ 134.268032][ T169] EXT4-fs (loop1): free_blocks=68451041280 [ 134.273845][ T169] EXT4-fs (loop1): dirty_blocks=7680 [ 134.279175][ T169] EXT4-fs (loop1): Block reservation details [ 134.285251][ T169] EXT4-fs (loop1): i_reserved_data_blocks=480 [ 134.298089][ T7932] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28