last executing test programs: 2m20.887699916s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) 2m20.826111777s ago: executing program 1 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000000000080000000000"], 0x98}}, 0x0) 2m20.785383627s ago: executing program 1 (id=116): r0 = syz_open_pts(0xffffffffffffffff, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x906f09, &(0x7f0000000380), 0x3, 0x44a, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "0c23d6fc21d172e028d3e79cb6d767164b653148"}, 0x15, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000000800)=[{r1, 0x400}], 0x1, 0x6) 2m20.697821657s ago: executing program 1 (id=117): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x58d, &(0x7f0000000440)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) 2m20.485081548s ago: executing program 1 (id=122): ioperm(0x0, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000006, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@min_batch_time={'min_batch_time', 0x3d, 0xa}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@block_validity}, {@orlov}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x58c, &(0x7f0000000a40)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = dup(r2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) fchown(r6, 0x0, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = openat2(r1, &(0x7f0000000240)='./bus\x00', &(0x7f0000000300)={0x800, 0x60, 0x10}, 0x18) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80841, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x9, 0x0, 0x0) 2m20.118021231s ago: executing program 1 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 2m20.1096357s ago: executing program 32 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 1m20.129850529s ago: executing program 5 (id=1456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000440)='./file1\x00', 0x82540, 0xe2) ftruncate(r0, 0xee72) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0xffff, 0x3, 0x40, 0x4}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0100000000000000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0xa0f) 1m19.211413823s ago: executing program 5 (id=1471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$inet6(0x10, 0x2, 0x6) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000", 0x19, 0x0, 0x0, 0x0) 1m19.076750074s ago: executing program 5 (id=1473): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000006c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}, {0xfe01, 0x0, 0x5, 0x1}, {0x2, 0x8, 0x1, 0x6}, {0xfff, 0x3, 0xbb, 0x38}]}) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x200, 0x18}, 0xc) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu<00||!') syz_socket_connect_nvme_tcp() connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000000c0)={0x2, 0x28, 0xfa2c, {0xf5ff, {0xa, 0x4e24, 0xfffffffc, @private0, 0x3b}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000001010000000000000900000044400100", @ANYRES32=r5, @ANYBLOB="a700"/20, @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000400"/24, @ANYRES32=r0, @ANYBLOB="dbea74b6da3cc9fe5581f681b32ad7abf433558a272731244022077fa4c80c79168a0200000009f34a69b2dca90ec30bfad1903b67dbb6584f23531c9af4150f383bebe0f98f7b331b42b7b2e7f45c4f10bb807f2c413f4d5a890da01c9d5e3c0e6e9f8503786c62e8c6eadf929013a3a33968a53b40b63496"], 0x50) 1m19.008036564s ago: executing program 5 (id=1476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fgetxattr(r0, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) 1m18.987558854s ago: executing program 5 (id=1477): syz_open_dev$usbfs(&(0x7f0000000000), 0x80100000201, 0x4082) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x3f, &(0x7f0000000000)='%', 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m17.87131745s ago: executing program 5 (id=1495): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m2.679021219s ago: executing program 33 (id=1495): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 4.06860543s ago: executing program 3 (id=2845): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x10}]}, {0x0, [0x2e]}}, &(0x7f00000002c0)=""/27, 0x27, 0x1b, 0x1, 0xff, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xc1) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$P9_RLCREATE(r6, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x80, 0x2, 0x5}, 0x5}}, 0x18) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r7, &(0x7f0000000000)='./file1\x00', r7, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "940cb5d501ef6628", "400e8fc5f40de8287be3186cc5d1864c2b3cfe8a02a2d818f915a0a61f68a7f1", 'rG<{', "42e1d76e0b95976c"}, 0x38) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'dvmrp0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x300, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) 3.767908961s ago: executing program 2 (id=2847): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 3.749999501s ago: executing program 3 (id=2848): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00W', @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff0f00006b000000060065001c0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000) 3.658250762s ago: executing program 2 (id=2850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4, @local}}}}, 0x0) 3.642066082s ago: executing program 3 (id=2851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000440)='./file1\x00', 0x82540, 0xe2) ftruncate(r0, 0xee72) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0xffff, 0x3, 0x40, 0x4}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0100000000000000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) 3.629545672s ago: executing program 2 (id=2852): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100000800005, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100005, 0xfffffffffffffffe}, 0x100840, 0x0, 0x0, 0x1, 0x3, 0x3, 0x204, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.561227912s ago: executing program 3 (id=2855): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000006c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}, {0xfe01, 0x0, 0x5, 0x1}, {0x2, 0x8, 0x1, 0x6}, {0xfff, 0x3, 0xbb, 0x38}]}) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x200, 0x18}, 0xc) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup2(r5, r5) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<00||!') syz_socket_connect_nvme_tcp() connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000000c0)={0x2, 0x28, 0xfa2c, {0xf5ff, {0xa, 0x4e24, 0xfffffffc, @private0, 0x3b}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000001010000000000000900000044400100", @ANYRES32=r6, @ANYBLOB="a700"/20, @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000400"/24, @ANYRES32=r0, @ANYBLOB="dbea74b6da3cc9fe5581f681b32ad7abf433558a272731244022077fa4c80c79168a0200000009f34a69b2dca90ec30bfad1903b67dbb6584f23531c9af4150f383bebe0f98f7b331b42b7b2e7f45c4f10bb807f2c413f4d5a890da01c9d5e3c0e6e9f8503786c62e8c6eadf929013a3a33968a53b40b63496"], 0x50) 3.548512672s ago: executing program 2 (id=2856): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x100002, 0x0) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000b0b000/0x2000)=nil) 3.468417452s ago: executing program 0 (id=2857): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x142}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000800)='ns\x00') r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0x10000]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x80, 0x4, 0x401, 0x8400, r1, 0xffffffff, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x2000000000000f, @value=r2, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000), 0x4) creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f400000010000ffffb803707fd877bb582ee5a0e7ec074fec26a4371b2b2af4580000000000003b1fcdb9eea9cdfdee7beca4a548333a"], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff5d) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000416, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x364, &(0x7f0000000180)="$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") r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'pim6reg1\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000600)) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x9) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) 3.455640913s ago: executing program 2 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000096905e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) sendmsg$can_j1939(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)="8ee779dc44c58b4a", 0x8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000004) sendmmsg$inet6(r1, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="74887a93c8b50ed2", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000025c3ce06"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2], 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e84278e7331aff7f9b21a7810000000000000000000000abae87478d4f48d50196a209afffffffffffffffffb848da12f2c23f8ca8225469c39ed16ef8abbbf67e7bb7b5a0ebdc887915bb1e3238b7512162869500"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)="54e94436ee8bd72ed88c0de2e2b78409e6dff52d46083d5dd0ee07272de792139a10a7ac1f74d4117534", &(0x7f0000001280), 0x2, r3}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="b4964b2fb8bd429355051a521feda3c023fead587b6584b7cefc995ef423864557f0eaf8296fc3633b02520b7a35654c4cbb81a4f04fec48293c8be0cfb3acb4e6ce9bba0143e7878266c82e7e0877a07288e562daaf094a93197d0d3072fc9c5ff215ec", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x43, &(0x7f0000000540), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.663188797s ago: executing program 0 (id=2860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0400000000000000b708001576482e587d22f9ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f00000031c0)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sync_file_range(0xffffffffffffffff, 0x45a5909b, 0x9, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x20, 0x3f) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 1.758359631s ago: executing program 0 (id=2869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.705737352s ago: executing program 4 (id=2871): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0xa0}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0, 0x40010}) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_enter(r0, 0x44e9, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f00000000c0), 0x84800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000f20000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000100)=r7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) getsockname$packet(r3, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400", @ANYRES32=r8], 0x3c}}, 0x0) 863.347276ms ago: executing program 0 (id=2875): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20007, 0x0, 0x1, {0x1}}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r6, 0x0, r8) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80074efc22bb31ad49f50a03cb4d92706000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e67c20b278d56cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) write$UHID_CREATE2(r5, 0x0, 0x138) write$UHID_DESTROY(r5, &(0x7f0000000340), 0x4) r11 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 751.484547ms ago: executing program 4 (id=2876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 710.719697ms ago: executing program 4 (id=2878): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xb481, 0x7f, 0x3, 0x2}, {0x20, 0x5, 0x2, 0xfffffffe}, {0x1, 0xe, 0x9, 0x101}, {0x3, 0x81, 0x6, 0xd}]}) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b296e12d542bdfb7cec880a02de9e1d7300", "aa01954b50e1a7d200008f5a3995fa1e7569d25aed9768cf0c2def7d5500", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1508ebd0c5b39be0c0a8f4394f9dfb56ceccf9f6f1fdfdc100", "78a85ce08babb5877c9ab49084d318f3ce181dd78515c054b784f51f55030e7f", "510f13cf0000000000010001", 0xfffffffd, 0x3ffffff, 0x120000, 0x1}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x7, 0x80, 0x9}, {0x1, 0xd, 0x0, 0x8}, {0x0, 0x20, 0x7, 0x1675}, {0x8fe8, 0x70, 0x2, 0x4}, {0x5, 0x0, 0xfc, 0x4}]}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000004ffa239db17f9620a5000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x408600, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000700000a20000000000a05000000000000000000070000000900010073797a300000000064000000020a010000000000000000000000000000000700546b4802432b8b2ba7"], 0xd0}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf250100000008000100030000001c0004800500160001000000040003000100000005000300020000000800020003"], 0x40}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000a7ff850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r10 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAW(r10, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff, 0x0, "f957c9c46b9ca1d1"}) 673.661087ms ago: executing program 6 (id=2879): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000006c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}, {0xfe01, 0x0, 0x5, 0x1}, {0x2, 0x8, 0x1, 0x6}, {0xfff, 0x3, 0xbb, 0x38}]}) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x200, 0x18}, 0xc) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup2(r5, r5) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<00||!') syz_socket_connect_nvme_tcp() connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000000c0)={0x2, 0x28, 0xfa2c, {0xf5ff, {0xa, 0x4e24, 0xfffffffc, @private0, 0x3b}}}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000001010000000000000900000044400100", @ANYRES32=r6, @ANYBLOB="a700"/20, @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000400"/24, @ANYRES32=r0, @ANYBLOB="dbea74b6da3cc9fe5581f681b32ad7abf433558a272731244022077fa4c80c79168a0200000009f34a69b2dca90ec30bfad1903b67dbb6584f23531c9af4150f383bebe0f98f7b331b42b7b2e7f45c4f10bb807f2c413f4d5a890da01c9d5e3c0e6e9f8503786c62e8c6eadf929013a3a33968a53b40b63496"], 0x50) 598.008398ms ago: executing program 0 (id=2880): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000) 577.329118ms ago: executing program 6 (id=2881): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000440)='./file1\x00', 0x82540, 0xe2) ftruncate(r0, 0xee72) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0xffff, 0x3, 0x40, 0x4}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0100000000000000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r6, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1}, 0x6e) r7 = fcntl$dupfd(r6, 0x0, r4) listen(r7, 0xa0f) 484.743448ms ago: executing program 4 (id=2882): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00W', @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff0f00006b000000060065001c0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000) 410.012769ms ago: executing program 4 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4, @local}}}}, 0x0) 341.057909ms ago: executing program 4 (id=2884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 273.826479ms ago: executing program 2 (id=2885): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file3\x00', 0xb00002d6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000008000000007d45f6fb20000000000077e20a8b5aff9f2fe36bcd117dee09575e43108d98e57a270f0000000000000087919c840593ee4204", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r2, 0x7, 0x3) readv(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@version_L}, {@msize={'msize', 0x3d, 0x2}}, {@loose}, {@debug={'debug', 0x3d, 0x3}}, {@fscache}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x7f}}, {@version_L}], [], 0x6b}}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 273.532889ms ago: executing program 0 (id=2886): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file3\x00', 0xb00002d6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000008000000007d45f6fb20000000000077e20a8b5aff9f2fe36bcd117dee09575e43108d98e57a270f0000000000000087919c840593ee4204", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r2, 0x7, 0x3) readv(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@version_L}, {@msize={'msize', 0x3d, 0x2}}, {@loose}, {@debug={'debug', 0x3d, 0x3}}, {@fscache}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x7f}}, {@version_L}], [], 0x6b}}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 259.561919ms ago: executing program 6 (id=2887): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0) 229.350539ms ago: executing program 6 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 217.247329ms ago: executing program 3 (id=2858): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000440)='./file1\x00', 0x82540, 0xe2) ftruncate(r0, 0xee72) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0xffff, 0x3, 0x40, 0x4}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0100000000000000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r9, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1}, 0x6e) r10 = fcntl$dupfd(r9, 0x0, r4) listen(r10, 0xa0f) 173.26102ms ago: executing program 6 (id=2889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 867.561µs ago: executing program 6 (id=2890): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x46, r5}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) listen(r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) 0s ago: executing program 3 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x87f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x84, 0x2, 0x2, 0x1, 0x0, [@private1]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x40}, 0x24004800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): urnal. Quota mode: none. [ 140.302500][T10271] bpf_get_probe_write_proto: 8 callbacks suppressed [ 140.302532][T10271] syz.2.2150[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.322662][T10271] syz.2.2150[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.344265][T10271] syz.2.2150[10271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.401650][T10265] loop3: detected capacity change from 0 to 256 [ 140.498592][T10265] FAT-fs (loop3): Directory bread(block 64) failed [ 140.516547][T10265] FAT-fs (loop3): Directory bread(block 65) failed [ 140.543089][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.544836][T10265] FAT-fs (loop3): Directory bread(block 66) failed [ 140.586894][T10265] FAT-fs (loop3): Directory bread(block 67) failed [ 140.595392][T10265] FAT-fs (loop3): Directory bread(block 68) failed [ 140.604715][T10297] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 140.614556][T10265] FAT-fs (loop3): Directory bread(block 69) failed [ 140.621212][T10265] FAT-fs (loop3): Directory bread(block 70) failed [ 140.631626][T10265] FAT-fs (loop3): Directory bread(block 71) failed [ 140.644970][T10297] bond7: entered promiscuous mode [ 140.655460][T10297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 140.662265][T10265] FAT-fs (loop3): Directory bread(block 72) failed [ 140.684143][T10265] FAT-fs (loop3): Directory bread(block 73) failed [ 140.816002][T10255] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 140.829339][T10255] pim6reg1: linktype set to 825 [ 141.270025][T10316] syz.0.2163[10316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.270094][T10316] syz.0.2163[10316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.281936][T10316] syz.0.2163[10316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.386954][T10318] loop0: detected capacity change from 0 to 1024 [ 141.405543][T10318] EXT4-fs: Ignoring removed nobh option [ 141.411165][T10318] EXT4-fs: Ignoring removed orlov option [ 141.436344][T10318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.803863][T10361] netlink: 'syz.6.2169': attribute type 1 has an invalid length. [ 141.822211][T10361] bond4: entered promiscuous mode [ 141.827634][T10361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.989397][T10368] loop4: detected capacity change from 0 to 256 [ 142.096536][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.129201][T10368] FAT-fs (loop4): Directory bread(block 64) failed [ 142.139389][T10385] syz.0.2176[10385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.139451][T10385] syz.0.2176[10385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.151030][T10368] FAT-fs (loop4): Directory bread(block 65) failed [ 142.170781][T10385] syz.0.2176[10385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.174544][T10368] FAT-fs (loop4): Directory bread(block 66) failed [ 142.196961][T10368] FAT-fs (loop4): Directory bread(block 67) failed [ 142.205349][T10368] FAT-fs (loop4): Directory bread(block 68) failed [ 142.211935][T10368] FAT-fs (loop4): Directory bread(block 69) failed [ 142.221575][T10368] FAT-fs (loop4): Directory bread(block 70) failed [ 142.228213][T10368] FAT-fs (loop4): Directory bread(block 71) failed [ 142.234755][T10368] FAT-fs (loop4): Directory bread(block 72) failed [ 142.241273][T10368] FAT-fs (loop4): Directory bread(block 73) failed [ 142.266672][T10368] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 142.272789][T10368] pim6reg1: linktype set to 825 [ 142.355969][T10394] syz.0.2180: attempt to access beyond end of device [ 142.355969][T10394] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.450934][T10396] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 142.478844][T10396] bond6: entered promiscuous mode [ 142.487181][T10396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.613926][T10409] loop6: detected capacity change from 0 to 1024 [ 142.620641][T10409] EXT4-fs: Ignoring removed nobh option [ 142.626385][T10409] EXT4-fs: Ignoring removed orlov option [ 142.639751][T10409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.008878][T10428] __nla_validate_parse: 22 callbacks suppressed [ 143.008903][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'. [ 143.096033][T10449] syz.2.2189[10449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.098578][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 143.146605][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.275244][T10459] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2192'. [ 143.279598][T10461] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 143.312554][T10461] bond9: entered promiscuous mode [ 143.312577][T10462] loop6: detected capacity change from 0 to 256 [ 143.318635][T10461] 8021q: adding VLAN 0 to HW filter on device bond9 [ 143.353509][T10465] syz.0.2194: attempt to access beyond end of device [ 143.353509][T10465] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 143.383704][T10462] FAT-fs (loop6): Directory bread(block 64) failed [ 143.404121][T10462] FAT-fs (loop6): Directory bread(block 65) failed [ 143.410694][T10462] FAT-fs (loop6): Directory bread(block 66) failed [ 143.417486][T10462] FAT-fs (loop6): Directory bread(block 67) failed [ 143.424205][T10462] FAT-fs (loop6): Directory bread(block 68) failed [ 143.430841][T10462] FAT-fs (loop6): Directory bread(block 69) failed [ 143.437491][T10462] FAT-fs (loop6): Directory bread(block 70) failed [ 143.444341][T10462] FAT-fs (loop6): Directory bread(block 71) failed [ 143.450951][T10462] FAT-fs (loop6): Directory bread(block 72) failed [ 143.457570][T10462] FAT-fs (loop6): Directory bread(block 73) failed [ 143.492133][T10454] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 143.500876][T10454] pim6reg1: linktype set to 825 [ 143.516407][ T29] kauditd_printk_skb: 9095 callbacks suppressed [ 143.516467][ T29] audit: type=1326 audit(1733000940.689:70374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 143.567189][ T29] audit: type=1326 audit(1733000940.689:70375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 143.590796][ T29] audit: type=1326 audit(1733000940.689:70376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 143.614344][ T29] audit: type=1326 audit(1733000940.689:70377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 143.637929][ T29] audit: type=1326 audit(1733000940.689:70378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 143.661460][ T29] audit: type=1326 audit(1733000940.689:70379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 143.684993][ T29] audit: type=1326 audit(1733000940.689:70380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 143.708512][ T29] audit: type=1326 audit(1733000940.689:70381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 143.732090][ T29] audit: type=1326 audit(1733000940.689:70382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 143.755685][ T29] audit: type=1326 audit(1733000940.689:70383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 143.780937][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 143.789910][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 143.860732][T10488] loop3: detected capacity change from 0 to 1024 [ 143.867737][T10488] EXT4-fs: Ignoring removed nobh option [ 143.873389][T10488] EXT4-fs: Ignoring removed orlov option [ 143.908538][T10488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.088941][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 144.310672][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 144.348909][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.459117][T10538] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 144.466219][T10535] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2206'. [ 144.523125][T10538] bond7: entered promiscuous mode [ 144.529837][T10538] 8021q: adding VLAN 0 to HW filter on device bond7 [ 144.647036][T10550] syz.0.2212: attempt to access beyond end of device [ 144.647036][T10550] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.739531][T10555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.761640][T10555] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 144.782093][T10545] loop2: detected capacity change from 0 to 256 [ 144.790979][T10555] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 144.812896][T10545] FAT-fs (loop2): Directory bread(block 64) failed [ 144.821910][T10545] FAT-fs (loop2): Directory bread(block 65) failed [ 144.832647][T10545] FAT-fs (loop2): Directory bread(block 66) failed [ 144.854898][T10545] FAT-fs (loop2): Directory bread(block 67) failed [ 144.864601][T10545] FAT-fs (loop2): Directory bread(block 68) failed [ 144.871225][T10545] FAT-fs (loop2): Directory bread(block 69) failed [ 144.905462][T10545] FAT-fs (loop2): Directory bread(block 70) failed [ 144.915314][T10545] FAT-fs (loop2): Directory bread(block 71) failed [ 144.916418][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'. [ 144.932012][T10545] FAT-fs (loop2): Directory bread(block 72) failed [ 144.938903][T10545] FAT-fs (loop2): Directory bread(block 73) failed [ 144.969252][T10545] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 144.975034][T10545] pim6reg1: linktype set to 825 [ 145.030627][T10564] loop0: detected capacity change from 0 to 1024 [ 145.052138][T10564] EXT4-fs: Ignoring removed nobh option [ 145.057807][T10564] EXT4-fs: Ignoring removed orlov option [ 145.078207][T10564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.128146][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2217'. [ 145.388739][T10600] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 145.568313][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.722741][T10630] syz.0.2229: attempt to access beyond end of device [ 145.722741][T10630] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.857278][T10636] bpf_get_probe_write_proto: 8 callbacks suppressed [ 145.857365][T10636] syz.4.2231[10636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.865048][T10636] syz.4.2231[10636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.874316][T10634] loop0: detected capacity change from 0 to 256 [ 145.877464][T10636] syz.4.2231[10636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.899848][T10634] FAT-fs (loop0): Directory bread(block 64) failed [ 145.922617][T10634] FAT-fs (loop0): Directory bread(block 65) failed [ 145.929313][T10634] FAT-fs (loop0): Directory bread(block 66) failed [ 145.936048][T10634] FAT-fs (loop0): Directory bread(block 67) failed [ 145.951929][T10634] FAT-fs (loop0): Directory bread(block 68) failed [ 145.959047][T10634] FAT-fs (loop0): Directory bread(block 69) failed [ 145.965725][T10634] FAT-fs (loop0): Directory bread(block 70) failed [ 145.972286][T10634] FAT-fs (loop0): Directory bread(block 71) failed [ 145.978912][T10634] FAT-fs (loop0): Directory bread(block 72) failed [ 145.985626][T10634] FAT-fs (loop0): Directory bread(block 73) failed [ 146.001008][T10643] netlink: 'syz.6.2235': attribute type 1 has an invalid length. [ 146.028314][T10632] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 146.037093][T10632] pim6reg1: linktype set to 825 [ 146.046934][T10650] loop4: detected capacity change from 0 to 1024 [ 146.053621][T10650] EXT4-fs: Ignoring removed nobh option [ 146.059382][T10650] EXT4-fs: Ignoring removed orlov option [ 146.075770][T10650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.473841][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.523616][T10707] syz.4.2244[10707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.523750][T10707] syz.4.2244[10707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.547013][T10709] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 146.553923][T10707] syz.4.2244[10707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.785534][T10714] loop3: detected capacity change from 0 to 256 [ 146.824618][T10722] syz.0.2251: attempt to access beyond end of device [ 146.824618][T10722] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 146.842866][T10714] FAT-fs (loop3): Directory bread(block 64) failed [ 146.849702][T10714] FAT-fs (loop3): Directory bread(block 65) failed [ 146.856406][T10714] FAT-fs (loop3): Directory bread(block 66) failed [ 146.863017][T10714] FAT-fs (loop3): Directory bread(block 67) failed [ 146.888118][T10714] FAT-fs (loop3): Directory bread(block 68) failed [ 146.895413][T10714] FAT-fs (loop3): Directory bread(block 69) failed [ 146.905120][T10714] FAT-fs (loop3): Directory bread(block 70) failed [ 146.912095][T10714] FAT-fs (loop3): Directory bread(block 71) failed [ 146.931163][T10714] FAT-fs (loop3): Directory bread(block 72) failed [ 146.938494][T10714] FAT-fs (loop3): Directory bread(block 73) failed [ 146.964157][T10714] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 146.971584][T10714] pim6reg1: linktype set to 825 [ 147.015195][T10731] loop6: detected capacity change from 0 to 1024 [ 147.022896][T10731] EXT4-fs: Ignoring removed nobh option [ 147.028543][T10731] EXT4-fs: Ignoring removed orlov option [ 147.045184][T10731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.140515][T10748] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 147.162438][T10753] syz.0.2259[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.162545][T10753] syz.0.2259[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.190251][T10753] syz.0.2259[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.325998][T10769] syz.2.2263: attempt to access beyond end of device [ 147.325998][T10769] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.517229][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.554563][T10800] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 147.566655][T10797] loop2: detected capacity change from 0 to 256 [ 147.609769][T10797] FAT-fs (loop2): Directory bread(block 64) failed [ 147.632058][T10797] FAT-fs (loop2): Directory bread(block 65) failed [ 147.649340][T10797] FAT-fs (loop2): Directory bread(block 66) failed [ 147.661949][T10797] FAT-fs (loop2): Directory bread(block 67) failed [ 147.668791][T10797] FAT-fs (loop2): Directory bread(block 68) failed [ 147.678774][T10797] FAT-fs (loop2): Directory bread(block 69) failed [ 147.686005][T10809] netlink: 'syz.6.2272': attribute type 1 has an invalid length. [ 147.704319][T10797] FAT-fs (loop2): Directory bread(block 70) failed [ 147.710855][T10797] FAT-fs (loop2): Directory bread(block 71) failed [ 147.715230][T10811] syz.4.2273[10811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.733804][T10797] FAT-fs (loop2): Directory bread(block 72) failed [ 147.753734][T10797] FAT-fs (loop2): Directory bread(block 73) failed [ 147.806201][T10787] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 147.811947][T10787] pim6reg1: linktype set to 825 [ 147.970775][T10826] loop4: detected capacity change from 0 to 1024 [ 148.009326][T10826] EXT4-fs: Ignoring removed nobh option [ 148.014984][T10826] EXT4-fs: Ignoring removed orlov option [ 148.029831][T10820] __nla_validate_parse: 21 callbacks suppressed [ 148.029849][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'. [ 148.055532][T10826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.201612][T10842] netlink: 'syz.0.2281': attribute type 1 has an invalid length. [ 148.271495][T10854] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2283'. [ 148.307756][T10853] syz.6.2284: attempt to access beyond end of device [ 148.307756][T10853] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 148.389219][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 148.474790][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.511087][T10890] netlink: 'syz.6.2292': attribute type 1 has an invalid length. [ 148.634919][T10902] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2296'. [ 148.645790][T10903] loop0: detected capacity change from 0 to 256 [ 148.660093][T10903] FAT-fs (loop0): Directory bread(block 64) failed [ 148.680844][T10903] FAT-fs (loop0): Directory bread(block 65) failed [ 148.709487][T10903] FAT-fs (loop0): Directory bread(block 66) failed [ 148.726038][T10903] FAT-fs (loop0): Directory bread(block 67) failed [ 148.757320][T10903] FAT-fs (loop0): Directory bread(block 68) failed [ 148.776064][T10903] FAT-fs (loop0): Directory bread(block 69) failed [ 148.794933][T10903] FAT-fs (loop0): Directory bread(block 70) failed [ 148.806308][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 148.810726][T10903] FAT-fs (loop0): Directory bread(block 71) failed [ 148.852038][T10903] FAT-fs (loop0): Directory bread(block 72) failed [ 148.868920][T10903] FAT-fs (loop0): Directory bread(block 73) failed [ 148.876131][ T29] kauditd_printk_skb: 5893 callbacks suppressed [ 148.876142][ T29] audit: type=1326 audit(1733000946.049:76277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 148.924329][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2295'. [ 148.934775][T10915] loop3: detected capacity change from 0 to 1024 [ 148.944395][T10915] EXT4-fs: Ignoring removed nobh option [ 148.950054][T10915] EXT4-fs: Ignoring removed orlov option [ 148.973673][ T29] audit: type=1326 audit(1733000946.079:76278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 148.997384][ T29] audit: type=1326 audit(1733000946.079:76279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.021032][ T29] audit: type=1326 audit(1733000946.079:76280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.044644][ T29] audit: type=1326 audit(1733000946.079:76281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.068294][ T29] audit: type=1326 audit(1733000946.079:76282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.091909][ T29] audit: type=1326 audit(1733000946.079:76283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.115563][ T29] audit: type=1326 audit(1733000946.079:76284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.139256][ T29] audit: type=1326 audit(1733000946.079:76285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.162843][ T29] audit: type=1326 audit(1733000946.079:76286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 149.192729][T10893] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 149.201149][T10893] pim6reg1: linktype set to 825 [ 149.211158][T10915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.353802][T10935] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 149.496145][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 149.505262][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2306'. [ 149.520075][T10956] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2308'. [ 149.585034][T10964] xt_hashlimit: max too large, truncated to 1048576 [ 149.666593][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.702704][T10970] loop0: detected capacity change from 0 to 1024 [ 149.723825][T10970] EXT4-fs: Ignoring removed nobh option [ 149.729726][T10970] EXT4-fs: Ignoring removed orlov option [ 149.766296][T10970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.872736][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 150.116450][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.176366][T11024] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 150.290706][T11034] syz.6.2322: attempt to access beyond end of device [ 150.290706][T11034] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 150.312422][T11027] loop0: detected capacity change from 0 to 256 [ 150.330079][T11027] FAT-fs (loop0): Directory bread(block 64) failed [ 150.336882][T11027] FAT-fs (loop0): Directory bread(block 65) failed [ 150.343427][T11027] FAT-fs (loop0): Directory bread(block 66) failed [ 150.349995][T11027] FAT-fs (loop0): Directory bread(block 67) failed [ 150.356658][T11027] FAT-fs (loop0): Directory bread(block 68) failed [ 150.363194][T11027] FAT-fs (loop0): Directory bread(block 69) failed [ 150.369779][T11027] FAT-fs (loop0): Directory bread(block 70) failed [ 150.376444][T11027] FAT-fs (loop0): Directory bread(block 71) failed [ 150.382969][T11027] FAT-fs (loop0): Directory bread(block 72) failed [ 150.389541][T11027] FAT-fs (loop0): Directory bread(block 73) failed [ 150.415968][T11027] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 150.421789][T11027] pim6reg1: linktype set to 825 [ 150.465544][T11041] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 150.485520][T11041] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 150.567724][T11048] loop0: detected capacity change from 0 to 1024 [ 150.574931][T11048] EXT4-fs: Ignoring removed nobh option [ 150.580525][T11048] EXT4-fs: Ignoring removed orlov option [ 150.610274][T11048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.670694][T11057] netlink: 'syz.6.2329': attribute type 1 has an invalid length. [ 151.025339][T11091] bpf_get_probe_write_proto: 14 callbacks suppressed [ 151.025362][T11091] syz.6.2336[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.047313][T11091] syz.6.2336[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.080471][T11091] syz.6.2336[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.155517][T11109] loop3: detected capacity change from 0 to 256 [ 151.196975][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.200157][T11109] FAT-fs (loop3): Directory bread(block 64) failed [ 151.220234][T11109] FAT-fs (loop3): Directory bread(block 65) failed [ 151.229920][T11109] FAT-fs (loop3): Directory bread(block 66) failed [ 151.236705][T11109] FAT-fs (loop3): Directory bread(block 67) failed [ 151.243327][T11109] FAT-fs (loop3): Directory bread(block 68) failed [ 151.250261][T11109] FAT-fs (loop3): Directory bread(block 69) failed [ 151.257005][T11109] FAT-fs (loop3): Directory bread(block 70) failed [ 151.263576][T11109] FAT-fs (loop3): Directory bread(block 71) failed [ 151.270272][T11109] FAT-fs (loop3): Directory bread(block 72) failed [ 151.278684][T11109] FAT-fs (loop3): Directory bread(block 73) failed [ 151.318336][T11122] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 151.340060][T11096] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 151.345944][T11096] pim6reg1: linktype set to 825 [ 151.556103][T11142] loop0: detected capacity change from 0 to 1024 [ 151.572465][T11142] EXT4-fs: Ignoring removed nobh option [ 151.578119][T11142] EXT4-fs: Ignoring removed orlov option [ 151.599268][T11142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.678022][T11153] syz.2.2351[11153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.678093][T11153] syz.2.2351[11153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.695843][T11153] syz.2.2351[11153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.771260][T11163] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 152.106886][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.324826][T11210] syz.2.2364[11210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.324892][T11210] syz.2.2364[11210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.343105][T11206] loop0: detected capacity change from 0 to 256 [ 152.366787][T11210] syz.2.2364[11210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.370191][T11210] 9pnet_fd: Insufficient options for proto=fd [ 152.410575][T11206] FAT-fs (loop0): Directory bread(block 64) failed [ 152.426409][T11206] FAT-fs (loop0): Directory bread(block 65) failed [ 152.439579][T11206] FAT-fs (loop0): Directory bread(block 66) failed [ 152.446168][T11206] FAT-fs (loop0): Directory bread(block 67) failed [ 152.452730][T11206] FAT-fs (loop0): Directory bread(block 68) failed [ 152.459281][T11206] FAT-fs (loop0): Directory bread(block 69) failed [ 152.465928][T11206] FAT-fs (loop0): Directory bread(block 70) failed [ 152.472436][T11206] FAT-fs (loop0): Directory bread(block 71) failed [ 152.479036][T11206] FAT-fs (loop0): Directory bread(block 72) failed [ 152.485629][T11206] FAT-fs (loop0): Directory bread(block 73) failed [ 152.510253][T11206] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 152.516022][T11206] pim6reg1: linktype set to 825 [ 152.520658][T11214] loop2: detected capacity change from 0 to 128 [ 152.588982][T11214] bond0: (slave batadv0): Releasing backup interface [ 152.632909][T11217] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 152.643088][T11214] bridge_slave_0: left allmulticast mode [ 152.648809][T11214] bridge_slave_0: left promiscuous mode [ 152.654545][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.671560][T11214] bridge_slave_1: left allmulticast mode [ 152.677309][T11214] bridge_slave_1: left promiscuous mode [ 152.683014][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.695913][T11214] bond0: (slave bond_slave_0): Releasing backup interface [ 152.707052][T11214] bond0: (slave bond_slave_1): Releasing backup interface [ 152.719932][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.727446][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.737274][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.744743][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.959520][T11235] loop6: detected capacity change from 0 to 1024 [ 152.966668][T11235] EXT4-fs: Ignoring removed nobh option [ 152.972260][T11235] EXT4-fs: Ignoring removed orlov option [ 153.009946][T11235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.028767][T11243] syz.2.2374: attempt to access beyond end of device [ 153.028767][T11243] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.156002][T11256] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 153.198465][T11256] __nla_validate_parse: 22 callbacks suppressed [ 153.198478][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 153.256754][T11267] loop0: detected capacity change from 0 to 256 [ 153.307811][T11271] syz.2.2378[11271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.315369][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'. [ 153.384597][T11267] FAT-fs (loop0): Directory bread(block 64) failed [ 153.391191][T11267] FAT-fs (loop0): Directory bread(block 65) failed [ 153.398004][T11267] FAT-fs (loop0): Directory bread(block 66) failed [ 153.406728][T11267] FAT-fs (loop0): Directory bread(block 67) failed [ 153.413304][T11267] FAT-fs (loop0): Directory bread(block 68) failed [ 153.420001][T11267] FAT-fs (loop0): Directory bread(block 69) failed [ 153.426563][T11267] FAT-fs (loop0): Directory bread(block 70) failed [ 153.433285][T11267] FAT-fs (loop0): Directory bread(block 71) failed [ 153.439873][T11267] FAT-fs (loop0): Directory bread(block 72) failed [ 153.446450][T11267] FAT-fs (loop0): Directory bread(block 73) failed [ 153.464144][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 153.473051][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'. [ 153.523004][T11253] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 153.529213][T11253] pim6reg1: linktype set to 825 [ 153.574619][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.597239][T11294] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2382'. [ 153.751338][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2383'. [ 153.789649][T11311] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 153.810684][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'. [ 153.842804][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 153.891399][T11320] loop0: detected capacity change from 0 to 1024 [ 153.903361][T11320] EXT4-fs: Ignoring removed nobh option [ 153.909033][T11320] EXT4-fs: Ignoring removed orlov option [ 153.922344][T11323] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2393'. [ 153.958215][T11320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.978047][T11327] loop6: detected capacity change from 0 to 2048 [ 154.023692][ T29] kauditd_printk_skb: 9490 callbacks suppressed [ 154.023708][ T29] audit: type=1326 audit(1733000951.189:85777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 154.053718][ T29] audit: type=1326 audit(1733000951.189:85778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 154.077271][ T29] audit: type=1326 audit(1733000951.189:85779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 154.100768][ T29] audit: type=1326 audit(1733000951.189:85780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 154.124355][ T29] audit: type=1326 audit(1733000951.189:85781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd53307c189 code=0x7ffc0000 [ 154.147924][ T29] audit: type=1326 audit(1733000951.189:85782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 154.171496][ T29] audit: type=1326 audit(1733000951.189:85783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 154.195202][ T29] audit: type=1326 audit(1733000951.189:85784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 154.218802][ T29] audit: type=1326 audit(1733000951.189:85785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 154.242395][ T29] audit: type=1326 audit(1733000951.189:85786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5330d77e7 code=0x7ffc0000 [ 154.273027][T11327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.319843][T11327] netlink: 120444 bytes leftover after parsing attributes in process `syz.6.2394'. [ 154.414167][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.415974][T11350] loop2: detected capacity change from 0 to 256 [ 154.488387][T11350] FAT-fs (loop2): Directory bread(block 64) failed [ 154.519372][T11350] FAT-fs (loop2): Directory bread(block 65) failed [ 154.526315][T11350] FAT-fs (loop2): Directory bread(block 66) failed [ 154.532932][T11350] FAT-fs (loop2): Directory bread(block 67) failed [ 154.542637][T11350] FAT-fs (loop2): Directory bread(block 68) failed [ 154.549761][T11350] FAT-fs (loop2): Directory bread(block 69) failed [ 154.557002][T11350] FAT-fs (loop2): Directory bread(block 70) failed [ 154.573291][T11350] FAT-fs (loop2): Directory bread(block 71) failed [ 154.586907][T11350] FAT-fs (loop2): Directory bread(block 72) failed [ 154.594761][T11350] FAT-fs (loop2): Directory bread(block 73) failed [ 154.687371][T11372] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 154.699199][T11372] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 154.721228][T11342] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 154.728768][T11342] pim6reg1: linktype set to 825 [ 154.755837][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.782415][T11380] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 155.092413][T11402] xt_hashlimit: max too large, truncated to 1048576 [ 155.129421][T11404] loop4: detected capacity change from 0 to 1024 [ 155.136215][T11404] EXT4-fs: Ignoring removed nobh option [ 155.141788][T11404] EXT4-fs: Ignoring removed orlov option [ 155.165572][T11404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.228062][T11414] netlink: 'syz.0.2411': attribute type 1 has an invalid length. [ 155.293790][T11427] loop0: detected capacity change from 0 to 128 [ 155.471360][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.537917][T11461] syz.4.2420: attempt to access beyond end of device [ 155.537917][T11461] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 155.567197][T11462] loop0: detected capacity change from 0 to 256 [ 155.587236][T11462] FAT-fs (loop0): Directory bread(block 64) failed [ 155.593884][T11462] FAT-fs (loop0): Directory bread(block 65) failed [ 155.601442][T11462] FAT-fs (loop0): Directory bread(block 66) failed [ 155.608117][T11462] FAT-fs (loop0): Directory bread(block 67) failed [ 155.635246][T11462] FAT-fs (loop0): Directory bread(block 68) failed [ 155.642000][T11462] FAT-fs (loop0): Directory bread(block 69) failed [ 155.648831][T11462] FAT-fs (loop0): Directory bread(block 70) failed [ 155.655597][T11462] FAT-fs (loop0): Directory bread(block 71) failed [ 155.662240][T11462] FAT-fs (loop0): Directory bread(block 72) failed [ 155.669133][T11462] FAT-fs (loop0): Directory bread(block 73) failed [ 155.714612][T11452] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 155.720510][T11452] pim6reg1: linktype set to 825 [ 155.812863][T11469] netlink: 'syz.6.2422': attribute type 1 has an invalid length. [ 156.051705][T11486] loop4: detected capacity change from 0 to 1024 [ 156.058636][T11486] EXT4-fs: Ignoring removed nobh option [ 156.064299][T11486] EXT4-fs: Ignoring removed orlov option [ 156.086050][T11486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.162201][T11494] bpf_get_probe_write_proto: 11 callbacks suppressed [ 156.162218][T11494] syz.2.2428[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.173217][T11494] syz.2.2428[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.194504][T11494] syz.2.2428[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.457998][T11527] syz.3.2432: attempt to access beyond end of device [ 156.457998][T11527] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 156.520274][T11533] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 156.557742][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.654811][T11536] loop3: detected capacity change from 0 to 256 [ 156.671305][T11536] FAT-fs (loop3): Directory bread(block 64) failed [ 156.677931][T11536] FAT-fs (loop3): Directory bread(block 65) failed [ 156.684653][T11536] FAT-fs (loop3): Directory bread(block 66) failed [ 156.691168][T11536] FAT-fs (loop3): Directory bread(block 67) failed [ 156.697951][T11536] FAT-fs (loop3): Directory bread(block 68) failed [ 156.704495][T11536] FAT-fs (loop3): Directory bread(block 69) failed [ 156.711126][T11536] FAT-fs (loop3): Directory bread(block 70) failed [ 156.717680][T11536] FAT-fs (loop3): Directory bread(block 71) failed [ 156.724519][T11536] FAT-fs (loop3): Directory bread(block 72) failed [ 156.731035][T11536] FAT-fs (loop3): Directory bread(block 73) failed [ 156.756100][T11536] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 156.767422][T11536] pim6reg1: linktype set to 825 [ 156.833823][T11552] syz.6.2441[11552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.833919][T11552] syz.6.2441[11552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.845904][T11552] syz.6.2441[11552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.001941][T11566] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 157.040017][T11567] hsr0: entered allmulticast mode [ 157.045129][T11567] hsr_slave_0: entered allmulticast mode [ 157.050807][T11567] hsr_slave_1: entered allmulticast mode [ 157.077328][T11562] hsr_slave_0: left promiscuous mode [ 157.101643][T11562] hsr_slave_1: left promiscuous mode [ 157.131508][T11567] x_tables: duplicate underflow at hook 2 [ 157.144304][T11571] loop2: detected capacity change from 0 to 1024 [ 157.155109][T11562] hsr0 (unregistering): left allmulticast mode [ 157.164544][T11571] EXT4-fs: Ignoring removed nobh option [ 157.170225][T11571] EXT4-fs: Ignoring removed orlov option [ 157.202765][T11571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.292561][T11593] syz.3.2451: attempt to access beyond end of device [ 157.292561][T11593] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.340025][T11600] syz.0.2452[11600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.340082][T11600] syz.0.2452[11600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.360239][T11600] syz.0.2452[11600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.473520][T11607] loop3: detected capacity change from 0 to 256 [ 157.500148][T11615] loop0: detected capacity change from 0 to 512 [ 157.516322][T11615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.527884][T11607] FAT-fs (loop3): Directory bread(block 64) failed [ 157.535670][T11607] FAT-fs (loop3): Directory bread(block 65) failed [ 157.542573][T11607] FAT-fs (loop3): Directory bread(block 66) failed [ 157.544897][T11615] EXT4-fs (loop0): 1 truncate cleaned up [ 157.555243][T11615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.558627][T11607] FAT-fs (loop3): Directory bread(block 67) failed [ 157.582385][T11615] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2456: inode #1073372648: comm syz.0.2456: iget: illegal inode # [ 157.582852][T11607] FAT-fs (loop3): Directory bread(block 68) failed [ 157.603473][T11607] FAT-fs (loop3): Directory bread(block 69) failed [ 157.603931][T11615] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.2456: error while reading EA inode 1073372648 err=-117 [ 157.610154][T11607] FAT-fs (loop3): Directory bread(block 70) failed [ 157.629715][T11607] FAT-fs (loop3): Directory bread(block 71) failed [ 157.636517][T11607] FAT-fs (loop3): Directory bread(block 72) failed [ 157.637553][T11615] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2456: corrupted xattr block 33: invalid header [ 157.643029][T11607] FAT-fs (loop3): Directory bread(block 73) failed [ 157.673294][T11615] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 157.697446][T11602] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 157.703187][T11602] pim6reg1: linktype set to 825 [ 157.793944][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.841360][T11631] loop2: detected capacity change from 0 to 2048 [ 157.859870][T11632] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 157.872565][T11632] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 157.883483][T11631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.900374][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.931874][T11638] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 158.063094][T11654] syz.6.2465: attempt to access beyond end of device [ 158.063094][T11654] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 158.132624][T11656] syz.4.2466[11656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.177440][T11663] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.250561][T11668] loop0: detected capacity change from 0 to 512 [ 158.257476][T11668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.279397][T11668] EXT4-fs (loop0): 1 truncate cleaned up [ 158.285617][T11668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.327193][T11668] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2471: inode #1073372648: comm syz.0.2471: iget: illegal inode # [ 158.341387][T11668] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.2471: error while reading EA inode 1073372648 err=-117 [ 158.356600][T11668] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2471: corrupted xattr block 33: invalid header [ 158.358054][T11666] loop6: detected capacity change from 0 to 256 [ 158.370267][T11668] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 158.393138][T11666] FAT-fs (loop6): Directory bread(block 64) failed [ 158.399810][T11666] FAT-fs (loop6): Directory bread(block 65) failed [ 158.407331][T11666] FAT-fs (loop6): Directory bread(block 66) failed [ 158.413851][T11666] FAT-fs (loop6): Directory bread(block 67) failed [ 158.420395][T11666] FAT-fs (loop6): Directory bread(block 68) failed [ 158.426941][T11666] FAT-fs (loop6): Directory bread(block 69) failed [ 158.434544][T11666] FAT-fs (loop6): Directory bread(block 70) failed [ 158.441092][T11666] FAT-fs (loop6): Directory bread(block 71) failed [ 158.447841][T11666] FAT-fs (loop6): Directory bread(block 72) failed [ 158.456731][T11666] FAT-fs (loop6): Directory bread(block 73) failed [ 158.523286][T11666] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 158.529111][T11666] pim6reg1: linktype set to 825 [ 158.603864][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.677441][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.718020][T11685] __nla_validate_parse: 28 callbacks suppressed [ 158.718037][T11685] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2474'. [ 158.811353][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2479'. [ 158.831188][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'. [ 158.840310][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 158.875181][T11700] syz.6.2482: attempt to access beyond end of device [ 158.875181][T11700] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 158.963015][T11704] loop6: detected capacity change from 0 to 512 [ 158.971687][T11704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.983436][T11704] EXT4-fs (loop6): 1 truncate cleaned up [ 158.989577][T11704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.999527][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 159.030908][T11704] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.2484: inode #1073372648: comm syz.6.2484: iget: illegal inode # [ 159.045775][T11704] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.2484: error while reading EA inode 1073372648 err=-117 [ 159.059659][T11704] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2484: corrupted xattr block 33: invalid header [ 159.090602][T11704] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 159.198543][T11709] loop4: detected capacity change from 0 to 256 [ 159.212404][T11709] FAT-fs (loop4): Directory bread(block 64) failed [ 159.219082][T11709] FAT-fs (loop4): Directory bread(block 65) failed [ 159.225713][T11709] FAT-fs (loop4): Directory bread(block 66) failed [ 159.232399][T11709] FAT-fs (loop4): Directory bread(block 67) failed [ 159.239174][T11709] FAT-fs (loop4): Directory bread(block 68) failed [ 159.259693][T11709] FAT-fs (loop4): Directory bread(block 69) failed [ 159.266298][T11709] FAT-fs (loop4): Directory bread(block 70) failed [ 159.272957][T11709] FAT-fs (loop4): Directory bread(block 71) failed [ 159.279764][T11709] FAT-fs (loop4): Directory bread(block 72) failed [ 159.292513][T11709] FAT-fs (loop4): Directory bread(block 73) failed [ 159.307317][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.325866][ T29] kauditd_printk_skb: 3231 callbacks suppressed [ 159.325882][ T29] audit: type=1326 audit(1733000956.499:89018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.339237][T11720] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2489'. [ 159.357112][ T29] audit: type=1326 audit(1733000956.529:89019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.391419][T11722] netlink: 'syz.6.2490': attribute type 1 has an invalid length. [ 159.393743][ T29] audit: type=1326 audit(1733000956.559:89020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.422835][ T29] audit: type=1326 audit(1733000956.559:89021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.447378][ T29] audit: type=1326 audit(1733000956.569:89022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.450594][T11709] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 159.470970][ T29] audit: type=1326 audit(1733000956.569:89023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.471005][ T29] audit: type=1326 audit(1733000956.569:89024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.471043][ T29] audit: type=1326 audit(1733000956.599:89025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.6.2491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8194c80849 code=0x0 [ 159.471071][ T29] audit: type=1326 audit(1733000956.619:89026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.478839][T11709] pim6reg1: linktype set to 825 [ 159.500289][ T29] audit: type=1326 audit(1733000956.619:89027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11717 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6c330849 code=0x7ffc0000 [ 159.624549][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 159.682059][T11733] syz.0.2494: attempt to access beyond end of device [ 159.682059][T11733] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 159.789620][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'. [ 159.807012][T11741] loop0: detected capacity change from 0 to 4096 [ 159.822945][T11741] EXT4-fs (loop0): unsupported descriptor size 1344 [ 159.844029][T11749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'. [ 159.873099][T11752] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2501'. [ 159.941374][T11758] loop2: detected capacity change from 0 to 2048 [ 159.976738][T11758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.992382][T11758] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.008273][T11758] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 160.020564][T11758] EXT4-fs (loop2): This should not happen!! Data will be lost [ 160.020564][T11758] [ 160.030240][T11758] EXT4-fs (loop2): Total free blocks count 0 [ 160.036402][T11758] EXT4-fs (loop2): Free/Dirty block details [ 160.042386][T11758] EXT4-fs (loop2): free_blocks=2415919104 [ 160.048161][T11758] EXT4-fs (loop2): dirty_blocks=16 [ 160.053293][T11758] EXT4-fs (loop2): Block reservation details [ 160.059387][T11758] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 160.074856][T11758] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 160.215410][T11766] loop2: detected capacity change from 0 to 256 [ 160.228293][T11766] FAT-fs (loop2): Directory bread(block 64) failed [ 160.234939][T11766] FAT-fs (loop2): Directory bread(block 65) failed [ 160.241566][T11766] FAT-fs (loop2): Directory bread(block 66) failed [ 160.248092][T11766] FAT-fs (loop2): Directory bread(block 67) failed [ 160.254874][T11766] FAT-fs (loop2): Directory bread(block 68) failed [ 160.261433][T11766] FAT-fs (loop2): Directory bread(block 69) failed [ 160.268067][T11766] FAT-fs (loop2): Directory bread(block 70) failed [ 160.274774][T11766] FAT-fs (loop2): Directory bread(block 71) failed [ 160.281413][T11766] FAT-fs (loop2): Directory bread(block 72) failed [ 160.289085][T11766] FAT-fs (loop2): Directory bread(block 73) failed [ 160.312558][T11766] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 160.318470][T11766] pim6reg1: linktype set to 825 [ 160.548031][T11780] syz.2.2510: attempt to access beyond end of device [ 160.548031][T11780] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.599754][T11784] loop4: detected capacity change from 0 to 512 [ 160.608644][T11784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.622628][T11784] EXT4-fs (loop4): 1 truncate cleaned up [ 160.630397][T11784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.660842][T11784] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2512: inode #1073372648: comm syz.4.2512: iget: illegal inode # [ 160.675556][T11784] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2512: error while reading EA inode 1073372648 err=-117 [ 160.689496][T11784] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2512: corrupted xattr block 33: invalid header [ 160.703407][T11784] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 160.763108][T11794] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 160.768180][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.929536][T11805] loop2: detected capacity change from 0 to 256 [ 160.974503][T11805] FAT-fs (loop2): Directory bread(block 64) failed [ 161.009263][T11805] FAT-fs (loop2): Directory bread(block 65) failed [ 161.022763][T11805] FAT-fs (loop2): Directory bread(block 66) failed [ 161.030684][T11805] FAT-fs (loop2): Directory bread(block 67) failed [ 161.037361][T11805] FAT-fs (loop2): Directory bread(block 68) failed [ 161.043951][T11805] FAT-fs (loop2): Directory bread(block 69) failed [ 161.051475][T11805] FAT-fs (loop2): Directory bread(block 70) failed [ 161.059297][T11805] FAT-fs (loop2): Directory bread(block 71) failed [ 161.066039][T11805] FAT-fs (loop2): Directory bread(block 72) failed [ 161.072743][T11805] FAT-fs (loop2): Directory bread(block 73) failed [ 161.132957][T11798] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 161.147641][T11798] pim6reg1: linktype set to 825 [ 161.332613][T11817] syz.2.2523: attempt to access beyond end of device [ 161.332613][T11817] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.398486][T11823] loop4: detected capacity change from 0 to 512 [ 161.409139][T11823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.430913][T11823] EXT4-fs (loop4): 1 truncate cleaned up [ 161.437755][T11823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.466210][T11823] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2527: inode #1073372648: comm syz.4.2527: iget: illegal inode # [ 161.481072][T11823] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2527: error while reading EA inode 1073372648 err=-117 [ 161.485225][T11831] bpf_get_probe_write_proto: 17 callbacks suppressed [ 161.485240][T11831] syz.2.2530[11831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.502797][T11823] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2527: corrupted xattr block 33: invalid header [ 161.512759][T11831] syz.2.2530[11831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.516694][T11823] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 161.549128][T11831] syz.2.2530[11831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.586664][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.623721][T11836] netlink: 'syz.4.2532': attribute type 1 has an invalid length. [ 161.784392][T11845] loop4: detected capacity change from 0 to 256 [ 161.820130][T11845] FAT-fs (loop4): Directory bread(block 64) failed [ 161.826838][T11845] FAT-fs (loop4): Directory bread(block 65) failed [ 161.833452][T11845] FAT-fs (loop4): Directory bread(block 66) failed [ 161.863762][T11845] FAT-fs (loop4): Directory bread(block 67) failed [ 161.870442][T11845] FAT-fs (loop4): Directory bread(block 68) failed [ 161.884101][T11845] FAT-fs (loop4): Directory bread(block 69) failed [ 161.894090][T11845] FAT-fs (loop4): Directory bread(block 70) failed [ 161.900664][T11845] FAT-fs (loop4): Directory bread(block 71) failed [ 161.917484][T11845] FAT-fs (loop4): Directory bread(block 72) failed [ 161.927597][T11845] FAT-fs (loop4): Directory bread(block 73) failed [ 161.971043][T11838] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 161.984115][T11838] pim6reg1: linktype set to 825 [ 162.199748][T11850] loop4: detected capacity change from 0 to 512 [ 162.220547][T11850] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.237573][T11850] EXT4-fs (loop4): 1 truncate cleaned up [ 162.248364][T11850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.282927][T11850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2536: inode #1073372648: comm syz.4.2536: iget: illegal inode # [ 162.304103][T11850] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2536: error while reading EA inode 1073372648 err=-117 [ 162.324894][T11850] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2536: corrupted xattr block 33: invalid header [ 162.351558][T11850] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 162.529484][T11864] syz.3.2540: attempt to access beyond end of device [ 162.529484][T11864] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.585209][T11866] syz.2.2541[11866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.585372][T11866] syz.2.2541[11866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.604218][T11866] syz.2.2541[11866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.671446][T11872] loop3: detected capacity change from 0 to 512 [ 162.694639][T11872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.814277][T11872] EXT4-fs (loop3): 1 truncate cleaned up [ 162.820282][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.848032][T11872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.2543: inode #1073372648: comm syz.3.2543: iget: illegal inode # [ 162.889936][T11872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.2543: error while reading EA inode 1073372648 err=-117 [ 162.905178][T11872] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.2543: corrupted xattr block 33: invalid header [ 162.919393][T11872] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 162.949828][T11877] loop0: detected capacity change from 0 to 256 [ 162.965410][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.982022][T11877] FAT-fs (loop0): Directory bread(block 64) failed [ 162.988870][T11877] FAT-fs (loop0): Directory bread(block 65) failed [ 162.997616][T11877] FAT-fs (loop0): Directory bread(block 66) failed [ 163.004627][T11877] FAT-fs (loop0): Directory bread(block 67) failed [ 163.011327][T11877] FAT-fs (loop0): Directory bread(block 68) failed [ 163.018989][T11877] FAT-fs (loop0): Directory bread(block 69) failed [ 163.038954][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.048199][T11877] FAT-fs (loop0): Directory bread(block 70) failed [ 163.055866][T11877] FAT-fs (loop0): Directory bread(block 71) failed [ 163.062624][T11877] FAT-fs (loop0): Directory bread(block 72) failed [ 163.069642][T11877] FAT-fs (loop0): Directory bread(block 73) failed [ 163.097243][T11877] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 163.103043][T11877] pim6reg1: linktype set to 825 [ 163.136558][T11883] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 163.350294][T11900] syz.4.2555: attempt to access beyond end of device [ 163.350294][T11900] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.467589][T11903] syz.4.2556[11903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.467722][T11903] syz.4.2556[11903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.517225][T11903] syz.4.2556[11903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.590782][T11910] loop2: detected capacity change from 0 to 512 [ 163.643587][T11912] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 163.651715][T11910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.685866][T11910] EXT4-fs (loop2): 1 truncate cleaned up [ 163.698376][T11910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.717675][T11915] xt_hashlimit: max too large, truncated to 1048576 [ 163.753768][T11910] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.2558: inode #1073372648: comm syz.2.2558: iget: illegal inode # [ 163.774335][T11915] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.776808][T11910] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.2558: error while reading EA inode 1073372648 err=-117 [ 163.832731][T11910] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.2558: corrupted xattr block 33: invalid header [ 163.856700][T11920] __nla_validate_parse: 20 callbacks suppressed [ 163.856717][T11920] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2563'. [ 163.865158][T11910] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 163.921937][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.009716][T11924] loop0: detected capacity change from 0 to 256 [ 164.065486][T11924] FAT-fs (loop0): Directory bread(block 64) failed [ 164.074390][T11924] FAT-fs (loop0): Directory bread(block 65) failed [ 164.081246][T11924] FAT-fs (loop0): Directory bread(block 66) failed [ 164.087825][T11924] FAT-fs (loop0): Directory bread(block 67) failed [ 164.094786][T11924] FAT-fs (loop0): Directory bread(block 68) failed [ 164.101403][T11924] FAT-fs (loop0): Directory bread(block 69) failed [ 164.108216][T11924] FAT-fs (loop0): Directory bread(block 70) failed [ 164.114897][T11924] FAT-fs (loop0): Directory bread(block 71) failed [ 164.121504][T11924] FAT-fs (loop0): Directory bread(block 72) failed [ 164.128127][T11924] FAT-fs (loop0): Directory bread(block 73) failed [ 164.163964][T11918] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 164.171143][T11918] pim6reg1: linktype set to 825 [ 164.250650][T11940] syz.2.2570[11940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.250838][T11942] netlink: 'syz.6.2571': attribute type 1 has an invalid length. [ 164.270808][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'. [ 164.371828][T11951] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2575'. [ 164.390697][T11949] loop0: detected capacity change from 0 to 512 [ 164.403360][ T29] kauditd_printk_skb: 14675 callbacks suppressed [ 164.403377][ T29] audit: type=1326 audit(1733000961.569:103703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.411152][T11953] xt_hashlimit: max too large, truncated to 1048576 [ 164.435298][T11949] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.452386][T11949] EXT4-fs (loop0): 1 truncate cleaned up [ 164.458611][T11949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.480808][ T29] audit: type=1326 audit(1733000961.579:103704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.504583][ T29] audit: type=1326 audit(1733000961.579:103705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.514089][T11949] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2574: inode #1073372648: comm syz.0.2574: iget: illegal inode # [ 164.528103][ T29] audit: type=1326 audit(1733000961.579:103706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.528134][ T29] audit: type=1326 audit(1733000961.579:103707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.578148][T11949] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.2574: error while reading EA inode 1073372648 err=-117 [ 164.589159][ T29] audit: type=1326 audit(1733000961.579:103708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.625732][ T29] audit: type=1326 audit(1733000961.579:103709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.636742][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'. [ 164.649427][ T29] audit: type=1326 audit(1733000961.579:103710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.668378][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 164.681918][ T29] audit: type=1326 audit(1733000961.579:103711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.681954][ T29] audit: type=1326 audit(1733000961.579:103712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11952 comm="syz.2.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f35a10849 code=0x7ffc0000 [ 164.690790][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 164.695805][T11949] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2574: corrupted xattr block 33: invalid header [ 164.760991][T11949] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 164.785376][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.895577][T11970] syz.3.2581: attempt to access beyond end of device [ 164.895577][T11970] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 164.967681][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 165.019604][T11979] netlink: 'syz.4.2585': attribute type 1 has an invalid length. [ 165.059952][T11983] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2586'. [ 165.091897][T11986] loop4: detected capacity change from 0 to 512 [ 165.103410][T11987] loop0: detected capacity change from 0 to 256 [ 165.110133][T11986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.130045][T11986] EXT4-fs (loop4): 1 truncate cleaned up [ 165.139581][T11986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.166025][T11986] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2588: inode #1073372648: comm syz.4.2588: iget: illegal inode # [ 165.184114][T11986] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2588: error while reading EA inode 1073372648 err=-117 [ 165.205737][T11986] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2588: corrupted xattr block 33: invalid header [ 165.222966][T11986] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 165.232510][T11990] xt_hashlimit: max too large, truncated to 1048576 [ 165.270836][T11987] FAT-fs (loop0): Directory bread(block 64) failed [ 165.274649][T11990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.278059][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.318375][T11993] xt_hashlimit: max too large, truncated to 1048576 [ 165.329064][T11987] FAT-fs (loop0): Directory bread(block 65) failed [ 165.344310][T11987] FAT-fs (loop0): Directory bread(block 66) failed [ 165.360918][T11987] FAT-fs (loop0): Directory bread(block 67) failed [ 165.377559][T11987] FAT-fs (loop0): Directory bread(block 68) failed [ 165.394132][T11987] FAT-fs (loop0): Directory bread(block 69) failed [ 165.403773][T11987] FAT-fs (loop0): Directory bread(block 70) failed [ 165.421516][T11987] FAT-fs (loop0): Directory bread(block 71) failed [ 165.432973][T11987] FAT-fs (loop0): Directory bread(block 72) failed [ 165.451725][T11987] FAT-fs (loop0): Directory bread(block 73) failed [ 165.494935][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 165.536383][T11975] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 165.546598][T11975] pim6reg1: linktype set to 825 [ 165.681172][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2596'. [ 165.709971][T12016] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 165.743521][T12020] loop6: detected capacity change from 0 to 512 [ 165.754934][T12020] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.770688][T12024] xt_hashlimit: max too large, truncated to 1048576 [ 165.780710][T12020] EXT4-fs (loop6): 1 truncate cleaned up [ 165.787054][T12020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.802930][T12024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.815407][T12020] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.2600: inode #1073372648: comm syz.6.2600: iget: illegal inode # [ 165.838317][T12020] EXT4-fs error (device loop6): ext4_xattr_inode_iget:445: comm syz.6.2600: error while reading EA inode 1073372648 err=-117 [ 165.857489][T12020] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2600: corrupted xattr block 33: invalid header [ 165.872834][T12020] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 166.012815][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.163980][T12032] loop6: detected capacity change from 0 to 256 [ 166.186648][T12032] FAT-fs (loop6): Directory bread(block 64) failed [ 166.197705][T12032] FAT-fs (loop6): Directory bread(block 65) failed [ 166.206130][T12032] FAT-fs (loop6): Directory bread(block 66) failed [ 166.212704][T12032] FAT-fs (loop6): Directory bread(block 67) failed [ 166.219367][T12032] FAT-fs (loop6): Directory bread(block 68) failed [ 166.226873][T12032] FAT-fs (loop6): Directory bread(block 69) failed [ 166.233694][T12032] FAT-fs (loop6): Directory bread(block 70) failed [ 166.249527][T12032] FAT-fs (loop6): Directory bread(block 71) failed [ 166.262327][T12032] FAT-fs (loop6): Directory bread(block 72) failed [ 166.269934][T12032] FAT-fs (loop6): Directory bread(block 73) failed [ 166.270565][T12036] xt_hashlimit: max too large, truncated to 1048576 [ 166.300844][T12032] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 166.318504][T12032] pim6reg1: linktype set to 825 [ 166.342134][T12038] syz.2.2607: attempt to access beyond end of device [ 166.342134][T12038] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.527335][T12050] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 166.600079][T12052] netlink: 'syz.6.2613': attribute type 3 has an invalid length. [ 166.661387][T12057] loop3: detected capacity change from 0 to 512 [ 166.687981][T12057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.715170][T12057] EXT4-fs (loop3): 1 truncate cleaned up [ 166.722298][T12057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.954684][T12071] xt_hashlimit: max too large, truncated to 1048576 [ 166.977138][T12071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.992423][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.016839][T12073] syz.3.2620: attempt to access beyond end of device [ 167.016839][T12073] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.132908][T12078] bpf_get_probe_write_proto: 11 callbacks suppressed [ 167.132923][T12078] syz.3.2622[12078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.151401][T12078] syz.3.2622[12078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.164170][T12078] syz.3.2622[12078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.178348][T12075] loop4: detected capacity change from 0 to 256 [ 167.209644][T12075] FAT-fs (loop4): Directory bread(block 64) failed [ 167.216372][T12075] FAT-fs (loop4): Directory bread(block 65) failed [ 167.222969][T12075] FAT-fs (loop4): Directory bread(block 66) failed [ 167.232557][T12075] FAT-fs (loop4): Directory bread(block 67) failed [ 167.243166][T12075] FAT-fs (loop4): Directory bread(block 68) failed [ 167.254102][T12075] FAT-fs (loop4): Directory bread(block 69) failed [ 167.260896][T12075] FAT-fs (loop4): Directory bread(block 70) failed [ 167.267508][T12075] FAT-fs (loop4): Directory bread(block 71) failed [ 167.274169][T12075] FAT-fs (loop4): Directory bread(block 72) failed [ 167.280730][T12075] FAT-fs (loop4): Directory bread(block 73) failed [ 167.310689][T12075] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 167.316673][T12075] pim6reg1: linktype set to 825 [ 167.327708][T12083] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 167.531822][T12104] syz.4.2632: attempt to access beyond end of device [ 167.531822][T12104] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.577001][T12106] syz.0.2633[12106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.577141][T12106] syz.0.2633[12106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.588850][T12106] syz.0.2633[12106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.620488][T12108] syz.4.2634[12108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.653791][T12108] syz.4.2634[12108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.659487][T12112] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 167.675050][T12108] syz.4.2634[12108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.709781][T12114] netlink: 'syz.0.2637': attribute type 3 has an invalid length. [ 167.738110][T12121] SELinux: policydb version 0 does not match my version range 15-33 [ 167.746474][T12121] SELinux: failed to load policy [ 167.841749][T12130] syz.4.2644: attempt to access beyond end of device [ 167.841749][T12130] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.892052][T12134] loop6: detected capacity change from 0 to 256 [ 167.908000][T12134] FAT-fs (loop6): Directory bread(block 64) failed [ 167.914664][T12134] FAT-fs (loop6): Directory bread(block 65) failed [ 167.923118][T12134] FAT-fs (loop6): Directory bread(block 66) failed [ 167.929806][T12134] FAT-fs (loop6): Directory bread(block 67) failed [ 167.936984][T12134] FAT-fs (loop6): Directory bread(block 68) failed [ 167.943753][T12134] FAT-fs (loop6): Directory bread(block 69) failed [ 167.950584][T12134] FAT-fs (loop6): Directory bread(block 70) failed [ 167.957375][T12134] FAT-fs (loop6): Directory bread(block 71) failed [ 167.963904][T12134] FAT-fs (loop6): Directory bread(block 72) failed [ 167.970577][T12134] FAT-fs (loop6): Directory bread(block 73) failed [ 167.999157][T12125] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 168.005209][T12125] pim6reg1: linktype set to 825 [ 168.159008][T12149] syz.6.2651[12149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.219936][T12155] xt_hashlimit: max too large, truncated to 1048576 [ 168.293150][T12162] syz.3.2657: attempt to access beyond end of device [ 168.293150][T12162] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 168.365547][T12173] validate_nla: 1 callbacks suppressed [ 168.365604][T12173] netlink: 'syz.6.2662': attribute type 1 has an invalid length. [ 168.459909][T12183] loop4: detected capacity change from 0 to 512 [ 168.467989][T12183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.469327][T12184] loop3: detected capacity change from 0 to 256 [ 168.516209][T12183] EXT4-fs (loop4): 1 truncate cleaned up [ 168.529419][T12183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.631551][T12184] FAT-fs (loop3): Directory bread(block 64) failed [ 168.638258][T12184] FAT-fs (loop3): Directory bread(block 65) failed [ 168.645934][T12184] FAT-fs (loop3): Directory bread(block 66) failed [ 168.652502][T12184] FAT-fs (loop3): Directory bread(block 67) failed [ 168.660322][T12184] FAT-fs (loop3): Directory bread(block 68) failed [ 168.666942][T12184] FAT-fs (loop3): Directory bread(block 69) failed [ 168.673579][T12184] FAT-fs (loop3): Directory bread(block 70) failed [ 168.680612][T12184] FAT-fs (loop3): Directory bread(block 71) failed [ 168.687610][T12184] FAT-fs (loop3): Directory bread(block 72) failed [ 168.695804][T12184] FAT-fs (loop3): Directory bread(block 73) failed [ 168.740502][T12171] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 168.747027][T12171] pim6reg1: linktype set to 825 [ 168.757247][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.863150][T12203] syz.4.2671: attempt to access beyond end of device [ 168.863150][T12203] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 168.927480][T12214] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 168.966730][T12218] loop4: detected capacity change from 0 to 512 [ 168.974746][T12218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.994157][T12218] EXT4-fs (loop4): 1 truncate cleaned up [ 169.000240][T12218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.165112][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.227326][T12226] __nla_validate_parse: 19 callbacks suppressed [ 169.227340][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2680'. [ 169.295682][T12242] loop2: detected capacity change from 0 to 256 [ 169.327970][T12242] FAT-fs (loop2): Directory bread(block 64) failed [ 169.341581][T12242] FAT-fs (loop2): Directory bread(block 65) failed [ 169.348285][T12242] FAT-fs (loop2): Directory bread(block 66) failed [ 169.356029][T12242] FAT-fs (loop2): Directory bread(block 67) failed [ 169.358260][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'. [ 169.362754][T12242] FAT-fs (loop2): Directory bread(block 68) failed [ 169.379427][T12242] FAT-fs (loop2): Directory bread(block 69) failed [ 169.386124][T12242] FAT-fs (loop2): Directory bread(block 70) failed [ 169.392752][T12242] FAT-fs (loop2): Directory bread(block 71) failed [ 169.400083][T12242] FAT-fs (loop2): Directory bread(block 72) failed [ 169.406655][T12242] FAT-fs (loop2): Directory bread(block 73) failed [ 169.429452][T12248] syz.4.2688: attempt to access beyond end of device [ 169.429452][T12248] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 169.432575][T12250] netlink: 'syz.6.2689': attribute type 1 has an invalid length. [ 169.461342][T12233] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 169.467545][T12233] pim6reg1: linktype set to 825 [ 169.521478][ T29] kauditd_printk_skb: 7394 callbacks suppressed [ 169.521490][ T29] audit: type=1326 audit(1733000966.689:111107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5330e0849 code=0x7ffc0000 [ 169.555558][T12260] loop6: detected capacity change from 0 to 512 [ 169.558021][ T29] audit: type=1326 audit(1733000966.719:111108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.562323][T12260] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 169.585559][ T29] audit: type=1326 audit(1733000966.719:111109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.619052][ T29] audit: type=1326 audit(1733000966.719:111110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.642769][ T29] audit: type=1326 audit(1733000966.719:111111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.666533][ T29] audit: type=1326 audit(1733000966.719:111112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.690199][ T29] audit: type=1326 audit(1733000966.719:111113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.713871][ T29] audit: type=1326 audit(1733000966.719:111114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.737548][ T29] audit: type=1326 audit(1733000966.719:111115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.742266][T12260] EXT4-fs (loop6): 1 truncate cleaned up [ 169.761184][ T29] audit: type=1326 audit(1733000966.719:111116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c06700849 code=0x7ffc0000 [ 169.790970][T12260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.982467][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.005451][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 170.062194][T12287] netlink: 'syz.3.2702': attribute type 1 has an invalid length. [ 170.104787][T12291] syz.6.2703: attempt to access beyond end of device [ 170.104787][T12291] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.127116][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 170.134157][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 170.144884][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 170.210796][T12297] loop3: detected capacity change from 0 to 256 [ 170.228795][T12297] FAT-fs (loop3): Directory bread(block 64) failed [ 170.236644][T12297] FAT-fs (loop3): Directory bread(block 65) failed [ 170.248520][T12297] FAT-fs (loop3): Directory bread(block 66) failed [ 170.255336][T12297] FAT-fs (loop3): Directory bread(block 67) failed [ 170.267173][T12297] FAT-fs (loop3): Directory bread(block 68) failed [ 170.273772][T12297] FAT-fs (loop3): Directory bread(block 69) failed [ 170.285813][T12297] FAT-fs (loop3): Directory bread(block 70) failed [ 170.292398][T12297] FAT-fs (loop3): Directory bread(block 71) failed [ 170.299644][T12297] FAT-fs (loop3): Directory bread(block 72) failed [ 170.306301][T12297] FAT-fs (loop3): Directory bread(block 73) failed [ 170.323103][T12308] loop2: detected capacity change from 0 to 512 [ 170.330044][T12308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.342229][T12308] EXT4-fs (loop2): 1 truncate cleaned up [ 170.348229][T12308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.364626][T12289] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 170.370383][T12289] pim6reg1: linktype set to 825 [ 170.551346][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.562756][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 170.593783][T12321] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 170.627593][T12326] syz.0.2715: attempt to access beyond end of device [ 170.627593][T12326] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.786765][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 170.853957][T12338] loop2: detected capacity change from 0 to 256 [ 170.873102][T12338] FAT-fs (loop2): Directory bread(block 64) failed [ 170.880465][T12338] FAT-fs (loop2): Directory bread(block 65) failed [ 170.887416][T12338] FAT-fs (loop2): Directory bread(block 66) failed [ 170.894033][T12338] FAT-fs (loop2): Directory bread(block 67) failed [ 170.900717][T12338] FAT-fs (loop2): Directory bread(block 68) failed [ 170.907451][T12338] FAT-fs (loop2): Directory bread(block 69) failed [ 170.914024][T12338] FAT-fs (loop2): Directory bread(block 70) failed [ 170.920647][T12338] FAT-fs (loop2): Directory bread(block 71) failed [ 170.929315][T12338] FAT-fs (loop2): Directory bread(block 72) failed [ 170.941969][T12338] FAT-fs (loop2): Directory bread(block 73) failed [ 171.000834][T12338] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 171.007085][T12351] loop3: detected capacity change from 0 to 512 [ 171.013903][T12338] pim6reg1: linktype set to 825 [ 171.019000][T12351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.032943][T12351] EXT4-fs (loop3): 1 truncate cleaned up [ 171.041479][T12351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.061619][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2726'. [ 171.072700][T12351] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 171.073320][T12358] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 171.226894][T12366] syz.2.2729: attempt to access beyond end of device [ 171.226894][T12366] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 171.232666][T12369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12369 comm=syz.6.2730 [ 171.286635][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.359686][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 171.526220][T12392] loop2: detected capacity change from 0 to 256 [ 171.555497][T12392] FAT-fs (loop2): Directory bread(block 64) failed [ 171.562100][T12392] FAT-fs (loop2): Directory bread(block 65) failed [ 171.568916][T12392] FAT-fs (loop2): Directory bread(block 66) failed [ 171.580934][T12392] FAT-fs (loop2): Directory bread(block 67) failed [ 171.589518][T12392] FAT-fs (loop2): Directory bread(block 68) failed [ 171.593234][T12396] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 171.601511][T12392] FAT-fs (loop2): Directory bread(block 69) failed [ 171.612504][T12392] FAT-fs (loop2): Directory bread(block 70) failed [ 171.625154][T12392] FAT-fs (loop2): Directory bread(block 71) failed [ 171.631857][T12392] FAT-fs (loop2): Directory bread(block 72) failed [ 171.640174][T12400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12400 comm=syz.3.2742 [ 171.652658][T12392] FAT-fs (loop2): Directory bread(block 73) failed [ 171.672256][T12392] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 171.678319][T12392] pim6reg1: linktype set to 825 [ 171.703166][T12404] loop3: detected capacity change from 0 to 512 [ 171.710319][T12404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.721436][T12404] EXT4-fs (loop3): 1 truncate cleaned up [ 171.727452][T12404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.742450][T12404] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 171.876414][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.877282][T12411] syz.2.2746: attempt to access beyond end of device [ 171.877282][T12411] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 172.084411][T12427] netlink: 'syz.0.2752': attribute type 1 has an invalid length. [ 172.128027][T12431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12431 comm=syz.0.2753 [ 172.221757][T12435] bpf_get_probe_write_proto: 26 callbacks suppressed [ 172.221775][T12435] syz.6.2755[12435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.240981][T12435] syz.6.2755[12435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.256492][T12439] loop0: detected capacity change from 0 to 512 [ 172.263112][T12435] syz.6.2755[12435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.276063][T12439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.309369][T12439] EXT4-fs (loop0): 1 truncate cleaned up [ 172.316290][T12439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.330394][T12439] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 172.597000][T12459] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 172.609719][T12438] loop3: detected capacity change from 0 to 256 [ 172.624660][T12459] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 172.660423][T12438] FAT-fs (loop3): Directory bread(block 64) failed [ 172.675726][T12438] FAT-fs (loop3): Directory bread(block 65) failed [ 172.691875][T12438] FAT-fs (loop3): Directory bread(block 66) failed [ 172.700676][T12438] FAT-fs (loop3): Directory bread(block 67) failed [ 172.712047][T12438] FAT-fs (loop3): Directory bread(block 68) failed [ 172.729437][T12438] FAT-fs (loop3): Directory bread(block 69) failed [ 172.742075][T12438] FAT-fs (loop3): Directory bread(block 70) failed [ 172.743567][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.748752][T12438] FAT-fs (loop3): Directory bread(block 71) failed [ 172.748781][T12438] FAT-fs (loop3): Directory bread(block 72) failed [ 172.770920][T12438] FAT-fs (loop3): Directory bread(block 73) failed [ 172.832238][T12438] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 172.839138][T12438] pim6reg1: linktype set to 825 [ 172.956655][T12477] syz.6.2769[12477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.956836][T12477] syz.6.2769[12477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.009831][T12477] syz.6.2769[12477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.034673][T12480] syz.3.2770[12480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.071031][T12480] syz.3.2770[12480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.092157][T12480] syz.3.2770[12480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.225121][T12495] netlink: 'syz.4.2774': attribute type 3 has an invalid length. [ 173.415201][T12510] loop3: detected capacity change from 0 to 512 [ 173.455588][T12510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.472149][T12506] loop6: detected capacity change from 0 to 256 [ 173.483187][T12510] EXT4-fs (loop3): 1 truncate cleaned up [ 173.501049][T12506] FAT-fs (loop6): Directory bread(block 64) failed [ 173.508208][T12510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.521959][T12506] FAT-fs (loop6): Directory bread(block 65) failed [ 173.528605][T12506] FAT-fs (loop6): Directory bread(block 66) failed [ 173.535262][T12506] FAT-fs (loop6): Directory bread(block 67) failed [ 173.541868][T12506] FAT-fs (loop6): Directory bread(block 68) failed [ 173.548542][T12506] FAT-fs (loop6): Directory bread(block 69) failed [ 173.555146][T12506] FAT-fs (loop6): Directory bread(block 70) failed [ 173.561680][T12506] FAT-fs (loop6): Directory bread(block 71) failed [ 173.568272][T12506] FAT-fs (loop6): Directory bread(block 72) failed [ 173.574817][T12506] FAT-fs (loop6): Directory bread(block 73) failed [ 173.657600][T12506] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 173.663859][T12506] pim6reg1: linktype set to 825 [ 173.795549][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.923346][T12527] loop6: detected capacity change from 0 to 2048 [ 173.948695][T12527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.059932][T12534] syz.3.2788[12534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.110680][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.234649][T12549] SELinux: policydb version 0 does not match my version range 15-33 [ 174.248584][T12549] SELinux: failed to load policy [ 174.262832][T12552] __nla_validate_parse: 12 callbacks suppressed [ 174.262866][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2795'. [ 174.404985][T12559] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2798'. [ 174.435956][T12563] loop6: detected capacity change from 0 to 256 [ 174.497222][T12563] FAT-fs (loop6): Directory bread(block 64) failed [ 174.524097][ T29] kauditd_printk_skb: 4361 callbacks suppressed [ 174.524112][ T29] audit: type=1326 audit(1733000971.689:115478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 174.531482][T12563] FAT-fs (loop6): Directory bread(block 65) failed [ 174.583366][ T29] audit: type=1326 audit(1733000971.729:115479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 174.603988][T12563] FAT-fs (loop6): Directory bread(block 66) failed [ 174.606999][ T29] audit: type=1326 audit(1733000971.729:115480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 174.637049][ T29] audit: type=1326 audit(1733000971.729:115481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 174.642962][T12563] FAT-fs (loop6): Directory bread(block 67) failed [ 174.660611][ T29] audit: type=1326 audit(1733000971.729:115482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 174.690723][ T29] audit: type=1326 audit(1733000971.729:115483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 174.714320][ T29] audit: type=1326 audit(1733000971.729:115484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 174.718541][T12563] FAT-fs (loop6): Directory bread(block 68) failed [ 174.737921][ T29] audit: type=1326 audit(1733000971.729:115485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 174.768043][ T29] audit: type=1326 audit(1733000971.729:115486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 174.791625][ T29] audit: type=1326 audit(1733000971.729:115487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.2.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 174.799820][T12563] FAT-fs (loop6): Directory bread(block 69) failed [ 174.864289][T12563] FAT-fs (loop6): Directory bread(block 70) failed [ 174.873016][T12563] FAT-fs (loop6): Directory bread(block 71) failed [ 174.909881][T12563] FAT-fs (loop6): Directory bread(block 72) failed [ 174.923838][T12563] FAT-fs (loop6): Directory bread(block 73) failed [ 174.937632][T12571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2801'. [ 174.959939][T12571] netlink: 'syz.4.2801': attribute type 3 has an invalid length. [ 175.012908][T12556] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 175.030215][T12556] pim6reg1: linktype set to 825 [ 175.069896][T12580] loop4: detected capacity change from 0 to 2048 [ 175.106518][T12580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.146092][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.251707][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 175.263250][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 175.289460][T12591] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2809'. [ 175.325306][T12593] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 175.337015][T12593] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 175.363940][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'. [ 175.378291][T12598] xt_hashlimit: max too large, truncated to 1048576 [ 175.395972][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 175.414151][T12603] loop4: detected capacity change from 0 to 512 [ 175.421563][T12603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.432533][T12603] EXT4-fs (loop4): 1 truncate cleaned up [ 175.438499][T12603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.463098][T12603] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2813: inode #1073372648: comm syz.4.2813: iget: illegal inode # [ 175.477365][T12603] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2813: error while reading EA inode 1073372648 err=-117 [ 175.491397][T12603] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.2813: corrupted xattr block 33: invalid header [ 175.532451][T12603] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 175.677601][T12623] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2820'. [ 175.724272][T12626] loop3: detected capacity change from 0 to 256 [ 175.725186][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.771263][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2823'. [ 175.796570][T12626] FAT-fs (loop3): Directory bread(block 64) failed [ 175.828938][T12634] xt_hashlimit: max too large, truncated to 1048576 [ 175.831703][T12626] FAT-fs (loop3): Directory bread(block 65) failed [ 175.855108][T12636] loop4: detected capacity change from 0 to 2048 [ 175.856196][T12626] FAT-fs (loop3): Directory bread(block 66) failed [ 175.876012][T12636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.899027][T12626] FAT-fs (loop3): Directory bread(block 67) failed [ 175.905907][T12626] FAT-fs (loop3): Directory bread(block 68) failed [ 175.912568][T12626] FAT-fs (loop3): Directory bread(block 69) failed [ 175.919141][T12626] FAT-fs (loop3): Directory bread(block 70) failed [ 175.925763][T12626] FAT-fs (loop3): Directory bread(block 71) failed [ 175.932401][T12626] FAT-fs (loop3): Directory bread(block 72) failed [ 175.939209][T12626] FAT-fs (loop3): Directory bread(block 73) failed [ 175.951094][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.012063][T12618] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 176.019982][T12643] syz.4.2828: attempt to access beyond end of device [ 176.019982][T12643] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 176.025358][T12618] pim6reg1: linktype set to 825 [ 176.099881][T12646] syz.4.2829: attempt to access beyond end of device [ 176.099881][T12646] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 176.104886][T12647] hsr0: entered allmulticast mode [ 176.118041][T12647] hsr_slave_0: entered allmulticast mode [ 176.123700][T12647] hsr_slave_1: entered allmulticast mode [ 176.179920][T12644] hsr_slave_0: left promiscuous mode [ 176.186426][T12644] hsr_slave_1: left promiscuous mode [ 176.196119][T12644] hsr0 (unregistering): left allmulticast mode [ 176.233692][T12647] x_tables: duplicate underflow at hook 2 [ 176.361303][T12667] xt_hashlimit: max too large, truncated to 1048576 [ 176.413316][T12673] syz.2.2840: attempt to access beyond end of device [ 176.413316][T12673] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 176.436774][T12672] loop6: detected capacity change from 0 to 2048 [ 176.466367][T12672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.544203][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.605238][T12675] loop4: detected capacity change from 0 to 256 [ 176.643702][T12687] loop3: detected capacity change from 0 to 2048 [ 176.657367][T12675] FAT-fs (loop4): Directory bread(block 64) failed [ 176.665450][T12675] FAT-fs (loop4): Directory bread(block 65) failed [ 176.672031][T12675] FAT-fs (loop4): Directory bread(block 66) failed [ 176.681798][T12690] xt_hashlimit: max too large, truncated to 1048576 [ 176.688497][T12675] FAT-fs (loop4): Directory bread(block 67) failed [ 176.695989][T12687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.700316][T12675] FAT-fs (loop4): Directory bread(block 68) failed [ 176.716767][T12687] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.724382][T12675] FAT-fs (loop4): Directory bread(block 69) failed [ 176.738570][T12675] FAT-fs (loop4): Directory bread(block 70) failed [ 176.739885][T12687] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 176.757322][T12675] FAT-fs (loop4): Directory bread(block 71) failed [ 176.757426][T12675] FAT-fs (loop4): Directory bread(block 72) failed [ 176.763841][T12687] EXT4-fs (loop3): This should not happen!! Data will be lost [ 176.763841][T12687] [ 176.780006][T12675] FAT-fs (loop4): Directory bread(block 73) failed [ 176.786614][T12687] EXT4-fs (loop3): Total free blocks count 0 [ 176.792675][T12687] EXT4-fs (loop3): Free/Dirty block details [ 176.798583][T12687] EXT4-fs (loop3): free_blocks=2415919104 [ 176.804356][T12687] EXT4-fs (loop3): dirty_blocks=16 [ 176.809504][T12687] EXT4-fs (loop3): Block reservation details [ 176.815526][T12687] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 176.840301][T12695] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 176.861095][T12690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 176.870801][T12675] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 176.876648][T12675] pim6reg1: linktype set to 825 [ 177.024539][T12699] 9pnet_fd: Insufficient options for proto=fd [ 177.098492][T12711] xt_hashlimit: max too large, truncated to 1048576 [ 177.157463][T12717] syz.3.2855: attempt to access beyond end of device [ 177.157463][T12717] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 177.325419][T12730] loop0: detected capacity change from 0 to 256 [ 177.358565][T12730] FAT-fs (loop0): Directory bread(block 64) failed [ 177.394062][T12730] FAT-fs (loop0): Directory bread(block 65) failed [ 177.400628][T12730] FAT-fs (loop0): Directory bread(block 66) failed [ 177.446276][T12730] FAT-fs (loop0): Directory bread(block 67) failed [ 177.460817][ T6174] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.474090][T12730] FAT-fs (loop0): Directory bread(block 68) failed [ 177.480654][T12730] FAT-fs (loop0): Directory bread(block 69) failed [ 177.513565][T12726] chnl_net:caif_netlink_parms(): no params data found [ 177.521917][T12730] FAT-fs (loop0): Directory bread(block 70) failed [ 177.531618][ T6174] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.544015][T12730] FAT-fs (loop0): Directory bread(block 71) failed [ 177.561723][T12730] FAT-fs (loop0): Directory bread(block 72) failed [ 177.578640][T12730] FAT-fs (loop0): Directory bread(block 73) failed [ 177.589020][ T6174] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.618406][T12742] loop6: detected capacity change from 0 to 256 [ 177.629722][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.636900][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.645351][T12726] bridge_slave_0: entered allmulticast mode [ 177.656884][T12742] FAT-fs (loop6): Directory bread(block 64) failed [ 177.663489][T12742] FAT-fs (loop6): Directory bread(block 65) failed [ 177.674593][T12726] bridge_slave_0: entered promiscuous mode [ 177.693506][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.700686][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.705781][T12742] FAT-fs (loop6): Directory bread(block 66) failed [ 177.718581][T12742] FAT-fs (loop6): Directory bread(block 67) failed [ 177.727416][T12742] FAT-fs (loop6): Directory bread(block 68) failed [ 177.735730][T12726] bridge_slave_1: entered allmulticast mode [ 177.740613][T12742] FAT-fs (loop6): Directory bread(block 69) failed [ 177.742517][T12726] bridge_slave_1: entered promiscuous mode [ 177.752820][T12742] FAT-fs (loop6): Directory bread(block 70) failed [ 177.769692][T12742] FAT-fs (loop6): Directory bread(block 71) failed [ 177.777332][ T6174] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.799102][T12742] FAT-fs (loop6): Directory bread(block 72) failed [ 177.807962][T12721] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 177.812646][T12742] FAT-fs (loop6): Directory bread(block 73) failed [ 177.825526][T12721] pim6reg1: linktype set to 825 [ 177.862202][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.874365][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.910848][T12726] team0: Port device team_slave_0 added [ 177.919175][T12726] team0: Port device team_slave_1 added [ 177.936481][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.943443][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.969477][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.037200][T12740] pim6reg1: tun_chr_ioctl cmd 2147767511 [ 178.049872][T12738] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 178.056839][T12738] pim6reg1: linktype set to 825 [ 178.067180][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.074175][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.100192][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.132332][ T6174] bridge_slave_1: left allmulticast mode [ 178.138159][ T6174] bridge_slave_1: left promiscuous mode [ 178.143929][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.153086][ T6174] bridge_slave_0: left allmulticast mode [ 178.158896][ T6174] bridge_slave_0: left promiscuous mode [ 178.164651][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.356570][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.370857][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.390930][ T6174] bond0 (unregistering): Released all slaves [ 178.409526][ T6174] bond1 (unregistering): Released all slaves [ 178.423715][ T6174] bond2 (unregistering): Released all slaves [ 178.437208][ T6174] bond3 (unregistering): Released all slaves [ 178.451485][ T6174] bond4 (unregistering): Released all slaves [ 178.462773][ T6174] bond5 (unregistering): Released all slaves [ 178.477780][ T6174] bond6 (unregistering): Released all slaves [ 178.491822][ T6174] bond7 (unregistering): Released all slaves [ 178.505091][ T6174] bond8 (unregistering): Released all slaves [ 178.514698][T12757] bpf_get_probe_write_proto: 14 callbacks suppressed [ 178.514715][T12757] syz.4.2863[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.520218][ T6174] bond9 (unregistering): Released all slaves [ 178.521613][T12757] syz.4.2863[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.543714][ T6174] bond10 (unregistering): Released all slaves [ 178.549060][T12757] syz.4.2863[12757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.568288][ T6174] bond11 (unregistering): Released all slaves [ 178.597804][ T6174] bond12 (unregistering): Released all slaves [ 178.638342][T12726] hsr_slave_0: entered promiscuous mode [ 178.649225][T12726] hsr_slave_1: entered promiscuous mode [ 178.660223][T12726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.667881][T12726] Cannot create hsr debugfs directory [ 178.803881][ T6174] tipc: Left network mode [ 178.826107][T12765] syz.4.2865[12765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.826230][T12765] syz.4.2865[12765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.840063][T12765] syz.4.2865[12765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.854864][ T6174] veth1_macvtap: left promiscuous mode [ 178.871837][ T6174] veth0_macvtap: left promiscuous mode [ 178.877377][ T6174] veth1_vlan: left promiscuous mode [ 178.882793][ T6174] veth0_vlan: left promiscuous mode [ 178.904735][T12767] syz.6.2868: attempt to access beyond end of device [ 178.904735][T12767] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.014631][T12772] xt_hashlimit: max too large, truncated to 1048576 [ 179.040153][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 179.053588][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 179.342596][T12787] loop6: detected capacity change from 0 to 256 [ 179.399464][T12787] FAT-fs (loop6): Directory bread(block 64) failed [ 179.411891][T12787] FAT-fs (loop6): Directory bread(block 65) failed [ 179.418873][T12787] FAT-fs (loop6): Directory bread(block 66) failed [ 179.428724][T12726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.432394][T12787] FAT-fs (loop6): Directory bread(block 67) failed [ 179.443449][T12787] FAT-fs (loop6): Directory bread(block 68) failed [ 179.444348][T12726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.461985][T12726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.464785][T12787] FAT-fs (loop6): Directory bread(block 69) failed [ 179.477124][T12726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.485638][T12787] FAT-fs (loop6): Directory bread(block 70) failed [ 179.492461][T12787] FAT-fs (loop6): Directory bread(block 71) failed [ 179.505260][T12787] FAT-fs (loop6): Directory bread(block 72) failed [ 179.516281][T12787] FAT-fs (loop6): Directory bread(block 73) failed [ 179.523136][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.535563][ T29] kauditd_printk_skb: 11862 callbacks suppressed [ 179.535574][ T29] audit: type=1326 audit(1733000976.709:127350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 179.565557][ T29] audit: type=1326 audit(1733000976.709:127351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 179.589218][ T29] audit: type=1326 audit(1733000976.709:127352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 179.612780][ T29] audit: type=1326 audit(1733000976.709:127353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 179.636349][ T29] audit: type=1326 audit(1733000976.709:127354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 179.659921][ T29] audit: type=1326 audit(1733000976.709:127355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 179.683573][ T29] audit: type=1326 audit(1733000976.709:127356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 179.707252][ T29] audit: type=1326 audit(1733000976.709:127357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 179.730868][ T29] audit: type=1326 audit(1733000976.709:127358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f35a077e7 code=0x7ffc0000 [ 179.754485][ T29] audit: type=1326 audit(1733000976.709:127359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12723 comm="syz.2.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f359ac189 code=0x7ffc0000 [ 179.780832][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.788200][T12786] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 179.793924][T12786] pim6reg1: linktype set to 825 [ 179.809663][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.816743][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.841802][T12789] syz.0.2875[12789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.841905][T12789] syz.0.2875[12789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.850599][T12726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.874122][T12789] syz.0.2875[12789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.875249][T12726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.908199][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.915282][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.985348][T12789] __nla_validate_parse: 6 callbacks suppressed [ 179.985376][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 180.032243][T12799] syz.6.2879: attempt to access beyond end of device [ 180.032243][T12799] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 180.051258][T12797] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2878'. [ 180.082293][T12797] netlink: 'syz.4.2878': attribute type 3 has an invalid length. [ 180.097088][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.152018][T12807] loop0: detected capacity change from 0 to 2048 [ 180.164858][T12808] xt_hashlimit: max too large, truncated to 1048576 [ 180.202140][T12726] veth0_vlan: entered promiscuous mode [ 180.212602][T12726] veth1_vlan: entered promiscuous mode [ 180.224911][T12726] veth0_macvtap: entered promiscuous mode [ 180.232180][T12726] veth1_macvtap: entered promiscuous mode [ 180.241795][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.252243][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.262161][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.272612][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.283569][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.298581][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.304776][T12807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.309133][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.331039][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.341620][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.352631][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.361045][T12726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.369807][T12726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.378539][T12726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.387330][T12726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.412316][T12827] loop2: detected capacity change from 0 to 512 [ 180.434455][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.436370][T12827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.491591][T12827] EXT4-fs (loop2): 1 truncate cleaned up [ 180.498724][T12827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.523734][T12837] loop0: detected capacity change from 0 to 512 [ 180.529469][T12835] xt_hashlimit: max too large, truncated to 1048576 [ 180.541275][T12837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.551858][T12827] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.2885: inode #1073372648: comm syz.2.2885: iget: illegal inode # [ 180.571005][T12827] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.2885: error while reading EA inode 1073372648 err=-117 [ 180.585271][T12837] EXT4-fs (loop0): 1 truncate cleaned up [ 180.588177][T12835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.591341][T12837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.615211][T12827] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.2885: corrupted xattr block 33: invalid header [ 180.630492][T12827] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 180.677499][T12837] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.2886: inode #1073372648: comm syz.0.2886: iget: illegal inode # [ 180.692489][T12837] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.2886: error while reading EA inode 1073372648 err=-117 [ 180.733323][T12845] ================================================================== [ 180.741420][T12845] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 180.749152][T12845] [ 180.751478][T12845] read-write to 0xffff888100047280 of 4 bytes by task 12841 on cpu 0: [ 180.759616][T12845] vmalloc_info_show+0x470/0x770 [ 180.764556][T12845] seq_read_iter+0x2d1/0x930 [ 180.769155][T12845] proc_reg_read_iter+0x118/0x190 [ 180.774179][T12845] vfs_read+0x5dc/0x700 [ 180.778364][T12845] __x64_sys_pread64+0xf6/0x150 [ 180.783214][T12845] x64_sys_call+0x26ee/0x2dc0 [ 180.787890][T12845] do_syscall_64+0xc9/0x1c0 [ 180.792395][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.798279][T12845] [ 180.800588][T12845] read-write to 0xffff888100047280 of 4 bytes by task 12845 on cpu 1: [ 180.808746][T12845] vmalloc_info_show+0x470/0x770 [ 180.813682][T12845] seq_read_iter+0x2d1/0x930 [ 180.818275][T12845] proc_reg_read_iter+0x118/0x190 [ 180.823289][T12845] vfs_read+0x5dc/0x700 [ 180.827460][T12845] __x64_sys_pread64+0xf6/0x150 [ 180.832309][T12845] x64_sys_call+0x26ee/0x2dc0 [ 180.836976][T12845] do_syscall_64+0xc9/0x1c0 [ 180.841471][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.847401][T12845] [ 180.849709][T12845] value changed: 0x000001fd -> 0x00000004 [ 180.855419][T12845] [ 180.857731][T12845] Reported by Kernel Concurrency Sanitizer on: [ 180.863876][T12845] CPU: 1 UID: 0 PID: 12845 Comm: syz.0.2886 Tainted: G W 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 180.875768][T12845] Tainted: [W]=WARN [ 180.879559][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.889608][T12845] ================================================================== [ 180.920059][T12837] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2886: corrupted xattr block 33: invalid header SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 180.936566][T12837] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 180.951088][T12847] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 181.280278][T12849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.283193][T12845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.302260][ T3402] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.356981][ T3402] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.406475][ T3402] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.457440][ T3402] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.518629][ T3402] bridge_slave_1: left allmulticast mode [ 181.524333][ T3402] bridge_slave_1: left promiscuous mode [ 181.529954][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.537713][ T3402] bridge_slave_0: left allmulticast mode [ 181.543360][ T3402] bridge_slave_0: left promiscuous mode [ 181.549096][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.636196][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.646045][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.655456][ T3402] bond0 (unregistering): Released all slaves [ 181.663333][ T3402] bond1 (unregistering): Released all slaves [ 181.671260][ T3402] bond2 (unregistering): Released all slaves [ 181.679576][ T3402] bond3 (unregistering): Released all slaves [ 181.687754][ T3402] bond4 (unregistering): Released all slaves [ 181.696394][ T3402] bond5 (unregistering): Released all slaves [ 181.705051][ T3402] bond6 (unregistering): Released all slaves [ 181.712943][ T3402] bond7 (unregistering): Released all slaves [ 181.720937][ T3402] bond8 (unregistering): Released all slaves [ 181.770488][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.777968][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.785690][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.793064][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.802086][ T3402] veth1_macvtap: left promiscuous mode [ 181.807736][ T3402] veth0_macvtap: left promiscuous mode [ 181.813268][ T3402] veth1_vlan: left promiscuous mode [ 181.818533][ T3402] veth0_vlan: left promiscuous mode [ 181.873879][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 181.883241][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 182.608082][ T3402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.376436][ T3402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.426689][ T3402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.496867][ T3402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.558927][ T3402] bridge_slave_1: left allmulticast mode [ 184.564732][ T3402] bridge_slave_1: left promiscuous mode [ 184.570407][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.578476][ T3402] bridge_slave_0: left allmulticast mode [ 184.584210][ T3402] bridge_slave_0: left promiscuous mode [ 184.589969][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.667614][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.677471][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.687049][ T3402] bond0 (unregistering): Released all slaves [ 184.727395][ T3402] hsr_slave_0: left promiscuous mode [ 184.733046][ T3402] hsr_slave_1: left promiscuous mode [ 184.738703][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.746177][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.753596][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.761003][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.770307][ T3402] veth1_macvtap: left promiscuous mode [ 184.775905][ T3402] veth0_macvtap: left promiscuous mode [ 184.781451][ T3402] veth1_vlan: left promiscuous mode [ 184.786734][ T3402] veth0_vlan: left promiscuous mode [ 184.842192][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 184.852002][ T3402] team0 (unregistering): Port device team_slave_0 removed