last executing test programs: 5.432779952s ago: executing program 2 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180900000023008100000000000000008500"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup.net/devices.allow\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 3.578010456s ago: executing program 2 (id=136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x7, 0x7, 0x100, {{0x1a, 0x4, 0x1, 0x6, 0x68, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1f, 0x49, [@remote, @broadcast, @broadcast, @multicast1, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x2, [{@remote, 0x400}, {@loopback, 0x2}, {@empty, 0x7}]}, @lsrr={0x83, 0x17, 0x12, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000012020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x909}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x17e) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 3.53821349s ago: executing program 2 (id=137): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0000009a04"], 0x50) 3.43904103s ago: executing program 2 (id=139): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='netfs_failure\x00', r9, 0x0, 0x10}, 0x18) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r11, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r12, 0x0}]) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xffffffffffffff0a}}, 0x0) 3.024880451s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) 2.882935235s ago: executing program 1 (id=148): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0xffffffffffffffff, &(0x7f0000000340)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlockall(0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r6, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001800000000000000008000"/28], 0x48) 2.289872354s ago: executing program 4 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x22052, r1, 0x0) 2.251855817s ago: executing program 4 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) rt_sigaction(0x22, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = eventfd2(0x180, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r7 = dup(r6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18802, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r10, 0x8008551c, &(0x7f0000000880)=ANY=[]) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r11, &(0x7f0000000400)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000380)={0x6003, 0x106, 0x9, 0x0, 0x4, 0x0, 0x40}, 0xc) socket$kcm(0x10, 0x2, 0x0) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) write(r12, &(0x7f0000000240)="94", 0x1) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.051413607s ago: executing program 1 (id=159): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet(0xa, 0x801, 0x84) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000600)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 1.82407084s ago: executing program 1 (id=162): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet(0xa, 0x801, 0x84) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000600)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 1.737795998s ago: executing program 3 (id=165): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x8, 0x4) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xfe299e1951b87db8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) tkill(0x0, 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1.489340893s ago: executing program 0 (id=168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x169042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) 1.405586541s ago: executing program 1 (id=169): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0xffffffffffffffff, &(0x7f0000000340)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlockall(0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pread64(r6, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001800000000000000008000"/28], 0x48) 1.349287037s ago: executing program 4 (id=170): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='netfs_failure\x00', r9, 0x0, 0x10}, 0x18) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r11, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r12, 0x0}]) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xffffffffffffff0a}}, 0x0) 1.348344947s ago: executing program 3 (id=171): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='netfs_failure\x00', r9, 0x0, 0x10}, 0x18) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r11, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r12, 0x0}]) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xffffffffffffff0a}}, 0x0) 1.204103961s ago: executing program 0 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb87}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x2a) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000005000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 1.149953836s ago: executing program 4 (id=173): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet(0xa, 0x801, 0x84) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000600)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 1.007711891s ago: executing program 0 (id=174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r1, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=r3], 0x24}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 653.160846ms ago: executing program 4 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x61) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000340001002bbd7004fedbdb25"], 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x40880) 637.890088ms ago: executing program 3 (id=176): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000044c0)=0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r7 = getgid() lchown(0x0, 0x0, r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r10 = socket$caif_stream(0x25, 0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f", 0xb0}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)="ae528d0c38de4bfae46c16c1be56dbfc2905a0879fe655b8accc30c56a21432cad6f0ba64996d025dc00ce264cb2d630393b95d43ac7c6747d89d45506795ff19b055e5c585964ca2e5c9eca44bf362065830afe3634218baa45eb06ab13f0b94bedabeebf9e000457f1507af74f0070fb5cfeac92833079460fbef76a1d7788fc8233107a680dc8c757dc4c36a17bf2", 0x90}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES64=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r8, @ANYRES8=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r6, 0x0) 575.075903ms ago: executing program 3 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="bf48aabf05a6e4eac89ab8c355871dcfaa346b7344ee8845e3c607e82f8d282d9683a5e4bbd897c2a11d4efc2b9aa5efddd6e9caff4c423a7c1e0f58a30401510631226d19c43098b4a563ee49742c059441fc06ec98ece2215bcbb760242280899c05f80ce3291c289c6029f61ab3b5d9af949d299486b5d5ee9847360d58"], 0x9b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x22052, 0xffffffffffffffff, 0x0) 507.28086ms ago: executing program 3 (id=178): r0 = eventfd(0xd2d0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f00000000c0)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000100)=""/211) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000200)=0x4, 0x4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='selinux_audited\x00', r4, 0x0, 0xf755}, 0x18) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000002c0)) r6 = accept$nfc_llcp(r4, &(0x7f0000000300), &(0x7f0000000380)=0x60) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, r6, 0x73592000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000480)={'nat\x00', 0x0, 0x3, 0x3, [0x71d, 0xffffffff, 0x45b6, 0x7fff, 0x1ff, 0xc], 0x7, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/3}, &(0x7f0000000500)=0x78) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000540)={0x20002000}) sendmsg$tipc(r4, &(0x7f0000002780)={&(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0x1}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000005c0)="51c5cee628a0ffe9c2d37188f18201a90bed8245876240a8197f5cde7df522e157fe7efe947704ed352d0b056f39a383586c175006824af31e42c9e685769d6d77f0f7f874594672b9577126a6dead9026d5bd27b136ee0573809581b35ef23e04abd18d9a1acacd1a86719e94497a90b4f6e39d54cea517f47835c7475e2d9bd5a02d86cd842a2915ee186048c2c214edebc6b7bb290b8c37b7bbde3f6215c30b3e64f18fc85b318f75b529c5d41465b385", 0xb2}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="572bb968a2b65ee8e68ef8d41fbd0079a8911462453537f851bce553bc5c9a2aa76204d546d700727092334f87e3fedbc218d6d1cba664ce0737dce3cd9eb7074c8719fdd0682690e8d2c507b512b8647650c8a3d135c21f98cc98cad214315864af9c7d1f259fc97f2bbcbfe0311a51c61479ed6ada435f5704f06979a1ac99222276dabeda50ec7e20a7", 0x8b}], 0x3, &(0x7f0000001780)="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", 0x1000, 0x841}, 0x0) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000027c0)) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000002800)={'veth0_to_team\x00', {0x2, 0x0, @local}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000002840), &(0x7f0000002880)=0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000028c0)={'filter\x00', 0x4}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @struct={0x4, 0x2, 0x0, 0x4, 0x1, 0x200, [{0x6, 0x3, 0x4}, {0x7, 0x0, 0x5}]}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x5}, @func={0x0, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000002a00)=""/248, 0x8b, 0xf8}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002b40)={r2}) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000002b80)={0x1}, 0x4) fstat(r0, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002cc0), &(0x7f0000002d00)=0x0, &(0x7f0000002d40)) newfstatat(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r9, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00), 0x1001004, &(0x7f0000002ec0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@noxattr}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@cache_loose}, {@version_9p2000}], [{@appraise}, {@uid_eq={'uid', 0x3d, r11}}, {@uid_eq={'uid', 0x3d, r12}}, {@uid_eq={'uid', 0x3d, r13}}]}}) 506.64525ms ago: executing program 4 (id=179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180900000023008100000000000000008500"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup.net/devices.allow\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 459.037385ms ago: executing program 0 (id=180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b70700000000000063aa5f000000000007000000000000009500000000000000b33239ba1bd44f3324d85256c95620fd53b93764ce054050542dfc17714fe01bc7"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) openat$vcsu(0xffffffffffffff9c, 0x0, 0x10002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 437.661587ms ago: executing program 3 (id=181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r5, 0x0, 0xeffd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) fallocate(0xffffffffffffffff, 0x0, 0xeffb, 0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x80c6, 0x2, @remote, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffe}}], 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000300)={0xd, {{0x2, 0x4e21, @empty}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 388.348572ms ago: executing program 1 (id=182): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 347.799366ms ago: executing program 0 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x169042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) 255.789025ms ago: executing program 1 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x183000, 0x100) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) 201.315551ms ago: executing program 0 (id=185): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet(0xa, 0x801, 0x84) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000600)) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 0s ago: executing program 2 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000100)=ANY=[], &(0x7f0000001400)=""/171, 0x4e, 0xab, 0x1}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x2, 0x10000b35) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf2500000000000000000000ffff64010100fc0100000000000000000000000000014e2300004e240000020080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x4000cc5) r7 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x1}}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="685d14d7c8bbc2d8806850d2d3ff57e8fa", @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf25090000000800090005ac0f0004000b00080037000200000005000800040000000400280004002800"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 20.941737][ T29] audit: type=1400 audit(1761243555.563:61): avc: denied { siginh } for pid=3189 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 28.933932][ T29] audit: type=1400 audit(1761243563.563:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.956950][ T29] audit: type=1400 audit(1761243563.593:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.957933][ T3300] cgroup: Unknown subsys name 'net' [ 28.984722][ T29] audit: type=1400 audit(1761243563.623:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.105744][ T3300] cgroup: Unknown subsys name 'cpuset' [ 29.112105][ T3300] cgroup: Unknown subsys name 'rlimit' [ 29.223908][ T29] audit: type=1400 audit(1761243563.853:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.247227][ T29] audit: type=1400 audit(1761243563.863:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.268131][ T29] audit: type=1400 audit(1761243563.863:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.288504][ T29] audit: type=1400 audit(1761243563.863:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.308877][ T29] audit: type=1400 audit(1761243563.873:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.318324][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.333697][ T29] audit: type=1400 audit(1761243563.873:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.365562][ T29] audit: type=1400 audit(1761243563.983:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.434750][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.627864][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.714758][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.770243][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.777465][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.784689][ T3311] bridge_slave_0: entered allmulticast mode [ 30.791238][ T3311] bridge_slave_0: entered promiscuous mode [ 30.799774][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.807004][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.814227][ T3311] bridge_slave_1: entered allmulticast mode [ 30.820681][ T3311] bridge_slave_1: entered promiscuous mode [ 30.870966][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 30.881032][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.890298][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.899273][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.916416][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.950084][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.957209][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.964333][ T3313] bridge_slave_0: entered allmulticast mode [ 30.970815][ T3313] bridge_slave_0: entered promiscuous mode [ 30.993158][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.000301][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.007647][ T3313] bridge_slave_1: entered allmulticast mode [ 31.014029][ T3313] bridge_slave_1: entered promiscuous mode [ 31.028899][ T3311] team0: Port device team_slave_0 added [ 31.046480][ T3311] team0: Port device team_slave_1 added [ 31.081980][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.100927][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.107935][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.133879][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.150136][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.164438][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.171616][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.178761][ T3312] bridge_slave_0: entered allmulticast mode [ 31.185230][ T3312] bridge_slave_0: entered promiscuous mode [ 31.197234][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.204385][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.230396][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.246415][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.253495][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.260717][ T3317] bridge_slave_0: entered allmulticast mode [ 31.267180][ T3317] bridge_slave_0: entered promiscuous mode [ 31.273665][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.280768][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.287982][ T3312] bridge_slave_1: entered allmulticast mode [ 31.294438][ T3312] bridge_slave_1: entered promiscuous mode [ 31.300942][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.308110][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.315307][ T3323] bridge_slave_0: entered allmulticast mode [ 31.321682][ T3323] bridge_slave_0: entered promiscuous mode [ 31.330780][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337926][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.345236][ T3323] bridge_slave_1: entered allmulticast mode [ 31.351630][ T3323] bridge_slave_1: entered promiscuous mode [ 31.362890][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.370085][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.377261][ T3317] bridge_slave_1: entered allmulticast mode [ 31.383639][ T3317] bridge_slave_1: entered promiscuous mode [ 31.402575][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.417749][ T3313] team0: Port device team_slave_0 added [ 31.434500][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.444279][ T3313] team0: Port device team_slave_1 added [ 31.451671][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.482525][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.492933][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.523795][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.540433][ T3311] hsr_slave_0: entered promiscuous mode [ 31.546702][ T3311] hsr_slave_1: entered promiscuous mode [ 31.553283][ T3312] team0: Port device team_slave_0 added [ 31.559345][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.566321][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.592292][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.608699][ T3323] team0: Port device team_slave_0 added [ 31.620523][ T3312] team0: Port device team_slave_1 added [ 31.626451][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.633412][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.659535][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.671140][ T3323] team0: Port device team_slave_1 added [ 31.677676][ T3317] team0: Port device team_slave_0 added [ 31.684389][ T3317] team0: Port device team_slave_1 added [ 31.731839][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.738864][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.764831][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.782451][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.789576][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.815588][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.831408][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.838501][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.864488][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.875515][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.882460][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.908387][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.919485][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.926475][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.952409][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.976459][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.983621][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.009574][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.029210][ T3313] hsr_slave_0: entered promiscuous mode [ 32.035328][ T3313] hsr_slave_1: entered promiscuous mode [ 32.041370][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.047140][ T3313] Cannot create hsr debugfs directory [ 32.067161][ T3312] hsr_slave_0: entered promiscuous mode [ 32.073247][ T3312] hsr_slave_1: entered promiscuous mode [ 32.079123][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 32.084909][ T3312] Cannot create hsr debugfs directory [ 32.145517][ T3317] hsr_slave_0: entered promiscuous mode [ 32.151492][ T3317] hsr_slave_1: entered promiscuous mode [ 32.157596][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 32.163324][ T3317] Cannot create hsr debugfs directory [ 32.171118][ T3323] hsr_slave_0: entered promiscuous mode [ 32.177187][ T3323] hsr_slave_1: entered promiscuous mode [ 32.183051][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.189016][ T3323] Cannot create hsr debugfs directory [ 32.352842][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.376455][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.387075][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.398104][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.418257][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.432131][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.446535][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.462482][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.481152][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.490413][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.499538][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.516657][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.545577][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.561994][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.573044][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.585892][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.600801][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.620609][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.649146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.656257][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.676619][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.689256][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.699775][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.706896][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.719833][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.730208][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.739964][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.754045][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.763954][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.773435][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.780530][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.802347][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.812871][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.831714][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.838913][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.868847][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.885255][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.898154][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.905261][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.930188][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.937332][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.966781][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.992264][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.011465][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.021876][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.042424][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.062671][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.086552][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.104129][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.111234][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.128341][ T3311] veth0_vlan: entered promiscuous mode [ 33.143551][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.154104][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.169950][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.177072][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.185912][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.193071][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.201954][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.209099][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.237499][ T3311] veth1_vlan: entered promiscuous mode [ 33.249272][ T3313] veth0_vlan: entered promiscuous mode [ 33.264085][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.274604][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.291153][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.314342][ T3313] veth1_vlan: entered promiscuous mode [ 33.361542][ T3311] veth0_macvtap: entered promiscuous mode [ 33.372379][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.382310][ T3313] veth0_macvtap: entered promiscuous mode [ 33.391167][ T3313] veth1_macvtap: entered promiscuous mode [ 33.399072][ T3311] veth1_macvtap: entered promiscuous mode [ 33.417525][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.432490][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.444080][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.456191][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.475242][ T1910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.493419][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.503810][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.528548][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545774][ T1910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.554729][ T1910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.576513][ T3312] veth0_vlan: entered promiscuous mode [ 33.583338][ T1910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.595025][ T1910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.620090][ T1910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.636966][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.656831][ T3312] veth1_vlan: entered promiscuous mode [ 33.670652][ T3323] veth0_vlan: entered promiscuous mode [ 33.684376][ T3312] veth0_macvtap: entered promiscuous mode [ 33.697182][ T3323] veth1_vlan: entered promiscuous mode [ 33.708373][ T3312] veth1_macvtap: entered promiscuous mode [ 33.727522][ T3323] veth0_macvtap: entered promiscuous mode [ 33.740869][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.752965][ T3323] veth1_macvtap: entered promiscuous mode [ 33.763383][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.779066][ C0] hrtimer: interrupt took 35313 ns [ 33.786259][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.801661][ T3483] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 33.806460][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.811861][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.841758][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.894305][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.911134][ T3317] veth0_vlan: entered promiscuous mode [ 33.937231][ T3317] veth1_vlan: entered promiscuous mode [ 33.943353][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.958658][ T3317] veth0_macvtap: entered promiscuous mode [ 33.970549][ T3317] veth1_macvtap: entered promiscuous mode [ 33.981094][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.990597][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.020644][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.042322][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.068718][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124577][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.140596][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 34.140660][ T29] audit: type=1400 audit(1761243568.773:104): avc: denied { create } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.383715][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.415659][ T3506] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 34.466921][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.493462][ T3507] loop5: detected capacity change from 0 to 7 [ 34.507023][ T29] audit: type=1400 audit(1761243568.903:105): avc: denied { getopt } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.526212][ T29] audit: type=1400 audit(1761243568.923:106): avc: denied { allowed } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.545311][ T29] audit: type=1400 audit(1761243568.953:107): avc: denied { create } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.565473][ T29] audit: type=1400 audit(1761243569.063:108): avc: denied { relabelto } for pid=3500 comm="syz.4.5" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 34.574278][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.591409][ T29] audit: type=1400 audit(1761243569.063:109): avc: denied { associate } for pid=3500 comm="syz.4.5" name="file0" dev="tmpfs" ino=18 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 34.657627][ T24] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.660775][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.666835][ T24] Buffer I/O error on dev loop5, logical block 0, async page read [ 34.666949][ T3507] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.692779][ T3507] Buffer I/O error on dev loop5, logical block 0, async page read [ 34.700837][ T3507] loop5: unable to read partition table [ 34.707523][ T3507] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 34.721252][ T29] audit: type=1400 audit(1761243569.283:110): avc: denied { create } for pid=3508 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.732303][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.742170][ T29] audit: type=1400 audit(1761243569.283:111): avc: denied { map } for pid=3508 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.774888][ T29] audit: type=1400 audit(1761243569.283:112): avc: denied { read write } for pid=3508 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.800175][ T29] audit: type=1400 audit(1761243569.283:113): avc: denied { name_bind } for pid=3509 comm="syz.1.11" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.900608][ T3520] 9pnet_fd: Insufficient options for proto=fd [ 35.028329][ T3525] loop4: detected capacity change from 0 to 128 [ 35.050564][ T3517] loop2: detected capacity change from 0 to 512 [ 35.080758][ T3527] loop3: detected capacity change from 0 to 2048 [ 35.103408][ T3527] EXT4-fs: Ignoring removed bh option [ 35.128037][ T3530] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 35.135994][ T3530] FAT-fs (loop4): Filesystem has been set read-only [ 35.143907][ T3517] sd 0:0:1:0: device reset [ 35.162556][ T3527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.182988][ T3530] syz.4.13: attempt to access beyond end of device [ 35.182988][ T3530] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 35.229264][ T3527] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.254727][ T3530] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 35.262649][ T3530] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 35.279370][ T3527] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 35.292705][ T3527] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.292705][ T3527] [ 35.302386][ T3527] EXT4-fs (loop3): Total free blocks count 0 [ 35.308432][ T3527] EXT4-fs (loop3): Free/Dirty block details [ 35.314335][ T3527] EXT4-fs (loop3): free_blocks=2415919104 [ 35.320152][ T3527] EXT4-fs (loop3): dirty_blocks=32 [ 35.325293][ T3527] EXT4-fs (loop3): Block reservation details [ 35.331403][ T3527] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 35.343736][ T3532] syz.4.13: attempt to access beyond end of device [ 35.343736][ T3532] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 35.356876][ T3532] Buffer I/O error on dev loop4, logical block 2065, async page read [ 35.365528][ T3532] syz.4.13: attempt to access beyond end of device [ 35.365528][ T3532] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 35.378642][ T3532] Buffer I/O error on dev loop4, logical block 2066, async page read [ 35.391506][ T3527] syz.3.14 (3527) used greatest stack depth: 9784 bytes left [ 35.395028][ T3532] syz.4.13: attempt to access beyond end of device [ 35.395028][ T3532] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 35.412192][ T3532] Buffer I/O error on dev loop4, logical block 2067, async page read [ 35.453561][ T3532] syz.4.13: attempt to access beyond end of device [ 35.453561][ T3532] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 35.466763][ T3532] Buffer I/O error on dev loop4, logical block 2068, async page read [ 35.521159][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.532039][ T3532] syz.4.13: attempt to access beyond end of device [ 35.532039][ T3532] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 35.545189][ T3532] Buffer I/O error on dev loop4, logical block 2069, async page read [ 35.556741][ T3532] syz.4.13: attempt to access beyond end of device [ 35.556741][ T3532] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 35.569880][ T3532] Buffer I/O error on dev loop4, logical block 2070, async page read [ 35.594069][ T3517] Falling back ldisc for ptm0. [ 35.638048][ T3540] loop1: detected capacity change from 0 to 512 [ 35.649886][ T3532] syz.4.13: attempt to access beyond end of device [ 35.649886][ T3532] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 35.663152][ T3532] Buffer I/O error on dev loop4, logical block 2071, async page read [ 35.677907][ T3540] sd 0:0:1:0: device reset [ 35.721339][ T3532] syz.4.13: attempt to access beyond end of device [ 35.721339][ T3532] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 35.734618][ T3532] Buffer I/O error on dev loop4, logical block 2072, async page read [ 35.744647][ T3545] loop2: detected capacity change from 0 to 128 [ 35.756877][ T3547] loop0: detected capacity change from 0 to 2048 [ 35.763694][ T3547] EXT4-fs: Ignoring removed bh option [ 35.770827][ T3530] syz.4.13: attempt to access beyond end of device [ 35.770827][ T3530] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 35.808593][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.844189][ T3540] Falling back ldisc for ptm0. [ 35.872748][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.880670][ T3550] FAT-fs (loop2): Filesystem has been set read-only [ 35.903323][ T3547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.920312][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.928494][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.937125][ T3547] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 35.949613][ T3547] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.949613][ T3547] [ 35.959297][ T3547] EXT4-fs (loop0): Total free blocks count 0 [ 35.965328][ T3547] EXT4-fs (loop0): Free/Dirty block details [ 35.971322][ T3547] EXT4-fs (loop0): free_blocks=2415919104 [ 35.977097][ T3547] EXT4-fs (loop0): dirty_blocks=32 [ 35.982224][ T3547] EXT4-fs (loop0): Block reservation details [ 35.988370][ T3547] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 36.128261][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.149175][ T3560] loop4: detected capacity change from 0 to 2048 [ 36.210298][ T3560] EXT4-fs: Ignoring removed bh option [ 36.223146][ T3564] loop0: detected capacity change from 0 to 128 [ 36.257945][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.282618][ T3562] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 36.321202][ T3560] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.379442][ T3560] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 36.392263][ T3560] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.392263][ T3560] [ 36.401972][ T3560] EXT4-fs (loop4): Total free blocks count 0 [ 36.408004][ T3560] EXT4-fs (loop4): Free/Dirty block details [ 36.413931][ T3560] EXT4-fs (loop4): free_blocks=2415919104 [ 36.419692][ T3560] EXT4-fs (loop4): dirty_blocks=32 [ 36.424823][ T3560] EXT4-fs (loop4): Block reservation details [ 36.431123][ T3560] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 36.439153][ T3569] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 36.447088][ T3569] FAT-fs (loop0): Filesystem has been set read-only [ 36.454354][ T3569] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 36.462325][ T3569] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 36.513345][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.535104][ T3562] loop5: detected capacity change from 0 to 24351 [ 36.610454][ T3562] loop5: detected capacity change from 24351 to 25783 [ 36.807512][ T3576] capability: warning: `syz.2.25' uses 32-bit capabilities (legacy support in use) [ 36.899121][ T3582] loop4: detected capacity change from 0 to 128 [ 36.946983][ T3585] netlink: 'syz.1.28': attribute type 4 has an invalid length. [ 36.957373][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 36.968598][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 36.976554][ T3586] FAT-fs (loop4): Filesystem has been set read-only [ 36.997035][ T3589] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 37.005594][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.013456][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.030159][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.038447][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.046517][ T3586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 37.056648][ T3592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.063968][ T3592] IPv6: NLM_F_CREATE should be set when creating new route [ 37.071206][ T3592] IPv6: NLM_F_CREATE should be set when creating new route [ 37.155661][ T3592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3592 comm=syz.1.30 [ 37.168315][ T3592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3592 comm=syz.1.30 [ 37.180891][ T3592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=3592 comm=syz.1.30 [ 37.432636][ T3603] loop3: detected capacity change from 0 to 512 [ 37.475125][ T3605] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 37.505974][ T3603] sd 0:0:1:0: device reset [ 37.534872][ T3609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.542299][ T3609] IPv6: NLM_F_CREATE should be set when creating new route [ 37.544290][ T3589] SELinux: ebitmap: truncated map [ 37.549540][ T3609] IPv6: NLM_F_CREATE should be set when creating new route [ 37.555730][ T3609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.579551][ T3589] SELinux: failed to load policy [ 37.631101][ T3613] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 37.648979][ T3613] SELinux: failed to load policy [ 37.844323][ T3624] loop3: detected capacity change from 0 to 2048 [ 37.858200][ T3624] EXT4-fs: Ignoring removed bh option [ 37.888466][ T3628] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 37.914862][ T3630] mmap: syz.1.40 (3630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.954450][ T3624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.973976][ T3634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.981248][ T3634] IPv6: NLM_F_CREATE should be set when creating new route [ 37.988507][ T3634] IPv6: NLM_F_CREATE should be set when creating new route [ 37.995929][ T3624] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.997801][ T3634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.011556][ T3624] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 38.030581][ T3624] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.030581][ T3624] [ 38.040345][ T3624] EXT4-fs (loop3): Total free blocks count 0 [ 38.046504][ T3624] EXT4-fs (loop3): Free/Dirty block details [ 38.052435][ T3624] EXT4-fs (loop3): free_blocks=2415919104 [ 38.058570][ T3624] EXT4-fs (loop3): dirty_blocks=32 [ 38.063710][ T3624] EXT4-fs (loop3): Block reservation details [ 38.069963][ T3624] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.100407][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.158214][ T3644] program syz.3.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.160102][ T3628] SELinux: ebitmap: truncated map [ 38.173815][ T3628] SELinux: failed to load policy [ 38.204494][ T3647] loop3: detected capacity change from 0 to 128 [ 38.275283][ T3651] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.283162][ T3651] FAT-fs (loop3): Filesystem has been set read-only [ 38.290070][ T3651] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.298051][ T3651] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 38.310010][ T3652] loop4: detected capacity change from 0 to 512 [ 38.326123][ T3652] sd 0:0:1:0: device reset [ 38.335811][ T3652] Falling back ldisc for ptm0. [ 38.583347][ T3665] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 38.666213][ T3668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.673490][ T3668] IPv6: NLM_F_CREATE should be set when creating new route [ 38.680708][ T3668] IPv6: NLM_F_CREATE should be set when creating new route [ 38.697026][ T3668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.834238][ T3665] SELinux: ebitmap: truncated map [ 38.842505][ T3665] SELinux: failed to load policy [ 38.869165][ T3677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.876711][ T3677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.884041][ T3677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.50'. [ 38.892925][ T3677] Zero length message leads to an empty skb [ 38.920168][ T3679] loop1: detected capacity change from 0 to 164 [ 38.939036][ T3679] Unable to read rock-ridge attributes [ 38.957826][ T3679] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 38.969198][ T3679] Unable to read rock-ridge attributes [ 38.974873][ T3679] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.012058][ T3681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 39.021433][ T3681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 39.033653][ T3684] loop1: detected capacity change from 0 to 2048 [ 39.040380][ T3684] EXT4-fs: Ignoring removed bh option [ 39.070563][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.090016][ T3684] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.122130][ T3684] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 39.134610][ T3684] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.134610][ T3684] [ 39.144404][ T3684] EXT4-fs (loop1): Total free blocks count 0 [ 39.150470][ T3684] EXT4-fs (loop1): Free/Dirty block details [ 39.156073][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 39.156093][ T29] audit: type=1400 audit(1761243573.783:260): avc: denied { bind } for pid=3687 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.156479][ T3684] EXT4-fs (loop1): free_blocks=2415919104 [ 39.162571][ T29] audit: type=1400 audit(1761243573.783:261): avc: denied { setopt } for pid=3687 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.182680][ T3684] EXT4-fs (loop1): dirty_blocks=32 [ 39.182714][ T3684] EXT4-fs (loop1): Block reservation details [ 39.182726][ T3684] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.235009][ T29] audit: type=1326 audit(1761243573.873:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.258648][ T29] audit: type=1326 audit(1761243573.873:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.282128][ T29] audit: type=1326 audit(1761243573.873:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.305502][ T29] audit: type=1326 audit(1761243573.873:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.328670][ T29] audit: type=1326 audit(1761243573.873:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.351939][ T29] audit: type=1326 audit(1761243573.873:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.375156][ T29] audit: type=1326 audit(1761243573.873:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.398392][ T29] audit: type=1326 audit(1761243573.873:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3687 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e638efc9 code=0x7ffc0000 [ 39.431017][ T3689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.450157][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.544835][ T3689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.058794][ T3710] SELinux: security_context_str_to_sid (-) failed with errno=-22 [ 40.168840][ T3689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.588122][ T3714] loop0: detected capacity change from 0 to 2048 [ 40.603866][ T3714] EXT4-fs: Ignoring removed bh option [ 40.734867][ T3719] loop4: detected capacity change from 0 to 512 [ 40.749182][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.781514][ T3714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.815265][ T3719] sd 0:0:1:0: device reset [ 40.838606][ T3714] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 40.851796][ T3714] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.851796][ T3714] [ 40.861648][ T3714] EXT4-fs (loop0): Total free blocks count 0 [ 40.867731][ T3714] EXT4-fs (loop0): Free/Dirty block details [ 40.873917][ T3714] EXT4-fs (loop0): free_blocks=2415919104 [ 40.879786][ T3714] EXT4-fs (loop0): dirty_blocks=32 [ 40.884917][ T3714] EXT4-fs (loop0): Block reservation details [ 40.890973][ T3714] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 40.897224][ T3693] Set syz1 is full, maxelem 65536 reached [ 40.946712][ T3689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.955748][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.014820][ T3729] 9pnet_fd: Insufficient options for proto=fd [ 41.035041][ T3726] Falling back ldisc for ptm0. [ 41.138712][ T3731] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 41.241448][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.267204][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.293253][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.302299][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.313202][ T3753] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 41.375712][ T3758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.383127][ T3758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.398851][ T3761] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 41.509918][ T3771] 9pnet_fd: Insufficient options for proto=fd [ 41.553037][ T3774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.560352][ T3774] IPv6: NLM_F_CREATE should be set when creating new route [ 41.567608][ T3774] IPv6: NLM_F_CREATE should be set when creating new route [ 41.591867][ T3774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.621684][ T3753] SELinux: ebitmap: truncated map [ 41.662347][ T3753] SELinux: failed to load policy [ 41.691944][ T3761] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 41.700781][ T3791] loop1: detected capacity change from 0 to 128 [ 41.705115][ T3761] SELinux: failed to load policy [ 41.787231][ T3796] loop4: detected capacity change from 0 to 2048 [ 41.798412][ T3796] EXT4-fs: Ignoring removed bh option [ 41.812590][ T3797] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 41.820486][ T3797] FAT-fs (loop1): Filesystem has been set read-only [ 41.845320][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.864309][ T3797] bio_check_eod: 10580 callbacks suppressed [ 41.864326][ T3797] syz.1.75: attempt to access beyond end of device [ 41.864326][ T3797] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 41.872062][ T3796] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.899070][ T3797] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 41.906921][ T3797] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 41.953466][ T3803] syz.1.75: attempt to access beyond end of device [ 41.953466][ T3803] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 41.966676][ T3803] buffer_io_error: 9978 callbacks suppressed [ 41.966674][ T3796] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 41.966697][ T3803] Buffer I/O error on dev loop1, logical block 2065, async page read [ 41.968075][ T3804] loop2: detected capacity change from 0 to 512 [ 41.972707][ T3796] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.972707][ T3796] [ 42.009188][ T3796] EXT4-fs (loop4): Total free blocks count 0 [ 42.015218][ T3796] EXT4-fs (loop4): Free/Dirty block details [ 42.016333][ T3803] syz.1.75: attempt to access beyond end of device [ 42.016333][ T3803] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 42.021199][ T3796] EXT4-fs (loop4): free_blocks=2415919104 [ 42.034357][ T3803] Buffer I/O error on dev loop1, logical block 2066, async page read [ 42.040031][ T3796] EXT4-fs (loop4): dirty_blocks=32 [ 42.053225][ T3796] EXT4-fs (loop4): Block reservation details [ 42.059262][ T3796] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.076491][ T3803] syz.1.75: attempt to access beyond end of device [ 42.076491][ T3803] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 42.089118][ T3804] sd 0:0:1:0: device reset [ 42.089643][ T3803] Buffer I/O error on dev loop1, logical block 2067, async page read [ 42.102131][ T3803] syz.1.75: attempt to access beyond end of device [ 42.102131][ T3803] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 42.115247][ T3803] Buffer I/O error on dev loop1, logical block 2068, async page read [ 42.155849][ T3803] syz.1.75: attempt to access beyond end of device [ 42.155849][ T3803] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 42.168996][ T3803] Buffer I/O error on dev loop1, logical block 2069, async page read [ 42.192288][ T3803] syz.1.75: attempt to access beyond end of device [ 42.192288][ T3803] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 42.205451][ T3803] Buffer I/O error on dev loop1, logical block 2070, async page read [ 42.213654][ T3803] syz.1.75: attempt to access beyond end of device [ 42.213654][ T3803] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 42.226757][ T3803] Buffer I/O error on dev loop1, logical block 2071, async page read [ 42.258065][ T3803] syz.1.75: attempt to access beyond end of device [ 42.258065][ T3803] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 42.271210][ T3803] Buffer I/O error on dev loop1, logical block 2072, async page read [ 42.281153][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.295886][ T3797] syz.1.75: attempt to access beyond end of device [ 42.295886][ T3797] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 42.309023][ T3797] Buffer I/O error on dev loop1, logical block 2065, async page read [ 42.338103][ T3797] Buffer I/O error on dev loop1, logical block 2066, async page read [ 42.352638][ T3812] loop3: detected capacity change from 0 to 1024 [ 42.405458][ T3812] EXT4-fs: Ignoring removed orlov option [ 42.411183][ T3812] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.427952][ T3815] loop4: detected capacity change from 0 to 2048 [ 42.445344][ T3815] EXT4-fs: Ignoring removed bh option [ 42.455038][ T3812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a854c018, mo2=0002] [ 42.472402][ T3812] System zones: 0-1, 3-12 [ 42.478221][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.495524][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.524587][ T3815] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.557960][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.593322][ T3815] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 42.605809][ T3815] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.605809][ T3815] [ 42.615604][ T3815] EXT4-fs (loop4): Total free blocks count 0 [ 42.621673][ T3815] EXT4-fs (loop4): Free/Dirty block details [ 42.626126][ T3831] loop3: detected capacity change from 0 to 128 [ 42.627641][ T3815] EXT4-fs (loop4): free_blocks=2415919104 [ 42.639633][ T3815] EXT4-fs (loop4): dirty_blocks=32 [ 42.644818][ T3815] EXT4-fs (loop4): Block reservation details [ 42.650874][ T3815] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.682329][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.731503][ T3840] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.739502][ T3840] FAT-fs (loop3): Filesystem has been set read-only [ 42.781611][ T3844] 9pnet_fd: Insufficient options for proto=fd [ 42.796489][ T3840] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.804849][ T3840] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.967607][ T3858] loop4: detected capacity change from 0 to 512 [ 43.020906][ T3864] xt_SECMARK: invalid mode: 2 [ 43.021348][ T3864] netlink: 'syz.2.86': attribute type 30 has an invalid length. [ 43.081367][ T3858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.105545][ T3858] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.133294][ T3872] syz_tun: entered allmulticast mode [ 43.248941][ T3864] loop2: detected capacity change from 0 to 512 [ 43.293279][ T3864] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.338676][ T3887] loop1: detected capacity change from 0 to 2048 [ 43.417550][ T3887] EXT4-fs (loop1): failed to initialize system zone (-117) [ 43.475938][ T3864] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 43.476482][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.495151][ T3887] EXT4-fs (loop1): mount failed [ 43.509710][ T3864] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.86: attempt to clear invalid blocks 2 len 1 [ 43.605501][ T3864] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 43.628831][ T3887] netlink: 'syz.1.89': attribute type 10 has an invalid length. [ 43.636619][ T3887] hsr_slave_0: left promiscuous mode [ 43.646970][ T3887] hsr_slave_1: left promiscuous mode [ 43.679548][ T3921] loop3: detected capacity change from 0 to 512 [ 43.704453][ T3864] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.86: invalid indirect mapped block 1819239214 (level 0) [ 43.738951][ T3921] sd 0:0:1:0: device reset [ 43.765934][ T3921] Falling back ldisc for ptm0. [ 43.776841][ T3864] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.86: invalid indirect mapped block 1819239214 (level 1) [ 43.792516][ T3864] EXT4-fs (loop2): 1 truncate cleaned up [ 43.799148][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.859642][ T3932] loop4: detected capacity change from 0 to 512 [ 43.897070][ T3862] syz_tun: left allmulticast mode [ 43.915258][ T3934] ======================================================= [ 43.915258][ T3934] WARNING: The mand mount option has been deprecated and [ 43.915258][ T3934] and is ignored by this kernel. Remove the mand [ 43.915258][ T3934] option from the mount to silence this warning. [ 43.915258][ T3934] ======================================================= [ 43.985208][ T3932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.018954][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.033398][ T3932] ext4 filesystem being mounted at /22/control supports timestamps until 2038-01-19 (0x7fffffff) [ 44.040553][ T3942] loop3: detected capacity change from 0 to 512 [ 44.078571][ T3942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.122646][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.186288][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 44.186303][ T29] audit: type=1326 audit(1761243578.823:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.215887][ T29] audit: type=1326 audit(1761243578.823:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.239205][ T29] audit: type=1326 audit(1761243578.823:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.262626][ T29] audit: type=1326 audit(1761243578.823:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.285958][ T29] audit: type=1326 audit(1761243578.823:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.311577][ T29] audit: type=1326 audit(1761243578.953:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.334957][ T29] audit: type=1326 audit(1761243578.953:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.358246][ T29] audit: type=1326 audit(1761243578.953:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.0.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17360fefc9 code=0x7ffc0000 [ 44.381902][ T3942] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.402509][ T29] audit: type=1400 audit(1761243579.033:484): avc: denied { write } for pid=3957 comm="syz.2.99" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.425947][ T29] audit: type=1400 audit(1761243579.033:485): avc: denied { open } for pid=3957 comm="syz.2.99" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.615573][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.806292][ T3968] loop2: detected capacity change from 0 to 128 [ 44.825240][ T3964] loop0: detected capacity change from 0 to 512 [ 44.832138][ T3964] EXT4-fs: Ignoring removed i_version option [ 44.838205][ T3964] EXT4-fs: Ignoring removed bh option [ 44.918061][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.954653][ T3964] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.062466][ T3975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.070376][ T3975] FAT-fs (loop2): Filesystem has been set read-only [ 45.076667][ T3972] netlink: 4 bytes leftover after parsing attributes in process `+j@'. [ 45.077541][ T3975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.093215][ T3975] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 45.096541][ T3964] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.106'. [ 45.145290][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.303530][ T3983] loop5: detected capacity change from 0 to 7695 [ 45.333705][ T3983] loop5: detected capacity change from 7695 to 7975 [ 45.359345][ T3982] loop1: detected capacity change from 0 to 512 [ 45.407806][ T3982] sd 0:0:1:0: device reset [ 45.418107][ T3982] Falling back ldisc for ptm0. [ 45.647064][ T3997] loop1: detected capacity change from 0 to 512 [ 45.775195][ T3997] sd 0:0:1:0: device reset [ 45.812137][ T3997] Falling back ldisc for ptm0. [ 45.920335][ T4006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.150323][ T4016] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 46.175706][ T4016] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 46.223837][ T4016] loop3: detected capacity change from 0 to 2048 [ 46.287544][ T4022] loop4: detected capacity change from 0 to 2048 [ 46.305525][ T3505] loop3: p1 p2 p3 [ 46.317708][ T4022] EXT4-fs: Ignoring removed bh option [ 46.334578][ T4016] loop3: p1 p2 p3 [ 46.347173][ T4022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.381844][ T4022] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.467869][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.479044][ T3505] udevd[3505]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.500144][ T4045] loop3: detected capacity change from 0 to 512 [ 46.507672][ T4022] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 46.520202][ T4022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.520202][ T4022] [ 46.529911][ T4022] EXT4-fs (loop4): Total free blocks count 0 [ 46.536030][ T4022] EXT4-fs (loop4): Free/Dirty block details [ 46.541997][ T4022] EXT4-fs (loop4): free_blocks=2415919104 [ 46.547794][ T4022] EXT4-fs (loop4): dirty_blocks=32 [ 46.552929][ T4022] EXT4-fs (loop4): Block reservation details [ 46.558943][ T4022] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 46.606592][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.626749][ T4045] sd 0:0:1:0: device reset [ 46.635465][ T4045] Falling back ldisc for ptm0. [ 46.684493][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 46.684635][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 46.715727][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.732450][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.766505][ T4054] loop1: detected capacity change from 0 to 128 [ 46.833204][ T4056] loop4: detected capacity change from 0 to 1024 [ 46.846461][ T4059] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.854332][ T4059] FAT-fs (loop1): Filesystem has been set read-only [ 46.878400][ T4056] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.127: Failed to acquire dquot type 0 [ 46.896996][ T4059] bio_check_eod: 5346 callbacks suppressed [ 46.897065][ T4059] syz.1.128: attempt to access beyond end of device [ 46.897065][ T4059] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.937270][ T4056] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 46.962806][ T4056] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.127: corrupted inode contents [ 46.963980][ T4059] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.982476][ T4059] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.993186][ T4063] syz.1.128: attempt to access beyond end of device [ 46.993186][ T4063] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 47.006382][ T4063] buffer_io_error: 5320 callbacks suppressed [ 47.006396][ T4063] Buffer I/O error on dev loop1, logical block 2065, async page read [ 47.025186][ T4056] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.127: mark_inode_dirty error [ 47.046477][ T4063] syz.1.128: attempt to access beyond end of device [ 47.046477][ T4063] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 47.059703][ T4063] Buffer I/O error on dev loop1, logical block 2066, async page read [ 47.070790][ T4063] syz.1.128: attempt to access beyond end of device [ 47.070790][ T4063] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 47.073977][ T4056] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.127: corrupted inode contents [ 47.084055][ T4063] Buffer I/O error on dev loop1, logical block 2067, async page read [ 47.107007][ T4063] syz.1.128: attempt to access beyond end of device [ 47.107007][ T4063] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 47.120223][ T4063] Buffer I/O error on dev loop1, logical block 2068, async page read [ 47.143007][ T4056] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.127: mark_inode_dirty error [ 47.143547][ T4063] syz.1.128: attempt to access beyond end of device [ 47.143547][ T4063] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 47.167479][ T4063] Buffer I/O error on dev loop1, logical block 2069, async page read [ 47.176110][ T4056] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.127: corrupted inode contents [ 47.205038][ T4063] syz.1.128: attempt to access beyond end of device [ 47.205038][ T4063] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 47.214016][ T4056] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 47.218354][ T4063] Buffer I/O error on dev loop1, logical block 2070, async page read [ 47.235691][ T4063] syz.1.128: attempt to access beyond end of device [ 47.235691][ T4063] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 47.247844][ T4056] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.127: corrupted inode contents [ 47.248894][ T4063] Buffer I/O error on dev loop1, logical block 2071, async page read [ 47.269977][ T4063] syz.1.128: attempt to access beyond end of device [ 47.269977][ T4063] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 47.283185][ T4063] Buffer I/O error on dev loop1, logical block 2072, async page read [ 47.291373][ T4059] syz.1.128: attempt to access beyond end of device [ 47.291373][ T4059] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 47.304722][ T4059] Buffer I/O error on dev loop1, logical block 2065, async page read [ 47.314885][ T4056] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.127: mark_inode_dirty error [ 47.338434][ T4059] Buffer I/O error on dev loop1, logical block 2066, async page read [ 47.349740][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.358437][ T4056] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 47.359459][ T4070] capability: warning: `syz.0.132' uses deprecated v2 capabilities in a way that may be insecure [ 47.379263][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.388945][ T4056] EXT4-fs (loop4): 1 truncate cleaned up [ 47.401601][ T4056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.477860][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.542343][ T4078] loop5: detected capacity change from 0 to 7967 [ 47.556275][ T4079] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 47.558480][ T4078] loop5: detected capacity change from 7967 to 9463 [ 47.716402][ T4079] bond1: entered promiscuous mode [ 47.741643][ T4079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.794895][ T4079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.815119][ T4089] loop1: detected capacity change from 0 to 2048 [ 47.821293][ T4079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.829330][ T4089] EXT4-fs: Ignoring removed bh option [ 47.887060][ T4096] loop2: detected capacity change from 0 to 512 [ 47.926822][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.929393][ T4106] loop5: detected capacity change from 0 to 5119 [ 47.971182][ T4082] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 47.981782][ T4082] SELinux: failed to load policy [ 47.986886][ T4108] loop5: detected capacity change from 5119 to 5967 [ 48.008351][ T4091] sd 0:0:1:0: device reset [ 48.035989][ T4089] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.063854][ T4091] Falling back ldisc for ptm0. [ 48.077409][ T4089] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 48.090093][ T4089] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.090093][ T4089] [ 48.099783][ T4089] EXT4-fs (loop1): Total free blocks count 0 [ 48.105823][ T4089] EXT4-fs (loop1): Free/Dirty block details [ 48.111738][ T4089] EXT4-fs (loop1): free_blocks=2415919104 [ 48.117514][ T4089] EXT4-fs (loop1): dirty_blocks=32 [ 48.122726][ T4089] EXT4-fs (loop1): Block reservation details [ 48.128886][ T4089] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 48.157837][ T4089] syz.1.138 (4089) used greatest stack depth: 9776 bytes left [ 48.187094][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.265779][ T4118] loop0: detected capacity change from 0 to 512 [ 48.331674][ T4118] loop0: detected capacity change from 0 to 512 [ 48.341792][ T4120] loop1: detected capacity change from 0 to 128 [ 48.361377][ T4118] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.147: inode has both inline data and extents flags [ 48.382858][ T4118] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.147: couldn't read orphan inode 15 (err -117) [ 48.398801][ T4118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.415456][ T4118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.431817][ T4122] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.439713][ T4122] FAT-fs (loop1): Filesystem has been set read-only [ 48.447744][ T4114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.465464][ T4114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.478191][ T4122] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.486104][ T4122] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.499640][ T4124] loop3: detected capacity change from 0 to 128 [ 48.525840][ T4126] loop4: detected capacity change from 0 to 512 [ 48.535474][ T4126] EXT4-fs: Ignoring removed orlov option [ 48.549864][ T4126] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.150: corrupted in-inode xattr: bad e_name length [ 48.565385][ T4126] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.150: couldn't read orphan inode 15 (err -117) [ 48.578728][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.592888][ T4126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 48.594404][ T4132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.609719][ T4132] FAT-fs (loop3): Filesystem has been set read-only [ 48.621018][ T4131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 48.645130][ T4132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.653033][ T4132] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 48.673798][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.703932][ T4137] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 48.711734][ T4137] netlink: 224 bytes leftover after parsing attributes in process `syz.4.153'. [ 48.746283][ T4142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 48.765185][ T4134] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 48.817822][ T4145] loop4: detected capacity change from 0 to 2048 [ 48.839870][ T4145] EXT4-fs: Ignoring removed bh option [ 48.856958][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.872292][ T4145] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.887501][ T4145] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 48.899972][ T4145] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.899972][ T4145] [ 48.909721][ T4145] EXT4-fs (loop4): Total free blocks count 0 [ 48.915737][ T4145] EXT4-fs (loop4): Free/Dirty block details [ 48.921739][ T4145] EXT4-fs (loop4): free_blocks=2415919104 [ 48.927504][ T4145] EXT4-fs (loop4): dirty_blocks=32 [ 48.932682][ T4145] EXT4-fs (loop4): Block reservation details [ 48.938709][ T4145] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 48.956316][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.036582][ T4148] tipc: Enabling of bearer rejected, failed to enable media [ 49.110668][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.118151][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.126003][ T4156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.133389][ T4156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.256500][ T4159] loop5: detected capacity change from 0 to 11391 [ 49.277398][ T4159] loop5: detected capacity change from 11391 to 15319 [ 49.534462][ T4172] loop5: detected capacity change from 0 to 9007 [ 49.555821][ T4172] loop5: detected capacity change from 9007 to 12999 [ 49.796383][ T4183] loop0: detected capacity change from 0 to 2048 [ 49.803879][ T4183] EXT4-fs: Ignoring removed bh option [ 49.850933][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.906482][ T4183] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.933470][ T4191] loop1: detected capacity change from 0 to 128 [ 49.943327][ T4192] loop4: detected capacity change from 0 to 512 [ 49.952873][ T4183] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 49.965282][ T4183] EXT4-fs (loop0): This should not happen!! Data will be lost [ 49.965282][ T4183] [ 49.974958][ T4183] EXT4-fs (loop0): Total free blocks count 0 [ 49.981058][ T4183] EXT4-fs (loop0): Free/Dirty block details [ 49.986988][ T4183] EXT4-fs (loop0): free_blocks=2415919104 [ 49.992746][ T4183] EXT4-fs (loop0): dirty_blocks=32 [ 49.997895][ T4183] EXT4-fs (loop0): Block reservation details [ 50.003894][ T4183] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 50.044218][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.053388][ T4187] sd 0:0:1:0: device reset [ 50.069622][ T4187] Falling back ldisc for ptm0. [ 50.086210][ T4196] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.094152][ T4196] FAT-fs (loop1): Filesystem has been set read-only [ 50.107436][ T4195] loop3: detected capacity change from 0 to 512 [ 50.124457][ T4196] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.132411][ T4196] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 50.180084][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 50.180101][ T29] audit: type=1326 audit(1761243584.803:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.195822][ T4195] sd 0:0:1:0: device reset [ 50.209750][ T29] audit: type=1326 audit(1761243584.803:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.214825][ T4204] loop5: detected capacity change from 0 to 4655 [ 50.237650][ T29] audit: type=1326 audit(1761243584.803:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.267477][ T29] audit: type=1326 audit(1761243584.803:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.335290][ T4195] Falling back ldisc for ptm0. [ 50.360576][ T4209] loop5: detected capacity change from 4655 to 10031 [ 50.386617][ T29] audit: type=1326 audit(1761243584.953:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.410178][ T29] audit: type=1326 audit(1761243584.963:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b161efc9 code=0x7ffc0000 [ 50.638179][ T4227] 9pnet_fd: Insufficient options for proto=fd [ 50.749588][ T29] audit: type=1400 audit(1761243585.383:1028): avc: denied { ioctl } for pid=4236 comm="syz.3.178" path="socket:[7291]" dev="sockfs" ino=7291 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.941066][ T4253] loop0: detected capacity change from 0 to 2048 [ 50.941416][ T4253] EXT4-fs: Ignoring removed bh option [ 50.957466][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.970639][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.970975][ T4253] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 50.971007][ T4253] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.971007][ T4253] [ 50.971023][ T4253] EXT4-fs (loop0): Total free blocks count 0 [ 50.971039][ T4253] EXT4-fs (loop0): Free/Dirty block details [ 50.971053][ T4253] EXT4-fs (loop0): free_blocks=2415919104 [ 50.971068][ T4253] EXT4-fs (loop0): dirty_blocks=32 [ 50.971237][ T4253] EXT4-fs (loop0): Block reservation details [ 50.971251][ T4253] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 51.052668][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.075415][ T4267] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 51.129409][ T4275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.129529][ T4275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.176960][ T4273] ================================================================== [ 51.176984][ T4278] loop5: detected capacity change from 0 to 2695 [ 51.177000][ T4273] BUG: KCSAN: data-race in loop_assign_backing_file / shmem_write_begin [ 51.177043][ T4273] [ 51.177050][ T4273] write to 0xffff88811b29cdd0 of 4 bytes by task 4278 on cpu 0: [ 51.177067][ T4273] loop_assign_backing_file+0x80/0x200 [ 51.177113][ T4273] loop_configure+0x720/0x9c0 [ 51.177139][ T4273] lo_ioctl+0x5aa/0x12b0 [ 51.177163][ T4273] blkdev_ioctl+0x356/0x440 [ 51.177180][ T4273] __se_sys_ioctl+0xce/0x140 [ 51.177201][ T4273] __x64_sys_ioctl+0x43/0x50 [ 51.177222][ T4273] x64_sys_call+0x1816/0x3000 [ 51.177248][ T4273] do_syscall_64+0xd2/0x200 [ 51.177268][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.177292][ T4273] [ 51.177298][ T4273] read to 0xffff88811b29cdd0 of 4 bytes by task 4273 on cpu 1: [ 51.177317][ T4273] shmem_write_begin+0x88/0x190 [ 51.177336][ T4273] generic_perform_write+0x184/0x490 [ 51.177360][ T4273] shmem_file_write_iter+0xc5/0xf0 [ 51.177389][ T4273] vfs_write+0x52a/0x960 [ 51.177416][ T4273] ksys_write+0xda/0x1a0 [ 51.177445][ T4273] __x64_sys_write+0x40/0x50 [ 51.177474][ T4273] x64_sys_call+0x2802/0x3000 [ 51.177500][ T4273] do_syscall_64+0xd2/0x200 [ 51.177517][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.177540][ T4273] [ 51.177544][ T4273] value changed: 0x00100cca -> 0x00100c0a [ 51.177556][ T4273] [ 51.177560][ T4273] Reported by Kernel Concurrency Sanitizer on: [ 51.177591][ T4273] CPU: 1 UID: 0 PID: 4273 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.177625][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.177639][ T4273] ================================================================== [ 51.267085][ T4267] SELinux: ebitmap: truncated map [ 51.273817][ T29] audit: type=1400 audit(1761243585.903:1029): avc: denied { load_policy } for pid=4264 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.451243][ T4267] SELinux: failed to load policy [ 52.145043][ T29] audit: type=1400 audit(1761243586.693:1030): avc: denied { write } for pid=4283 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1