last executing test programs: 5.864050191s ago: executing program 0 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x12}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c9b21a374f6638834dd0b468ad5c947564000b310b", @ANYRES16=r6, @ANYBLOB="00032abd7000fddbdf250d00000008000500050000000800050000000000080004000100000008000600ffff00000c00028008000300020000000800050006000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r9, &(0x7f0000000240)=[{&(0x7f0000000280)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r10, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 5.436920287s ago: executing program 0 (id=133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0xfd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) shmget(0x2, 0x3000, 0x4, &(0x7f0000547000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208"], 0xac}}, 0x0) 3.965879669s ago: executing program 0 (id=148): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x6770c000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, 0x0, &(0x7f0000000840)=r6}, 0x20) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x800}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a8640", 0x16}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000180)=ANY=[], 0x8) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="ed55b38ce3ce9347", 0x8}, {&(0x7f0000000600)="3198c4f9d18ddc1bc5390ded3788f17df20a80257827884b1dd3accd79eb561917dc72261475bec40ab13b2c18e845268748628117358e4771254c32644f8f07ed21b82304e74f2ee2739d635b9cd0a194b4f70d1f4febd79f53d943cac7f683fb26aac422fb8697a5947ec4ffa0d3458781694f756dcf5fbdbf171a7b0e5aed689125ad9ef1cd14da432bbe92a921d499562c651fdcecab9a65cef8b8de07000047c6364ff21ed21ec6d2e90121e593a663a77abb1626f8cbef06da2a963651583ad528ff57b868db336dff21649454773c286e5007f975fad88d49daa05404048b276f4f4b41", 0xe7}, {&(0x7f0000003600)="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", 0x4ee}], 0x3}}], 0x6, 0x240048d0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$int_in(r0, 0x135af252f6710b56, &(0x7f0000000040)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 3.648128305s ago: executing program 0 (id=152): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070005020000002dbd4e00fedbdf25"], 0x10}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r5, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@ipv4_getnexthop={0x60, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r9}, @NHA_OIF={0x8, 0x5, r10}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) 3.133510742s ago: executing program 3 (id=160): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000050000000000000000000000000000000000db0d94434b92909cc7f9e3b9a12cbdd5296f000100005925f0deb44a87b80360862e352e9498249dc402325c92ab88bf12ff95c845369f73657f182683a0898e1c4075e3bcf79b79a39ed861389024c244b7c7be5afa273e613cbd7f5d4a7d29b80135a8c7ebe92da226da7883e0c97f12ae9f1b4b145bf7c45cbb05d985f1f056fd1161ffa0d0e8e8c907d55c7ad2247167e627a2a3ad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$qrtrtun(0xffffffffffffffff, &(0x7f00000005c0)=""/154, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000000008fc30bfe000000000000b23ae59341100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$hiddev(&(0x7f0000000400), 0x7fff, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.182095747s ago: executing program 3 (id=168): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000400), 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=']) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @opaque="5fb31c3f9a6150addd"}}}}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2.163033697s ago: executing program 4 (id=170): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x1d9}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000940), 0x2, 0x5b3, &(0x7f0000000cc0)="$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") mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x20, 0x20, 0x9, 0x6f, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@end, @generic={0x7, 0xe, "3dbe8ef381e0dcfd331dcea0"}, @timestamp={0x44, 0x18, 0x92, 0x0, 0x7, [0x8, 0xfff, 0x81, 0xfffffff9, 0x9]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000080000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) fdatasync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") mknod$loop(&(0x7f0000000000)='.\x02\x00', 0x800, 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x5) 2.00129366s ago: executing program 4 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_MASK={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) 1.883950441s ago: executing program 3 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x12}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c9b21a374f6638834dd0b468ad5c947564000b310b", @ANYRES16=r6, @ANYBLOB="00032abd7000fddbdf250d00000008000500050000000800050000000000080004000100000008000600ffff00000c00028008000300020000000800050006000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x44f0) r11 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r11, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.853440472s ago: executing program 4 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0xfd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @remote}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.515175097s ago: executing program 3 (id=177): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x1d9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000940), 0x2, 0x5b3, &(0x7f0000000cc0)="$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") mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x20, 0x20, 0x9, 0x6f, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@end, @generic={0x7, 0xe, "3dbe8ef381e0dcfd331dcea0"}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x7, [0x8, 0xfff, 0x81, 0xfffffff9]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000080000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") mknod$loop(&(0x7f0000000000)='.\x02\x00', 0x800, 0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x5) 1.428931988s ago: executing program 4 (id=178): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000050000000000000000000000000000000000db0d94434b92909cc7f9e3b9a12cbdd5296f000100005925f0deb44a87b80360862e352e9498249dc402325c92ab88bf12ff95c845369f73657f182683a0898e1c4075e3bcf79b79a39ed861389024c244b7c7be5afa273e613cbd7f5d4a7d29b80135a8c7ebe92da226da7883e0c97f12ae9f1b4b145bf7c45cbb05d985f1f056fd1161ffa0d0e8e8c907d55c7ad2247167e627a2a3ad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$qrtrtun(0xffffffffffffffff, &(0x7f00000005c0)=""/154, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000000008fc30bfe000000000000b23ae59341100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$hiddev(&(0x7f0000000400), 0x7fff, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.263964431s ago: executing program 1 (id=180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r3, 0x5608, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/142, 0x8e, 0x100) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}, 0x1, 0x4000}, 0x0) 1.245405061s ago: executing program 1 (id=181): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.133871323s ago: executing program 1 (id=182): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x6770c000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, 0x0, &(0x7f0000000840)=r6}, 0x20) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x800}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a8640", 0x16}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000180)=ANY=[], 0x8) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="ed55b38ce3ce9347", 0x8}, {&(0x7f0000000600)="3198c4f9d18ddc1bc5390ded3788f17df20a80257827884b1dd3accd79eb561917dc72261475bec40ab13b2c18e845268748628117358e4771254c32644f8f07ed21b82304e74f2ee2739d635b9cd0a194b4f70d1f4febd79f53d943cac7f683fb26aac422fb8697a5947ec4ffa0d3458781694f756dcf5fbdbf171a7b0e5aed689125ad9ef1cd14da432bbe92a921d499562c651fdcecab9a65cef8b8de07000047c6364ff21ed21ec6d2e90121e593a663a77abb1626f8cbef06da2a963651583ad528ff57b868db336dff21649454773c286e5007f975fad88d49daa05404048b276f4f4b41", 0xe7}, {&(0x7f0000003600)="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", 0x4ee}], 0x3}}], 0x6, 0x240048d0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$int_in(r0, 0x135af252f6710b56, &(0x7f0000000040)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 1.102466643s ago: executing program 3 (id=183): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x2, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) geteuid() r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd47, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x208000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r9, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008802}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x7, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 925.941606ms ago: executing program 1 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_es_shrink\x00', r1, 0x0, 0x655}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000200)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r8], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 862.579397ms ago: executing program 1 (id=185): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket(0x18, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x5, 0x0, 0x1, 0x1ff, 0x6, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000004400), 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) gettid() rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffefffffffff]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./cgroup/../file0\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r4}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) msgget$private(0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 573.924431ms ago: executing program 3 (id=188): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2e43, &(0x7f00000000c0)={0x0, 0x3c3, 0x800, 0x1, 0x20c, 0x0, r6}, &(0x7f0000000140), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r7, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 553.156122ms ago: executing program 2 (id=189): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x6770c000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, 0x0, &(0x7f0000000840)=r6}, 0x20) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd72", 0xc00}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a8640", 0x16}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000180)=ANY=[], 0x8) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="ed55b38ce3ce9347", 0x8}, {&(0x7f0000000600)="3198c4f9d18ddc1bc5390ded3788f17df20a80257827884b1dd3accd79eb561917dc72261475bec40ab13b2c18e845268748628117358e4771254c32644f8f07ed21b82304e74f2ee2739d635b9cd0a194b4f70d1f4febd79f53d943cac7f683fb26aac422fb8697a5947ec4ffa0d3458781694f756dcf5fbdbf171a7b0e5aed689125ad9ef1cd14da432bbe92a921d499562c651fdcecab9a65cef8b8de07000047c6364ff21ed21ec6d2e90121e593a663a77abb1626f8cbef06da2a963651583ad528ff57b868db336dff21649454773c286e5007f975fad88d49daa05404048b276f4f4b41", 0xe7}, {&(0x7f0000003600)="8fa331ee0d7e474682d4203a96c5986ff5147fb91752533227bdec8e33220b45d73038cb17b4b27c872683fc794692d1bfff1930f3bd66b31a5ab5910029f3a987a7d261bf489bfc0a70f8245594a5e13e881633df5a0fc40399d73b6dcebb24c0c66330a502f0e7887790464672703b98456417955a5f5826e879753c5230353618f02b7de2764c4d3e33b78c7b18af6719124fe1f8c87c8bb183a5548b7901d6fc86028683c5bc360bcb186100e3deb9fd8cedc68e9854bebd1a346db0ab99e673339a75ac68756a47aabf6fdd74796bf3295ec795400327827c181a036bf5fb95dadac7beabf09c6e5542a34420570b6d9bba73798537b0d1635d07d76fd0125d211b5d51a3a98681f3cf5db48b6a1393071162890bc6eca53d0f1c4cdee1fd2a5d8587f8d7a99372003c7daf72be0394028fcc5b08ecc7c2f602038a29cb36109a25408a6bf64ce9d835336875dda03e404a8dc66e136da26b04dc01753987d9d3bf7d1cbee42f363eb8c381913ef1a315f174215fc957cde45948f91fa4b5337689d63145b31b47d0b5477f171f97448f6bcfb8eb64a100ca168520c2eed1224bab13dbca5659a777bcb342c301f253ee9082abfcec4481289fc42f7acf35d215685feda30d1382c8cc7099c894de0cfb7cfdf6c49d04b2b9cf0ba142c30873e14a17eb9927535665f0b57d5e07c69d298ed1d4defbdc730da81be70fe84d8e68c164379c80be4877f8dbccd610a357e4a285acc71078e53eb3e6783099c500fc99361028fd93007f813adade8702d1c3b3b1ed18b4953f0c650b766750c5edbb495603aafb0b99e1bdd5ed8c4bb1c9b6fecdba46821d45b4c87b17090480d12d4ec8d40df1e88ddc02ca74706a4e0692ea11d14fe6a11bc471dbcec6696f296f2da5269ee6f0dbca5da0dbcadfa3ce6369463ce45f0dd1d8d0df3b289ec66aa54eb36ab5f5d59a241faa2b010177e7562a05239fcdf031e3e48a6e6683c75684939272928564d5c86e12356a131599eaaac3bf46c9f58df7051fa1cfffadce38785f734211db3769454b2451aadc1bc2c342e06725d9d7fcb97b2f7f34034c9fb01296901406a88b6ea9ffc5c8e5d97b2f50fd8c5a3ed97de4a88665bd83d7f25a4fed21325723a5ad915af19c8dee5ec32e7614507f10199a84a5cfda1cdcab8b725cdeb422ea81b0aa2bcd72be61a82ec3db3b5bcc6ef6e99544be9ea8d2e513507064cc031014127d07811c9888e390d8d49bf997259cf84fa8556e95ac8c1ae3e97ae359a25842214e8ccafd71b93c88ad1266a9e7ddcee8caa701f03ef4a4f4b2323149e6060c395418c8dd07b43215227e2297409f0120206589da4aa7d347c408cf042ee9a6661cac5726dd47f8b5f23cea52482e106832d91f468b23c0dc08726111c5423f8436c067433c3a07304ad7e412a54def650e1322cc27c6d69e0d36c0cc5093affc3e307188f2dd215b0e83d4962f48509d23cffb9bfa42db1cf30a9fdc06a5ed7e711b43ca7f53ef50138a25e410f2b14fd41dfa0f6f3976afc79e68a6e501cf17e3ad9578466b7d605157bb272f939d98b9141a0126220d655f5cf9a34467d2b56c5561f68d746ac01881ddb241c4fb8aada1461d94221aa000d22ffa17a7d7d32d30583f59603d08fb9e1022660763b8889f52b8b8bb103f33a91d008aa4b2bb741558cba63dc25e3a344f77feae82234258999a0a557d07221466af74426975918bb48f6d35b9a497abaaebc8a0c5752d851c81960bec1e54d92cc51ca6cfec33", 0x4ee}], 0x3}}], 0x6, 0x240048d0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$int_in(r0, 0x135af252f6710b56, &(0x7f0000000040)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 398.926374ms ago: executing program 2 (id=190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x400000000009}}]}, 0x3, 0x45d, &(0x7f0000000e80)="$eJzs3M9vFFUcAPDvTLtFBGxF/MEPtYrGxh8tBVQOHtBo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1sztDd5fdpV12u9X9fJKB92be9L3vvnnbN/N2G8DQmsz+SSK2R8QfETFeyzYWmKz9d+Pahfmb1y7MJ1GpvPN3Ui13/dqF+aJocd62PDOVRqSfJ7G3Rb3L586fmiuXF8/m+ZmV0x/OLJ87/8LJ03MnFk8snjl45MjhQ7Mvv3TwxZ7EmbXp+p5PlvbtfvP9r9869mVD/E1x9Mhkp4NPVyo9rm6wdtSlk9EBNoR1GYmIrLtK1fE/HiOx2nnj8cZnA20c0FeVSqWyrf3hixXgfyyJxrwhD8Oi+EWf3f8WW/Mk4Gj/ph8Dd/XV2g1QFveNfKsdGY00L1Nqur/tpcmIeO/iP99mW/TnOQQAQIMfs/nP863mf2k8VFfuvnxtaCIi7o+InRHxQETsiogHI6plH46IR9ZZf/Miye3zn/RKV4GtUTb/eyVf22qc/xWzv5gYyXM7qvGXkuMny4sH8tdkKkpbsvxshzp+ev33r9odq5//ZVtWfzEXzNtxZXRL4zkLcytzdxNzvauXIvaMtoo/ubUSkETE7ojY02UdJ5/9fl+7Y3eOv4MerDNVvot4ptb/F6Mp/kLSeX1y5p4oLx6YKa6K2/362+W329V/V/H3QNb/97a8/m/FP5HUr9cur7+Oy39+0faeptvrfyx5t5oey/d9PLeycnY2Yiw5Vmt0/f6Dq+cW+aJ8Fv/U/tbjf2esvhJ7IyK7iB+NiMci4vG87U9ExJMRsb9D/L+89tQH3cffX1n8C6v9f/TO/b+aGIvmPa0TI6d+/qGh0onb4r/Zuf8PV1NT+Z61vP+tpV3dXc0AAADw35NGxPZI0ulb6TSdnq59Xn5XRFpeWl557vjSR2cWat8RmIhIiydd43XPQ2fz2/pa/lJE1D5aUBw/lD83/mZkazU/Pb9UXhh08DDktrUZ/5m/RgbdOqDvfF8LhpfxD8PL+IfhZfzD8Gox/rcOoh3Axmv1+//TAbQD2HhN49+yHwwR9/8wvIx/GF7GPwyl5a1x5y/Jd0wUP6nL0wecKN76ev+To7Sus7ZshldjXf2ebopmbNpEaROOi+JvGq2l8Ma/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTDvwEAAP//7hXV/g==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 389.408844ms ago: executing program 4 (id=191): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000dd95c6a092bbe3c69600000000320000000800179f"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_open_dev$usbfs(0x0, 0x205, 0x8401) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000002000000, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mq_open(&(0x7f0000000180)='-{#,{\x00', 0x40, 0x0, &(0x7f00000001c0)={0x6, 0xb, 0x2, 0x2}) mq_timedreceive(r7, &(0x7f0000000300)=""/68, 0x44, 0x9, &(0x7f0000000280)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, 0x0, &(0x7f0000000400)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x52f}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) clock_gettime(0x0, &(0x7f0000000080)) 291.991455ms ago: executing program 2 (id=192): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 267.943796ms ago: executing program 2 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x1, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x41, 0x105}}], 0x18}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 206.529527ms ago: executing program 2 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x80003, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x39) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x6}, {0x4, 0xfff2}, {0x7, 0xb}}, [{0x8}]}, 0x2c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 119.849448ms ago: executing program 0 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009", 0x18}, {&(0x7f0000000080)="fcd2c377111757974e", 0x9}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r4, 0x5608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00\n'], 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000540)="f2435f01000880672635c26300008b3f452e9a5bf92636c955ec7bd256eb5d0fe0ac38d3faa1f083011334e2655539ca5ae5c0fbd40df4ed0288e7b647faee1b37aec2d1781974375dc5d1060b92b5061792c976fb3068f13a8f3a7d2faaef76337ac32fff5c7e0c1b2133c9407b26ee0db15fbda95f3768e5e79be3d9cf47b733a04de0a4ca3dd3ebdb5d5469044203e791c0c33bf880befd589159430d4256d85d934de1a149c993e6f9d1435679b28f96181976f31e6ba0d70c7b5ae49ec73ed9f980f6a9bed47af857a8b8f96253151436fd4e8e4fa68e19b312618c9826f23698901ce96b11371701707f21048a73", 0xf1, 0x80, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0x3, 0x6, @multicast}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 22.92763ms ago: executing program 2 (id=196): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x12}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c9b21a374f6638834dd0b468ad5c947564000b310b", @ANYRES16=r6, @ANYBLOB="00032abd7000fddbdf250d00000008000500050000000800050000000000080004000100000008000600ffff00000c00028008000300020000000800050006000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r9, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000100)='stat\x00') (async) syz_open_procfs(r5, &(0x7f0000000100)='stat\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0xff, 0x7, 0x3, 0x0, 0x4, 0x40844, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x84c4, 0x1, 0x401, 0x5, 0x3, 0xe, 0xa0cc, 0x0, 0x10, 0x0, 0x3}, r5, 0x1, 0xffffffffffffffff, 0x1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 28.399325][ T29] audit: type=1400 audit(1751533035.782:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.400514][ T3294] cgroup: Unknown subsys name 'net' [ 28.422092][ T29] audit: type=1400 audit(1751533035.782:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.449524][ T29] audit: type=1400 audit(1751533035.822:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.605159][ T3294] cgroup: Unknown subsys name 'cpuset' [ 28.611426][ T3294] cgroup: Unknown subsys name 'rlimit' [ 28.774575][ T29] audit: type=1400 audit(1751533036.162:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.798012][ T29] audit: type=1400 audit(1751533036.162:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.818561][ T29] audit: type=1400 audit(1751533036.162:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.839016][ T29] audit: type=1400 audit(1751533036.162:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.859351][ T29] audit: type=1400 audit(1751533036.172:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.884161][ T29] audit: type=1400 audit(1751533036.172:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.913615][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.922602][ T29] audit: type=1400 audit(1751533036.302:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.964929][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.884004][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.911248][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.967658][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 30.976506][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.007186][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.014298][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.021947][ T3305] bridge_slave_0: entered allmulticast mode [ 31.028413][ T3305] bridge_slave_0: entered promiscuous mode [ 31.037984][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.045197][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.052423][ T3305] bridge_slave_1: entered allmulticast mode [ 31.058956][ T3305] bridge_slave_1: entered promiscuous mode [ 31.108383][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.121094][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.130681][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.137869][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.145358][ T3304] bridge_slave_0: entered allmulticast mode [ 31.151773][ T3304] bridge_slave_0: entered promiscuous mode [ 31.176535][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.183726][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.190902][ T3304] bridge_slave_1: entered allmulticast mode [ 31.197453][ T3304] bridge_slave_1: entered promiscuous mode [ 31.215767][ T3305] team0: Port device team_slave_0 added [ 31.241676][ T3305] team0: Port device team_slave_1 added [ 31.263022][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.276879][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.284008][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.291476][ T3314] bridge_slave_0: entered allmulticast mode [ 31.297983][ T3314] bridge_slave_0: entered promiscuous mode [ 31.310405][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.319610][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.326753][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.333943][ T3310] bridge_slave_0: entered allmulticast mode [ 31.340384][ T3310] bridge_slave_0: entered promiscuous mode [ 31.346998][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.354142][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.361394][ T3314] bridge_slave_1: entered allmulticast mode [ 31.367811][ T3314] bridge_slave_1: entered promiscuous mode [ 31.374442][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.381426][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.407379][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.420404][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.427421][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.453440][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.469312][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.476423][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.483638][ T3310] bridge_slave_1: entered allmulticast mode [ 31.490177][ T3310] bridge_slave_1: entered promiscuous mode [ 31.501913][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 31.535374][ T3304] team0: Port device team_slave_0 added [ 31.552447][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.562993][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.573327][ T3304] team0: Port device team_slave_1 added [ 31.582442][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.608878][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.635233][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.642237][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.668281][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.694679][ T3314] team0: Port device team_slave_0 added [ 31.702483][ T3305] hsr_slave_0: entered promiscuous mode [ 31.709559][ T3305] hsr_slave_1: entered promiscuous mode [ 31.716208][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.723176][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.749155][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.766069][ T3310] team0: Port device team_slave_0 added [ 31.771834][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.778929][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.786332][ T3312] bridge_slave_0: entered allmulticast mode [ 31.792624][ T3312] bridge_slave_0: entered promiscuous mode [ 31.799905][ T3314] team0: Port device team_slave_1 added [ 31.819840][ T3310] team0: Port device team_slave_1 added [ 31.830843][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.838004][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.845271][ T3312] bridge_slave_1: entered allmulticast mode [ 31.851747][ T3312] bridge_slave_1: entered promiscuous mode [ 31.863725][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.870794][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.896745][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.933379][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.940441][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.966516][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.977602][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.984590][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.010645][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.030530][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.049577][ T3304] hsr_slave_0: entered promiscuous mode [ 32.055777][ T3304] hsr_slave_1: entered promiscuous mode [ 32.061596][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.069259][ T3304] Cannot create hsr debugfs directory [ 32.075025][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.081980][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.107995][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.122339][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.189900][ T3314] hsr_slave_0: entered promiscuous mode [ 32.196102][ T3314] hsr_slave_1: entered promiscuous mode [ 32.201922][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.209501][ T3314] Cannot create hsr debugfs directory [ 32.226664][ T3310] hsr_slave_0: entered promiscuous mode [ 32.232743][ T3310] hsr_slave_1: entered promiscuous mode [ 32.238758][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.246384][ T3310] Cannot create hsr debugfs directory [ 32.252965][ T3312] team0: Port device team_slave_0 added [ 32.259686][ T3312] team0: Port device team_slave_1 added [ 32.316998][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.323995][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.350066][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.363788][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.370802][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.396886][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.481091][ T3312] hsr_slave_0: entered promiscuous mode [ 32.488120][ T3312] hsr_slave_1: entered promiscuous mode [ 32.493955][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.501561][ T3312] Cannot create hsr debugfs directory [ 32.535830][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.551961][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.562963][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.573900][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.598741][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.607780][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.628107][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.636961][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.669587][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.678144][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.688666][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.700539][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.746258][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.755194][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.774119][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.782980][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.821696][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.831638][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.844286][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.859085][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.868193][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.882199][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.892092][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.907431][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.930966][ T267] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.938103][ T267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.946951][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.954069][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.975991][ T267] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.983091][ T267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.991928][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.999012][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.018989][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.041088][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.067717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.074914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.083711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.090816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.102617][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.139733][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.159108][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.181658][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.190693][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.197853][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.207089][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.214196][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.230081][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.262741][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.276288][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.295948][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.303064][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.314300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.321481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.335317][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.396508][ T3305] veth0_vlan: entered promiscuous mode [ 33.418158][ T3305] veth1_vlan: entered promiscuous mode [ 33.454732][ T3305] veth0_macvtap: entered promiscuous mode [ 33.472570][ T3305] veth1_macvtap: entered promiscuous mode [ 33.516078][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.524314][ T3310] veth0_vlan: entered promiscuous mode [ 33.532588][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.542301][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.551940][ T3310] veth1_vlan: entered promiscuous mode [ 33.560356][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.575857][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.584683][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593406][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.602342][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.631941][ T3304] veth0_vlan: entered promiscuous mode [ 33.656664][ T3304] veth1_vlan: entered promiscuous mode [ 33.676924][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.676940][ T29] audit: type=1400 audit(1751533041.062:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.qObrhH/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.713141][ T3304] veth0_macvtap: entered promiscuous mode [ 33.728198][ T3310] veth0_macvtap: entered promiscuous mode [ 33.735609][ T29] audit: type=1400 audit(1751533041.092:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.750077][ T3310] veth1_macvtap: entered promiscuous mode [ 33.757626][ T29] audit: type=1400 audit(1751533041.092:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.qObrhH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.772528][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.788560][ T29] audit: type=1400 audit(1751533041.092:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.796825][ T3304] veth1_macvtap: entered promiscuous mode [ 33.817601][ T29] audit: type=1400 audit(1751533041.092:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.qObrhH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.850035][ T29] audit: type=1400 audit(1751533041.092:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.qObrhH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.862736][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.877568][ T29] audit: type=1400 audit(1751533041.102:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.895976][ T3314] veth0_vlan: entered promiscuous mode [ 33.904339][ T29] audit: type=1400 audit(1751533041.102:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.932550][ T29] audit: type=1400 audit(1751533041.102:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.960968][ T3314] veth1_vlan: entered promiscuous mode [ 33.961421][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.989634][ T29] audit: type=1400 audit(1751533041.372:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.002007][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.022746][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031656][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.040493][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.049256][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.067266][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.081930][ T3469] mmap: syz.1.2 (3469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.082564][ T3314] veth0_macvtap: entered promiscuous mode [ 34.105213][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.114076][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.122939][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.131779][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.156129][ T3314] veth1_macvtap: entered promiscuous mode [ 34.194150][ T3312] veth0_vlan: entered promiscuous mode [ 34.223940][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.231543][ T3476] loop3: detected capacity change from 0 to 512 [ 34.236416][ T3312] veth1_vlan: entered promiscuous mode [ 34.279126][ T3476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.295008][ T3476] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.295541][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.313489][ T3312] veth0_macvtap: entered promiscuous mode [ 34.321882][ T3476] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.4: iget: bad i_size value: 2533274857506816 [ 34.335484][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.344234][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.353126][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.362101][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.385393][ T3312] veth1_macvtap: entered promiscuous mode [ 34.395022][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.426188][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.433669][ T3485] loop1: detected capacity change from 0 to 2048 [ 34.459893][ T3490] loop3: detected capacity change from 0 to 1024 [ 34.461443][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.491882][ T3485] loop1: p1 < > p4 [ 34.506896][ T3485] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.517217][ T3490] ======================================================= [ 34.517217][ T3490] WARNING: The mand mount option has been deprecated and [ 34.517217][ T3490] and is ignored by this kernel. Remove the mand [ 34.517217][ T3490] option from the mount to silence this warning. [ 34.517217][ T3490] ======================================================= [ 34.555002][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.563806][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.572743][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.581527][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.627911][ T3490] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.636072][ T3490] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 34.636730][ T3494] team_slave_0: entered promiscuous mode [ 34.648405][ T3494] team_slave_1: entered promiscuous mode [ 34.656068][ T3485] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 34.666572][ T3485] SELinux: failed to load policy [ 34.672543][ T3494] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 34.685022][ T3490] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 34.709965][ T3490] geneve1: entered promiscuous mode [ 34.725652][ T2996] loop1: p1 < > p4 [ 34.730816][ T3490] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 34.742315][ T2996] loop1: p4 size 8388608 extends beyond EOD, truncated [ 34.759166][ T3499] vhci_hcd: invalid port number 96 [ 34.764410][ T3499] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 34.792930][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 34.818271][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.832485][ T3497] loop0: detected capacity change from 0 to 8192 [ 34.846094][ T3503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 35.019514][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.028362][ T3496] FAT-fs (loop0): Filesystem has been set read-only [ 35.042635][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.051500][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.062366][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.082348][ T3499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9'. [ 35.084392][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.103192][ T3499] loop2: detected capacity change from 0 to 512 [ 35.130676][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.130880][ T3499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.152596][ T3499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.173641][ T3499] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.204560][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.213289][ T3529] loop1: detected capacity change from 0 to 1764 [ 35.225756][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.234927][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.243631][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.252500][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.261637][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.270530][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.279636][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.288470][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.289728][ T3524] loop3: detected capacity change from 0 to 2048 [ 35.297337][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.313242][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.321986][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.330953][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.333008][ T3499] EXT4-fs (loop2): 1 truncate cleaned up [ 35.340047][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.355243][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.364633][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.365328][ T3491] loop3: p1 < > p4 [ 35.373464][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.380929][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.398854][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.408959][ T3491] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.409672][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.425440][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.438921][ T3524] loop3: p1 < > p4 [ 35.443635][ T3496] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.448135][ T3524] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.461703][ T3499] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.484226][ T2996] loop3: p1 < > p4 [ 35.492900][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.594298][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.650859][ T3538] loop2: detected capacity change from 0 to 512 [ 35.657890][ T3534] loop1: detected capacity change from 0 to 8192 [ 35.661139][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.665789][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.713527][ T3538] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 35.724129][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.747529][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.862734][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.871602][ T3548] FAT-fs (loop1): Filesystem has been set read-only [ 35.890963][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.899814][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.908542][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.917519][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.926726][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.935654][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.944455][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.953177][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.963488][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.972277][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 35.985727][ T3552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25'. [ 36.007854][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.016656][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.052178][ T3557] loop2: detected capacity change from 0 to 1024 [ 36.064473][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.097041][ T3559] loop4: detected capacity change from 0 to 128 [ 36.113710][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.113942][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.122672][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.143470][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.152290][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.161069][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.170677][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.187444][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.198294][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.206565][ T3564] loop3: detected capacity change from 0 to 764 [ 36.207034][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.222516][ T3557] Illegal XDP return value 4294967274 on prog (id 18) dev syz_tun, expect packet loss! [ 36.233092][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.249164][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.257943][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.267997][ T3564] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.268772][ T3548] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.364744][ C0] hrtimer: interrupt took 47807 ns [ 36.373799][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.496968][ T3569] loop4: detected capacity change from 0 to 8192 [ 36.708530][ T3579] netlink: 112 bytes leftover after parsing attributes in process `syz.2.35'. [ 36.738067][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.746958][ T3568] FAT-fs (loop4): Filesystem has been set read-only [ 36.809095][ T3580] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.821113][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.859340][ T3585] loop1: detected capacity change from 0 to 512 [ 36.888220][ T3590] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 36.897141][ T3590] netlink: 156 bytes leftover after parsing attributes in process `syz.2.37'. [ 36.907675][ T3585] journal_path: Non-blockdev passed as './bus' [ 36.913918][ T3585] EXT4-fs: error: could not find journal device path [ 36.941259][ T3591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 36.950171][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.985826][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 36.997880][ T3580] loop3: detected capacity change from 0 to 8192 [ 37.081025][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.135634][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.144860][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.156323][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.175273][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.184178][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.196633][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.205603][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.214336][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.226709][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.237252][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.246476][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.256511][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.265478][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.274216][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.284207][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.311950][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.374646][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.383417][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.393272][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.439315][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.454595][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.463260][ T3568] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 37.649544][ T3604] loop4: detected capacity change from 0 to 164 [ 37.663364][ T3605] loop2: detected capacity change from 0 to 512 [ 37.689519][ T3607] netlink: 80 bytes leftover after parsing attributes in process `syz.0.43'. [ 37.701395][ T3605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.751223][ T3607] infiniband syz2: set active [ 37.756048][ T3607] infiniband syz2: added veth0_to_bond [ 37.763325][ T3605] EXT4-fs (loop2): 1 truncate cleaned up [ 37.769274][ T3607] RDS/IB: syz2: added [ 37.773359][ T3607] smc: adding ib device syz2 with port count 1 [ 37.779587][ T3607] smc: ib device syz2 port 1 has pnetid [ 37.780134][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.978791][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.080459][ T3621] loop3: detected capacity change from 0 to 512 [ 38.112608][ T3621] ext4: Unknown parameter 'mask' [ 38.163157][ T3627] loop2: detected capacity change from 0 to 2048 [ 38.175212][ T3621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 38.204853][ T3541] loop2: p1 < > p4 [ 38.209410][ T3541] loop2: p4 size 8388608 extends beyond EOD, truncated [ 38.218649][ T3627] loop2: p1 < > p4 [ 38.223216][ T3627] loop2: p4 size 8388608 extends beyond EOD, truncated [ 38.307700][ T3620] SELinux: ebitmap: truncated map [ 38.313338][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 38.323180][ T3620] SELinux: failed to load policy [ 38.405540][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.417655][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 38.417769][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 38.459972][ T3634] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.531488][ T3607] syz.0.43 (3607) used greatest stack depth: 10616 bytes left [ 38.620592][ T3639] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 38.636892][ T3644] loop0: detected capacity change from 0 to 128 [ 38.682321][ T3639] syzkaller1: entered promiscuous mode [ 38.687966][ T3639] syzkaller1: entered allmulticast mode [ 38.706705][ T3621] syz.3.48 (3621) used greatest stack depth: 10360 bytes left [ 38.718274][ T3648] loop0: detected capacity change from 0 to 512 [ 38.777462][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.823503][ T3648] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.861742][ T3650] loop3: detected capacity change from 0 to 8192 [ 38.893684][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 38.893702][ T29] audit: type=1400 audit(1751533046.272:569): avc: denied { watch_reads } for pid=3655 comm="syz.4.56" path="/8/file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.945693][ T3663] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 38.957236][ T3648] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.54: iget: bad i_size value: 2533274857506816 [ 38.991208][ T29] audit: type=1400 audit(1751533046.342:570): avc: denied { relabelto } for pid=3655 comm="syz.4.56" name="file0" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:nvram_device_t:s0" [ 39.017630][ T29] audit: type=1400 audit(1751533046.342:571): avc: denied { associate } for pid=3655 comm="syz.4.56" name="file0" dev="tmpfs" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:nvram_device_t:s0" [ 39.053536][ T3667] loop1: detected capacity change from 0 to 2048 [ 39.092199][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.122404][ T29] audit: type=1400 audit(1751533046.372:572): avc: denied { read } for pid=3655 comm="syz.4.56" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.145943][ T29] audit: type=1400 audit(1751533046.372:573): avc: denied { open } for pid=3655 comm="syz.4.56" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.170298][ T29] audit: type=1326 audit(1751533046.432:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 39.193506][ T29] audit: type=1326 audit(1751533046.432:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 39.216697][ T29] audit: type=1326 audit(1751533046.432:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 39.240215][ T29] audit: type=1326 audit(1751533046.472:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 39.263728][ T29] audit: type=1326 audit(1751533046.482:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 39.316912][ T3672] SELinux: ebitmap: truncated map [ 39.322691][ T3672] SELinux: failed to load policy [ 39.328473][ T3541] loop1: p1 < > p4 [ 39.359070][ T3541] loop1: p4 size 8388608 extends beyond EOD, truncated [ 39.369967][ T3667] loop1: p1 < > p4 [ 39.375000][ T3667] loop1: p4 size 8388608 extends beyond EOD, truncated [ 39.471166][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 39.486321][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.559893][ T3687] loop0: detected capacity change from 0 to 128 [ 39.582169][ T3691] netlink: 80 bytes leftover after parsing attributes in process `syz.4.66'. [ 39.616334][ T3691] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 39.821727][ T3693] loop1: detected capacity change from 0 to 8192 [ 39.844298][ T3696] loop0: detected capacity change from 0 to 8192 [ 40.009655][ T3701] loop3: detected capacity change from 0 to 512 [ 40.010517][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.024945][ T3695] FAT-fs (loop0): Filesystem has been set read-only [ 40.044839][ T3701] ext4: Bad value for 'stripe' [ 40.053083][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.087776][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.120142][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.134632][ T3705] loop3: detected capacity change from 0 to 1024 [ 40.151367][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.154392][ T3705] EXT4-fs: Ignoring removed orlov option [ 40.160278][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.178432][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.187468][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.196382][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.203039][ T3705] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 40.205261][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.232302][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.241138][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.252130][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.267842][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.287959][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.302373][ T3705] smc: net device bond0 applied user defined pnetid SYZ1 [ 40.315157][ T3705] smc: net device bond0 erased user defined pnetid SYZ1 [ 40.322693][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.334435][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.351007][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.374428][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.383209][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.392792][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.401793][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.498265][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.517089][ T3712] loop4: detected capacity change from 0 to 512 [ 40.541809][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.566334][ T3712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.577171][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.586251][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.595177][ T3712] EXT4-fs (loop4): 1 truncate cleaned up [ 40.601197][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.614407][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.625687][ T3695] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 40.717007][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.753092][ T3718] 9pnet_fd: Insufficient options for proto=fd [ 40.767813][ T3720] FAULT_INJECTION: forcing a failure. [ 40.767813][ T3720] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.780984][ T3720] CPU: 1 UID: 0 PID: 3720 Comm: syz.4.74 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 40.781019][ T3720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.781058][ T3720] Call Trace: [ 40.781065][ T3720] [ 40.781075][ T3720] __dump_stack+0x1d/0x30 [ 40.781100][ T3720] dump_stack_lvl+0xe8/0x140 [ 40.781169][ T3720] dump_stack+0x15/0x1b [ 40.781227][ T3720] should_fail_ex+0x265/0x280 [ 40.781269][ T3720] should_fail+0xb/0x20 [ 40.781298][ T3720] should_fail_usercopy+0x1a/0x20 [ 40.781342][ T3720] _copy_to_user+0x20/0xa0 [ 40.781370][ T3720] simple_read_from_buffer+0xb5/0x130 [ 40.781472][ T3720] proc_fail_nth_read+0x100/0x140 [ 40.781631][ T3720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.781667][ T3720] vfs_read+0x1a0/0x6f0 [ 40.781706][ T3720] ? __rcu_read_unlock+0x4f/0x70 [ 40.781733][ T3720] ? __rcu_read_unlock+0x4f/0x70 [ 40.781822][ T3720] ? __fget_files+0x184/0x1c0 [ 40.781844][ T3720] ksys_read+0xda/0x1a0 [ 40.781879][ T3720] __x64_sys_read+0x40/0x50 [ 40.782072][ T3720] x64_sys_call+0x2d77/0x2fb0 [ 40.782101][ T3720] do_syscall_64+0xd2/0x200 [ 40.782124][ T3720] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.782230][ T3720] ? clear_bhb_loop+0x40/0x90 [ 40.782258][ T3720] ? clear_bhb_loop+0x40/0x90 [ 40.782322][ T3720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.782443][ T3720] RIP: 0033:0x7fbf441ed33c [ 40.782468][ T3720] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.782490][ T3720] RSP: 002b:00007fbf42857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.782514][ T3720] RAX: ffffffffffffffda RBX: 00007fbf44415fa0 RCX: 00007fbf441ed33c [ 40.782595][ T3720] RDX: 000000000000000f RSI: 00007fbf428570a0 RDI: 0000000000000008 [ 40.782611][ T3720] RBP: 00007fbf42857090 R08: 0000000000000000 R09: 0000000000000000 [ 40.782627][ T3720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.782643][ T3720] R13: 0000000000000000 R14: 00007fbf44415fa0 R15: 00007ffcc087a7a8 [ 40.782667][ T3720] [ 41.103325][ T3717] loop0: detected capacity change from 0 to 2048 [ 41.127613][ T3733] loop4: detected capacity change from 0 to 128 [ 41.141236][ T3735] loop1: detected capacity change from 0 to 512 [ 41.148418][ T3735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.164023][ T3717] loop0: p1 < > p4 [ 41.169239][ T3717] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.192643][ T2996] loop0: p1 < > p4 [ 41.216685][ T2996] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.220015][ T3735] EXT4-fs (loop1): 1 truncate cleaned up [ 41.251762][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.287328][ T3717] SELinux: ebitmap: truncated map [ 41.313622][ T3717] SELinux: failed to load policy [ 41.449731][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 41.450221][ T3746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.82'. [ 41.472143][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.523257][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.527261][ T3742] loop0: detected capacity change from 0 to 2048 [ 41.594762][ T3742] loop0: p1 < > p4 [ 41.599386][ T3742] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.609714][ T2996] loop0: p1 < > p4 [ 41.618702][ T3748] loop4: detected capacity change from 0 to 8192 [ 41.627568][ T2996] loop0: p4 size 8388608 extends beyond EOD, truncated [ 41.667854][ T3742] SELinux: ebitmap: truncated map [ 41.675210][ T3748] loop4: p1 p3 p4 [ 41.679024][ T3748] loop4: p1 size 8390912 extends beyond EOD, truncated [ 41.686492][ T3742] SELinux: failed to load policy [ 41.703390][ T3748] loop4: p3 size 589824 extends beyond EOD, truncated [ 41.730349][ T2996] loop4: p1 p3 p4 [ 41.740426][ T2996] loop4: p1 size 8390912 extends beyond EOD, truncated [ 41.749289][ T3751] loop1: detected capacity change from 0 to 8192 [ 41.763184][ T2996] loop4: p3 size 589824 extends beyond EOD, truncated [ 41.773751][ T3708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 41.784070][ T3746] FAULT_INJECTION: forcing a failure. [ 41.784070][ T3746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.797270][ T3746] CPU: 1 UID: 0 PID: 3746 Comm: syz.4.82 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 41.797304][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.797319][ T3746] Call Trace: [ 41.797326][ T3746] [ 41.797334][ T3746] __dump_stack+0x1d/0x30 [ 41.797379][ T3746] dump_stack_lvl+0xe8/0x140 [ 41.797402][ T3746] dump_stack+0x15/0x1b [ 41.797418][ T3746] should_fail_ex+0x265/0x280 [ 41.797455][ T3746] should_fail+0xb/0x20 [ 41.797497][ T3746] should_fail_usercopy+0x1a/0x20 [ 41.797591][ T3746] _copy_to_user+0x20/0xa0 [ 41.797614][ T3746] put_itimerspec64+0x65/0x110 [ 41.797637][ T3746] __x64_sys_timer_gettime+0x9f/0xf0 [ 41.797676][ T3746] x64_sys_call+0xf89/0x2fb0 [ 41.797734][ T3746] do_syscall_64+0xd2/0x200 [ 41.797751][ T3746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.797784][ T3746] ? clear_bhb_loop+0x40/0x90 [ 41.797811][ T3746] ? clear_bhb_loop+0x40/0x90 [ 41.797962][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.797983][ T3746] RIP: 0033:0x7fbf441ee929 [ 41.797997][ T3746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.798031][ T3746] RSP: 002b:00007fbf42857038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 41.798054][ T3746] RAX: ffffffffffffffda RBX: 00007fbf44415fa0 RCX: 00007fbf441ee929 [ 41.798069][ T3746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.798080][ T3746] RBP: 00007fbf42857090 R08: 0000000000000000 R09: 0000000000000000 [ 41.798092][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.798103][ T3746] R13: 0000000000000000 R14: 00007fbf44415fa0 R15: 00007ffcc087a7a8 [ 41.798121][ T3746] [ 41.985976][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.005847][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.027367][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.038806][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.085052][ T3753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 42.106233][ T3759] 9pnet_fd: Insufficient options for proto=fd [ 42.248223][ T3764] loop0: detected capacity change from 0 to 512 [ 42.267892][ T3766] loop2: detected capacity change from 0 to 1024 [ 42.283554][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 42.295023][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 42.307767][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.318773][ T3764] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.365034][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.382584][ T3764] EXT4-fs (loop0): 1 truncate cleaned up [ 42.401194][ T3764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.487462][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.512861][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.524279][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.845738][ T3804] 9pnet_fd: Insufficient options for proto=fd [ 42.927584][ T3806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 43.100588][ T3799] loop2: detected capacity change from 0 to 2048 [ 43.218804][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.560718][ T3828] loop4: detected capacity change from 0 to 512 [ 43.568616][ T3830] capability: warning: `syz.2.95' uses 32-bit capabilities (legacy support in use) [ 43.606270][ T3828] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.619240][ T3828] EXT4-fs (loop4): 1 truncate cleaned up [ 43.638935][ T3828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.730948][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.791982][ T3842] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 43.803380][ T3841] IPVS: stopping master sync thread 3842 ... [ 43.896983][ T3846] bridge_slave_0: left allmulticast mode [ 43.902741][ T3846] bridge_slave_0: left promiscuous mode [ 43.908514][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.952777][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.967162][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 43.967191][ T29] audit: type=1400 audit(1751533051.352:704): avc: denied { ioctl } for pid=3845 comm="syz.1.106" path="socket:[5476]" dev="sockfs" ino=5476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.004010][ T3846] bridge_slave_1: left allmulticast mode [ 44.009761][ T3846] bridge_slave_1: left promiscuous mode [ 44.015542][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.136877][ T3852] loop2: detected capacity change from 0 to 512 [ 44.143822][ T3852] EXT4-fs: Ignoring removed oldalloc option [ 44.220746][ T3852] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.104: Parent and EA inode have the same ino 15 [ 44.243311][ T3852] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.104: Parent and EA inode have the same ino 15 [ 44.260290][ T3852] EXT4-fs (loop2): 1 orphan inode deleted [ 44.267166][ T3852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.317878][ T3846] bond0: (slave bond_slave_0): Releasing backup interface [ 44.446676][ T3846] bond0: (slave bond_slave_1): Releasing backup interface [ 44.470000][ T3846] team0: Port device team_slave_0 removed [ 44.500038][ T3846] team0: Port device team_slave_1 removed [ 44.526822][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.534422][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.565959][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.573464][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.635606][ T3862] loop4: detected capacity change from 0 to 2048 [ 44.645221][ T3850] lo speed is unknown, defaulting to 1000 [ 44.651067][ T3850] lo speed is unknown, defaulting to 1000 [ 44.657100][ T3850] lo speed is unknown, defaulting to 1000 [ 44.663143][ T3850] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.670830][ T3850] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.686855][ T3851] tipc: Started in network mode [ 44.691892][ T3851] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 44.699198][ T3851] tipc: Enabled bearer , priority 0 [ 44.714197][ T3850] lo speed is unknown, defaulting to 1000 [ 44.720388][ T3850] lo speed is unknown, defaulting to 1000 [ 44.726592][ T3850] lo speed is unknown, defaulting to 1000 [ 44.732671][ T3850] lo speed is unknown, defaulting to 1000 [ 44.738836][ T3850] lo speed is unknown, defaulting to 1000 [ 44.776786][ T3541] loop4: p1 < > p4 [ 44.781432][ T3541] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.803670][ T3862] loop4: p1 < > p4 [ 44.826309][ T3862] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.863357][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.891555][ T2996] loop4: p1 < > p4 [ 44.907361][ T3867] 9pnet_fd: Insufficient options for proto=fd [ 44.913489][ T2996] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.932423][ T3857] SELinux: ebitmap: truncated map [ 44.959395][ T3857] SELinux: failed to load policy [ 45.035477][ T3872] loop1: detected capacity change from 0 to 2048 [ 45.063805][ T29] audit: type=1400 audit(1751533052.432:705): avc: denied { create } for pid=3874 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.095643][ T3295] loop1: p1 < > p4 [ 45.098069][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 45.113798][ T3295] loop1: p4 size 8388608 extends beyond EOD, truncated [ 45.141754][ T3873] loop2: detected capacity change from 0 to 8192 [ 45.150006][ T3872] loop1: p1 < > p4 [ 45.157906][ T3872] loop1: p4 size 8388608 extends beyond EOD, truncated [ 45.265421][ T3865] SELinux: ebitmap: truncated map [ 45.294911][ T3865] SELinux: failed to load policy [ 45.314186][ T29] audit: type=1400 audit(1751533052.692:706): avc: denied { write } for pid=3878 comm="syz.4.112" name="kcm" dev="proc" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.314550][ T3879] loop4: detected capacity change from 0 to 1024 [ 45.426059][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.434758][ T3887] FAT-fs (loop2): Filesystem has been set read-only [ 45.441964][ T3879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.468971][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.477860][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.486611][ T29] audit: type=1326 audit(1751533052.872:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.509959][ T29] audit: type=1326 audit(1751533052.872:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.519781][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.533232][ T29] audit: type=1326 audit(1751533052.872:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.550665][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.564962][ T29] audit: type=1326 audit(1751533052.872:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.576463][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.596845][ T29] audit: type=1326 audit(1751533052.872:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.628917][ T29] audit: type=1326 audit(1751533052.872:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.652296][ T29] audit: type=1326 audit(1751533052.872:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 45.680995][ T3890] loop3: detected capacity change from 0 to 1024 [ 45.687507][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.697068][ T3890] EXT4-fs: Ignoring removed orlov option [ 45.703965][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.714004][ T3890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.722720][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.722756][ T3393] tipc: Node number set to 11578026 [ 45.731491][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.747120][ T3890] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.782618][ T3890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 45.792568][ T3890] System zones: 0-1, 3-12 [ 45.797786][ T3890] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.115: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.813134][ T3890] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.115: Failed to acquire dquot type 0 [ 45.824557][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.833178][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.833347][ T3890] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.115: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.852141][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.861778][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.875860][ T3890] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.115: Invalid inode bitmap blk 0 in block_group 0 [ 45.877318][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.897478][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.898674][ T31] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.906200][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.906232][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.934395][ T3890] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 45.937692][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.974488][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.983178][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 45.992096][ T3890] EXT4-fs (loop3): 1 orphan inode deleted [ 46.003257][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.011475][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.016170][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 46.026937][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.069319][ T3890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084668][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.106090][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.128805][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.164720][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.207528][ T3887] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 46.225594][ T3906] loop3: detected capacity change from 0 to 512 [ 46.233096][ T3905] loop4: detected capacity change from 0 to 2048 [ 46.240238][ T3906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.264066][ T3906] EXT4-fs (loop3): 1 truncate cleaned up [ 46.278503][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.307433][ T3491] loop4: p1 < > p4 [ 46.331334][ T3491] loop4: p4 size 8388608 extends beyond EOD, truncated [ 46.371860][ T3905] loop4: p1 < > p4 [ 46.387871][ T3911] tipc: Resetting bearer [ 46.401234][ T3905] loop4: p4 size 8388608 extends beyond EOD, truncated [ 46.412969][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.461931][ T3918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.120'. [ 46.511042][ T3920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 46.531436][ T3914] vlan0: entered promiscuous mode [ 46.547717][ T3901] SELinux: ebitmap: truncated map [ 46.565817][ T3901] SELinux: failed to load policy [ 46.625345][ T3927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.125'. [ 46.631572][ T3911] tipc: Enabling of bearer rejected, already enabled [ 46.693438][ T3913] lo speed is unknown, defaulting to 1000 [ 46.705853][ T3923] loop0: detected capacity change from 0 to 2048 [ 46.728494][ T3932] loop1: detected capacity change from 0 to 512 [ 46.750910][ T3932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.769950][ T3935] loop4: detected capacity change from 0 to 512 [ 46.771547][ T3541] loop0: p1 < > p4 [ 46.783018][ T3935] ext4: Unknown parameter 'permit_directio' [ 46.791350][ T3541] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.801159][ T3923] loop0: p1 < > p4 [ 46.805921][ T3923] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.814451][ T3932] EXT4-fs (loop1): 1 truncate cleaned up [ 46.820891][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.850480][ T3935] loop4: detected capacity change from 0 to 512 [ 46.883343][ T3935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.902602][ T3940] loop3: detected capacity change from 0 to 128 [ 46.909708][ T3940] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.925059][ T3940] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.926196][ T2996] loop0: p1 < > p4 [ 46.974262][ T3935] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 46.983345][ T2996] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.993160][ T3935] System zones: 0-2, 18-18, 34-34 [ 47.004026][ T3948] loop2: detected capacity change from 0 to 512 [ 47.036835][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.051032][ T3948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.078950][ T3948] EXT4-fs (loop2): 1 truncate cleaned up [ 47.088062][ T3935] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.109356][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.126639][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.137740][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.220475][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 47.241259][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 47.310611][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.354309][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.417713][ T3958] loop1: detected capacity change from 0 to 1024 [ 47.493309][ T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.510512][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.539464][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.563147][ T3966] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 47.658274][ T3969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 47.667196][ T3969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 47.700765][ T3972] bridge_slave_0: left allmulticast mode [ 47.706669][ T3972] bridge_slave_0: left promiscuous mode [ 47.712477][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.726549][ T3972] bridge_slave_1: left allmulticast mode [ 47.732302][ T3972] bridge_slave_1: left promiscuous mode [ 47.738029][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.751688][ T3972] bond0: (slave bond_slave_0): Releasing backup interface [ 47.778479][ T3972] bond0: (slave bond_slave_1): Releasing backup interface [ 47.793690][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.801292][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.810765][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.818266][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.839579][ T3972] bond0: (slave geneve1): Releasing backup interface [ 47.855553][ T3973] vlan0: entered promiscuous mode [ 47.867165][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.878284][ T3978] tipc: Enabling of bearer rejected, failed to enable media [ 48.023415][ T3987] FAULT_INJECTION: forcing a failure. [ 48.023415][ T3987] name failslab, interval 1, probability 0, space 0, times 0 [ 48.036232][ T3987] CPU: 1 UID: 0 PID: 3987 Comm: syz.3.143 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 48.036266][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.036333][ T3987] Call Trace: [ 48.036341][ T3987] [ 48.036351][ T3987] __dump_stack+0x1d/0x30 [ 48.036377][ T3987] dump_stack_lvl+0xe8/0x140 [ 48.036401][ T3987] dump_stack+0x15/0x1b [ 48.036421][ T3987] should_fail_ex+0x265/0x280 [ 48.036460][ T3987] should_failslab+0x8c/0xb0 [ 48.036514][ T3987] kmem_cache_alloc_noprof+0x50/0x310 [ 48.036547][ T3987] ? alloc_vfsmnt+0x2d/0x360 [ 48.036580][ T3987] alloc_vfsmnt+0x2d/0x360 [ 48.036695][ T3987] clone_mnt+0x41/0x750 [ 48.036730][ T3987] copy_tree+0xb7/0x820 [ 48.036825][ T3987] ? proc_alloc_inum+0x4f/0x70 [ 48.036865][ T3987] copy_mnt_ns+0x120/0x5e0 [ 48.036922][ T3987] ? kmem_cache_alloc_noprof+0x220/0x310 [ 48.036953][ T3987] ? create_new_namespaces+0x3c/0x3d0 [ 48.037029][ T3987] create_new_namespaces+0x83/0x3d0 [ 48.037068][ T3987] unshare_nsproxy_namespaces+0xe8/0x120 [ 48.037162][ T3987] ksys_unshare+0x3d0/0x6d0 [ 48.037241][ T3987] ? ksys_write+0x15f/0x1a0 [ 48.037414][ T3987] __x64_sys_unshare+0x1f/0x30 [ 48.037446][ T3987] x64_sys_call+0x2d4b/0x2fb0 [ 48.037517][ T3987] do_syscall_64+0xd2/0x200 [ 48.037539][ T3987] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.037650][ T3987] ? clear_bhb_loop+0x40/0x90 [ 48.037671][ T3987] ? clear_bhb_loop+0x40/0x90 [ 48.037697][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.037724][ T3987] RIP: 0033:0x7fbb10a1e929 [ 48.037750][ T3987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.037773][ T3987] RSP: 002b:00007fbb0f087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 48.037864][ T3987] RAX: ffffffffffffffda RBX: 00007fbb10c45fa0 RCX: 00007fbb10a1e929 [ 48.037876][ T3987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 48.037887][ T3987] RBP: 00007fbb0f087090 R08: 0000000000000000 R09: 0000000000000000 [ 48.037899][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.037910][ T3987] R13: 0000000000000000 R14: 00007fbb10c45fa0 R15: 00007ffd31592d28 [ 48.037931][ T3987] [ 48.269559][ T3985] loop1: detected capacity change from 0 to 8192 [ 48.451097][ T3996] loop3: detected capacity change from 0 to 512 [ 48.474544][ T3996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.499315][ T3996] EXT4-fs (loop3): 1 truncate cleaned up [ 48.519809][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.528530][ T3982] FAT-fs (loop1): Filesystem has been set read-only [ 48.539203][ T3996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.568713][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.577635][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.586830][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.596108][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.604792][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.613594][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.622442][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.631262][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.640168][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.650080][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.658860][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.678994][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.694059][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.706875][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.716807][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.726396][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.737728][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.749812][ T4010] loop4: detected capacity change from 0 to 128 [ 48.753124][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.826953][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.857207][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.875725][ T4024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.889151][ T4018] hub 6-0:1.0: USB hub found [ 48.895728][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.905196][ T4018] hub 6-0:1.0: 8 ports detected [ 48.941005][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.950332][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.959189][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.967954][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.984005][ T4027] FAULT_INJECTION: forcing a failure. [ 48.984005][ T4027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.995545][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 48.997154][ T4027] CPU: 1 UID: 0 PID: 4027 Comm: syz.3.156 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 48.997195][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.997215][ T4027] Call Trace: [ 48.997225][ T4027] [ 48.997233][ T4027] __dump_stack+0x1d/0x30 [ 48.997266][ T4027] dump_stack_lvl+0xe8/0x140 [ 48.997340][ T4027] dump_stack+0x15/0x1b [ 48.997364][ T4027] should_fail_ex+0x265/0x280 [ 48.997468][ T4027] should_fail+0xb/0x20 [ 48.997508][ T4027] should_fail_usercopy+0x1a/0x20 [ 48.997584][ T4027] _copy_from_user+0x1c/0xb0 [ 48.997636][ T4027] memdup_user+0x5e/0xd0 [ 48.997674][ T4027] strndup_user+0x68/0xb0 [ 48.997715][ T4027] perf_uprobe_init+0x48/0x150 [ 48.997797][ T4027] perf_uprobe_event_init+0xea/0x150 [ 48.997865][ T4027] perf_try_init_event+0xd6/0x540 [ 48.997902][ T4027] ? perf_event_alloc+0xb1c/0x1680 [ 48.997943][ T4027] perf_event_alloc+0xb27/0x1680 [ 48.998051][ T4027] __se_sys_perf_event_open+0x615/0x11c0 [ 48.998095][ T4027] ? __rcu_read_unlock+0x4f/0x70 [ 48.998136][ T4027] __x64_sys_perf_event_open+0x67/0x80 [ 48.998239][ T4027] x64_sys_call+0x27ec/0x2fb0 [ 48.998269][ T4027] do_syscall_64+0xd2/0x200 [ 48.998354][ T4027] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.998392][ T4027] ? clear_bhb_loop+0x40/0x90 [ 48.998422][ T4027] ? clear_bhb_loop+0x40/0x90 [ 48.998567][ T4027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.998599][ T4027] RIP: 0033:0x7fbb10a1e929 [ 48.998622][ T4027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.998649][ T4027] RSP: 002b:00007fbb0f087038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 48.998676][ T4027] RAX: ffffffffffffffda RBX: 00007fbb10c45fa0 RCX: 00007fbb10a1e929 [ 48.998706][ T4027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 48.998792][ T4027] RBP: 00007fbb0f087090 R08: 0000000000000000 R09: 0000000000000000 [ 48.998810][ T4027] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 48.998827][ T4027] R13: 0000000000000000 R14: 00007fbb10c45fa0 R15: 00007ffd31592d28 [ 48.998854][ T4027] [ 49.116202][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 49.116224][ T29] audit: type=1400 audit(1751533056.472:995): avc: denied { ioctl } for pid=4016 comm="syz.0.152" path="socket:[5726]" dev="sockfs" ino=5726 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.116675][ T3982] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 49.181122][ T4042] loop4: detected capacity change from 0 to 2048 [ 49.349054][ T3541] loop4: p1 < > p4 [ 49.353355][ T3541] loop4: p4 size 8388608 extends beyond EOD, truncated [ 49.355658][ T4050] loop3: detected capacity change from 0 to 8192 [ 49.395045][ T4042] loop4: p1 < > p4 [ 49.404789][ T4042] loop4: p4 size 8388608 extends beyond EOD, truncated [ 49.423063][ T29] audit: type=1400 audit(1751533056.802:996): avc: denied { load_policy } for pid=4037 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.445768][ T4038] SELinux: ebitmap: truncated map [ 49.466181][ T4038] SELinux: failed to load policy [ 49.533282][ T29] audit: type=1326 audit(1751533056.912:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.556624][ T29] audit: type=1326 audit(1751533056.912:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.580163][ T29] audit: type=1326 audit(1751533056.912:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.628735][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.631240][ T3491] udevd[3491]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.667260][ T29] audit: type=1326 audit(1751533057.052:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.681668][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.704951][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.709739][ T29] audit: type=1326 audit(1751533057.082:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.738123][ T29] audit: type=1326 audit(1751533057.092:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.743310][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.761461][ T29] audit: type=1326 audit(1751533057.092:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.794661][ T29] audit: type=1326 audit(1751533057.092:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb10a1e929 code=0x7ffc0000 [ 49.819608][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.835312][ T4078] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 49.883359][ T4084] FAULT_INJECTION: forcing a failure. [ 49.883359][ T4084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.896647][ T4084] CPU: 1 UID: 0 PID: 4084 Comm: syz.4.165 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 49.896753][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.896789][ T4084] Call Trace: [ 49.896797][ T4084] [ 49.896807][ T4084] __dump_stack+0x1d/0x30 [ 49.896834][ T4084] dump_stack_lvl+0xe8/0x140 [ 49.896859][ T4084] dump_stack+0x15/0x1b [ 49.896881][ T4084] should_fail_ex+0x265/0x280 [ 49.896956][ T4084] should_fail+0xb/0x20 [ 49.896985][ T4084] should_fail_usercopy+0x1a/0x20 [ 49.897018][ T4084] _copy_from_user+0x1c/0xb0 [ 49.897098][ T4084] ___sys_sendmsg+0xc1/0x1d0 [ 49.897241][ T4084] __x64_sys_sendmsg+0xd4/0x160 [ 49.897280][ T4084] x64_sys_call+0x2999/0x2fb0 [ 49.897334][ T4084] do_syscall_64+0xd2/0x200 [ 49.897358][ T4084] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.897391][ T4084] ? clear_bhb_loop+0x40/0x90 [ 49.897419][ T4084] ? clear_bhb_loop+0x40/0x90 [ 49.897481][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.897516][ T4084] RIP: 0033:0x7fbf441ee929 [ 49.897536][ T4084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.897559][ T4084] RSP: 002b:00007fbf42857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.897624][ T4084] RAX: ffffffffffffffda RBX: 00007fbf44415fa0 RCX: 00007fbf441ee929 [ 49.897636][ T4084] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 49.897648][ T4084] RBP: 00007fbf42857090 R08: 0000000000000000 R09: 0000000000000000 [ 49.897660][ T4084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.897743][ T4084] R13: 0000000000000000 R14: 00007fbf44415fa0 R15: 00007ffcc087a7a8 [ 49.897772][ T4084] [ 50.275037][ T4105] loop4: detected capacity change from 0 to 512 [ 50.310736][ T4105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.332445][ T4105] EXT4-fs (loop4): 1 truncate cleaned up [ 50.353081][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.426879][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.451702][ T4113] netlink: 5 bytes leftover after parsing attributes in process `syz.3.168'. [ 50.460972][ T4113] 0ªX¹¦D: renamed from gretap0 (while UP) [ 50.468606][ T4113] 0ªX¹¦D: entered allmulticast mode [ 50.474539][ T4113] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 50.656020][ T4143] loop3: detected capacity change from 0 to 2048 [ 50.694861][ T3541] loop3: p1 < > p4 [ 50.699516][ T3541] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.716060][ T4143] loop3: p1 < > p4 [ 50.720666][ T4143] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.809222][ T4143] SELinux: ebitmap: truncated map [ 50.833697][ T4143] SELinux: failed to load policy [ 50.850607][ T4170] veth0: entered promiscuous mode [ 50.857538][ T2996] loop3: p1 < > p4 [ 50.862015][ T2996] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.864954][ T4170] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 50.942203][ T4181] loop3: detected capacity change from 0 to 512 [ 50.961122][ T4181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.007567][ T4181] EXT4-fs (loop3): 1 truncate cleaned up [ 51.013751][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.034276][ T4192] loop1: detected capacity change from 0 to 512 [ 51.038358][ T4186] loop4: detected capacity change from 0 to 8192 [ 51.042362][ T4192] ext4: Bad value for 'stripe' [ 51.328041][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.432132][ T4232] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 51.444815][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.465330][ T4232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.825588][ T4232] syz.3.183 (4232) used greatest stack depth: 10024 bytes left [ 51.842712][ T4272] 9pnet_fd: Insufficient options for proto=fd [ 52.041727][ T4283] loop2: detected capacity change from 0 to 512 [ 52.062420][ T4283] ext4: Bad value for 'stripe' [ 52.177642][ T4293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 52.338665][ T4300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 52.463287][ T4306] loop4: detected capacity change from 0 to 1024 [ 52.473332][ T4307] ================================================================== [ 52.481491][ T4307] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 52.490471][ T4307] [ 52.492820][ T4307] write to 0xffff888119c5d4d4 of 4 bytes by task 4308 on cpu 1: [ 52.500472][ T4307] selinux_inode_permission+0x4b8/0x620 [ 52.506137][ T4307] security_inode_permission+0x6d/0xb0 [ 52.511639][ T4307] inode_permission+0x106/0x310 [ 52.516532][ T4307] link_path_walk+0x162/0x900 [ 52.521244][ T4307] path_openat+0x1de/0x2170 [ 52.525795][ T4307] do_filp_open+0x109/0x230 [ 52.530346][ T4307] do_sys_openat2+0xa6/0x110 [ 52.534965][ T4307] __x64_sys_openat+0xf2/0x120 [ 52.539751][ T4307] x64_sys_call+0x1af/0x2fb0 [ 52.544366][ T4307] do_syscall_64+0xd2/0x200 [ 52.548885][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.554799][ T4307] [ 52.557132][ T4307] read to 0xffff888119c5d4d4 of 4 bytes by task 4307 on cpu 0: [ 52.564689][ T4307] selinux_inode_permission+0x2da/0x620 [ 52.570254][ T4307] security_inode_permission+0x6d/0xb0 [ 52.575744][ T4307] inode_permission+0x106/0x310 [ 52.580618][ T4307] link_path_walk+0x162/0x900 [ 52.585313][ T4307] path_openat+0x1de/0x2170 [ 52.589846][ T4307] do_filp_open+0x109/0x230 [ 52.594380][ T4307] do_sys_openat2+0xa6/0x110 [ 52.599003][ T4307] __x64_sys_openat+0xf2/0x120 [ 52.603792][ T4307] x64_sys_call+0x1af/0x2fb0 [ 52.608403][ T4307] do_syscall_64+0xd2/0x200 [ 52.612926][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.618847][ T4307] [ 52.621183][ T4307] value changed: 0x00000034 -> 0x00000002 [ 52.626909][ T4307] [ 52.629241][ T4307] Reported by Kernel Concurrency Sanitizer on: [ 52.635404][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.1.197 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 52.647748][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.657820][ T4307] ================================================================== [ 52.735542][ T4306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.764130][ T4310] loop2: detected capacity change from 0 to 2048 [ 52.774253][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.198'. [ 52.805830][ T3541] loop2: p1 < > p4 [ 52.810372][ T3541] loop2: p4 size 8388608 extends beyond EOD, truncated [ 52.818243][ T4306] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.877192][ T4310] loop2: p1 < > p4 [ 52.917059][ T4310] loop2: p4 size 8388608 extends beyond EOD, truncated [ 53.204000][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.