last executing test programs: 1m45.692029101s ago: executing program 4 (id=8418): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (fail_nth: 1) 1m45.359701915s ago: executing program 4 (id=8419): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000003000000070000000400000000480000", @ANYRES32=r2, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000100000001000000000000000000000002020000affb506722d7817bd0aabee0769359a53e0cc50eb626929c79701c87a416a14ec0f7cefc3656defc4d273a9bd0de412c8416d102e410a5d9fc60aacce5df4792b3c566920828b6c7094fde1fe607a6d40cd1be3023411cc21ace68fcf28f0980d2c9d3b29eb37344b50dce8529cfbbea63564dc368706341b27385d1a6271e18244f09c546b1f5f4920a75642fa3f02e9e116e94368f71ec9720d4f1d530b2154ab3e6e365bf"], 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private0, 0x841, r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x3, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x2], 0x80000001, 0x29, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r9 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000680)="7af00bc64ba85687ab7662bf60364ff164135aa30e65d28c193bac07580f50c927ebd0a3dd5f09b1b5583bd8dddd5e96f31e3aa3a413312ad4885c367213cc23b8b2e2e7e50b2ff62f5880c914") ioctl(r9, 0x8936, &(0x7f0000000000)) futex(0xfffffffffffffffc, 0x5, 0x2, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) rt_sigpending(0x0, 0x0) lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 1m45.298261916s ago: executing program 4 (id=8420): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(0x3) (fail_nth: 1) 1m44.852023081s ago: executing program 4 (id=8422): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) capset(&(0x7f0000000080)={0x19980330, r1}, 0x0) 1m44.454483126s ago: executing program 4 (id=8428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r2, &(0x7f00000003c0), 0x100000000000022d) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x75a2, &(0x7f00000001c0)={0x0, 0x2, 0x10100, 0x2, 0x1b5}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0xfffffffffffffec1}}, 0x0) unshare(0x20000400) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r9}]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x58, 0x2, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @private=0xa010100, @broadcast, 0xffffff00, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) 1m44.15025234s ago: executing program 4 (id=8432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8919, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48004) 1m44.129333461s ago: executing program 32 (id=8432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8919, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000002010103000000000000000001000005100004800c00038008000340000000ec08001a40000001ff1c00198008000100910000000800010010000000080002008001000028000180060003400003000006000340000000000c00028005000100840000000600034000000000900001800c00028005000100110000002c00018014000300fe80000000000000000000000000004314000400ff0100000000000000000000000000010c000280050001003a00000006000340000200002c00018014000300fc01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000600034000040000140019800800010000040000080002009b080000480006801400050000000000000000000000ffffe00000021c000380060002004e270000060002004e200000060002004e21000014000400fc0000000000000000000000000000009c17b96b3d7e62628be20771e055a9f7710b2729035bd567c2a452e8d777b36727aff91b126382c7ed502bffb8e78e57385f261ae3f2e63c8b3c5350278aa8f3700ee5c86c4e5f30d4a3fb2ff11812ed7894d881596f57d62c20ee8828c26e3b26f2db937810f1de8af3418bdab89b2514f3928db7931e536612bdf21bd4edaa7e3c72a069bbceb1b84e83ef98894be8372dec7c51a252c00fedbb57c781e9"], 0x15c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48004) 47.334335498s ago: executing program 3 (id=9419): gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r0, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0xb, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x9, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x3, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x2], 0x80000001, 0x29, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 46.483964489s ago: executing program 3 (id=9431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 46.452528889s ago: executing program 3 (id=9432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xf62, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 46.39177829s ago: executing program 3 (id=9435): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0b0000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010725bd7000fcdbdf2503"], 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x2, 0x0, 0xfffffffe, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{}, 0x39, 0x2, 0x0, 0x0, "8327e0c8df5631308bfb607cb4c34ebeac0ebbc59d6983c17c8a42d9dd5971d790b88f75233077fd4e073339c0a1e04f5e66fcff40db47e79fb0806d129b4ed7"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7}, 0x65) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010026bd7000000000001c00000008000600", @ANYRES32, @ANYBLOB="19cb17301d2c065d27b1f1a6f043f46947"], 0x1c}}, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}}}, 0xf8}}, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f0000000280)={0x0, &(0x7f0000000080)}, 0x10) 45.949877285s ago: executing program 3 (id=9437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8919, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000002010103000000000000000001000005100004800c00038008000340000000ec08001a40000001ff1c00198008000100910000000800010010000000080002008001000028000180060003400003000006000340000000000c00028005000100840000000600034000000000900001800c00028005000100110000002c00018014000300fe80000000000000000000000000004314000400ff0100000000000000000000000000010c000280050001003a00000006000340000200002c00018014000300fc01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000600034000040000140019800800010000040000080002009b080000480006801400050000000000000000000000ffffe00000021c000380060002004e270000060002004e200000060002004e21000014000400fc0000000000000000000000000000009c17b96b3d7e62628be20771e055a9f7710b2729035bd567c2a452e8d777b36727aff91b126382c7ed502bffb8e78e57385f261ae3f2e63c8b3c5350278aa8f3700ee5c86c4e5f30d4a3fb2ff11812ed7894d881596f57d62c20ee8828c26e3b26f2db937810f1de8af3418bdab89b2514f3928db7931e536612bdf21bd4edaa7e3c72a069bbceb1b84e83ef98894be8372dec7c51a252c00fedbb57c781e9"], 0x15c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48004) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_clone3(&(0x7f00000007c0)={0x20000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580), {0x17}, &(0x7f0000000640)=""/106, 0x6a, &(0x7f00000005c0)=""/21, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) ftruncate(0xffffffffffffffff, 0x81ff) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 45.379926672s ago: executing program 3 (id=9444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xf62, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 45.379705082s ago: executing program 33 (id=9444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xf62, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 38.431016138s ago: executing program 1 (id=9548): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x5411, &(0x7f0000000140)={'syz_tun\x00', 0x865}) close_range(r0, 0xffffffffffffffff, 0x0) 38.332038789s ago: executing program 1 (id=9551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48004) 38.327026349s ago: executing program 1 (id=9553): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x37, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 38.24669147s ago: executing program 6 (id=9556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000001000000001900000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x48802}, 0x4886) 38.152692111s ago: executing program 6 (id=9558): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 38.099189012s ago: executing program 6 (id=9560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff011}, 0x18) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000840}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) r5 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) socket(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="28d50000000000000000000000000000000900f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)={0x480000}, 0x18) r8 = openat(r7, &(0x7f0000000240)='./file1\x00', 0x8042, 0x0) fallocate(r8, 0x0, 0x0, 0x8000c62) r9 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) io_uring_enter(r10, 0x399d, 0x100071c2, 0x64, &(0x7f0000000000)={[0x80000001]}, 0x8) write$binfmt_misc(r10, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414252800000000000000000000007f0000010000000000000000000000004e22000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r6], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 38.017226673s ago: executing program 6 (id=9562): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0b0000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010725bd7000fcdbdf2503"], 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x2, 0x0, 0xfffffffe, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{}, 0x39, 0x2, 0x0, 0x0, "8327e0c8df5631308bfb607cb4c34ebeac0ebbc59d6983c17c8a42d9dd5971d790b88f75233077fd4e073339c0a1e04f5e66fcff40db47e79fb0806d129b4ed7"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7}, 0x65) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010026bd7000000000001c00000008000600", @ANYRES32, @ANYBLOB="19cb17301d2c065d27b1f1a6f043f46947"], 0x1c}}, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 37.783417985s ago: executing program 6 (id=9566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000003c0), 0x100000000000022d) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x75a2, &(0x7f00000001c0)={0x0, 0x2, 0x10100, 0x2, 0x1b5}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0xfffffffffffffec1}}, 0x0) unshare(0x20000400) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x24, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r10}]}]}, 0x24}], 0x1}, 0x0) getsockopt$bt_hci(r9, 0x11e, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x58, 0x2, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @private=0xa010100, @broadcast, 0xffffff00, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) 37.556079618s ago: executing program 6 (id=9572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setfsuid(0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fffffffffff}, 0x0, 0xf000000000000000, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000ed19ab891ca496909b0a1a12"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="10", 0x1, 0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 37.555796028s ago: executing program 34 (id=9572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setfsuid(0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fffffffffff}, 0x0, 0xf000000000000000, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000ed19ab891ca496909b0a1a12"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="10", 0x1, 0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 37.44209469s ago: executing program 1 (id=9576): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0b0000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010725bd7000fcdbdf2503"], 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x2, 0x0, 0xfffffffe, {0x0, 0xea60}, {r3, r4/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{}, 0x39, 0x2, 0x0, 0x0, "8327e0c8df5631308bfb607cb4c34ebeac0ebbc59d6983c17c8a42d9dd5971d790b88f75233077fd4e073339c0a1e04f5e66fcff40db47e79fb0806d129b4ed7"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7}, 0x65) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005200010026bd7000000000001c00000008000600", @ANYRES32, @ANYBLOB="19cb17301d2c065d27b1f1a6f043f46947"], 0x1c}}, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 37.349806811s ago: executing program 1 (id=9577): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x800000000003}, 0x15100, 0x5dd8, 0xfffffffe, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r7, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=""/52, 0x34) ioctl$RTC_ALM_READ(r0, 0x40187013, 0x0) 37.104111504s ago: executing program 1 (id=9578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 37.103648474s ago: executing program 35 (id=9578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 3.2706833s ago: executing program 2 (id=10208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff011}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) 3.202654471s ago: executing program 2 (id=10199): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.177901261s ago: executing program 2 (id=10200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030057797a3200000000080007006e617400140004800800024000000000080001"], 0xa4}}, 0x0) 3.160748281s ago: executing program 2 (id=10202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff011}, 0x18) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) r5 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) socket(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="28d50000000000000000000000000000000900f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)={0x480000}, 0x18) r8 = openat(r7, &(0x7f0000000240)='./file1\x00', 0x8042, 0x0) fallocate(r8, 0x0, 0x0, 0x8000c62) r9 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) io_uring_enter(r10, 0x399d, 0x100071c2, 0x64, &(0x7f0000000000)={[0x80000001]}, 0x8) write$binfmt_misc(r10, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414252800000000000000000000007f0000010000000000000000000000004e22000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r6], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 3.022999013s ago: executing program 2 (id=10207): r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c1200030068617368"], 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000002080104000000000000048008002b008000097c050003002f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) r2 = io_uring_setup(0x788a, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_getscheduler(r3) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r2, r4, 0x0) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(r2, 0x9) tgkill(r7, r6, 0x21) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0xe0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0x73a}, 0x0, 0x0, 0x1, 0x4, 0x100000, 0x0, 0x4}, r6, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3ff, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x30f4, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) splice(r9, 0x0, r10, 0x0, 0x7, 0x0) 1.683653249s ago: executing program 0 (id=10244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) 1.65481526s ago: executing program 0 (id=10246): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.497805342s ago: executing program 0 (id=10253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a310000000009000100"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.481605722s ago: executing program 5 (id=10254): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.459780062s ago: executing program 5 (id=10255): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 1.150664986s ago: executing program 7 (id=10259): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.055934687s ago: executing program 7 (id=10261): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x800000000003}, 0x15100, 0x5dd8, 0xfffffffe, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r8, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=""/52, 0x34) ioctl$RTC_ALM_READ(r0, 0x40187013, 0x0) 960.717298ms ago: executing program 7 (id=10263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [{0x20, 'blkio.bfq.io_merged_recursive\x00'}, {0x20, '#! Y\x1ep\x1b\xb8\x025H\xbf_\xc3\xd1\xb0Yi\xba\xea\x02\xcc\xa6-\xdez\xf3\xb6\xdf \xe0\x81\x80\xa9\xae\x83\xce\x17\x0e\xe6W\xdd\xd5\xd0\xe8\xb6\xe4\x9b\xbaG5\xbcS\xd1LH\x02<&\xe3AM\xe9C\xc4\xea\xf08\xc3\xe2\"9\xaeoV\xc5\xd3\x8eE\xd6Q\xa3BG\xc9\x88/v70\x88fQ\x1a\v\xcaA\\\xcb\xa47\xabD\xc07Q\xdb\x98\'\xf07{\x18\xb3\xca\xfb\xa5\xac!a\xc6I\xe4\xa8V\x81\xe0h\x05Q\x06\xd3\xf5B\xe9\xa0\xb4s\xc0\xb2W\xbaP\b\x86cfP\xf7\xa63r~\xaa\x19wGf\xb8|2\xcbZ)\xa50g\x8ah\xa4\x12>\x18k.\x86\x91\x805\x90O\xc1'}], 0xa, "2f99e9833c3ae095394d878d1d75faba755b22"}, 0xf2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 878.208789ms ago: executing program 7 (id=10265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 874.160659ms ago: executing program 7 (id=10267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) creat(&(0x7f0000000200)='./file0\x00', 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newlink={0x74, 0x10, 0x401, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x343}}}}}}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "d60c6b4c071d0a911f"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_hsr\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x88}]}, 0x74}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121403, 0x348) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) 712.896441ms ago: executing program 7 (id=10268): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 672.267812ms ago: executing program 8 (id=10269): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 620.843443ms ago: executing program 0 (id=10270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 601.903533ms ago: executing program 5 (id=10271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) shutdown(r0, 0x2000000) 601.540053ms ago: executing program 0 (id=10272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) 600.119103ms ago: executing program 8 (id=10273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff011}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) 539.813664ms ago: executing program 5 (id=10274): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000004c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x800000000003}, 0x15100, 0x5dd8, 0xfffffffe, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r8, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000002c0)=""/52, 0x34) ioctl$RTC_ALM_READ(r0, 0x40187013, 0x0) 535.709513ms ago: executing program 0 (id=10275): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = dup2(r3, r3) timerfd_gettime(r4, &(0x7f0000000040)) 524.050904ms ago: executing program 8 (id=10276): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 485.036514ms ago: executing program 8 (id=10277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 484.677644ms ago: executing program 8 (id=10279): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 443.783505ms ago: executing program 5 (id=10280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000002010103000000000000000001000005100004800c000380080003400000"], 0x15c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48004) 414.948315ms ago: executing program 5 (id=10281): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a310000000009000100"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 344.121136ms ago: executing program 8 (id=10282): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 0s ago: executing program 2 (id=10283): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): multicast mode [ 457.952709][T26423] bridge_slave_0: left promiscuous mode [ 457.958541][T26423] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.117772][T26423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.128396][T26423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.198801][T26423] bond0 (unregistering): Released all slaves [ 458.276423][T32454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.300959][T32454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.312264][T26423] hsr_slave_0: left promiscuous mode [ 458.340729][T26423] hsr_slave_1: left promiscuous mode [ 458.361349][T26423] veth1_vlan: left promiscuous mode [ 458.367098][T26423] veth0_vlan: left promiscuous mode [ 458.468443][T26423] team0 (unregistering): Port device team_slave_1 removed [ 458.485049][T26423] team0 (unregistering): Port device team_slave_0 removed [ 458.595565][T32454] team0: Port device team_slave_0 added [ 458.602656][T32454] team0: Port device team_slave_1 added [ 458.637803][T32346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.677036][T32454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.684066][T32454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.710247][T32454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.723438][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.728028][T32454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.739765][T32454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.765761][T32454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.857525][T32454] hsr_slave_0: entered promiscuous mode [ 458.863720][T32454] hsr_slave_1: entered promiscuous mode [ 458.870321][T32454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.883570][T32454] Cannot create hsr debugfs directory [ 458.971303][T32346] veth0_vlan: entered promiscuous mode [ 458.989504][T32346] veth1_vlan: entered promiscuous mode [ 459.022731][T32346] veth0_macvtap: entered promiscuous mode [ 459.043091][T32454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.053151][T32454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.062045][T32454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.071528][T32346] veth1_macvtap: entered promiscuous mode [ 459.080930][T32454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.097879][T32346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.127642][T32346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.139938][T32346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.148855][T32346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.157702][T32346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.166475][T32346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.188110][T32454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.227772][T32454] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.247003][T26432] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.254144][T26432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.291687][T32528] loop9: detected capacity change from 0 to 7 [ 459.295798][T26432] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.304904][T26432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.305300][T32528] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.337668][T32454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.348244][T32454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.350113][T32528] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.366599][T32528] loop9: unable to read partition table [ 459.407938][T32528] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 459.407938][T32528] U) failed (rc=-5) [ 459.433147][T32539] __nla_validate_parse: 10 callbacks suppressed [ 459.433167][T32539] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9467'. [ 459.479947][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9468'. [ 459.482918][T32544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9469'. [ 459.488997][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9468'. [ 459.516863][T32454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.523967][T32542] loop2: detected capacity change from 0 to 1024 [ 459.530867][T32542] EXT4-fs: Ignoring removed orlov option [ 459.542881][T32542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.628375][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 459.628394][ T30] audit: type=1326 audit(1748171715.496:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.686328][ T30] audit: type=1326 audit(1748171715.556:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.710219][ T30] audit: type=1326 audit(1748171715.556:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.734013][ T30] audit: type=1326 audit(1748171715.556:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.757543][ T30] audit: type=1326 audit(1748171715.556:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.781275][ T30] audit: type=1326 audit(1748171715.556:12441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.787841][T32549] SELinux: policydb version -1749600548 does not match my version range 15-34 [ 459.823954][ T30] audit: type=1326 audit(1748171715.556:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.823994][ T30] audit: type=1326 audit(1748171715.556:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.824052][ T30] audit: type=1326 audit(1748171715.556:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.824091][ T30] audit: type=1326 audit(1748171715.556:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32552 comm="syz.1.9472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f598f07e969 code=0x7ffc0000 [ 459.950309][T32549] SELinux: failed to load policy [ 459.998957][T32454] veth0_vlan: entered promiscuous mode [ 460.022364][T32454] veth1_vlan: entered promiscuous mode [ 460.044675][T32573] loop5: detected capacity change from 0 to 1024 [ 460.084832][T32454] veth0_macvtap: entered promiscuous mode [ 460.111449][T32454] veth1_macvtap: entered promiscuous mode [ 460.113486][T32573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.122555][T32454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.147112][T32454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.158105][T32454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.167026][T32454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.175923][T32454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.184815][T32454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.363520][T20572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.402258][T32594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9480'. [ 460.771530][T32593] chnl_net:caif_netlink_parms(): no params data found [ 460.784157][T26450] bridge_slave_1: left allmulticast mode [ 460.789912][T26450] bridge_slave_1: left promiscuous mode [ 460.795733][T26450] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.814750][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.824878][T26450] bridge_slave_0: left allmulticast mode [ 460.830755][T26450] bridge_slave_0: left promiscuous mode [ 460.836475][T26450] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.156650][T32633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9491'. [ 461.398293][T32627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9488'. [ 461.437259][T26450] bond0 (unregistering): Released all slaves [ 461.447075][T26450] bond1 (unregistering): Released all slaves [ 461.459960][T32634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9488'. [ 461.462071][T26450] bond2 (unregistering): Released all slaves [ 461.525110][T26450] tipc: Left network mode [ 461.539789][T26450] hsr_slave_0: left promiscuous mode [ 461.546534][T26450] hsr_slave_1: left promiscuous mode [ 461.593743][T26450] team0 (unregistering): Port device team_slave_1 removed [ 461.604405][T26450] team0 (unregistering): Port device team_slave_0 removed [ 461.637261][T32666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9501'. [ 461.662309][T32593] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.669689][T32593] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.677948][T32593] bridge_slave_0: entered allmulticast mode [ 461.688602][T32593] bridge_slave_0: entered promiscuous mode [ 461.698901][T32593] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.706243][T32593] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.713772][T32593] bridge_slave_1: entered allmulticast mode [ 461.720374][T32593] bridge_slave_1: entered promiscuous mode [ 461.746799][T32593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.759251][T32593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.786140][T32593] team0: Port device team_slave_0 added [ 461.803363][T32593] team0: Port device team_slave_1 added [ 461.825231][T32593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.832360][T32593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.858449][T32593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.870847][T32593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.877871][T32593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.904085][T32593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.948039][T32593] hsr_slave_0: entered promiscuous mode [ 461.959791][T32593] hsr_slave_1: entered promiscuous mode [ 461.969991][T32593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.980449][T32593] Cannot create hsr debugfs directory [ 462.018810][T26450] IPVS: stop unused estimator thread 0... [ 462.240729][T32691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9511'. [ 462.270791][T32695] loop6: detected capacity change from 0 to 1024 [ 462.277715][T32695] EXT4-fs: Ignoring removed orlov option [ 462.296700][T32695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.428641][T32593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.448257][T32593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.458846][T32593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.478005][T32593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.500454][T32593] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.507775][T32593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.515168][T32593] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.522261][T32593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.603296][T26410] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.618897][T26410] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.706373][T32712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.713921][T32712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.773448][T32712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.781146][T32712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.847436][T32593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.879995][T32593] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.902403][T26410] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.909558][T26410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.941164][T26410] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.948443][T26410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.096982][T32593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.248720][T32593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.278525][T32454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.361148][T32593] veth0_vlan: entered promiscuous mode [ 463.371027][T32593] veth1_vlan: entered promiscuous mode [ 463.390460][T32593] veth0_macvtap: entered promiscuous mode [ 463.403259][T32593] veth1_macvtap: entered promiscuous mode [ 463.442225][T32593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.465763][T32593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.485932][T32593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.494756][T32593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.503545][T32593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.512339][T32593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.578820][T32761] loop9: detected capacity change from 0 to 7 [ 463.585321][T32761] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.590980][T32763] unsupported nlmsg_type 40 [ 463.593281][T32761] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.605724][T32761] loop9: unable to read partition table [ 463.612522][T32761] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 463.612522][T32761] U) failed (rc=-5) [ 463.720440][ T306] loop2: detected capacity change from 0 to 1024 [ 463.727493][ T306] EXT4-fs: Ignoring removed orlov option [ 463.736480][ T306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.174811][ T331] loop9: detected capacity change from 0 to 7 [ 464.204395][ T331] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.224883][ T331] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.232934][ T331] loop9: unable to read partition table [ 464.265721][ T331] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 464.265721][ T331] U) failed (rc=-5) [ 464.456207][ T353] loop9: detected capacity change from 0 to 7 [ 464.462567][ T353] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.477614][ T353] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.485627][ T353] loop9: unable to read partition table [ 464.505772][ T353] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 464.505772][ T353] U) failed (rc=-5) [ 464.515952][ T310] __nla_validate_parse: 10 callbacks suppressed [ 464.515973][ T310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9540'. [ 464.537284][ T310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9540'. [ 464.600237][T20572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.632293][ T363] loop9: detected capacity change from 0 to 7 [ 464.640734][ T363] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.650350][ T363] Buffer I/O error on dev loop9, logical block 0, async page read [ 464.658356][ T363] loop9: unable to read partition table [ 464.664792][ T363] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 464.664792][ T363] U) failed (rc=-5) [ 464.679738][ T363] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9560'. [ 464.710938][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 464.710974][ T30] audit: type=1326 audit(1748171720.576:12724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.751640][ T30] audit: type=1326 audit(1748171720.606:12725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.775404][ T30] audit: type=1326 audit(1748171720.606:12726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.798976][ T30] audit: type=1326 audit(1748171720.606:12727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.822483][ T30] audit: type=1326 audit(1748171720.606:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.846063][ T30] audit: type=1326 audit(1748171720.606:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.869600][ T30] audit: type=1326 audit(1748171720.606:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.893034][ T30] audit: type=1326 audit(1748171720.606:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.916591][ T30] audit: type=1326 audit(1748171720.606:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.940389][ T30] audit: type=1326 audit(1748171720.616:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=368 comm="syz.6.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fee56b2e969 code=0x7ffc0000 [ 464.990864][ T380] loop9: detected capacity change from 0 to 7 [ 464.992702][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9567'. [ 465.006619][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.014053][ T381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.021798][ T380] Buffer I/O error on dev loop9, logical block 0, async page read [ 465.030792][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.035859][ T380] Buffer I/O error on dev loop9, logical block 0, async page read [ 465.038451][ T381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.046193][ T380] loop9: unable to read partition table [ 465.060356][ T380] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 465.060356][ T380] U) failed (rc=-5) [ 465.078053][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9569'. [ 465.087425][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9569'. [ 465.106691][ T383] loop5: detected capacity change from 0 to 1024 [ 465.113442][ T383] EXT4-fs: Ignoring removed orlov option [ 465.128540][T26432] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.154892][ T383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.227903][T26432] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.297223][T26432] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.351350][T26432] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.502191][T26432] bridge_slave_1: left allmulticast mode [ 465.507961][T26432] bridge_slave_1: left promiscuous mode [ 465.513679][T26432] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.523664][T26432] bridge_slave_0: left allmulticast mode [ 465.529408][T26432] bridge_slave_0: left promiscuous mode [ 465.535189][T26432] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.639439][T26432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.658738][T26432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.678702][T26432] bond0 (unregistering): Released all slaves [ 465.769094][T26432] hsr_slave_0: left promiscuous mode [ 465.777087][T26432] hsr_slave_1: left promiscuous mode [ 465.793160][T26432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.800663][T26432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.858791][T26432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.866345][T26432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.883799][T26432] veth1_macvtap: left promiscuous mode [ 465.900262][T26432] veth0_macvtap: left promiscuous mode [ 465.914641][T26432] veth1_vlan: left promiscuous mode [ 465.920652][T26432] veth0_vlan: left promiscuous mode [ 465.932068][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.985233][ T408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9575'. [ 466.043988][T26432] team0 (unregistering): Port device team_slave_1 removed [ 466.053299][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9575'. [ 466.066635][T26432] team0 (unregistering): Port device team_slave_0 removed [ 466.145593][ T394] chnl_net:caif_netlink_parms(): no params data found [ 466.275601][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.282734][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.290729][ T394] bridge_slave_0: entered allmulticast mode [ 466.296975][ T433] loop9: detected capacity change from 0 to 7 [ 466.298185][ T394] bridge_slave_0: entered promiscuous mode [ 466.303219][ T433] loop9: unable to read partition table [ 466.314906][ T433] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 466.314906][ T433] U) failed (rc=-5) [ 466.328897][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.328937][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.345498][ T394] bridge_slave_1: entered allmulticast mode [ 466.362685][ T394] bridge_slave_1: entered promiscuous mode [ 466.401992][ T394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.417700][ T411] chnl_net:caif_netlink_parms(): no params data found [ 466.431768][ T394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.462193][ T394] team0: Port device team_slave_0 added [ 466.484308][ T394] team0: Port device team_slave_1 added [ 466.504898][ T394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.511988][ T394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.538030][ T394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.569752][ T394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.576815][ T394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.603034][ T394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.619467][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.626583][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.633867][ T411] bridge_slave_0: entered allmulticast mode [ 466.640384][ T411] bridge_slave_0: entered promiscuous mode [ 466.656867][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.664033][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.671552][ T411] bridge_slave_1: entered allmulticast mode [ 466.678061][ T411] bridge_slave_1: entered promiscuous mode [ 466.697255][ T394] hsr_slave_0: entered promiscuous mode [ 466.703440][ T394] hsr_slave_1: entered promiscuous mode [ 466.709331][ T394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.717007][ T394] Cannot create hsr debugfs directory [ 466.729322][ T411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.740150][ T411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.763337][T26432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.788401][ T411] team0: Port device team_slave_0 added [ 466.801927][ T411] team0: Port device team_slave_1 added [ 466.823649][T26432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.855971][ T411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.863085][ T411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.889263][ T411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.910894][T26432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.922171][ T411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.929214][ T411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.955253][ T411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.978655][T26432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.018631][ T411] hsr_slave_0: entered promiscuous mode [ 467.025383][ T411] hsr_slave_1: entered promiscuous mode [ 467.031518][ T453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9588'. [ 467.031879][ T411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.048151][ T411] Cannot create hsr debugfs directory [ 467.092465][ T394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 467.108352][ T394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.122717][ T394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.133171][T26432] bridge_slave_1: left allmulticast mode [ 467.139118][T26432] bridge_slave_1: left promiscuous mode [ 467.144867][T26432] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.154481][T26432] bridge_slave_0: left allmulticast mode [ 467.160270][T26432] bridge_slave_0: left promiscuous mode [ 467.166158][T26432] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.260673][T26432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.281755][T26432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.307293][T26432] bond0 (unregistering): Released all slaves [ 467.328046][ T483] loop2: detected capacity change from 0 to 512 [ 467.338909][ T394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.346699][ T488] loop9: detected capacity change from 0 to 7 [ 467.360554][ T488] loop9: unable to read partition table [ 467.388866][T26432] hsr_slave_0: left promiscuous mode [ 467.394424][ T488] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 467.394424][ T488] U) failed (rc=-5) [ 467.408755][T26432] hsr_slave_1: left promiscuous mode [ 467.423190][T26432] veth1_macvtap: left promiscuous mode [ 467.431667][T26432] veth0_macvtap: left promiscuous mode [ 467.438118][T26432] veth1_vlan: left promiscuous mode [ 467.443658][T26432] veth0_vlan: left promiscuous mode [ 467.458387][ T508] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9593'. [ 467.572954][T26432] team0 (unregistering): Port device team_slave_1 removed [ 467.584242][T26432] team0 (unregistering): Port device team_slave_0 removed [ 467.719966][ T411] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 467.742336][ T411] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 467.768070][ T411] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 467.787828][ T394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.797876][ T411] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 467.838629][ T394] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.864676][T26423] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.871811][T26423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.907159][T26423] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.914306][T26423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.978494][ T556] loop2: detected capacity change from 0 to 1024 [ 467.997415][ T411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.010961][ T556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.026503][ T411] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.037873][T26450] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.044969][T26450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.063596][ T411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.074046][ T411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.100142][T26450] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.107286][T26450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.119564][ T570] loop5: detected capacity change from 0 to 512 [ 468.138603][ T570] EXT4-fs (loop5): too many log groups per flexible block group [ 468.146426][ T570] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 468.159670][ T394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.170305][ T570] EXT4-fs (loop5): mount failed [ 468.201290][ T411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.506051][ T411] veth0_vlan: entered promiscuous mode [ 468.514839][ T394] veth0_vlan: entered promiscuous mode [ 468.526961][ T411] veth1_vlan: entered promiscuous mode [ 468.538486][ T394] veth1_vlan: entered promiscuous mode [ 468.568683][ T411] veth0_macvtap: entered promiscuous mode [ 468.711483][ T394] veth0_macvtap: entered promiscuous mode [ 468.729461][ T411] veth1_macvtap: entered promiscuous mode [ 468.763798][ T394] veth1_macvtap: entered promiscuous mode [ 468.819095][ T394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.832602][ T411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.854831][ T394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.864407][ T411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.877289][ T411] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.886244][ T411] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.895125][ T411] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.903959][ T411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.918555][ T394] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.927426][ T394] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.936194][ T394] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.944948][ T394] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.981220][T20572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.056699][ T660] loop9: detected capacity change from 0 to 7 [ 469.062970][ T660] buffer_io_error: 4 callbacks suppressed [ 469.062983][ T660] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.077056][ T660] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.085200][ T660] loop9: unable to read partition table [ 469.092221][ T660] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 469.092221][ T660] U) failed (rc=-5) [ 469.125143][ T664] loop9: detected capacity change from 0 to 7 [ 469.131405][ T664] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.139397][ T664] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.147311][ T664] loop9: unable to read partition table [ 469.153136][ T664] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 469.153136][ T664] U) failed (rc=-5) [ 469.245780][ T674] FAULT_INJECTION: forcing a failure. [ 469.245780][ T674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.259012][ T674] CPU: 0 UID: 0 PID: 674 Comm: syz.0.9605 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 469.259082][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.259099][ T674] Call Trace: [ 469.259107][ T674] [ 469.259155][ T674] __dump_stack+0x1d/0x30 [ 469.259183][ T674] dump_stack_lvl+0xe8/0x140 [ 469.259209][ T674] dump_stack+0x15/0x1b [ 469.259231][ T674] should_fail_ex+0x265/0x280 [ 469.259353][ T674] should_fail+0xb/0x20 [ 469.259413][ T674] should_fail_usercopy+0x1a/0x20 [ 469.259440][ T674] _copy_from_user+0x1c/0xb0 [ 469.259471][ T674] memdup_user+0x5e/0xd0 [ 469.259498][ T674] strndup_user+0x68/0xb0 [ 469.259550][ T674] __se_sys_mount+0x4d/0x2e0 [ 469.259587][ T674] ? fput+0x8f/0xc0 [ 469.259612][ T674] ? ksys_write+0x16e/0x1a0 [ 469.259650][ T674] __x64_sys_mount+0x67/0x80 [ 469.259745][ T674] x64_sys_call+0xd36/0x2fb0 [ 469.259769][ T674] do_syscall_64+0xd0/0x1a0 [ 469.259801][ T674] ? clear_bhb_loop+0x40/0x90 [ 469.259867][ T674] ? clear_bhb_loop+0x40/0x90 [ 469.259889][ T674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.259938][ T674] RIP: 0033:0x7f302b61e969 [ 469.259959][ T674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.259995][ T674] RSP: 002b:00007f3029c87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 469.260022][ T674] RAX: ffffffffffffffda RBX: 00007f302b845fa0 RCX: 00007f302b61e969 [ 469.260040][ T674] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 469.260115][ T674] RBP: 00007f3029c87090 R08: 0000200000000340 R09: 0000000000000000 [ 469.260133][ T674] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 469.260151][ T674] R13: 0000000000000000 R14: 00007f302b845fa0 R15: 00007ffe2f3feea8 [ 469.260177][ T674] [ 469.483593][ T682] loop8: detected capacity change from 0 to 1024 [ 469.513478][ T680] loop5: detected capacity change from 0 to 1024 [ 469.520550][ T680] EXT4-fs: Ignoring removed orlov option [ 469.529367][ T680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.545711][ T684] __nla_validate_parse: 6 callbacks suppressed [ 469.545732][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9608'. [ 469.573629][ T682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.597856][ T693] loop7: detected capacity change from 0 to 512 [ 469.609922][ T693] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 469.625280][ T693] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.9611: iget: bogus i_mode (5) [ 469.638276][ T693] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.9611: couldn't read orphan inode 15 (err -117) [ 469.737966][ T693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.757638][ T693] ext2 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.798396][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 469.798415][ T30] audit: type=1400 audit(1748171725.666:13005): avc: denied { remount } for pid=690 comm="syz.7.9611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 469.825884][ T693] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 469.835923][ T704] loop9: detected capacity change from 0 to 7 [ 469.842208][ T704] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.865635][ T704] Buffer I/O error on dev loop9, logical block 0, async page read [ 469.873526][ T704] loop9: unable to read partition table [ 469.891056][ T704] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 469.891056][ T704] U) failed (rc=-5) [ 469.937124][ T394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.993211][ T30] audit: type=1326 audit(1748171725.856:13006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.026319][ T30] audit: type=1326 audit(1748171725.886:13007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.050082][ T30] audit: type=1326 audit(1748171725.886:13008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.073856][ T30] audit: type=1326 audit(1748171725.886:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.097367][ T30] audit: type=1326 audit(1748171725.886:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.120824][ T30] audit: type=1326 audit(1748171725.886:13011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.144413][ T30] audit: type=1326 audit(1748171725.886:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.168015][ T30] audit: type=1326 audit(1748171725.886:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.191491][ T30] audit: type=1326 audit(1748171725.886:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=709 comm="syz.7.9615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 470.225876][ T714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9617'. [ 470.234859][ T714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9617'. [ 470.453031][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.565177][ T720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.658173][ T720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.692591][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.754368][ T720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.768119][ T728] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9621'. [ 470.849385][ T734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9623'. [ 470.860947][ T720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.883993][ T732] loop8: detected capacity change from 0 to 8192 [ 470.904444][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9624'. [ 470.913462][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9624'. [ 470.955695][ T720] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.975343][ T738] loop7: detected capacity change from 0 to 1024 [ 470.998716][ T738] EXT4-fs: Ignoring removed orlov option [ 471.007203][ T738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.027646][ T720] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.040008][ T720] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.052683][ T720] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.260467][ T753] loop9: detected capacity change from 0 to 7 [ 471.280050][ T753] Buffer I/O error on dev loop9, logical block 0, async page read [ 471.290972][ T753] Buffer I/O error on dev loop9, logical block 0, async page read [ 471.298930][ T753] loop9: unable to read partition table [ 471.304783][ T753] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 471.304783][ T753] U) failed (rc=-5) [ 471.457083][ T762] loop9: detected capacity change from 0 to 7 [ 471.463342][ T762] Buffer I/O error on dev loop9, logical block 0, async page read [ 471.471811][ T762] Buffer I/O error on dev loop9, logical block 0, async page read [ 471.479702][ T762] loop9: unable to read partition table [ 471.488070][ T762] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 471.488070][ T762] U) failed (rc=-5) [ 471.524329][ T762] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9630'. [ 471.589352][ T774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9635'. [ 471.623458][ T776] loop8: detected capacity change from 0 to 2048 [ 471.666553][ T776] Alternate GPT is invalid, using primary GPT. [ 471.672903][ T776] loop8: p1 p2 p3 [ 471.689928][ T778] FAULT_INJECTION: forcing a failure. [ 471.689928][ T778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.703085][ T778] CPU: 1 UID: 0 PID: 778 Comm: syz.0.9637 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 471.703118][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.703135][ T778] Call Trace: [ 471.703144][ T778] [ 471.703155][ T778] __dump_stack+0x1d/0x30 [ 471.703261][ T778] dump_stack_lvl+0xe8/0x140 [ 471.703288][ T778] dump_stack+0x15/0x1b [ 471.703312][ T778] should_fail_ex+0x265/0x280 [ 471.703435][ T778] should_fail+0xb/0x20 [ 471.703469][ T778] should_fail_usercopy+0x1a/0x20 [ 471.703548][ T778] strncpy_from_user+0x25/0x230 [ 471.703583][ T778] ? __kmalloc_cache_noprof+0x189/0x320 [ 471.703608][ T778] __se_sys_memfd_create+0x1ff/0x590 [ 471.703706][ T778] __x64_sys_memfd_create+0x31/0x40 [ 471.703736][ T778] x64_sys_call+0x122f/0x2fb0 [ 471.703758][ T778] do_syscall_64+0xd0/0x1a0 [ 471.703832][ T778] ? clear_bhb_loop+0x40/0x90 [ 471.703862][ T778] ? clear_bhb_loop+0x40/0x90 [ 471.703893][ T778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.703924][ T778] RIP: 0033:0x7f302b61e969 [ 471.703943][ T778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.703962][ T778] RSP: 002b:00007f3029c86d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 471.703986][ T778] RAX: ffffffffffffffda RBX: 00000000000005df RCX: 00007f302b61e969 [ 471.704003][ T778] RDX: 00007f3029c86dec RSI: 0000000000000000 RDI: 00007f302b6a1444 [ 471.704022][ T778] RBP: 0000200000000000 R08: 00007f3029c86b07 R09: 0000000000000000 [ 471.704039][ T778] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 471.704089][ T778] R13: 00007f3029c86dec R14: 00007f3029c86df0 R15: 00007ffe2f3feea8 [ 471.704117][ T778] [ 471.923546][ T394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.972159][ T789] loop9: detected capacity change from 0 to 7 [ 471.988032][ T789] loop9: unable to read partition table [ 471.996110][ T789] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 471.996110][ T789] U) failed (rc=-5) [ 472.060629][ T794] loop8: detected capacity change from 0 to 2048 [ 472.106798][ T794] Alternate GPT is invalid, using primary GPT. [ 472.113173][ T794] loop8: p1 p2 p3 [ 472.192610][ T806] netlink: 'syz.0.9646': attribute type 21 has an invalid length. [ 472.230594][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9650'. [ 472.245744][ T817] FAULT_INJECTION: forcing a failure. [ 472.245744][ T817] name failslab, interval 1, probability 0, space 0, times 0 [ 472.258592][ T817] CPU: 0 UID: 0 PID: 817 Comm: syz.0.9652 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 472.258624][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.258641][ T817] Call Trace: [ 472.258649][ T817] [ 472.258658][ T817] __dump_stack+0x1d/0x30 [ 472.258687][ T817] dump_stack_lvl+0xe8/0x140 [ 472.258798][ T817] dump_stack+0x15/0x1b [ 472.258820][ T817] should_fail_ex+0x265/0x280 [ 472.258869][ T817] should_failslab+0x8c/0xb0 [ 472.258936][ T817] kmem_cache_alloc_node_noprof+0x57/0x320 [ 472.258964][ T817] ? __alloc_skb+0x101/0x320 [ 472.259094][ T817] __alloc_skb+0x101/0x320 [ 472.259233][ T817] netlink_alloc_large_skb+0xba/0xf0 [ 472.259331][ T817] netlink_sendmsg+0x3cf/0x6b0 [ 472.259358][ T817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.259400][ T817] __sock_sendmsg+0x142/0x180 [ 472.259436][ T817] ____sys_sendmsg+0x31e/0x4e0 [ 472.259466][ T817] ___sys_sendmsg+0x17b/0x1d0 [ 472.259512][ T817] __x64_sys_sendmsg+0xd4/0x160 [ 472.259543][ T817] x64_sys_call+0x2999/0x2fb0 [ 472.259571][ T817] do_syscall_64+0xd0/0x1a0 [ 472.259602][ T817] ? clear_bhb_loop+0x40/0x90 [ 472.259630][ T817] ? clear_bhb_loop+0x40/0x90 [ 472.259719][ T817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.259746][ T817] RIP: 0033:0x7f302b61e969 [ 472.259765][ T817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.259824][ T817] RSP: 002b:00007f3029c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.259849][ T817] RAX: ffffffffffffffda RBX: 00007f302b845fa0 RCX: 00007f302b61e969 [ 472.259866][ T817] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 472.259882][ T817] RBP: 00007f3029c87090 R08: 0000000000000000 R09: 0000000000000000 [ 472.259898][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.259985][ T817] R13: 0000000000000000 R14: 00007f302b845fa0 R15: 00007ffe2f3feea8 [ 472.260008][ T817] [ 472.271195][ T815] loop8: detected capacity change from 0 to 1024 [ 472.403480][ T830] loop9: detected capacity change from 0 to 7 [ 472.416778][ T815] EXT4-fs: Ignoring removed orlov option [ 472.466063][ T836] loop5: detected capacity change from 0 to 512 [ 472.467099][ T830] loop9: unable to read partition table [ 472.471831][ T836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 472.476219][ T830] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 472.476219][ T830] U) failed (rc=-5) [ 472.483242][ T836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 472.533528][ T836] System zones: 1-12 [ 472.548694][ T836] EXT4-fs (loop5): 1 truncate cleaned up [ 472.549100][ T815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.554915][ T836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.593431][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.797209][ T857] FAULT_INJECTION: forcing a failure. [ 472.797209][ T857] name failslab, interval 1, probability 0, space 0, times 0 [ 472.809932][ T857] CPU: 0 UID: 0 PID: 857 Comm: syz.2.9664 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 472.809971][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.809988][ T857] Call Trace: [ 472.809998][ T857] [ 472.810058][ T857] __dump_stack+0x1d/0x30 [ 472.810087][ T857] dump_stack_lvl+0xe8/0x140 [ 472.810114][ T857] dump_stack+0x15/0x1b [ 472.810137][ T857] should_fail_ex+0x265/0x280 [ 472.810181][ T857] should_failslab+0x8c/0xb0 [ 472.810277][ T857] __kmalloc_noprof+0xa5/0x3e0 [ 472.810297][ T857] ? process_vm_rw+0x27c/0x950 [ 472.810381][ T857] ? iovec_from_user+0x179/0x210 [ 472.810408][ T857] process_vm_rw+0x27c/0x950 [ 472.810429][ T857] ? _parse_integer+0x27/0x40 [ 472.810512][ T857] ? kstrtoull+0x111/0x140 [ 472.810578][ T857] __x64_sys_process_vm_readv+0x78/0x90 [ 472.810610][ T857] x64_sys_call+0x2978/0x2fb0 [ 472.810640][ T857] do_syscall_64+0xd0/0x1a0 [ 472.810717][ T857] ? clear_bhb_loop+0x40/0x90 [ 472.810747][ T857] ? clear_bhb_loop+0x40/0x90 [ 472.810798][ T857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.810823][ T857] RIP: 0033:0x7f891a52e969 [ 472.810841][ T857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.810866][ T857] RSP: 002b:00007f8918b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 472.810892][ T857] RAX: ffffffffffffffda RBX: 00007f891a755fa0 RCX: 00007f891a52e969 [ 472.810953][ T857] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000579 [ 472.810971][ T857] RBP: 00007f8918b97090 R08: 0000000000000286 R09: 0000000000000000 [ 472.811067][ T857] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 472.811083][ T857] R13: 0000000000000000 R14: 00007f891a755fa0 R15: 00007ffcf276ea08 [ 472.811123][ T857] [ 473.120785][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.138771][ T875] FAULT_INJECTION: forcing a failure. [ 473.138771][ T875] name failslab, interval 1, probability 0, space 0, times 0 [ 473.151501][ T875] CPU: 1 UID: 0 PID: 875 Comm: syz.2.9671 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 473.151539][ T875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.151556][ T875] Call Trace: [ 473.151566][ T875] [ 473.151577][ T875] __dump_stack+0x1d/0x30 [ 473.151602][ T875] dump_stack_lvl+0xe8/0x140 [ 473.151622][ T875] dump_stack+0x15/0x1b [ 473.151694][ T875] should_fail_ex+0x265/0x280 [ 473.151784][ T875] should_failslab+0x8c/0xb0 [ 473.151826][ T875] __kmalloc_noprof+0xa5/0x3e0 [ 473.151879][ T875] ? bpf_test_init+0xa9/0x160 [ 473.151931][ T875] bpf_test_init+0xa9/0x160 [ 473.151964][ T875] bpf_prog_test_run_xdp+0x274/0x8f0 [ 473.152140][ T875] ? kstrtouint+0x76/0xc0 [ 473.152188][ T875] ? __rcu_read_unlock+0x4f/0x70 [ 473.152218][ T875] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 473.152285][ T875] bpf_prog_test_run+0x207/0x390 [ 473.152448][ T875] __sys_bpf+0x3dc/0x790 [ 473.152540][ T875] __x64_sys_bpf+0x41/0x50 [ 473.152572][ T875] x64_sys_call+0x2478/0x2fb0 [ 473.152658][ T875] do_syscall_64+0xd0/0x1a0 [ 473.152726][ T875] ? clear_bhb_loop+0x40/0x90 [ 473.152751][ T875] ? clear_bhb_loop+0x40/0x90 [ 473.152781][ T875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.152867][ T875] RIP: 0033:0x7f891a52e969 [ 473.152886][ T875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.152906][ T875] RSP: 002b:00007f8918b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.152954][ T875] RAX: ffffffffffffffda RBX: 00007f891a755fa0 RCX: 00007f891a52e969 [ 473.152972][ T875] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 473.152989][ T875] RBP: 00007f8918b97090 R08: 0000000000000000 R09: 0000000000000000 [ 473.153006][ T875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.153046][ T875] R13: 0000000000000000 R14: 00007f891a755fa0 R15: 00007ffcf276ea08 [ 473.153066][ T875] [ 473.384907][ T879] loop8: detected capacity change from 0 to 512 [ 473.401072][ T879] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 473.423315][ T888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.436354][ T879] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9670: iget: bogus i_mode (5) [ 473.452755][ T879] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9670: couldn't read orphan inode 15 (err -117) [ 473.482004][ T879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.483467][ T888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.522359][ T879] ext2 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.553267][ T893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=893 comm=syz.2.9675 [ 473.553492][ T879] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 473.615944][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.630744][ T888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.709798][ T905] loop8: detected capacity change from 0 to 1024 [ 473.717460][ T888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.718425][ T905] EXT4-fs: Ignoring removed orlov option [ 473.747009][ T905] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.784546][ T888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.814052][ T888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.827260][ T888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.839091][ T888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.951673][ T910] loop7: detected capacity change from 0 to 2048 [ 473.977477][ T910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.186473][ T394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.232102][ T930] loop9: detected capacity change from 0 to 7 [ 474.238851][ T930] buffer_io_error: 4 callbacks suppressed [ 474.238870][ T930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.253143][ T930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.261087][ T930] loop9: unable to read partition table [ 474.266870][ T930] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 474.266870][ T930] U) failed (rc=-5) [ 474.317024][ T933] loop2: detected capacity change from 0 to 1024 [ 474.324426][ T933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.334804][ T933] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 474.341327][ T938] FAULT_INJECTION: forcing a failure. [ 474.341327][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 474.344719][ T933] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.357082][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.0.9690 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 474.357164][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.357183][ T938] Call Trace: [ 474.357193][ T938] [ 474.357204][ T938] __dump_stack+0x1d/0x30 [ 474.357234][ T938] dump_stack_lvl+0xe8/0x140 [ 474.357324][ T938] dump_stack+0x15/0x1b [ 474.357348][ T938] should_fail_ex+0x265/0x280 [ 474.357449][ T938] should_failslab+0x8c/0xb0 [ 474.357503][ T938] kmem_cache_alloc_node_noprof+0x57/0x320 [ 474.357535][ T938] ? __alloc_skb+0x101/0x320 [ 474.357582][ T938] __alloc_skb+0x101/0x320 [ 474.357627][ T938] netlink_alloc_large_skb+0xba/0xf0 [ 474.357672][ T938] netlink_sendmsg+0x3cf/0x6b0 [ 474.357775][ T938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.357804][ T938] __sock_sendmsg+0x142/0x180 [ 474.357843][ T938] ____sys_sendmsg+0x31e/0x4e0 [ 474.357877][ T938] ___sys_sendmsg+0x17b/0x1d0 [ 474.357926][ T938] __x64_sys_sendmsg+0xd4/0x160 [ 474.357976][ T938] x64_sys_call+0x2999/0x2fb0 [ 474.358009][ T938] do_syscall_64+0xd0/0x1a0 [ 474.358042][ T938] ? clear_bhb_loop+0x40/0x90 [ 474.358072][ T938] ? clear_bhb_loop+0x40/0x90 [ 474.358110][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.358140][ T938] RIP: 0033:0x7f302b61e969 [ 474.358162][ T938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.358249][ T938] RSP: 002b:00007f3029c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.358328][ T938] RAX: ffffffffffffffda RBX: 00007f302b845fa0 RCX: 00007f302b61e969 [ 474.358346][ T938] RDX: 0000000000008050 RSI: 00002000000003c0 RDI: 0000000000000003 [ 474.358408][ T938] RBP: 00007f3029c87090 R08: 0000000000000000 R09: 0000000000000000 [ 474.358424][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.358441][ T938] R13: 0000000000000000 R14: 00007f302b845fa0 R15: 00007ffe2f3feea8 [ 474.358467][ T938] [ 474.575080][ T933] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 474.583154][ T933] EXT4-fs (loop2): orphan cleanup on readonly fs [ 474.611287][ T933] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.9688: Inode bitmap for bg 0 marked uninitialized [ 474.629201][ T933] EXT4-fs (loop2): Remounting filesystem read-only [ 474.637122][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.646653][ T933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.660406][ T933] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.698649][ T943] xt_l2tp: v2 doesn't support IP mode [ 474.726271][ T948] 9pnet_fd: Insufficient options for proto=fd [ 474.853964][ T30] kauditd_printk_skb: 401 callbacks suppressed [ 474.853984][ T30] audit: type=1400 audit(1748171730.716:13416): avc: denied { create } for pid=959 comm="syz.5.9697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.879821][ T30] audit: type=1400 audit(1748171730.716:13417): avc: denied { bind } for pid=959 comm="syz.5.9697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 474.948660][ T974] loop9: detected capacity change from 0 to 7 [ 474.956790][ T971] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.964752][ T971] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.972674][ T971] loop9: unable to read partition table [ 474.979165][ T30] audit: type=1326 audit(1748171730.776:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 474.980606][ T976] __nla_validate_parse: 7 callbacks suppressed [ 474.980625][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9704'. [ 475.003049][ T30] audit: type=1326 audit(1748171730.776:13419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.041971][ T30] audit: type=1326 audit(1748171730.776:13420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.065708][ T30] audit: type=1326 audit(1748171730.776:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.089479][ T30] audit: type=1326 audit(1748171730.776:13422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.090678][ T983] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9702'. [ 475.113252][ T30] audit: type=1326 audit(1748171730.776:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.145557][ T30] audit: type=1326 audit(1748171730.776:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.169086][ T30] audit: type=1326 audit(1748171730.776:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.5.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70afe9e969 code=0x7ffc0000 [ 475.200041][ T974] Buffer I/O error on dev loop9, logical block 0, async page read [ 475.208559][ T974] Buffer I/O error on dev loop9, logical block 0, async page read [ 475.216490][ T974] loop9: unable to read partition table [ 475.235121][ T974] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 475.235121][ T974] U) failed (rc=-5) [ 475.282848][ T988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=988 comm=syz.2.9707 [ 475.308579][ T988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=988 comm=syz.2.9707 [ 475.458261][ T1010] loop8: detected capacity change from 0 to 2048 [ 475.495864][ T1010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.547043][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.807647][ T1046] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.868938][ T1046] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.932077][ T1046] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.019167][ T1046] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.039312][ T1064] FAULT_INJECTION: forcing a failure. [ 476.039312][ T1064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.052717][ T1064] CPU: 0 UID: 0 PID: 1064 Comm: syz.8.9737 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 476.052755][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.052773][ T1064] Call Trace: [ 476.052781][ T1064] [ 476.052791][ T1064] __dump_stack+0x1d/0x30 [ 476.052896][ T1064] dump_stack_lvl+0xe8/0x140 [ 476.052923][ T1064] dump_stack+0x15/0x1b [ 476.052945][ T1064] should_fail_ex+0x265/0x280 [ 476.053049][ T1064] should_fail+0xb/0x20 [ 476.053092][ T1064] should_fail_usercopy+0x1a/0x20 [ 476.053120][ T1064] _copy_from_user+0x1c/0xb0 [ 476.053230][ T1064] memdup_user+0x5e/0xd0 [ 476.053258][ T1064] strndup_user+0x68/0xb0 [ 476.053323][ T1064] __se_sys_mount+0x4d/0x2e0 [ 476.053359][ T1064] ? fput+0x8f/0xc0 [ 476.053385][ T1064] ? ksys_write+0x16e/0x1a0 [ 476.053465][ T1064] __x64_sys_mount+0x67/0x80 [ 476.053580][ T1064] x64_sys_call+0xd36/0x2fb0 [ 476.053611][ T1064] do_syscall_64+0xd0/0x1a0 [ 476.053635][ T1064] ? clear_bhb_loop+0x40/0x90 [ 476.053661][ T1064] ? clear_bhb_loop+0x40/0x90 [ 476.053690][ T1064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.053779][ T1064] RIP: 0033:0x7fe9baf3e969 [ 476.053801][ T1064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.053827][ T1064] RSP: 002b:00007fe9b95a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 476.053872][ T1064] RAX: ffffffffffffffda RBX: 00007fe9bb165fa0 RCX: 00007fe9baf3e969 [ 476.053890][ T1064] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 476.053908][ T1064] RBP: 00007fe9b95a7090 R08: 0000200000000340 R09: 0000000000000000 [ 476.053925][ T1064] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 476.053940][ T1064] R13: 0000000000000000 R14: 00007fe9bb165fa0 R15: 00007ffc433de458 [ 476.053960][ T1064] [ 476.172604][ T1056] chnl_net:caif_netlink_parms(): no params data found [ 476.271447][ T1046] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.296367][ T1046] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.304696][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.311832][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.319295][ T1056] bridge_slave_0: entered allmulticast mode [ 476.325985][ T1056] bridge_slave_0: entered promiscuous mode [ 476.333140][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.340420][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.349122][ T1056] bridge_slave_1: entered allmulticast mode [ 476.356731][ T1056] bridge_slave_1: entered promiscuous mode [ 476.373328][ T1046] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.386037][ T1046] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.402494][ T1056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.414101][ T1056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.444672][ T1056] team0: Port device team_slave_0 added [ 476.458632][ T1056] team0: Port device team_slave_1 added [ 476.486939][ T1056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.494349][ T1056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.520580][ T1056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.555706][ T1056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.562729][ T1056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.589194][ T1056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.636404][ T1056] hsr_slave_0: entered promiscuous mode [ 476.642819][ T1056] hsr_slave_1: entered promiscuous mode [ 476.649559][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9747'. [ 476.658506][ T1091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9747'. [ 476.688657][ T1091] loop5: detected capacity change from 0 to 1024 [ 476.704041][ T1100] FAULT_INJECTION: forcing a failure. [ 476.704041][ T1100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.704612][ T1091] EXT4-fs: Ignoring removed orlov option [ 476.717307][ T1100] CPU: 1 UID: 0 PID: 1100 Comm: syz.7.9750 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 476.717348][ T1100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.717370][ T1100] Call Trace: [ 476.717380][ T1100] [ 476.717390][ T1100] __dump_stack+0x1d/0x30 [ 476.717439][ T1100] dump_stack_lvl+0xe8/0x140 [ 476.717468][ T1100] dump_stack+0x15/0x1b [ 476.717491][ T1100] should_fail_ex+0x265/0x280 [ 476.717547][ T1100] should_fail+0xb/0x20 [ 476.717638][ T1100] should_fail_usercopy+0x1a/0x20 [ 476.717680][ T1100] _copy_from_user+0x1c/0xb0 [ 476.717725][ T1100] memdup_user+0x5e/0xd0 [ 476.717752][ T1100] strndup_user+0x68/0xb0 [ 476.717780][ T1100] __se_sys_mount+0x4d/0x2e0 [ 476.717828][ T1100] ? fput+0x8f/0xc0 [ 476.717853][ T1100] ? ksys_write+0x16e/0x1a0 [ 476.717892][ T1100] __x64_sys_mount+0x67/0x80 [ 476.717930][ T1100] x64_sys_call+0xd36/0x2fb0 [ 476.717960][ T1100] do_syscall_64+0xd0/0x1a0 [ 476.718065][ T1100] ? clear_bhb_loop+0x40/0x90 [ 476.718095][ T1100] ? clear_bhb_loop+0x40/0x90 [ 476.718126][ T1100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.718156][ T1100] RIP: 0033:0x7fc67366e969 [ 476.718231][ T1100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.718257][ T1100] RSP: 002b:00007fc671cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 476.718303][ T1100] RAX: ffffffffffffffda RBX: 00007fc673895fa0 RCX: 00007fc67366e969 [ 476.718321][ T1100] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 476.718339][ T1100] RBP: 00007fc671cd7090 R08: 0000200000000600 R09: 0000000000000000 [ 476.718358][ T1100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.718375][ T1100] R13: 0000000000000000 R14: 00007fc673895fa0 R15: 00007ffc98a7b618 [ 476.718451][ T1100] [ 476.761993][ T1105] loop9: detected capacity change from 0 to 7 [ 476.923117][ T1105] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.931328][ T1105] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.932365][ T1091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.939276][ T1105] loop9: unable to read partition table [ 476.939406][ T1105] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 476.939406][ T1105] U) failed (rc=-5) [ 477.035723][ T1056] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.097096][ T1056] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.156921][ T1056] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.207195][ T1056] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.243231][ T1130] loop7: detected capacity change from 0 to 1024 [ 477.251357][ T1130] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 477.262323][ T1130] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 477.275678][ T1130] JBD2: no valid journal superblock found [ 477.281473][ T1130] EXT4-fs (loop7): Could not load journal inode [ 477.482372][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.528983][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9765'. [ 477.538938][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.546522][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.547838][ T1136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9764'. [ 477.563307][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.571010][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.602980][ T1141] loop9: detected capacity change from 0 to 7 [ 477.609276][ T1141] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.617493][ T1141] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.625462][ T1141] loop9: unable to read partition table [ 477.631174][ T1141] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 477.631174][ T1141] U) failed (rc=-5) [ 477.646271][ T1141] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9766'. [ 477.795517][ T1157] loop9: detected capacity change from 0 to 7 [ 477.801908][ T1157] loop9: unable to read partition table [ 477.807932][ T1157] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 477.807932][ T1157] U) failed (rc=-5) [ 477.844488][ T1163] loop9: detected capacity change from 0 to 7 [ 477.852005][ T1163] loop9: unable to read partition table [ 477.858445][ T1163] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 477.858445][ T1163] U) failed (rc=-5) [ 477.895905][ T1163] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9777'. [ 477.898972][ T1167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9779'. [ 477.921167][ T1056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.949513][ T1056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.980828][ T3649] bridge_slave_1: left allmulticast mode [ 477.986682][ T3649] bridge_slave_1: left promiscuous mode [ 477.992462][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.006328][ T3649] bridge_slave_0: left allmulticast mode [ 478.012030][ T3649] bridge_slave_0: left promiscuous mode [ 478.017766][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.151946][ T1184] loop9: detected capacity change from 0 to 7 [ 478.161895][ T1184] loop9: unable to read partition table [ 478.167997][ T1184] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 478.167997][ T1184] U) failed (rc=-5) [ 478.390104][ T1171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9780'. [ 478.606018][ T1056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.659909][ T1056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.684810][ T1197] netlink: 'syz.7.9787': attribute type 9 has an invalid length. [ 478.692965][ T3649] hsr_slave_1: left promiscuous mode [ 478.714564][ T3649] veth0: left promiscuous mode [ 478.727171][ T3649] veth1_macvtap: left promiscuous mode [ 478.743388][ T3649] veth0_macvtap: left promiscuous mode [ 478.763610][ T3649] veth1_vlan: left promiscuous mode [ 478.770683][ T3649] veth0_vlan: left promiscuous mode [ 478.879108][ T3649] team_slave_1 (unregistering): left promiscuous mode [ 478.888550][ T3649] team0 (unregistering): Port device team_slave_1 removed [ 478.898289][ T3649] team_slave_0 (unregistering): left promiscuous mode [ 478.905793][ T3649] team0 (unregistering): Port device team_slave_0 removed [ 478.957164][ T1208] netlink: 'syz.5.9791': attribute type 1 has an invalid length. [ 478.994882][ T1212] loop9: detected capacity change from 0 to 7 [ 479.008731][ T1212] loop9: unable to read partition table [ 479.015761][ T1212] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 479.015761][ T1212] U) failed (rc=-5) [ 479.036197][ T1056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.052888][ T1056] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.073845][T26432] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.081003][T26432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.118940][T26432] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.126098][T26432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.214152][ T1056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.225140][ T1228] tipc: Started in network mode [ 479.230160][ T1228] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 479.239212][ T1228] tipc: Enabling of bearer rejected, failed to enable media [ 479.343013][ T1056] veth0_vlan: entered promiscuous mode [ 479.354225][ T1056] veth1_vlan: entered promiscuous mode [ 479.376223][ T1056] veth0_macvtap: entered promiscuous mode [ 479.389790][ T1056] veth1_macvtap: entered promiscuous mode [ 479.402134][ T1056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.402571][ T1240] loop8: detected capacity change from 0 to 512 [ 479.412866][ T1056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.424644][ T1240] ext4: Unknown parameter 'uid' [ 479.434787][ T1056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.443667][ T1056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.452455][ T1056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.461427][ T1056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.575470][ T1240] loop8: detected capacity change from 0 to 512 [ 479.582888][ T1240] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 479.597814][ T1246] loop2: detected capacity change from 0 to 512 [ 479.607441][ T1240] EXT4-fs (loop8): 1 truncate cleaned up [ 479.613603][ T1240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.629528][ T1240] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.796940][ T1258] loop9: detected capacity change from 0 to 7 [ 479.833631][ T1258] buffer_io_error: 8 callbacks suppressed [ 479.833648][ T1258] Buffer I/O error on dev loop9, logical block 0, async page read [ 479.856168][ T1258] Buffer I/O error on dev loop9, logical block 0, async page read [ 479.864173][ T1258] loop9: unable to read partition table [ 479.872385][ T1258] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 479.872385][ T1258] U) failed (rc=-5) [ 479.887153][ T30] kauditd_printk_skb: 635 callbacks suppressed [ 479.887206][ T30] audit: type=1326 audit(1748171735.736:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 479.917099][ T30] audit: type=1326 audit(1748171735.736:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 479.940869][ T30] audit: type=1326 audit(1748171735.736:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.073178][ T1274] __nla_validate_parse: 6 callbacks suppressed [ 480.073199][ T1274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9809'. [ 480.098829][ T30] audit: type=1326 audit(1748171735.756:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.122459][ T30] audit: type=1326 audit(1748171735.756:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.146080][ T30] audit: type=1326 audit(1748171735.756:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.169709][ T30] audit: type=1326 audit(1748171735.836:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.193334][ T30] audit: type=1326 audit(1748171735.836:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.217010][ T30] audit: type=1326 audit(1748171735.836:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.240903][ T30] audit: type=1326 audit(1748171735.836:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 480.296582][ T1296] loop9: detected capacity change from 0 to 7 [ 480.303035][ T1296] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.311139][ T1296] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.319129][ T1296] loop9: unable to read partition table [ 480.324956][ T1296] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 480.324956][ T1296] U) failed (rc=-5) [ 480.356678][ T1242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9801'. [ 480.390178][ T1262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9801'. [ 480.517686][ T1314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9820'. [ 480.531593][ T1316] sd 0:0:1:0: device reset [ 480.538943][ T1307] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9817'. [ 480.587223][ T1319] loop8: detected capacity change from 0 to 512 [ 480.608962][ T1321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9823'. [ 480.618483][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.626093][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.633887][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.641747][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.703365][ T1324] loop9: detected capacity change from 0 to 7 [ 480.709802][ T1324] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.718296][ T1324] Buffer I/O error on dev loop9, logical block 0, async page read [ 480.726228][ T1324] loop9: unable to read partition table [ 480.737608][ T1324] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 480.737608][ T1324] U) failed (rc=-5) [ 480.973541][ T1347] netlink: 'syz.7.9830': attribute type 4 has an invalid length. [ 480.983495][ T1352] sd 0:0:1:0: device reset [ 481.021203][ T1358] loop9: detected capacity change from 0 to 7 [ 481.032047][ T1358] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.040795][ T1358] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.048834][ T1358] loop9: unable to read partition table [ 481.051793][ T1357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9836'. [ 481.057117][ T1358] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 481.057117][ T1358] U) failed (rc=-5) [ 481.117807][ T1365] loop9: detected capacity change from 0 to 7 [ 481.134580][ T1365] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.156249][ T1365] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.164169][ T1365] loop9: unable to read partition table [ 481.170089][ T1365] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 481.170089][ T1365] U) failed (rc=-5) [ 481.186446][ T1370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9840'. [ 481.460551][ T1383] FAULT_INJECTION: forcing a failure. [ 481.460551][ T1383] name failslab, interval 1, probability 0, space 0, times 0 [ 481.473274][ T1383] CPU: 0 UID: 0 PID: 1383 Comm: syz.0.9847 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 481.473313][ T1383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.473330][ T1383] Call Trace: [ 481.473378][ T1383] [ 481.473386][ T1383] __dump_stack+0x1d/0x30 [ 481.473458][ T1383] dump_stack_lvl+0xe8/0x140 [ 481.473484][ T1383] dump_stack+0x15/0x1b [ 481.473540][ T1383] should_fail_ex+0x265/0x280 [ 481.473582][ T1383] should_failslab+0x8c/0xb0 [ 481.473622][ T1383] kmem_cache_alloc_noprof+0x50/0x310 [ 481.473705][ T1383] ? skb_clone+0x151/0x1f0 [ 481.473735][ T1383] skb_clone+0x151/0x1f0 [ 481.473764][ T1383] __netlink_deliver_tap+0x2c9/0x500 [ 481.473789][ T1383] netlink_unicast+0x64c/0x670 [ 481.473822][ T1383] netlink_sendmsg+0x58b/0x6b0 [ 481.473934][ T1383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.473978][ T1383] __sock_sendmsg+0x142/0x180 [ 481.474015][ T1383] ____sys_sendmsg+0x31e/0x4e0 [ 481.474145][ T1383] ___sys_sendmsg+0x17b/0x1d0 [ 481.474249][ T1383] __x64_sys_sendmsg+0xd4/0x160 [ 481.474283][ T1383] x64_sys_call+0x2999/0x2fb0 [ 481.474312][ T1383] do_syscall_64+0xd0/0x1a0 [ 481.474336][ T1383] ? clear_bhb_loop+0x40/0x90 [ 481.474358][ T1383] ? clear_bhb_loop+0x40/0x90 [ 481.474429][ T1383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.474457][ T1383] RIP: 0033:0x7f302b61e969 [ 481.474473][ T1383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.474557][ T1383] RSP: 002b:00007f3029c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.474582][ T1383] RAX: ffffffffffffffda RBX: 00007f302b845fa0 RCX: 00007f302b61e969 [ 481.474600][ T1383] RDX: 0000000000008054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 481.474617][ T1383] RBP: 00007f3029c87090 R08: 0000000000000000 R09: 0000000000000000 [ 481.474634][ T1383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.474672][ T1383] R13: 0000000000000000 R14: 00007f302b845fa0 R15: 00007ffe2f3feea8 [ 481.474696][ T1383] [ 481.679058][ T1383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9847'. [ 481.893849][ T1407] loop9: detected capacity change from 0 to 7 [ 481.900290][ T1407] loop9: unable to read partition table [ 481.906191][ T1407] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 481.906191][ T1407] U) failed (rc=-5) [ 481.940638][ T1409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9859'. [ 481.956298][ T1409] loop7: detected capacity change from 0 to 1024 [ 481.963194][ T1409] EXT4-fs: Ignoring removed orlov option [ 481.971903][ T1409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.660465][ T1423] FAULT_INJECTION: forcing a failure. [ 482.660465][ T1423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.673886][ T1423] CPU: 0 UID: 0 PID: 1423 Comm: syz.0.9864 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 482.673917][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.673944][ T1423] Call Trace: [ 482.673953][ T1423] [ 482.674016][ T1423] __dump_stack+0x1d/0x30 [ 482.674038][ T1423] dump_stack_lvl+0xe8/0x140 [ 482.674064][ T1423] dump_stack+0x15/0x1b [ 482.674087][ T1423] should_fail_ex+0x265/0x280 [ 482.674134][ T1423] should_fail+0xb/0x20 [ 482.674198][ T1423] should_fail_usercopy+0x1a/0x20 [ 482.674226][ T1423] _copy_to_user+0x20/0xa0 [ 482.674259][ T1423] simple_read_from_buffer+0xb5/0x130 [ 482.674296][ T1423] proc_fail_nth_read+0x100/0x140 [ 482.674360][ T1423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.674388][ T1423] vfs_read+0x19d/0x6f0 [ 482.674414][ T1423] ? __sys_setsockopt+0x18e/0x200 [ 482.674508][ T1423] ? __rcu_read_unlock+0x4f/0x70 [ 482.674539][ T1423] ? __fget_files+0x184/0x1c0 [ 482.674617][ T1423] ksys_read+0xda/0x1a0 [ 482.674655][ T1423] __x64_sys_read+0x40/0x50 [ 482.674691][ T1423] x64_sys_call+0x2d77/0x2fb0 [ 482.674735][ T1423] do_syscall_64+0xd0/0x1a0 [ 482.674769][ T1423] ? clear_bhb_loop+0x40/0x90 [ 482.674799][ T1423] ? clear_bhb_loop+0x40/0x90 [ 482.674826][ T1423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.674854][ T1423] RIP: 0033:0x7f302b61d37c [ 482.674913][ T1423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.674940][ T1423] RSP: 002b:00007f3029c87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.675026][ T1423] RAX: ffffffffffffffda RBX: 00007f302b845fa0 RCX: 00007f302b61d37c [ 482.675045][ T1423] RDX: 000000000000000f RSI: 00007f3029c870a0 RDI: 0000000000000004 [ 482.675062][ T1423] RBP: 00007f3029c87090 R08: 0000000000000000 R09: 0000000000000000 [ 482.675074][ T1423] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000002 [ 482.675087][ T1423] R13: 0000000000000000 R14: 00007f302b845fa0 R15: 00007ffe2f3feea8 [ 482.675124][ T1423] [ 482.936280][ T394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.224720][ T1457] loop7: detected capacity change from 0 to 512 [ 483.954919][ T1486] loop9: detected capacity change from 0 to 7 [ 483.971115][ T1486] loop9: unable to read partition table [ 483.982077][ T1486] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 483.982077][ T1486] U) failed (rc=-5) [ 484.117192][ T1497] loop9: detected capacity change from 0 to 7 [ 484.123533][ T1497] loop9: unable to read partition table [ 484.129974][ T1497] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 484.129974][ T1497] U) failed (rc=-5) [ 484.271991][ T1520] loop9: detected capacity change from 0 to 7 [ 484.278639][ T1520] loop9: unable to read partition table [ 484.284647][ T1520] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 484.284647][ T1520] U) failed (rc=-5) [ 484.371367][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.378947][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.386864][ T1537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.394397][ T1537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.010243][ T30] kauditd_printk_skb: 365 callbacks suppressed [ 485.010263][ T30] audit: type=1400 audit(1748171740.876:14436): avc: denied { map } for pid=1558 comm="syz.0.9915" path="socket:[113094]" dev="sockfs" ino=113094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 485.060192][ T1561] loop9: detected capacity change from 0 to 7 [ 485.066670][ T1561] buffer_io_error: 8 callbacks suppressed [ 485.066726][ T1561] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.080701][ T1561] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.088748][ T1561] loop9: unable to read partition table [ 485.094610][ T1561] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 485.094610][ T1561] U) failed (rc=-5) [ 485.150772][ T30] audit: type=1326 audit(1748171741.016:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.174518][ T30] audit: type=1326 audit(1748171741.016:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.198207][ T30] audit: type=1326 audit(1748171741.016:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.221901][ T30] audit: type=1326 audit(1748171741.016:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.245448][ T30] audit: type=1326 audit(1748171741.016:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.269462][ T30] audit: type=1326 audit(1748171741.016:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.293068][ T30] audit: type=1326 audit(1748171741.016:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.317101][ T30] audit: type=1326 audit(1748171741.016:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.340968][ T30] audit: type=1326 audit(1748171741.016:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.7.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 485.506833][ T1583] loop8: detected capacity change from 0 to 512 [ 485.618255][ T1586] loop9: detected capacity change from 0 to 7 [ 485.627902][ T1578] __nla_validate_parse: 13 callbacks suppressed [ 485.627918][ T1578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9924'. [ 485.640049][ T1586] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.653709][ T1586] Buffer I/O error on dev loop9, logical block 0, async page read [ 485.661810][ T1586] loop9: unable to read partition table [ 485.666830][ T1592] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9929'. [ 485.677611][ T1593] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9927'. [ 485.685180][ T1586] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 485.685180][ T1586] U) failed (rc=-5) [ 485.822514][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9934'. [ 485.831492][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9934'. [ 485.849918][ T1603] loop7: detected capacity change from 0 to 1024 [ 485.856795][ T1603] EXT4-fs: Ignoring removed orlov option [ 485.865750][ T1603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.931423][ T1613] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9937'. [ 485.955313][ T1613] FAULT_INJECTION: forcing a failure. [ 485.955313][ T1613] name failslab, interval 1, probability 0, space 0, times 0 [ 485.968003][ T1613] CPU: 1 UID: 0 PID: 1613 Comm: syz.8.9937 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 485.968040][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.968056][ T1613] Call Trace: [ 485.968063][ T1613] [ 485.968073][ T1613] __dump_stack+0x1d/0x30 [ 485.968163][ T1613] dump_stack_lvl+0xe8/0x140 [ 485.968183][ T1613] dump_stack+0x15/0x1b [ 485.968205][ T1613] should_fail_ex+0x265/0x280 [ 485.968251][ T1613] should_failslab+0x8c/0xb0 [ 485.968294][ T1613] __kvmalloc_node_noprof+0x126/0x4d0 [ 485.968385][ T1613] ? netem_change+0x1f3/0x14d0 [ 485.968434][ T1613] netem_change+0x1f3/0x14d0 [ 485.968466][ T1613] ? __nla_validate_parse+0x1652/0x1d00 [ 485.968505][ T1613] ? nla_strcmp+0xc3/0xe0 [ 485.968531][ T1613] tc_modify_qdisc+0x1019/0x1310 [ 485.968567][ T1613] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 485.968663][ T1613] rtnetlink_rcv_msg+0x65a/0x6d0 [ 485.968745][ T1613] netlink_rcv_skb+0x120/0x220 [ 485.968777][ T1613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.968809][ T1613] rtnetlink_rcv+0x1c/0x30 [ 485.968896][ T1613] netlink_unicast+0x59e/0x670 [ 485.968943][ T1613] netlink_sendmsg+0x58b/0x6b0 [ 485.969038][ T1613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.969059][ T1613] __sock_sendmsg+0x142/0x180 [ 485.969108][ T1613] ____sys_sendmsg+0x31e/0x4e0 [ 485.969132][ T1613] ___sys_sendmsg+0x17b/0x1d0 [ 485.969217][ T1613] __x64_sys_sendmsg+0xd4/0x160 [ 485.969246][ T1613] x64_sys_call+0x2999/0x2fb0 [ 485.969308][ T1613] do_syscall_64+0xd0/0x1a0 [ 485.969334][ T1613] ? clear_bhb_loop+0x40/0x90 [ 485.969363][ T1613] ? clear_bhb_loop+0x40/0x90 [ 485.969393][ T1613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.969435][ T1613] RIP: 0033:0x7fe9baf3e969 [ 485.969451][ T1613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.969524][ T1613] RSP: 002b:00007fe9b95a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.969544][ T1613] RAX: ffffffffffffffda RBX: 00007fe9bb165fa0 RCX: 00007fe9baf3e969 [ 485.969557][ T1613] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 485.969573][ T1613] RBP: 00007fe9b95a7090 R08: 0000000000000000 R09: 0000000000000000 [ 485.969590][ T1613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.969607][ T1613] R13: 0000000000000000 R14: 00007fe9bb165fa0 R15: 00007ffc433de458 [ 485.969627][ T1613] [ 486.362731][ T1625] loop9: detected capacity change from 0 to 7 [ 486.405383][ T1625] Buffer I/O error on dev loop9, logical block 0, async page read [ 486.414308][ T1625] Buffer I/O error on dev loop9, logical block 0, async page read [ 486.422571][ T1625] loop9: unable to read partition table [ 486.428963][ T1625] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 486.428963][ T1625] U) failed (rc=-5) [ 486.506199][ T1638] tipc: Started in network mode [ 486.511159][ T1638] tipc: Node identity cac7cb249b73, cluster identity 4711 [ 486.518510][ T1638] tipc: Enabled bearer , priority 0 [ 486.552942][ T1637] tipc: Disabling bearer [ 486.631789][ T1646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9949'. [ 486.714187][ T394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.778990][ T1661] netlink: 304 bytes leftover after parsing attributes in process `syz.0.9955'. [ 486.792378][ T1665] netlink: 312 bytes leftover after parsing attributes in process `syz.7.9957'. [ 486.886458][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9963'. [ 486.913023][ T1684] tipc: Enabling of bearer rejected, failed to enable media [ 486.928105][ T1681] loop8: detected capacity change from 0 to 1024 [ 486.934900][ T1681] EXT4-fs: Ignoring removed orlov option [ 486.951832][ T1681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.772412][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.877602][ T1807] loop8: detected capacity change from 0 to 1024 [ 487.884437][ T1807] EXT4-fs: Ignoring removed orlov option [ 487.947677][ T1807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.051645][ T1832] loop9: detected capacity change from 0 to 7 [ 488.058103][ T1832] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.067850][ T1832] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.075779][ T1832] loop9: unable to read partition table [ 488.081648][ T1832] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 488.081648][ T1832] U) failed (rc=-5) [ 488.214361][ T1852] loop2: detected capacity change from 0 to 1024 [ 488.230327][ T1852] EXT4-fs: Ignoring removed orlov option [ 488.241946][ T1852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.806358][ T411] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.857007][ T1879] loop9: detected capacity change from 0 to 7 [ 488.863396][ T1879] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.871737][ T1879] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.879612][ T1879] loop9: unable to read partition table [ 488.885615][ T1879] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 488.885615][ T1879] U) failed (rc=-5) [ 489.055690][ T1056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.077287][ T1896] loop9: detected capacity change from 0 to 7 [ 489.084083][ T1896] loop9: unable to read partition table [ 489.090388][ T1896] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 489.090388][ T1896] U) failed (rc=-5) [ 489.122967][ T1902] loop2: detected capacity change from 0 to 1024 [ 489.134754][ T1902] EXT4-fs: Ignoring removed orlov option [ 489.144432][ T1902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.703942][ T1936] loop8: detected capacity change from 0 to 512 [ 490.162736][ T30] kauditd_printk_skb: 379 callbacks suppressed [ 490.162755][ T30] audit: type=1326 audit(1748171746.026:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.192681][ T30] audit: type=1326 audit(1748171746.026:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.216607][ T30] audit: type=1326 audit(1748171746.026:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.240372][ T30] audit: type=1326 audit(1748171746.026:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.263818][ T30] audit: type=1326 audit(1748171746.026:14829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.287786][ T30] audit: type=1326 audit(1748171746.026:14830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.311738][ T30] audit: type=1326 audit(1748171746.026:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.313858][ T1056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.335477][ T30] audit: type=1326 audit(1748171746.026:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.335518][ T30] audit: type=1326 audit(1748171746.026:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.391947][ T30] audit: type=1326 audit(1748171746.026:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1949 comm="syz.8.10021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 490.505959][ T1970] loop2: detected capacity change from 0 to 512 [ 490.957309][ T2035] __nla_validate_parse: 23 callbacks suppressed [ 490.957331][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10036'. [ 491.514530][ T2127] netlink: 312 bytes leftover after parsing attributes in process `syz.7.10044'. [ 491.548023][ T2129] loop7: detected capacity change from 0 to 512 [ 491.657053][ T2135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10047'. [ 491.732299][ T2143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10050'. [ 491.779651][ T2147] loop9: detected capacity change from 0 to 7 [ 491.786036][ T2147] buffer_io_error: 2 callbacks suppressed [ 491.786091][ T2147] Buffer I/O error on dev loop9, logical block 0, async page read [ 491.801368][ T2147] Buffer I/O error on dev loop9, logical block 0, async page read [ 491.809350][ T2147] loop9: unable to read partition table [ 491.815127][ T2147] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 491.815127][ T2147] U) failed (rc=-5) [ 491.830496][ T2147] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10052'. [ 491.844058][ T2153] netlink: 312 bytes leftover after parsing attributes in process `syz.8.10055'. [ 491.869905][ T2158] loop7: detected capacity change from 0 to 512 [ 492.082319][ T2169] netlink: 312 bytes leftover after parsing attributes in process `syz.5.10059'. [ 492.170890][ T2174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10060'. [ 492.301998][ T2208] loop9: detected capacity change from 0 to 7 [ 492.309190][ T2208] Buffer I/O error on dev loop9, logical block 0, async page read [ 492.317468][ T2208] Buffer I/O error on dev loop9, logical block 0, async page read [ 492.325457][ T2208] loop9: unable to read partition table [ 492.331395][ T2208] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 492.331395][ T2208] U) failed (rc=-5) [ 492.346449][ T2208] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10066'. [ 493.306828][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10074'. [ 493.349500][ T2327] loop9: detected capacity change from 0 to 7 [ 493.356288][ T2327] Buffer I/O error on dev loop9, logical block 0, async page read [ 493.364361][ T2327] Buffer I/O error on dev loop9, logical block 0, async page read [ 493.372363][ T2327] loop9: unable to read partition table [ 493.378563][ T2327] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 493.378563][ T2327] U) failed (rc=-5) [ 493.798091][ T2363] loop9: detected capacity change from 0 to 7 [ 493.804603][ T2363] Buffer I/O error on dev loop9, logical block 0, async page read [ 493.815421][ T2363] Buffer I/O error on dev loop9, logical block 0, async page read [ 493.823761][ T2363] loop9: unable to read partition table [ 493.829669][ T2363] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 493.829669][ T2363] U) failed (rc=-5) [ 493.912704][ T2371] FAULT_INJECTION: forcing a failure. [ 493.912704][ T2371] name failslab, interval 1, probability 0, space 0, times 0 [ 493.925537][ T2371] CPU: 0 UID: 0 PID: 2371 Comm: syz.2.10094 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 493.925564][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.925577][ T2371] Call Trace: [ 493.925583][ T2371] [ 493.925591][ T2371] __dump_stack+0x1d/0x30 [ 493.925610][ T2371] dump_stack_lvl+0xe8/0x140 [ 493.925682][ T2371] dump_stack+0x15/0x1b [ 493.925697][ T2371] should_fail_ex+0x265/0x280 [ 493.925729][ T2371] should_failslab+0x8c/0xb0 [ 493.925824][ T2371] kmem_cache_alloc_noprof+0x50/0x310 [ 493.925843][ T2371] ? alloc_empty_file+0x76/0x200 [ 493.925862][ T2371] alloc_empty_file+0x76/0x200 [ 493.925946][ T2371] alloc_file_pseudo+0xc6/0x160 [ 493.925967][ T2371] hugetlb_file_setup+0x298/0x3d0 [ 493.925989][ T2371] ksys_mmap_pgoff+0x157/0x310 [ 493.926039][ T2371] x64_sys_call+0x1602/0x2fb0 [ 493.926136][ T2371] do_syscall_64+0xd0/0x1a0 [ 493.926158][ T2371] ? clear_bhb_loop+0x40/0x90 [ 493.926198][ T2371] ? clear_bhb_loop+0x40/0x90 [ 493.926275][ T2371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.926295][ T2371] RIP: 0033:0x7f4fd5e7e969 [ 493.926309][ T2371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.926326][ T2371] RSP: 002b:00007f4fd44e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 493.926344][ T2371] RAX: ffffffffffffffda RBX: 00007f4fd60a5fa0 RCX: 00007f4fd5e7e969 [ 493.926356][ T2371] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 493.926414][ T2371] RBP: 00007f4fd44e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 493.926426][ T2371] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 493.926437][ T2371] R13: 0000000000000000 R14: 00007f4fd60a5fa0 R15: 00007ffc78ec36a8 [ 493.926456][ T2371] [ 494.121027][ T2374] netlink: 'syz.2.10095': attribute type 4 has an invalid length. [ 494.132913][ T2374] netlink: 'syz.2.10095': attribute type 4 has an invalid length. [ 494.274743][ T2384] SELinux: policydb version 397083656 does not match my version range 15-34 [ 494.284037][ T2384] SELinux: failed to load policy [ 494.292434][ T2384] @: renamed from vlan0 (while UP) [ 494.327539][ T2388] loop9: detected capacity change from 0 to 7 [ 494.334144][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.342226][ T2388] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.350285][ T2388] loop9: unable to read partition table [ 494.357175][ T2388] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 494.357175][ T2388] U) failed (rc=-5) [ 494.729768][ T2423] @: renamed from vlan0 (while UP) [ 495.228432][ T30] kauditd_printk_skb: 281 callbacks suppressed [ 495.228461][ T30] audit: type=1326 audit(1748171751.096:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2392 comm="syz.2.10105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd5e7e969 code=0x7ffc0000 [ 495.427811][ T30] audit: type=1326 audit(1748171751.296:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.452211][ T30] audit: type=1326 audit(1748171751.296:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.476063][ T30] audit: type=1326 audit(1748171751.296:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.499738][ T30] audit: type=1326 audit(1748171751.296:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.523794][ T30] audit: type=1326 audit(1748171751.296:15121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.547616][ T30] audit: type=1326 audit(1748171751.296:15122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.571286][ T30] audit: type=1326 audit(1748171751.296:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.595152][ T30] audit: type=1326 audit(1748171751.296:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 495.618841][ T30] audit: type=1326 audit(1748171751.296:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2469 comm="syz.7.10135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc67366e969 code=0x7ffc0000 [ 496.801841][ T2525] __nla_validate_parse: 9 callbacks suppressed [ 496.801858][ T2525] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10155'. [ 497.733454][ T2548] loop2: detected capacity change from 0 to 8192 [ 497.745720][ T2548] xt_hashlimit: max too large, truncated to 1048576 [ 497.989643][ T2571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10171'. [ 498.847481][ T2597] netlink: 312 bytes leftover after parsing attributes in process `syz.0.10181'. [ 498.984932][ T2607] loop9: detected capacity change from 0 to 7 [ 498.991289][ T2607] Buffer I/O error on dev loop9, logical block 0, async page read [ 498.999261][ T2607] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.007364][ T2607] loop9: unable to read partition table [ 499.014132][ T2607] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.014132][ T2607] U) failed (rc=-5) [ 499.118495][ T2618] loop2: detected capacity change from 0 to 512 [ 499.223806][ T2625] netlink: 312 bytes leftover after parsing attributes in process `syz.2.10193'. [ 499.391043][ T2633] loop9: detected capacity change from 0 to 7 [ 499.397422][ T2633] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.405473][ T2633] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.413387][ T2633] loop9: unable to read partition table [ 499.419164][ T2633] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.419164][ T2633] U) failed (rc=-5) [ 499.451371][ T2636] loop9: detected capacity change from 0 to 7 [ 499.457855][ T2636] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.466002][ T2636] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.474396][ T2636] loop9: unable to read partition table [ 499.480284][ T2636] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.480284][ T2636] U) failed (rc=-5) [ 499.489981][ T2637] loop7: detected capacity change from 0 to 8192 [ 499.505466][ T2637] xt_hashlimit: max too large, truncated to 1048576 [ 499.588793][ T2645] loop9: detected capacity change from 0 to 7 [ 499.614202][ T2645] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.625805][ T2645] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.633837][ T2645] loop9: unable to read partition table [ 499.641613][ T2652] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10202'. [ 499.661900][ T2645] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.661900][ T2645] U) failed (rc=-5) [ 499.712519][ T2659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10207'. [ 499.796199][ T2667] loop9: detected capacity change from 0 to 7 [ 499.802585][ T2667] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.812670][ T2667] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.820666][ T2667] loop9: unable to read partition table [ 499.837585][ T2667] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.837585][ T2667] U) failed (rc=-5) [ 499.884156][ T2676] loop5: detected capacity change from 0 to 512 [ 499.885768][ T2678] loop9: detected capacity change from 0 to 7 [ 499.897917][ T2678] loop9: unable to read partition table [ 499.900074][ T2676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10214'. [ 499.910475][ T2678] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 499.910475][ T2678] U) failed (rc=-5) [ 499.936510][ T2678] netlink: 80 bytes leftover after parsing attributes in process `syz.8.10215'. [ 500.006921][ T2692] netlink: 'syz.0.10222': attribute type 4 has an invalid length. [ 500.053863][ T2697] loop9: detected capacity change from 0 to 7 [ 500.061531][ T2697] loop9: unable to read partition table [ 500.067321][ T2697] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 500.067321][ T2697] U) failed (rc=-5) [ 500.099206][ T2692] netlink: 'syz.0.10222': attribute type 4 has an invalid length. [ 500.130093][ T2705] netlink: 'syz.5.10227': attribute type 4 has an invalid length. [ 500.144243][ T2705] netlink: 'syz.5.10227': attribute type 4 has an invalid length. [ 500.162052][ T2707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10228'. [ 500.171154][ T2707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10228'. [ 500.359998][ T2724] loop9: detected capacity change from 0 to 7 [ 500.366323][ T2724] loop9: unable to read partition table [ 500.372156][ T2724] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 500.372156][ T2724] U) failed (rc=-5) [ 500.450130][ T30] kauditd_printk_skb: 341 callbacks suppressed [ 500.450149][ T30] audit: type=1326 audit(1748171756.316:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.505871][ T30] audit: type=1326 audit(1748171756.346:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.529606][ T30] audit: type=1326 audit(1748171756.346:15469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.553717][ T30] audit: type=1326 audit(1748171756.346:15470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.577518][ T30] audit: type=1326 audit(1748171756.346:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.601331][ T30] audit: type=1326 audit(1748171756.346:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.625077][ T30] audit: type=1326 audit(1748171756.346:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.643973][ T2732] loop9: detected capacity change from 0 to 7 [ 500.648809][ T30] audit: type=1326 audit(1748171756.346:15474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.655387][ T2732] loop9: unable to read partition table [ 500.678459][ T30] audit: type=1326 audit(1748171756.346:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.678501][ T30] audit: type=1326 audit(1748171756.346:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2726 comm="syz.8.10235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf3e969 code=0x7ffc0000 [ 500.692260][ T2732] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 500.692260][ T2732] U) failed (rc=-5) [ 501.132101][ T2757] loop9: detected capacity change from 0 to 7 [ 501.138700][ T2757] loop9: unable to read partition table [ 501.144413][ T2757] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 501.144413][ T2757] U) failed (rc=-5) [ 501.672894][ T2791] loop9: detected capacity change from 0 to 7 [ 501.689200][ T2791] loop9: unable to read partition table [ 501.695177][ T2791] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 501.695177][ T2791] U) failed (rc=-5) [ 502.015246][ T2808] __nla_validate_parse: 6 callbacks suppressed [ 502.015268][ T2808] netlink: 312 bytes leftover after parsing attributes in process `syz.8.10278'. [ 502.050597][ T2812] netlink: 'syz.8.10269': attribute type 4 has an invalid length. [ 502.064745][ T2812] netlink: 'syz.8.10269': attribute type 4 has an invalid length. [ 502.122705][ T2819] loop9: detected capacity change from 0 to 7 [ 502.137662][ T2819] loop9: unable to read partition table [ 502.151134][ T2819] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 502.151134][ T2819] U) failed (rc=-5) [ 502.280056][ T2835] netlink: 312 bytes leftover after parsing attributes in process `syz.5.10280'. [ 502.308818][ T2837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10281'. [ 502.317865][ T2837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10281'. [ 502.333209][ T2837] loop5: detected capacity change from 0 to 1024 [ 502.340050][ T2837] EXT4-fs: Ignoring removed orlov option [ 502.348176][ T2837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.716401][ T2843] ================================================================== [ 502.724552][ T2843] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 502.733789][ T2843] [ 502.736123][ T2843] write to 0xffff88811b544f08 of 4 bytes by task 2837 on cpu 0: [ 502.743803][ T2843] writeback_single_inode+0x14a/0x3e0 [ 502.749207][ T2843] sync_inode_metadata+0x5b/0x90 [ 502.754256][ T2843] generic_buffers_fsync_noflush+0xd9/0x120 [ 502.760173][ T2843] ext4_sync_file+0x1ab/0x690 [ 502.764876][ T2843] vfs_fsync_range+0x10a/0x130 [ 502.769664][ T2843] ext4_buffered_write_iter+0x34f/0x3c0 [ 502.775238][ T2843] ext4_file_write_iter+0x383/0xf00 [ 502.780462][ T2843] iter_file_splice_write+0x5ef/0x970 [ 502.786287][ T2843] direct_splice_actor+0x153/0x2a0 [ 502.791441][ T2843] splice_direct_to_actor+0x30f/0x680 [ 502.796830][ T2843] do_splice_direct+0xda/0x150 [ 502.801610][ T2843] do_sendfile+0x380/0x640 [ 502.806040][ T2843] __x64_sys_sendfile64+0x105/0x150 [ 502.811265][ T2843] x64_sys_call+0xb39/0x2fb0 [ 502.815870][ T2843] do_syscall_64+0xd0/0x1a0 [ 502.820396][ T2843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.826304][ T2843] [ 502.828634][ T2843] read to 0xffff88811b544f08 of 4 bytes by task 2843 on cpu 1: [ 502.836199][ T2843] generic_buffers_fsync_noflush+0x80/0x120 [ 502.842198][ T2843] ext4_sync_file+0x1ab/0x690 [ 502.846909][ T2843] vfs_fsync_range+0x10a/0x130 [ 502.851726][ T2843] ext4_buffered_write_iter+0x34f/0x3c0 [ 502.857304][ T2843] ext4_file_write_iter+0x383/0xf00 [ 502.862526][ T2843] iter_file_splice_write+0x5ef/0x970 [ 502.867923][ T2843] direct_splice_actor+0x153/0x2a0 [ 502.873058][ T2843] splice_direct_to_actor+0x30f/0x680 [ 502.878454][ T2843] do_splice_direct+0xda/0x150 [ 502.883235][ T2843] do_sendfile+0x380/0x640 [ 502.887783][ T2843] __x64_sys_sendfile64+0x105/0x150 [ 502.893007][ T2843] x64_sys_call+0xb39/0x2fb0 [ 502.897616][ T2843] do_syscall_64+0xd0/0x1a0 [ 502.902144][ T2843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.908079][ T2843] [ 502.910406][ T2843] value changed: 0x00000028 -> 0x00000002 [ 502.916132][ T2843] [ 502.918460][ T2843] Reported by Kernel Concurrency Sanitizer on: [ 502.924618][ T2843] CPU: 1 UID: 0 PID: 2843 Comm: syz.5.10281 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(voluntary) [ 502.937141][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.947300][ T2843] ================================================================== [ 503.165479][T28529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.