last executing test programs: 2.604462922s ago: executing program 4 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000200)={0x1, 0x2}) socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.492693811s ago: executing program 4 (id=405): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) 2.415898568s ago: executing program 4 (id=409): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0xf88, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="16000000000000010400000005000000000000008afe90e724921cf39522af5772848f3bf0733ef1ea00ac3e91856b573fac1ea20d534de606", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000e80), {[{{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x39}, [0xffffff00, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'pim6reg0\x00', {}, {}, 0x33, 0x0, 0x4, 0x29}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x8}}, @common=@srh1={{0x90}, {0x2, 0x13, 0x10, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0x0, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 0x800, 0x1000}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'veth1_to_bond\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2e, 0x31, 0xf, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x4, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 1.707700894s ago: executing program 2 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fec}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.523414728s ago: executing program 4 (id=422): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x0, 0xfff7fbff, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) r2 = syz_clone3(&(0x7f0000000e00)={0xa204000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000000000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000000000001000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200010100000000000000001c00040002004e21002700"/195], 0x10c}}, 0x804) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010100}, 0x2) connect$inet(r6, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000014c0)="da080653325a7200b71dc71f60e332", 0xf}, {&(0x7f00000009c0)="7f05975d9e001310144aa0fe22e2ea7e3ecb06366221ce681171bb53f06f7af811d7bd8fa02614ec3f45fd3aa8a901e6c80871e059227ed77130d5e2b65c9d1c11d74962cf4921f942535effa604e17e65287acdfede6d41690b1217a69f2c77968e7645531e6a75e4a330bee92895eb", 0x70}, {&(0x7f0000000e80)="b754e511f31040ae89200792aaa934f695262ab066620fc52d6d35f4cd0f02fdb7f689bfb6e8c2d836f31f0896bb9a3d3ad02f28c173fc66d66c8bb7697fc17504d72caea808eda603f68319a3c81ae866d4fe3e09", 0x55}, {&(0x7f0000000b80)="e0d27fb824ca3a4f45bee7c29c5b9583b49ab41880ffc6c9129579fe9d0cc07618cd71a6dcbc09d72f427614785ef709dec23098867536bf96b006e2703a1f63862a78f0ba34ff1c35ad37c55b78c9c7722b910eb808e9678a24779bd45054ebf114c0f045ae42b93509307beacfe612c9f4e838382af68f96e97f93c9574c590da71236e42d198c0fc17c2d7b8f9cd9b26721b19efdad5fc297c24d42f4a8d4b9d2de05d54405439602695b8cbbc08b25b38698f8e4f486b2adeffcf93fe669008d48e57478f03dded3fb19118217e78a751ebdb989fa8ccab3fdeed50e39a0f512d353038cdb69ecc10ba439551dea53abd1378372", 0xf6}], 0x4, &(0x7f00000015c0)=ANY=[], 0x1b0}}, {{&(0x7f0000000c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e22, 0x7, @private2, 0x40}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000d00)="2c887c327288a19e5b5d2d3aca3dedab9163cbecd13bf32a5a3e4bd1bfc42922799117e558a3a817cbe5af4c1c7e840adab8eb19e063dcfb37b8b66cc836be1d5f32dddaf6988d47c584504338aad5685c2bd4b643cbadd9ff7b702fb0dcab2186d6af9e40354205f77fc7e21e179c24892e0594258411a75b8f8159af0ccf82b3723c98985a37e034425bcd8262a32524933adfa49f91436a9bb85f39d5a642ea760c073ae61f98ca223a227a7912c1373ab40db12fc166fd6516cdf516db4cdfc6f2d697561937d469", 0xca}, {&(0x7f0000001040)="5206572cb721f9a4c974f929b73a53b0db72cc449debc3ec02072b64d1ffead8c04afb53db9ed9b97780dd520dd4aaaaf2613eeb1da5ecd022ec4bf45529b0842c440c8faccc0cfa595f356dacca87e6c594ab2f3877cc784efc90140bb823664807e2c09f9d81a22ba7a4d12f7903564de2694ca744a85b769ccde99e2f3d3909f189441c5c35292fb6634a693709577f803ce9df79a54c9bafef50bb56a269aaa344c1f3afd5c14bf1c270a1f7f4e1bbed6ad27deaf443b339f18dcc999bf3094da9f5ee661a85838caa56aee6f384b718728013a7d0bc5ca7adbf2e7337cd4ee0ec7a5791a0c900f1017f", 0xec}, {&(0x7f0000000f00)="7c99bed4ab40fbfac9576d5aaceeca005ac50eec308fcbca0b41cdf491f0d2d132a68ac64609be5421dfae8d464dab44ddf2622903fdeecb61a7a9c0985c777e5c4404b613b780994deff9f4d85d504575b86ec35d57201baa4a77e8b375672e65994427fe9c1abdbb983480ecb1e1c24bcd734e429738d9a104f005927553441e0c28382db6930a41f5471d1efdee75a11924fa84deb8d1a770a3dd0cf14d", 0x9f}, {&(0x7f0000001500)="d31e11c04fcfbecbcd11c077a40246452a12a0b4cb4ae03fc6092d9b8d156693cc1dd5d9d808796a62bda820ee137365c6c822be96ca571fae71aa443962d2b227addcd3c95cb313ca512ea7f21f9e5920749d55c9eb9b6935a729305e2413787066c32af5d2d50c06e981474433b719bd4702b1d4207edafec9e92d487a0d2948c15e6d28632543210137ecbe5434d6cbaf5981e863f3b3221829fface41a", 0x9f}, {&(0x7f00000012c0)="9f0f0529b1813f73e3d37ff1f76f063bf0c8c432c90f56f759ee2b465c50044d8a4f2db871c4814c511a0853816bf071de2096bf8630925e372604919dbd9ab8eb2e5b25dba82f55d691602c04", 0x4d}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="c10000000000000014010000240c000003580f1729ca88f394bc983235a1d239f6ac62cadecd49281d003abe8bff8ac7dbf1594a18814499ddd0db14e5bef35e6d758dbd735a7b33200f03ed2123456155cf126f6667f241f3ed970fd982726bc33b6bafa9ed948b697614bb66b0499e1f96095417fa1687"], 0x78}}], 0x2, 0x4c814) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) syz_clone(0x6e0c9200, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000240)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f00000004c0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@data_err_abort}, {@bsdgroups}, {@journal_async_commit}, {@abort}, {@data_err_ignore}]}, 0x1, 0x487, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r9 = syz_create_resource$binfmt(0x0) execveat$binfmt(r8, r9, &(0x7f0000000400)={[&(0x7f0000000080)='mm_page_alloc\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-@\x00', &(0x7f0000000b40)='GPL\x00', &(0x7f0000000380)=':\x00', &(0x7f00000003c0)='+\xd6*:\x00']}, 0x0, 0x1000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x100b20, 0x1ff, 0xfffffffc, 0x5, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, r2, 0x1, 0xffffffffffffffff, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1.488667141s ago: executing program 2 (id=424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r1 = getpgrp(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1.38077391s ago: executing program 2 (id=426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x6, 0x0, 0x0, 0x0, 0xfffffffc}, {0x6, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x9}, {0x0, 0xfffffffe}, {0x0, 0x0, 0xfffffffc, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x3}, {0x0, 0x2000}, {}, {0x4, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x9b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, {0x4, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x100001}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x0, 0x8}, {0x0, 0x101, 0x0, 0x0, 0x2, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x3, 0x6, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x100}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x1, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x807}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffc}, {0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x3}, {}, {0x0, 0x8000}, {0x0, 0x3, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {0x2}, {}, {}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) lseek(r1, 0x104, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000001240)={0x10000, "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"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.353535462s ago: executing program 1 (id=427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x7fffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='aio\x00', 0x220cc08, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000f5079ca32de626db44dafb99706fe3da1872ca70384ddbdff2898f2d8642e8711df57aa7bef52b6717c912a8ca245dc36b3301d74535c99597e6c647823e7ddc6fdc7abff7986fd9fe352e815879d14a3162e7fa2e2813df8255a2cfee23c66512d5d3679da33462dd37d6f3b3d3d65a1a3c2c93253ca491c32c53f155afca74dea6cda8458d7f0c9116e34064503db277db26f98cbed1a3c50e55c7d7df4f4a517e73b46113d84b29895f19ef6192cfe0a36c4485c029e5363348f7418780e0b8b8f648c00a724e6f187aaec507e4fc010b3d558323db1563", @ANYRES32=r6, @ANYBLOB="0c0001800800010026000100"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0xc0d4}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 1.153732938s ago: executing program 0 (id=429): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 1.100929592s ago: executing program 0 (id=430): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="09c2", 0x2}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1.044571646s ago: executing program 4 (id=431): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) 976.277312ms ago: executing program 4 (id=432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="09c2", 0x2}], 0x1, 0x0) tee(r5, r9, 0x8f5, 0x100000000000000) 972.757642ms ago: executing program 0 (id=433): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0xf88, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="16000000000000010400000005000000000000008afe90e724921cf39522af5772848f3bf0733ef1ea00ac3e91856b573fac1ea20d534de606", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000e80), {[{{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x39}, [0xffffff00, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'pim6reg0\x00', {}, {}, 0x33, 0x0, 0x4, 0x29}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x8}}, @common=@srh1={{0x90}, {0x2, 0x13, 0x10, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0x0, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 0x800, 0x1000}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'veth1_to_bond\x00', 'ip6_vti0\x00', {}, {0xff}, 0x2e, 0x31, 0xf, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x4, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 603.738652ms ago: executing program 1 (id=435): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000140)="1766f79999b70ef9998f63b78852ab0c43c24a6d57f3e2c994826e02e61f1cbfeb9694f5457ccb5ab68e0dc0c053bb548dd65158313677ca8f6cac69330d8c6ee395d54efd6c819e074a7412d7037b4e086ca20afbdb264b76e5873465cff225faa3e2717591df48158e6373f4e21f3822dd84f27b295c0b38f22b8c11e2e764e5385e19caa9454ad4751300cf533083129d1db104f13bc56a099501971f8b", &(0x7f0000000200)=""/54}, 0x20) 527.117358ms ago: executing program 1 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r1 = getpgrp(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 465.604443ms ago: executing program 2 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x88, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x88}}, 0x20000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r12}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 464.881003ms ago: executing program 1 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r2 = getpgrp(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 416.879817ms ago: executing program 3 (id=440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 405.254178ms ago: executing program 1 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x3420, 0xb, 0x80, 0x7}, {0x1, 0x7, 0x3, 0x5e6}]}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x8081) 369.74919ms ago: executing program 3 (id=442): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) 320.677164ms ago: executing program 3 (id=443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="09c2", 0x2}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 225.568652ms ago: executing program 3 (id=444): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 186.048065ms ago: executing program 0 (id=445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 170.998176ms ago: executing program 2 (id=446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000140)="1766f79999b70ef9998f63b78852ab0c43c24a6d57f3e2c994826e02e61f1cbfeb9694f5457ccb5ab68e0dc0c053bb548dd65158313677ca8f6cac69330d8c6ee395d54efd6c819e074a7412d7037b4e086ca20afbdb264b76e5873465cff225faa3e2717591df48158e6373f4e21f3822dd84f27b295c0b38f22b8c11e2e764e5385e19caa9454ad4751300cf533083129d1db104f13bc56a099501971f8b", &(0x7f0000000200)=""/54}, 0x20) 157.673527ms ago: executing program 3 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fec}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 106.816601ms ago: executing program 2 (id=449): socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x0, 0x21e}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105020682020181070602abab027f0b08026af8"], 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c0000000000290343baad16d0e00b000000000000002890780400000000000000000000000000000020020000000000000000280080000000"], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}}}, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf251b00000010002e800c0004000200aaaaaaaaaaaa08000300", @ANYRES32=r11, @ANYBLOB="0cb35d66d380943e52030647"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xffff}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r12, 0x8010661b, &(0x7f0000000040)) 55.555585ms ago: executing program 0 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001800)=ANY=[@ANYRES16=r3, @ANYBLOB="f53fba7dac713dd457b21638857ea14d79e49cedde99bece6ac92ef6e78c5c2b9672e6d0af24c538299baccec5620e9b1c0b3c5109608948b5e0bb8c65743ecd3181489614c6bd895491649d5caee68cc19c954abdc7064f93230ecdd727b50d8bbd3434e621827d068cec2f9daacc0209", @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="f58fcd4d3ffdd39d5f1a3e43073a60c3adcc386f8d464baa3367c0016501e1f9bbdd13154266ea197b2d1c0041c90d9107b0787124eb17904babee52fb1fdae6e6cd43d84cb01f3b1f3919eb5f03628d838c794770942f740bc4265e695b6946614e967dd05e7c276a746b563dc6c7c286a00ab12a010cd206bbf53d13354b8001f2ef46b55935801efc8c3200a54c88310a2cd5151c7d3045e60d398db3ec2c4ff02cbba12b48a91bc4a51658caafd0a3c3f4560d344eb4cf3be42c0ffdecb93b7726a8", @ANYBLOB="00000000ed797163a15088b8d10bb5961b0000000000000000000000c514c10eb1b9012c8697c448cdfc53d8e5921e1530fd4c629bdc5f3a59216284cb0d0acea7954766299e1cfec1969e23689de623a1045e2bbd9298bf92364692f519049f9afc16d33f34ebd49456cfd626a7b820ebcf14274d6cb6e00998ab0a336795219b98632ffa8e6f7032c6119f983a48b3d58eb19c1a24de2c1c70f9d3bd5752a7c36ec4721f95e2d63b82a9e97891bfb35cd5d7f66a7bd81255a90f2fb0f31ae27f633a6ff53c29e597426bf7e720c68a7e7d"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000580)={0x4, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x9, 0x0, 0x0, @tick=0x10001, {}, {0x4}, @note={0x5, 0xb, 0x7f, 0xd, 0x33c}}], 0x1c) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x20000000000001c2, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xd0ca}, 0xfc41) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x8101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xd}, 0x18) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4008030) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x1, 0x0, 0x0, 0x5c}) 37.508157ms ago: executing program 1 (id=451): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x21, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) 12.398129ms ago: executing program 3 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r2 = getpgrp(0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 0 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. [ 29.074727][ T29] audit: type=1400 audit(1755299937.757:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.075928][ T3290] cgroup: Unknown subsys name 'net' [ 29.097757][ T29] audit: type=1400 audit(1755299937.757:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.125327][ T29] audit: type=1400 audit(1755299937.787:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.260770][ T3290] cgroup: Unknown subsys name 'cpuset' [ 29.267389][ T3290] cgroup: Unknown subsys name 'rlimit' [ 29.418535][ T29] audit: type=1400 audit(1755299938.097:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.442693][ T29] audit: type=1400 audit(1755299938.097:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.463440][ T29] audit: type=1400 audit(1755299938.097:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.484384][ T29] audit: type=1400 audit(1755299938.107:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.493847][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.505040][ T29] audit: type=1400 audit(1755299938.117:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.538950][ T29] audit: type=1400 audit(1755299938.117:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.562759][ T29] audit: type=1400 audit(1755299938.197:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.600027][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.918009][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 30.940216][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.968929][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.990314][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 31.036999][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 31.090826][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.098004][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.105353][ T3301] bridge_slave_0: entered allmulticast mode [ 31.112002][ T3301] bridge_slave_0: entered promiscuous mode [ 31.130688][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.137788][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.145063][ T3306] bridge_slave_0: entered allmulticast mode [ 31.151562][ T3306] bridge_slave_0: entered promiscuous mode [ 31.158070][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.165329][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.172496][ T3301] bridge_slave_1: entered allmulticast mode [ 31.178805][ T3301] bridge_slave_1: entered promiscuous mode [ 31.196710][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.203836][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.211158][ T3306] bridge_slave_1: entered allmulticast mode [ 31.217561][ T3306] bridge_slave_1: entered promiscuous mode [ 31.234140][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.241372][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.248714][ T3314] bridge_slave_0: entered allmulticast mode [ 31.255787][ T3314] bridge_slave_0: entered promiscuous mode [ 31.265250][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.272360][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.279836][ T3312] bridge_slave_0: entered allmulticast mode [ 31.286370][ T3312] bridge_slave_0: entered promiscuous mode [ 31.303806][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.310950][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.318091][ T3314] bridge_slave_1: entered allmulticast mode [ 31.325799][ T3314] bridge_slave_1: entered promiscuous mode [ 31.337101][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.344211][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.351362][ T3312] bridge_slave_1: entered allmulticast mode [ 31.357880][ T3312] bridge_slave_1: entered promiscuous mode [ 31.365306][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.375914][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.386263][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.422008][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.437451][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.446848][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.454091][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.461311][ T3302] bridge_slave_0: entered allmulticast mode [ 31.467835][ T3302] bridge_slave_0: entered promiscuous mode [ 31.491313][ T3301] team0: Port device team_slave_0 added [ 31.498330][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.507706][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.514890][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.522234][ T3302] bridge_slave_1: entered allmulticast mode [ 31.528695][ T3302] bridge_slave_1: entered promiscuous mode [ 31.536261][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.546302][ T3306] team0: Port device team_slave_0 added [ 31.552757][ T3301] team0: Port device team_slave_1 added [ 31.574101][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.584503][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.594324][ T3306] team0: Port device team_slave_1 added [ 31.619849][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.644332][ T3314] team0: Port device team_slave_0 added [ 31.651162][ T3314] team0: Port device team_slave_1 added [ 31.666277][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.673398][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.699427][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.710859][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.717821][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.743877][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.755021][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.762016][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.788106][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.805133][ T3312] team0: Port device team_slave_0 added [ 31.811589][ T3302] team0: Port device team_slave_0 added [ 31.817972][ T3312] team0: Port device team_slave_1 added [ 31.826753][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.833941][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.860331][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.879467][ T3302] team0: Port device team_slave_1 added [ 31.896449][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.903445][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.929901][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.942384][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.949517][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.977067][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.001019][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.008113][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.034124][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.054138][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.061125][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.087159][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.116994][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.123999][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.150147][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.161596][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.168666][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.194989][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.215033][ T3306] hsr_slave_0: entered promiscuous mode [ 32.221202][ T3306] hsr_slave_1: entered promiscuous mode [ 32.229069][ T3301] hsr_slave_0: entered promiscuous mode [ 32.235535][ T3301] hsr_slave_1: entered promiscuous mode [ 32.241391][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.247138][ T3301] Cannot create hsr debugfs directory [ 32.280795][ T3314] hsr_slave_0: entered promiscuous mode [ 32.286930][ T3314] hsr_slave_1: entered promiscuous mode [ 32.293066][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.299073][ T3314] Cannot create hsr debugfs directory [ 32.322430][ T3302] hsr_slave_0: entered promiscuous mode [ 32.328449][ T3302] hsr_slave_1: entered promiscuous mode [ 32.334545][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.340330][ T3302] Cannot create hsr debugfs directory [ 32.361234][ T3312] hsr_slave_0: entered promiscuous mode [ 32.367313][ T3312] hsr_slave_1: entered promiscuous mode [ 32.373426][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 32.379241][ T3312] Cannot create hsr debugfs directory [ 32.578422][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.587402][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.599023][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.611250][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.629663][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.641175][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.659788][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.668768][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.686369][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.710895][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.721999][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.732035][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.742226][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.752268][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.761319][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.781675][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.814120][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.823166][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.839395][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.855522][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.871193][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.887413][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.913180][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.923795][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.944092][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.951206][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.959878][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.966980][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.983194][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.990356][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.014414][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.021679][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.081303][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.092840][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.102867][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.122401][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.154410][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.164628][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.173429][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.180660][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.195944][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.203154][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.218680][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.225932][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.245890][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.253085][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.269892][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.279672][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.288411][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.306226][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.316747][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.337476][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.344777][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.388547][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.395733][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.462865][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.498794][ T3301] veth0_vlan: entered promiscuous mode [ 33.525882][ T3301] veth1_vlan: entered promiscuous mode [ 33.539168][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.564415][ T3314] veth0_vlan: entered promiscuous mode [ 33.577108][ T3301] veth0_macvtap: entered promiscuous mode [ 33.592935][ T3314] veth1_vlan: entered promiscuous mode [ 33.608146][ T3301] veth1_macvtap: entered promiscuous mode [ 33.625317][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.644699][ T3314] veth0_macvtap: entered promiscuous mode [ 33.653153][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.668533][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.681918][ T3314] veth1_macvtap: entered promiscuous mode [ 33.695624][ T3312] veth0_vlan: entered promiscuous mode [ 33.706749][ T294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.719283][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.733977][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.744881][ T3312] veth1_vlan: entered promiscuous mode [ 33.753926][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.764967][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.780484][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.803275][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.818049][ T3312] veth0_macvtap: entered promiscuous mode [ 33.830859][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848269][ T3312] veth1_macvtap: entered promiscuous mode [ 33.856374][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.867658][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.878979][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.887776][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.908644][ T3306] veth0_vlan: entered promiscuous mode [ 33.922827][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.936306][ T3306] veth1_vlan: entered promiscuous mode [ 33.963108][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973529][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.014874][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.040450][ T3306] veth0_macvtap: entered promiscuous mode [ 34.057219][ T3306] veth1_macvtap: entered promiscuous mode [ 34.065940][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.079982][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 34.080000][ T29] audit: type=1400 audit(1755299942.747:128): avc: denied { create } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.083952][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.086284][ T29] audit: type=1400 audit(1755299942.747:129): avc: denied { create } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.118581][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.133316][ T29] audit: type=1400 audit(1755299942.747:130): avc: denied { write } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.133350][ T29] audit: type=1400 audit(1755299942.757:131): avc: denied { bind } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.180336][ T29] audit: type=1400 audit(1755299942.757:132): avc: denied { setopt } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.189471][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.199663][ T29] audit: type=1400 audit(1755299942.757:133): avc: denied { write } for pid=3472 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.249646][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.266349][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.301385][ T3302] veth0_vlan: entered promiscuous mode [ 34.327607][ T29] audit: type=1326 audit(1755299942.917:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 34.333160][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.350963][ T29] audit: type=1326 audit(1755299942.917:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 34.350998][ T29] audit: type=1326 audit(1755299942.917:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 34.384904][ T3481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 34.406310][ T29] audit: type=1326 audit(1755299942.927:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3476 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 34.439422][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.443162][ T3302] veth1_vlan: entered promiscuous mode [ 34.455030][ T3489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.467499][ T3302] veth0_macvtap: entered promiscuous mode [ 34.481584][ T3491] netlink: 29 bytes leftover after parsing attributes in process `syz.3.11'. [ 34.491734][ T3302] veth1_macvtap: entered promiscuous mode [ 34.510634][ T3489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.512682][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.550693][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 34.579585][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.589861][ T3487] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 34.606571][ T3481] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 34.617082][ T3487] ipvlan0: entered allmulticast mode [ 34.622761][ T3487] veth0_vlan: entered allmulticast mode [ 34.632235][ T3487] team0: Device ipvlan0 failed to register rx_handler [ 34.640921][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.649897][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.659074][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.668229][ T3481] ipvlan0: entered allmulticast mode [ 34.673637][ T3481] veth0_vlan: entered allmulticast mode [ 34.680590][ T3507] syz.3.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.684632][ T3481] team0: Device ipvlan0 failed to register rx_handler [ 34.698090][ T3487] syz.0.1 (3487) used greatest stack depth: 10584 bytes left [ 34.713809][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.739091][ T3506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.798781][ T3518] loop2: detected capacity change from 0 to 512 [ 34.820838][ T3519] loop1: detected capacity change from 0 to 256 [ 34.832255][ T3518] ======================================================= [ 34.832255][ T3518] WARNING: The mand mount option has been deprecated and [ 34.832255][ T3518] and is ignored by this kernel. Remove the mand [ 34.832255][ T3518] option from the mount to silence this warning. [ 34.832255][ T3518] ======================================================= [ 34.834782][ T3520] loop4: detected capacity change from 0 to 256 [ 34.895334][ T3518] EXT4-fs: Ignoring removed orlov option [ 34.906796][ T3518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.921728][ T3518] EXT4-fs (loop2): orphan cleanup on readonly fs [ 34.937783][ T3518] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.16: bg 0: block 248: padding at end of block bitmap is not set [ 34.953489][ T3518] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.16: Failed to acquire dquot type 1 [ 34.965511][ T3520] FAT-fs (loop4): codepage cp869 not found [ 34.986742][ T3518] EXT4-fs (loop2): 1 truncate cleaned up [ 34.994238][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.038805][ T3518] syz.2.16 (3518) used greatest stack depth: 9280 bytes left [ 35.048299][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.136184][ T3536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 35.148622][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 35.200623][ T3536] bridge_slave_1: left allmulticast mode [ 35.206434][ T3536] bridge_slave_1: left promiscuous mode [ 35.212235][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.297209][ T3536] bridge_slave_0: left allmulticast mode [ 35.303225][ T3536] bridge_slave_0: left promiscuous mode [ 35.309117][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.445368][ T3540] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 35.589364][ T3546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.633369][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 35.669082][ T3540] team0: Device ipvlan0 failed to register rx_handler [ 35.708340][ T3549] team0 (unregistering): Port device team_slave_0 removed [ 35.720696][ T3546] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 35.731123][ T3549] team0 (unregistering): Port device team_slave_1 removed [ 35.733647][ T3554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.747231][ T3554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.750773][ T3546] ipvlan0: entered allmulticast mode [ 35.760588][ T3546] veth0_vlan: entered allmulticast mode [ 35.769118][ T3551] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 35.769210][ T3554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.778313][ T3546] team0: Device ipvlan0 failed to register rx_handler [ 35.791066][ T3554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.143386][ T3506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.336999][ T3558] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 36.345036][ T3558] ipvlan0: entered allmulticast mode [ 36.350507][ T3558] veth0_vlan: entered allmulticast mode [ 36.357627][ T3558] team0: Device ipvlan0 failed to register rx_handler [ 36.568227][ T3566] netlink: 'syz.4.28': attribute type 10 has an invalid length. [ 36.577055][ T3566] team0: Device ipvlan0 failed to register rx_handler [ 36.711786][ T3570] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 36.922938][ T3573] loop2: detected capacity change from 0 to 256 [ 36.933723][ T3575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3575 comm=syz.3.31 [ 36.963910][ T3573] FAT-fs (loop2): codepage cp869 not found [ 37.047040][ T3579] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 37.056421][ T3579] team0: Device ipvlan0 failed to register rx_handler [ 37.269389][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.278242][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.289150][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.297838][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.333954][ T3506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.413357][ T3506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.478619][ T2200] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.493756][ T2200] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.516499][ T3590] loop3: detected capacity change from 0 to 256 [ 37.523623][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.556312][ T3590] FAT-fs (loop3): codepage cp869 not found [ 37.563731][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.733593][ T3601] loop0: detected capacity change from 0 to 256 [ 37.776995][ T3601] FAT-fs (loop0): codepage cp869 not found [ 37.865521][ T3608] loop4: detected capacity change from 0 to 512 [ 37.884684][ T3608] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.919112][ T3608] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.932357][ T3608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.948903][ T3608] EXT4-fs (loop4): 1 truncate cleaned up [ 37.955475][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.975542][ T3614] loop2: detected capacity change from 0 to 4096 [ 37.985695][ T3614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.485922][ T3623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.518524][ T3623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.700693][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.738414][ T3633] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 38.752205][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.761748][ T3633] ipvlan0: entered allmulticast mode [ 38.767081][ T3633] veth0_vlan: entered allmulticast mode [ 38.778381][ T3635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.810622][ T3635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.826253][ T3633] team0: Device ipvlan0 failed to register rx_handler [ 38.856107][ T3635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.865330][ T3635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.871809][ T3632] loop0: detected capacity change from 0 to 512 [ 38.877346][ T3635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.896780][ T3644] FAULT_INJECTION: forcing a failure. [ 38.896780][ T3644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.910255][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: syz.4.50 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 38.910284][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.910286][ T3635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.910300][ T3644] Call Trace: [ 38.910377][ T3644] [ 38.910386][ T3644] __dump_stack+0x1d/0x30 [ 38.910409][ T3644] dump_stack_lvl+0xe8/0x140 [ 38.910437][ T3644] dump_stack+0x15/0x1b [ 38.910459][ T3644] should_fail_ex+0x265/0x280 [ 38.910492][ T3644] should_fail+0xb/0x20 [ 38.910525][ T3644] should_fail_usercopy+0x1a/0x20 [ 38.910559][ T3644] _copy_from_user+0x1c/0xb0 [ 38.910601][ T3644] __sys_bpf+0x178/0x7b0 [ 38.910656][ T3644] __x64_sys_bpf+0x41/0x50 [ 38.910689][ T3644] x64_sys_call+0x2aea/0x2ff0 [ 38.910721][ T3644] do_syscall_64+0xd2/0x200 [ 38.910807][ T3644] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.910841][ T3644] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.910939][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.910969][ T3644] RIP: 0033:0x7f1b8159ebe9 [ 38.910996][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.911021][ T3644] RSP: 002b:00007f1b80007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.911051][ T3644] RAX: ffffffffffffffda RBX: 00007f1b817c5fa0 RCX: 00007f1b8159ebe9 [ 38.911069][ T3644] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 38.911087][ T3644] RBP: 00007f1b80007090 R08: 0000000000000000 R09: 0000000000000000 [ 38.911148][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.911165][ T3644] R13: 00007f1b817c6038 R14: 00007f1b817c5fa0 R15: 00007ffca59eae98 [ 38.911191][ T3644] [ 38.914721][ T3632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.104584][ T3632] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.135033][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.175766][ T3650] bond0: (slave bond_slave_1): Releasing backup interface [ 39.200504][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 39.200523][ T29] audit: type=1326 audit(1755299947.887:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.237221][ T29] audit: type=1326 audit(1755299947.887:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.261099][ T29] audit: type=1326 audit(1755299947.887:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.284455][ T29] audit: type=1326 audit(1755299947.887:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.309205][ T29] audit: type=1326 audit(1755299947.887:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.332800][ T29] audit: type=1326 audit(1755299947.887:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.356397][ T29] audit: type=1326 audit(1755299947.887:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.379777][ T29] audit: type=1326 audit(1755299947.887:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.403208][ T29] audit: type=1326 audit(1755299947.887:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.426765][ T29] audit: type=1326 audit(1755299947.887:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa208e7ebe9 code=0x7ffc0000 [ 39.483141][ T3666] loop0: detected capacity change from 0 to 256 [ 39.517459][ T3666] FAT-fs (loop0): codepage cp869 not found [ 39.542496][ T3671] loop2: detected capacity change from 0 to 2048 [ 39.561055][ T3669] __nla_validate_parse: 24 callbacks suppressed [ 39.561074][ T3669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 39.583261][ T3669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 39.595639][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.606699][ T3669] bridge_slave_1 (unregistering): left allmulticast mode [ 39.613875][ T3669] bridge_slave_1 (unregistering): left promiscuous mode [ 39.620892][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.630535][ T3671] loop2: p1 < > p4 [ 39.635685][ T3671] loop2: p4 size 8388608 extends beyond EOD, truncated [ 39.677421][ T3673] validate_nla: 1 callbacks suppressed [ 39.677485][ T3673] netlink: 'syz.4.59': attribute type 10 has an invalid length. [ 39.711392][ T3673] team0: Device ipvlan0 failed to register rx_handler [ 39.748125][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.760270][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.775486][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.801703][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 39.816537][ T3683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.63'. [ 39.826575][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 39.849277][ T3686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.858858][ T3683] bond0: (slave bond_slave_1): Releasing backup interface [ 39.872522][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.885747][ T3686] bond0: (slave bond_slave_0): Releasing backup interface [ 39.926007][ T3689] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 39.943088][ T3689] team0: Device ipvlan0 failed to register rx_handler [ 40.041823][ T3699] netlink: 29 bytes leftover after parsing attributes in process `syz.4.68'. [ 40.050965][ T3701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 40.062143][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 40.071475][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.087474][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.143361][ T3709] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 40.153780][ T3709] team0: Device ipvlan0 failed to register rx_handler [ 40.207533][ T3714] netlink: 29 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.253332][ T3717] loop3: detected capacity change from 0 to 256 [ 40.274526][ T3719] hsr_slave_0 (unregistering): left promiscuous mode [ 40.419530][ T3719] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 40.453239][ T3719] team0: Device ipvlan0 failed to register rx_handler [ 40.541912][ T3726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.636061][ T3726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.710127][ T3726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.723923][ T3717] FAT-fs (loop3): codepage cp869 not found [ 40.794433][ T3726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.905782][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.921020][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.960554][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.974017][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.003521][ T3739] hsr_slave_0 (unregistering): left promiscuous mode [ 41.145953][ T3739] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 41.156112][ T3739] team0: Device ipvlan0 failed to register rx_handler [ 41.227444][ T3755] loop3: detected capacity change from 0 to 256 [ 41.359564][ T3755] FAT-fs (loop3): codepage cp869 not found [ 42.205373][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.225857][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.372601][ T3777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.388415][ T3781] loop3: detected capacity change from 0 to 256 [ 42.412025][ T3781] FAT-fs (loop3): codepage cp869 not found [ 42.449323][ T3777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.550671][ T3777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.040692][ T3777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.056019][ T3797] netlink: 'syz.4.96': attribute type 10 has an invalid length. [ 43.074517][ T3797] team0: Device ipvlan0 failed to register rx_handler [ 43.111116][ T2200] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.131471][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.140332][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.155320][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.281517][ T3808] loop3: detected capacity change from 0 to 256 [ 43.332404][ T3808] FAT-fs (loop3): codepage cp869 not found [ 43.745567][ T3821] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 43.763105][ T3821] team0: Device ipvlan0 failed to register rx_handler [ 43.983690][ T3832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.023427][ T3835] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.035072][ T3835] bridge_slave_0 (unregistering): left allmulticast mode [ 44.042309][ T3835] bridge_slave_0 (unregistering): left promiscuous mode [ 44.049292][ T3835] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.074435][ T3839] loop2: detected capacity change from 0 to 256 [ 44.087503][ T3832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.098907][ T3840] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 44.112951][ T3840] team0: Device ipvlan0 failed to register rx_handler [ 44.134117][ T3839] FAT-fs (loop2): codepage cp869 not found [ 44.206686][ T3848] loop3: detected capacity change from 0 to 512 [ 44.214094][ T3848] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.222957][ T3832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.248142][ T3848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.267700][ T3848] EXT4-fs (loop3): 1 truncate cleaned up [ 44.274541][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.315630][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 44.315706][ T29] audit: type=1326 audit(1755299952.997:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.390810][ T3832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.572072][ T3859] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 44.649405][ T3859] team0: Device ipvlan0 failed to register rx_handler [ 44.792547][ T29] audit: type=1326 audit(1755299952.997:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.816146][ T29] audit: type=1326 audit(1755299952.997:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.839725][ T29] audit: type=1326 audit(1755299952.997:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.863047][ T29] audit: type=1326 audit(1755299952.997:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.886616][ T29] audit: type=1326 audit(1755299952.997:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.910708][ T29] audit: type=1326 audit(1755299952.997:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.934419][ T29] audit: type=1326 audit(1755299952.997:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.944310][ T3875] __nla_validate_parse: 23 callbacks suppressed [ 44.944334][ T3875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'. [ 44.957747][ T29] audit: type=1326 audit(1755299952.997:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 44.996643][ T29] audit: type=1326 audit(1755299952.997:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.1.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bc59ebe9 code=0x7ffc0000 [ 45.048594][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 45.100328][ T3873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.129872][ T3875] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 45.177401][ T3873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.202647][ T3860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.112'. [ 45.222404][ T3875] team0: Device ipvlan0 failed to register rx_handler [ 45.228749][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.250292][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.254381][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 45.292897][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 45.381828][ T3890] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 45.392591][ T3890] team0: Device ipvlan0 failed to register rx_handler [ 45.451257][ T3896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 45.468332][ T3897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.481135][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.493359][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 45.524061][ T3897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.539527][ T3900] loop4: detected capacity change from 0 to 256 [ 45.563890][ T3905] netlink: 'syz.1.137': attribute type 10 has an invalid length. [ 45.578289][ T3905] team0: Device ipvlan0 failed to register rx_handler [ 45.618526][ T3908] loop3: detected capacity change from 0 to 512 [ 45.630928][ T3897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.661852][ T3908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.674838][ T3910] loop2: detected capacity change from 0 to 4096 [ 45.693974][ T3897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.700808][ T3915] loop1: detected capacity change from 0 to 256 [ 45.712500][ T3908] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.738512][ T3910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.761502][ T3915] FAT-fs (loop1): codepage cp869 not found [ 45.781197][ T3908] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.130: bg 0: block 64: padding at end of block bitmap is not set [ 45.809309][ T2200] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.827552][ T2200] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.850265][ T2200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.879259][ T2200] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.923391][ T3918] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.131: corrupted inode contents [ 45.935645][ T3918] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.131: mark_inode_dirty error [ 45.947207][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.948571][ T3918] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.131: corrupted inode contents [ 45.956674][ T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.002683][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.053436][ T3918] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.131: mark_inode_dirty error [ 46.294057][ T3918] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.131: corrupted inode contents [ 46.351136][ T3933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 46.428630][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 46.478870][ T3918] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.131: mark_inode_dirty error [ 46.526715][ T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.546221][ T3933] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 46.587680][ T3918] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.131: corrupted inode contents [ 46.605323][ T3942] loop0: detected capacity change from 0 to 512 [ 46.612518][ T3918] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.131: mark_inode_dirty error [ 46.613317][ T3942] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.633224][ T3933] team0: Device ipvlan0 failed to register rx_handler [ 46.646081][ T3942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.682670][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.702978][ T3942] EXT4-fs (loop0): 1 truncate cleaned up [ 46.708831][ T3918] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 46.724654][ T3942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.742876][ T3954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 46.783300][ T3954] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 46.792254][ T3954] team0: Device ipvlan0 failed to register rx_handler [ 46.831539][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.933360][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.072975][ T3987] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 47.084515][ T3987] team0: Device ipvlan0 failed to register rx_handler [ 47.105829][ T4000] loop1: detected capacity change from 0 to 512 [ 47.124538][ T3995] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 47.132375][ T4000] EXT4-fs: Ignoring removed oldalloc option [ 47.132664][ T4000] ext4: Unknown parameter 'smackfsfloor' [ 47.158486][ C1] hrtimer: interrupt took 35387 ns [ 47.269500][ T4012] loop0: detected capacity change from 0 to 164 [ 47.277061][ T4012] iso9660: Unknown parameter '.log' [ 47.533443][ T4025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.594106][ T4025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.716524][ T4025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.777380][ T4025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.026631][ T4041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.036305][ T4041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.052118][ T4043] loop4: detected capacity change from 0 to 2048 [ 48.080399][ T3529] loop4: p1 < > p4 [ 48.085636][ T3529] loop4: p4 size 8388608 extends beyond EOD, truncated [ 48.096737][ T4043] loop4: p1 < > p4 [ 48.101464][ T4043] loop4: p4 size 8388608 extends beyond EOD, truncated [ 48.184349][ T3681] udevd[3681]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 48.195447][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 48.326342][ T4064] loop4: detected capacity change from 0 to 512 [ 48.363823][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.378023][ T4064] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.438460][ T4056] loop2: detected capacity change from 0 to 512 [ 48.447316][ T4064] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.184: bg 0: block 64: padding at end of block bitmap is not set [ 48.465600][ T4077] loop1: detected capacity change from 0 to 512 [ 48.493884][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.515455][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.528964][ T4077] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.540366][ T4056] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.553173][ T4077] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 48.571147][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.589893][ T4077] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.187: mark_inode_dirty error [ 48.634494][ T4077] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 48.658433][ T4097] loop4: detected capacity change from 0 to 2048 [ 48.665238][ T4100] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 48.733296][ T4097] loop4: p1 < > p4 [ 48.738003][ T4097] loop4: p4 size 8388608 extends beyond EOD, truncated [ 48.751743][ T4100] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.187: mark_inode_dirty error [ 48.789081][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.801790][ T4100] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.187: corrupted inode contents [ 48.830086][ T3681] udevd[3681]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 48.842446][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 48.880849][ T4107] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 48.890838][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.907262][ T4107] team0: Device ipvlan0 failed to register rx_handler [ 48.988460][ T4112] netlink: 'syz.4.198': attribute type 10 has an invalid length. [ 48.997776][ T4133] loop3: detected capacity change from 0 to 164 [ 49.004791][ T4133] iso9660: Unknown parameter '.log' [ 49.008169][ T4112] team0: Device ipvlan0 failed to register rx_handler [ 49.047176][ T4143] loop2: detected capacity change from 0 to 1024 [ 49.098454][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.122998][ T4143] FAULT_INJECTION: forcing a failure. [ 49.122998][ T4143] name failslab, interval 1, probability 0, space 0, times 0 [ 49.135894][ T4143] CPU: 1 UID: 0 PID: 4143 Comm: ,&#^% Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 49.135935][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.136026][ T4143] Call Trace: [ 49.136036][ T4143] [ 49.136045][ T4143] __dump_stack+0x1d/0x30 [ 49.136074][ T4143] dump_stack_lvl+0xe8/0x140 [ 49.136178][ T4143] dump_stack+0x15/0x1b [ 49.136200][ T4143] should_fail_ex+0x265/0x280 [ 49.136229][ T4143] should_failslab+0x8c/0xb0 [ 49.136263][ T4143] __kmalloc_noprof+0xa5/0x3e0 [ 49.136351][ T4143] ? sock_kmalloc+0x85/0xc0 [ 49.136388][ T4143] sock_kmalloc+0x85/0xc0 [ 49.136419][ T4143] ipv6_sock_ac_join+0x1ea/0x540 [ 49.136511][ T4143] do_ipv6_setsockopt+0x1938/0x2160 [ 49.136537][ T4143] ? kstrtoull+0x111/0x140 [ 49.136559][ T4143] ? __rcu_read_unlock+0x4f/0x70 [ 49.136588][ T4143] ? avc_has_perm_noaudit+0x1b1/0x200 [ 49.136688][ T4143] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 49.136740][ T4143] ipv6_setsockopt+0x59/0x130 [ 49.136804][ T4143] tcp_setsockopt+0x98/0xb0 [ 49.136831][ T4143] sock_common_setsockopt+0x66/0x80 [ 49.136870][ T4143] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.136971][ T4143] __sys_setsockopt+0x184/0x200 [ 49.137049][ T4143] __x64_sys_setsockopt+0x64/0x80 [ 49.137086][ T4143] x64_sys_call+0x20ec/0x2ff0 [ 49.137115][ T4143] do_syscall_64+0xd2/0x200 [ 49.137229][ T4143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.137261][ T4143] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.137296][ T4143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.137344][ T4143] RIP: 0033:0x7f792b12ebe9 [ 49.137364][ T4143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.137389][ T4143] RSP: 002b:00007f7929b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.137488][ T4143] RAX: ffffffffffffffda RBX: 00007f792b355fa0 RCX: 00007f792b12ebe9 [ 49.137505][ T4143] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 49.137522][ T4143] RBP: 00007f7929b97090 R08: 0000000000000020 R09: 0000000000000000 [ 49.137539][ T4143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.137555][ T4143] R13: 00007f792b356038 R14: 00007f792b355fa0 R15: 00007ffdfeb2a788 [ 49.137581][ T4143] [ 49.389993][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 49.390012][ T29] audit: type=1326 audit(1755299958.057:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.2.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f792b12ebe9 code=0x7ffc0000 [ 49.422937][ T4150] loop4: detected capacity change from 0 to 4096 [ 49.433232][ T4152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.437936][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.496743][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.500689][ T4152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.550802][ T4167] openvswitch: netlink: Message has 6 unknown bytes. [ 49.561966][ T29] audit: type=1400 audit(1755299958.227:1136): avc: denied { shutdown } for pid=4154 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.581731][ T29] audit: type=1400 audit(1755299958.227:1137): avc: denied { getopt } for pid=4154 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.601510][ T29] audit: type=1400 audit(1755299958.227:1138): avc: denied { name_connect } for pid=4154 comm="syz.0.210" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 49.631499][ T29] audit: type=1326 audit(1755299958.247:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792b12ebe9 code=0x7ffc0000 [ 49.654900][ T29] audit: type=1326 audit(1755299958.247:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f792b12ebe9 code=0x7ffc0000 [ 49.678437][ T29] audit: type=1326 audit(1755299958.267:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f792b12ec23 code=0x7ffc0000 [ 49.692514][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.209: corrupted inode contents [ 49.701878][ T29] audit: type=1326 audit(1755299958.267:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f792b12ec23 code=0x7ffc0000 [ 49.701956][ T29] audit: type=1326 audit(1755299958.267:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792b12ebe9 code=0x7ffc0000 [ 49.702048][ T29] audit: type=1326 audit(1755299958.267:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4163 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792b12ebe9 code=0x7ffc0000 [ 49.749431][ T4171] loop2: detected capacity change from 0 to 512 [ 49.770222][ T4170] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.209: mark_inode_dirty error [ 49.817268][ T4152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.819513][ T4171] EXT4-fs: Ignoring removed oldalloc option [ 49.860150][ T4171] ext4: Unknown parameter 'smackfsfloor' [ 49.870568][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.209: corrupted inode contents [ 49.906658][ T4152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.932485][ T4177] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 49.938774][ T4170] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.209: mark_inode_dirty error [ 49.959281][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.209: corrupted inode contents [ 49.973049][ T4170] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.209: mark_inode_dirty error [ 49.975235][ T4177] team0: Device ipvlan0 failed to register rx_handler [ 49.993553][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.209: corrupted inode contents [ 50.012260][ T4184] __nla_validate_parse: 24 callbacks suppressed [ 50.012274][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 50.075660][ T4170] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.209: mark_inode_dirty error [ 50.088914][ T4170] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 50.092653][ T3868] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140092][ T3868] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148328][ T3868] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176146][ T4193] loop1: detected capacity change from 0 to 164 [ 50.185256][ T4191] netlink: 29 bytes leftover after parsing attributes in process `syz.2.220'. [ 50.197540][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 50.208674][ T4193] iso9660: Unknown parameter '.log' [ 50.232607][ T294] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.266374][ T4200] loop2: detected capacity change from 0 to 1024 [ 50.275299][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.291565][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 50.323509][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.327360][ T4205] loop4: detected capacity change from 0 to 128 [ 50.346709][ T4207] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 50.356809][ T4207] team0: Device ipvlan0 failed to register rx_handler [ 50.371018][ T4205] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.390703][ T4205] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.444346][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.490945][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.517280][ T4221] loop3: detected capacity change from 0 to 256 [ 50.518323][ T4220] loop2: detected capacity change from 0 to 128 [ 50.533659][ T4220] vfat: Unknown parameter 'gre0' [ 50.539328][ T4220] openvswitch: netlink: Message has 6 unknown bytes. [ 50.636373][ T4221] FAT-fs (loop3): codepage cp869 not found [ 51.425964][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.232'. [ 51.441444][ T4232] netlink: 29 bytes leftover after parsing attributes in process `syz.2.233'. [ 51.460846][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 51.537967][ T4248] loop3: detected capacity change from 0 to 512 [ 51.555231][ T4248] EXT4-fs: Ignoring removed oldalloc option [ 51.579379][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 51.598871][ T4248] ext4: Unknown parameter 'smackfsfloor' [ 51.678402][ T4258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4258 comm=syz.4.241 [ 51.700130][ T4251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 51.719259][ T4258] Zero length message leads to an empty skb [ 51.757651][ T4251] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 51.767396][ T4251] team0: Device ipvlan0 failed to register rx_handler [ 51.845519][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 52.007337][ T4270] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 52.054438][ T4270] team0: Device ipvlan0 failed to register rx_handler [ 52.187628][ T4283] loop3: detected capacity change from 0 to 4096 [ 52.203207][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.232051][ T4286] netlink: 'syz.1.252': attribute type 10 has an invalid length. [ 52.282877][ T4286] team0: Device ipvlan0 failed to register rx_handler [ 52.549754][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.744352][ T4318] loop3: detected capacity change from 0 to 256 [ 52.773556][ T4318] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.887338][ T4331] loop3: detected capacity change from 0 to 256 [ 52.903714][ T4324] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 52.913301][ T4324] team0: Device ipvlan0 failed to register rx_handler [ 52.960436][ T4331] FAT-fs (loop3): codepage cp869 not found [ 53.131491][ T4339] loop1: detected capacity change from 0 to 4096 [ 53.149667][ T4339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.641310][ T4354] loop4: detected capacity change from 0 to 1024 [ 53.649301][ T4354] EXT4-fs: Ignoring removed oldalloc option [ 53.661913][ T4354] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 53.662414][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.699633][ T4354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.750951][ T4354] random: crng reseeded on system resumption [ 53.808120][ T4367] FAULT_INJECTION: forcing a failure. [ 53.808120][ T4367] name failslab, interval 1, probability 0, space 0, times 0 [ 53.821073][ T4367] CPU: 1 UID: 0 PID: 4367 Comm: syz.3.281 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 53.821102][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.821116][ T4367] Call Trace: [ 53.821203][ T4367] [ 53.821212][ T4367] __dump_stack+0x1d/0x30 [ 53.821305][ T4367] dump_stack_lvl+0xe8/0x140 [ 53.821326][ T4367] dump_stack+0x15/0x1b [ 53.821344][ T4367] should_fail_ex+0x265/0x280 [ 53.821392][ T4367] ? assoc_array_insert+0x2e0/0x1990 [ 53.821473][ T4367] should_failslab+0x8c/0xb0 [ 53.821503][ T4367] __kmalloc_cache_noprof+0x4c/0x320 [ 53.821543][ T4367] assoc_array_insert+0x2e0/0x1990 [ 53.821668][ T4367] ? keyring_compare_object+0xda/0x100 [ 53.821698][ T4367] ? assoc_array_delete+0x348/0x950 [ 53.821771][ T4367] __key_link_begin+0x8a/0x140 [ 53.821795][ T4367] key_move+0x160/0x550 [ 53.821829][ T4367] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 53.821955][ T4367] ? __pfx_keyring_search_iterator+0x10/0x10 [ 53.822055][ T4367] keyctl_keyring_move+0xd6/0x110 [ 53.822111][ T4367] __se_sys_keyctl+0x5f7/0xb80 [ 53.822134][ T4367] ? __rcu_read_unlock+0x4f/0x70 [ 53.822194][ T4367] ? bpf_trace_run2+0x124/0x1c0 [ 53.822229][ T4367] ? __bpf_trace_sys_enter+0x10/0x30 [ 53.822261][ T4367] __x64_sys_keyctl+0x67/0x80 [ 53.822292][ T4367] x64_sys_call+0x2f6d/0x2ff0 [ 53.822326][ T4367] do_syscall_64+0xd2/0x200 [ 53.822436][ T4367] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.822539][ T4367] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.822565][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.822673][ T4367] RIP: 0033:0x7fa208e7ebe9 [ 53.822689][ T4367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.822708][ T4367] RSP: 002b:00007fa2078df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 53.822727][ T4367] RAX: ffffffffffffffda RBX: 00007fa2090a5fa0 RCX: 00007fa208e7ebe9 [ 53.822740][ T4367] RDX: fffffffffffffffe RSI: 000000003b36df5c RDI: 000000000000001e [ 53.822753][ T4367] RBP: 00007fa2078df090 R08: 0000000000000001 R09: 0000000000000000 [ 53.822819][ T4367] R10: 000000003b36df5c R11: 0000000000000246 R12: 0000000000000001 [ 53.822831][ T4367] R13: 00007fa2090a6038 R14: 00007fa2090a5fa0 R15: 00007fff6b279658 [ 53.822851][ T4367] [ 53.828882][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.961898][ T4374] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 54.120555][ T4382] loop1: detected capacity change from 0 to 1024 [ 54.142516][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.200545][ T4382] tipc: Started in network mode [ 54.205573][ T4382] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 54.267029][ T4382] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 54.275632][ T4382] tipc: Enabled bearer , priority 10 [ 54.313148][ T4395] loop3: detected capacity change from 0 to 4096 [ 54.358542][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.394374][ T4395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.420028][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 54.420049][ T29] audit: type=1400 audit(1755299963.097:1412): avc: denied { ioctl } for pid=4406 comm="syz.0.292" path="socket:[8808]" dev="sockfs" ino=8808 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.575452][ T4421] loop0: detected capacity change from 0 to 1024 [ 54.639088][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.681225][ T4429] loop1: detected capacity change from 0 to 128 [ 54.686036][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.752150][ T4429] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.765855][ T4429] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.812499][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.825608][ T4440] capability: warning: `syz.3.300' uses deprecated v2 capabilities in a way that may be insecure [ 54.852246][ T4445] loop4: detected capacity change from 0 to 256 [ 54.890173][ T29] audit: type=1400 audit(1755299963.527:1413): avc: denied { mounton } for pid=4439 comm="syz.3.300" path="/proc/139/task" dev="proc" ino=8859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.912849][ T29] audit: type=1400 audit(1755299963.527:1414): avc: denied { write } for pid=4439 comm="syz.3.300" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.948693][ T4445] FAT-fs (loop4): codepage cp869 not found [ 55.003679][ T4450] loop1: detected capacity change from 0 to 256 [ 55.021404][ T4450] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.288022][ T4438] Set syz1 is full, maxelem 65536 reached [ 55.390013][ T36] tipc: Node number set to 1 [ 55.484411][ T4458] openvswitch: netlink: Message has 6 unknown bytes. [ 55.663170][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.745154][ T4464] __nla_validate_parse: 14 callbacks suppressed [ 55.745170][ T4464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.312'. [ 55.782768][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 55.842012][ T4474] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 55.875250][ T29] audit: type=1326 audit(1755299964.557:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 55.899101][ T29] audit: type=1326 audit(1755299964.557:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 55.923248][ T29] audit: type=1326 audit(1755299964.557:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 55.952090][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 55.964798][ T4474] team0: Device ipvlan0 failed to register rx_handler [ 55.964798][ T29] audit: type=1326 audit(1755299964.647:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 55.995397][ T29] audit: type=1326 audit(1755299964.647:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 56.019078][ T29] audit: type=1326 audit(1755299964.647:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 56.053467][ T29] audit: type=1326 audit(1755299964.657:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 56.084779][ T4489] openvswitch: netlink: Message has 6 unknown bytes. [ 56.124878][ T4493] loop3: detected capacity change from 0 to 128 [ 56.133541][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 56.181995][ T4493] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.200337][ T4493] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.266112][ T4488] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 56.355055][ T4505] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.562272][ T4505] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.592747][ T4511] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.603223][ T4511] SELinux: failed to load policy [ 56.626799][ T4484] loop2: detected capacity change from 0 to 512 [ 56.829186][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.850396][ T4505] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.863085][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.876107][ T4484] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.911945][ T4519] loop3: detected capacity change from 0 to 128 [ 56.922227][ T4505] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.958585][ T4525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.967925][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.330'. [ 56.985135][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.986034][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 57.030073][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.070114][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.081486][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.090322][ T4528] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 57.099801][ T4528] team0: Device ipvlan0 failed to register rx_handler [ 57.114345][ T4527] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 57.123283][ T2050] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.173227][ T4536] loop1: detected capacity change from 0 to 512 [ 57.196522][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.234503][ T4536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.250162][ T4536] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.297692][ T4542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 57.334964][ T4552] loop2: detected capacity change from 0 to 1024 [ 57.340094][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.382582][ T4552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.395609][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 57.481645][ T4562] netlink: 'syz.1.342': attribute type 21 has an invalid length. [ 57.493077][ T4542] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 57.501227][ T4567] loop0: detected capacity change from 0 to 1024 [ 57.541855][ T4542] team0: Device ipvlan0 failed to register rx_handler [ 57.542251][ T4567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.618615][ T4574] loop4: detected capacity change from 0 to 128 [ 57.687298][ T4574] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.716682][ T4574] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.775814][ T4567] tipc: Started in network mode [ 57.781071][ T4567] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 57.832488][ T4567] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 57.840772][ T4567] tipc: Enabled bearer , priority 10 [ 57.915136][ T4583] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 57.929851][ T4583] team0: Device ipvlan0 failed to register rx_handler [ 57.946347][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.022418][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.066874][ T4568] Set syz1 is full, maxelem 65536 reached [ 58.122017][ T4597] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 58.132148][ T4596] loop4: detected capacity change from 0 to 4096 [ 58.149103][ T4596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.179161][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.189583][ T4597] team0: Device ipvlan0 failed to register rx_handler [ 58.251716][ T4602] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.350: corrupted inode contents [ 58.346912][ T4602] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.350: mark_inode_dirty error [ 58.359724][ T4602] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.350: corrupted inode contents [ 58.372158][ T4602] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.350: mark_inode_dirty error [ 58.408399][ T4602] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.350: corrupted inode contents [ 58.437209][ T4622] openvswitch: netlink: Message has 6 unknown bytes. [ 58.444065][ T4602] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.350: mark_inode_dirty error [ 58.457468][ T4602] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.350: corrupted inode contents [ 58.475692][ T4602] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.350: mark_inode_dirty error [ 58.496987][ T4602] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 58.499620][ T1036] hid-generic 0000:0000:8000.0002: unknown main item tag 0x0 [ 58.518470][ T1036] hid-generic 0000:0000:8000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.596074][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.633383][ T4632] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 58.642769][ T4632] team0: Device ipvlan0 failed to register rx_handler [ 58.670539][ T4642] 9pnet_fd: Insufficient options for proto=fd [ 58.757584][ T4643] netlink: 'syz.0.367': attribute type 10 has an invalid length. [ 58.824877][ T4658] openvswitch: netlink: Message has 6 unknown bytes. [ 58.840017][ T1036] tipc: Node number set to 1 [ 58.986810][ T4673] 9pnet_fd: Insufficient options for proto=fd [ 59.155021][ T4694] openvswitch: netlink: Message has 6 unknown bytes. [ 59.195949][ T4688] team0: Device ipvlan0 failed to register rx_handler [ 59.274117][ T4703] 9pnet_fd: Insufficient options for proto=fd [ 59.321840][ T4707] loop3: detected capacity change from 0 to 128 [ 59.339464][ T4707] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.357971][ T4707] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.446588][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 59.446609][ T29] audit: type=1326 audit(1755299968.127:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.456310][ T4722] loop2: detected capacity change from 0 to 512 [ 59.505798][ T29] audit: type=1326 audit(1755299968.127:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.529403][ T29] audit: type=1326 audit(1755299968.127:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.552938][ T29] audit: type=1326 audit(1755299968.127:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.576494][ T29] audit: type=1326 audit(1755299968.127:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.600060][ T29] audit: type=1400 audit(1755299968.167:1752): avc: denied { read append open } for pid=4706 comm="syz.3.393" path="/71/mnt/cpu.stat" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.624379][ T29] audit: type=1326 audit(1755299968.167:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.647936][ T29] audit: type=1326 audit(1755299968.167:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.671377][ T29] audit: type=1326 audit(1755299968.167:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.695190][ T29] audit: type=1326 audit(1755299968.167:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8159ebe9 code=0x7ffc0000 [ 59.728460][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.740910][ T4727] openvswitch: netlink: Message has 6 unknown bytes. [ 59.826483][ T4734] team0: Device ipvlan0 failed to register rx_handler [ 59.837021][ T4740] 9pnet_fd: Insufficient options for proto=fd [ 59.987103][ T4757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.031512][ T4757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.053062][ T4749] loop4: detected capacity change from 0 to 512 [ 60.093998][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.109091][ T4757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.109320][ T4749] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.208437][ T4778] loop3: detected capacity change from 0 to 4096 [ 60.216834][ T4757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.263269][ T4778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.308931][ T2050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.419512][ T4787] 9pnet_fd: Insufficient options for proto=fd [ 60.775731][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.808742][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830134][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.838567][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.841060][ T4785] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.418: corrupted inode contents [ 60.887288][ T4785] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.418: mark_inode_dirty error [ 60.918693][ T4785] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.418: corrupted inode contents [ 60.933854][ T4804] SELinux: Context Ü is not valid (left unmapped). [ 60.975293][ T4807] __nla_validate_parse: 28 callbacks suppressed [ 60.975328][ T4807] netlink: 256 bytes leftover after parsing attributes in process `syz.2.426'. [ 60.998153][ T4785] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.418: mark_inode_dirty error [ 61.011237][ T4785] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.418: corrupted inode contents [ 61.092710][ T4809] loop4: detected capacity change from 0 to 512 [ 61.120589][ T4809] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 61.144171][ T4785] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #15: comm syz.3.418: mark_inode_dirty error [ 61.177587][ T4785] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.418: corrupted inode contents [ 61.193131][ T4785] EXT4-fs error (device loop3): ext4_truncate:4666: inode #15: comm syz.3.418: mark_inode_dirty error [ 61.213756][ T4785] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 61.277457][ T4826] 9pnet_fd: Insufficient options for proto=fd [ 61.375888][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.455956][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.489161][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.610541][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 61.625293][ T3868] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.662341][ T3868] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.706294][ T3868] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.741232][ T3868] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.756883][ T4829] loop0: detected capacity change from 0 to 512 [ 61.790964][ T4829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.806069][ T4829] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.855734][ T4849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'. [ 61.895586][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 61.917569][ T4855] loop1: detected capacity change from 0 to 128 [ 61.934809][ T4855] syz.1.441: attempt to access beyond end of device [ 61.934809][ T4855] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 61.952146][ T4859] 9pnet_fd: Insufficient options for proto=fd [ 61.959842][ T4855] syz.1.441: attempt to access beyond end of device [ 61.959842][ T4855] loop1: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 61.974374][ T4860] validate_nla: 4 callbacks suppressed [ 61.974424][ T4860] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 61.982524][ T4855] syz.1.441: attempt to access beyond end of device [ 61.982524][ T4855] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 62.002473][ T4860] team0: Device ipvlan0 failed to register rx_handler [ 62.002917][ T4855] syz.1.441: attempt to access beyond end of device [ 62.002917][ T4855] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 62.023304][ T4855] syz.1.441: attempt to access beyond end of device [ 62.023304][ T4855] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 62.089100][ T4855] syz.1.441: attempt to access beyond end of device [ 62.089100][ T4855] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 62.108291][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.146975][ T4855] syz.1.441: attempt to access beyond end of device [ 62.146975][ T4855] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 62.165293][ T4863] syz.1.441: attempt to access beyond end of device [ 62.165293][ T4863] loop1: rw=2049, sector=297, nr_sectors = 80 limit=128 [ 62.178943][ T4872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.188924][ T4863] syz.1.441: attempt to access beyond end of device [ 62.188924][ T4863] loop1: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 62.218366][ T4855] syz.1.441: attempt to access beyond end of device [ 62.218366][ T4855] loop1: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 62.291888][ T4884] ================================================================== [ 62.300207][ T4884] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 62.307261][ T4884] [ 62.309597][ T4884] write to 0xffff88811ae33648 of 8 bytes by task 3306 on cpu 0: [ 62.317239][ T4884] release_task+0x6f9/0xb60 [ 62.321764][ T4884] wait_consider_task+0x114a/0x1660 [ 62.326995][ T4884] __do_wait+0xfa/0x510 [ 62.331173][ T4884] do_wait+0xb7/0x260 [ 62.335177][ T4884] kernel_wait4+0x16b/0x1e0 [ 62.339735][ T4884] __x64_sys_wait4+0x91/0x120 [ 62.344436][ T4884] x64_sys_call+0x2a66/0x2ff0 [ 62.349132][ T4884] do_syscall_64+0xd2/0x200 [ 62.353657][ T4884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.359558][ T4884] [ 62.361891][ T4884] read to 0xffff88811ae33180 of 3264 bytes by task 4884 on cpu 1: [ 62.369785][ T4884] memcpy_and_pad+0x48/0x80 [ 62.374384][ T4884] arch_dup_task_struct+0x2c/0x40 [ 62.379421][ T4884] dup_task_struct+0x83/0x6a0 [ 62.384118][ T4884] copy_process+0x399/0x2000 [ 62.388721][ T4884] kernel_clone+0x16c/0x5c0 [ 62.393426][ T4884] __se_sys_clone3+0x1c2/0x200 [ 62.398213][ T4884] __x64_sys_clone3+0x31/0x40 [ 62.403081][ T4884] x64_sys_call+0x1fc9/0x2ff0 [ 62.407774][ T4884] do_syscall_64+0xd2/0x200 [ 62.412394][ T4884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.418486][ T4884] [ 62.420828][ T4884] Reported by Kernel Concurrency Sanitizer on: [ 62.427090][ T4884] CPU: 1 UID: 0 PID: 4884 Comm: syz.1.451 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 62.439609][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.449964][ T4884] ================================================================== [ 62.458782][ T56] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 62.469485][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.