last executing test programs: 2.691875669s ago: executing program 2 (id=30): r0 = geteuid() ioprio_set$uid(0x0, r0, 0x2007) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a28edffffff090101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r1, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018600000030000000000000006000000185a00000e00000000000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ftruncate(0xffffffffffffffff, 0xb35) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000010000004e0000000000", @ANYRES32=r2, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500"/28], 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$kcm(0x10, 0x6, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYRES64=r2], 0x360}, 0x1, 0x0, 0x0, 0x40001}, 0x48040) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cd, &(0x7f0000001180)="$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") socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0\x00'}) 2.58131212s ago: executing program 2 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000e00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="254c97ba754c0e5669f0c0c1c03ebc7d98121370830d5d95366c91178f42a989a96c7b4e7b0454fc486080f377a4ec9ae3582005c4d9539d3b3757895bf2ca8ddaba84f71a499ecdfad85a3f6b66536060e2a1f75f", @ANYRESHEX=r0, @ANYBLOB="396bc41293cb2e05b81bd1043cd8040b80cdec35442b7337d66c3efc92faa67fd998ff867f99b61efa35ffac8fb1b15d238ed3471e8911789da202bdd0b5f7da532ef7d548189697e53d7929907c0b2f164ffd893fd4a63850506ab0c3570e0c5be93891ed95f6c95d6f61bdf117226cd820116900853928a1586d943d0b587eac0f7b48c515733b8620236a1397d59662fd170d7b540a6d1e022b0dcff064044edaf07cbb46389b705be70b4620228af0005cbacf0fc81e0e22961b1479a525b5150230", @ANYBLOB="22e5e23fb6164bfc386b992a88c25f5489db7a8d2a1833e925bb9fbacca8474d10cbb80ce1079b01b3d9bfdcaa1569864b9b564c078899621929337dbdd5d10c6178cfe968076d4ca428059868c7f9ebc0220ae7dc0ce3ea028ed9aa4b0d64be5f2663ec1d155d0db11e0a311474315988912af687451f440d531f380a96bd75df13101c63087385c4168b0afd6c8a748f39ef940ca04690ff60caea1a030aef101b080e455d16ba7259fe1bdb269f75e37caffef7be320677d918afcf7258b2ed6e93bb7b944db9896d8953a6455f768ce767ddc2"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip6gre0\x00', &(0x7f0000000e80)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xff, 0x0, 0x61, @dev={0xfe, 0x80, '\x00', 0x40}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0xf, 0x0, 0x7aab6fb5}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f40)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1e, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigaction(0x36, &(0x7f0000000080)={&(0x7f0000000000)="f3470f1a65fe0fd91047c0b426f0ffffff20c402fd2a60056566450f38dbc645ef0f3801c70f1a970800000067410f1aa21c000000c4a22d3e5d08", 0x0, &(0x7f0000000040)="0f72d6bfc4a1922a1c4c47df78d4db7b0ef20f2af9c4c1ff2ddbc4c1cdf5c8c4c2290d0fc463e169a05606000000c401a572e609", {[0x5]}}, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)="c442e1de78e465f3430fb8218fc830b64bd400c4e2fd1771b20f152711a2d7db2899f04483a200000000270f44aa0f000000c441fd7f39c462d5adbd03000000"}, 0x8, &(0x7f00000001c0)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) writev(r6, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r10, 0x0, 0x2c, 0x4, @val=@tcx}, 0x1c) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0xb, 0x0, 0x0, 0x7ffc0002}, {0x7, 0x8, 0xfd, 0x2}, {0xfe, 0x81, 0xb, 0x3}, {0xd90, 0x0, 0xfd}, {0xa, 0x6, 0x7, 0x493}]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') eventfd2(0xce77, 0x800) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r12, 0x2c, 0x1, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 2.422894895s ago: executing program 4 (id=36): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x20009, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='ext4_es_lookup_extent_exit\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000480), 0x4) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df75e3ffe46630d4a1741b1554dd5a55e66eaecea76d5d174c21eea8e02493ac4beba5ab57d22b47f9e9db8fb29de336d8af9753fcd0c84e77c8802ffa8bc448d6c1ab4894bf471b20dc769a5e517a269f117ee42471831d184400ce4a5c75ff7511456de98fbe9a266f2241ad75bd337a9ae52a70c15ffe6517d98904ccce609bdbfdf253b48278776671f064890243113d93598d9f5ae26522b4653", 0xcf, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="eb08a6b688d3d2271ad461738222bd1af3eaaa3a63a251fa8c2f3003efefc4e4b9f85c", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.359204732s ago: executing program 4 (id=37): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000001300000000e0000002000000000020000000000000000000000000000000000200"/53], 0xb8}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000140001000000000000000000e000000200000000000000000000000000000000000000a23ef517a5a31f7f00000000000f0000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) 2.014703027s ago: executing program 1 (id=45): unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x8) madvise(&(0x7f00005bc000/0x3000)=nil, 0x3000, 0x9) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) finit_module(r2, 0x0, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 1.788553399s ago: executing program 1 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.749933573s ago: executing program 1 (id=51): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.721984896s ago: executing program 2 (id=52): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r5 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x34, 0x3, r4}) io_uring_enter(r5, 0x44fd, 0x3, 0x1, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000007c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESHEX=r5, @ANYRESOCT=r2], 0x34}}, 0x0) 1.721527246s ago: executing program 3 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0xffff, 0x7, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x2e, 0x3, 0x6}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0xc, [{@local, 0xc448}, {@empty, 0x1}, {@remote, 0x6}, {@remote, 0x3}, {@loopback, 0x9}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32], 0x2c}}, 0x0) 1.720592966s ago: executing program 1 (id=54): syz_io_uring_setup(0x14dd, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@newtclass={0x150, 0x28, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xc}, {0xffe0, 0xfffa}, {0x9, 0x8}}, [@c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xffe0}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x11}}}, @c_cbq={{0x6a}, {0xbc, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xe}, 0xfff, 0x200}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x7, 0xb, 0x8c, 0xa}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0x6, 0x40, 0x80, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x2, 0xe, 0x4, 0x5, 0xffffffff, 0x0, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0xdf, 0x3, 0x3, 0x9, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xca, 0x3, 0x7f, 0x0, 0x401, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x5, 0xa, 0xb, 0x2df}}, @TCA_CBQ_RATE={0x0, 0x5, {0x10, 0x0, 0x6, 0xf801, 0x95c8, 0x3}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2a, 0x0, 0xb, 0xfe, 0x7ff, 0xb6, 0x7, 0x9}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x38, 0x2, 0x1f, 0x3, 0x1, 0x36d93e1}}]}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_HDR={0xd, 0x3, "afe6b40702f79a1771"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005850) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000002000000, 0x2) 1.675692041s ago: executing program 3 (id=55): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2, 0xcc}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x31, 0x0, 0x1, 0x80000021}, 0x28) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, &(0x7f0000000080)="2260901fc6911eba7f423e59d6d2f3ffcb4e771022ec74ad24f90267cddb1470e520e8afb0f69b3b60eccc6715e536d34b6cc6d4ed85f5a31b41718dcce20e5228e7c574837d5a01f2bbc564e4eb01ebc5161f1bd8ad19107e05368c27e1116c39d307299ed748f923db4969052ae66cb4dc12270fc41b8a49cf2372a77309fb70ba794ddd121299a39c8d35c6c11cf880bb522756dbcbc4533a758cf56d20b8af2ddfaa5cc3d3b9cf27aed5e41bb870295c28a64d2a5657f9af900d4168df804f43fce37cb449ddf466", 0xca, 0x4, &(0x7f0000000200)={0xa, 0x0, 0xf, @rand_addr=' \x01\x00', 0x1e8, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x4d8, &(0x7f0000000a00)="$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") 1.609490687s ago: executing program 1 (id=56): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@jqfmt_vfsv1}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2000, 0x1a9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x8001}]}, 0x24}}, 0x42094) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvmmsg(r7, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4084, 0x7f8}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/111, 0x40}, {&(0x7f0000000480)=""/151}], 0x3}, 0xc}], 0x40000000000004f, 0x2002, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r9 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.493952509s ago: executing program 3 (id=58): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r11 = syz_open_dev$rtc(&(0x7f0000000180), 0x7, 0x28400) ioctl$RTC_PLL_SET(r11, 0x40207012, &(0x7f0000000300)={0x2, 0x800, 0x4, 0x10, 0x9, 0x0, 0xffffffff80000001}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100"/18, @ANYRES32=r12, @ANYBLOB="08002b0006000000"], 0x24}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 1.151928144s ago: executing program 3 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="359cb6", 0x3}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.039162445s ago: executing program 3 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (fail_nth: 2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) listen(r7, 0xda90) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff200000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0003020000000000"], 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) r9 = gettid() tkill(r9, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x541b, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000010000, 0x8, 0x1, 0x8, 0x2020002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x408001, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, 0x0}, 0x20) 924.654976ms ago: executing program 0 (id=64): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000000)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x29, 0x2, 0x0) 745.430254ms ago: executing program 0 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0xffff, 0x7, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x2e, 0x3, 0x6}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0xc, [{@local, 0xc448}, {@empty, 0x1}, {@remote, 0x6}, {@remote, 0x3}, {@loopback, 0x9}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32], 0x2c}}, 0x0) 706.571799ms ago: executing program 0 (id=66): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2) (fail_nth: 4) 462.074883ms ago: executing program 1 (id=67): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002940)="ef7e033af29ad1a2", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{0x0}], 0x1, 0x0, 0x68}}], 0x2, 0x2000c815) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 387.82078ms ago: executing program 0 (id=68): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f00000002c0), 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x4000044) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x2801, &(0x7f0000001480)={0x0, 0xb35d, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r5, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x0, 0x7fff8001}, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) connect(r2, &(0x7f0000000380)=@rc={0x1f, @any, 0x8}, 0x80) 387.45384ms ago: executing program 2 (id=69): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 374.542772ms ago: executing program 4 (id=70): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x2160) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 353.259774ms ago: executing program 2 (id=71): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="16f83becc0eb15e8d4814c0bee9541adc97d129c1eee7a5182bd4add3a8af49746daf6b5fc87e00d67112611f166f609a11a424feca038edb53bcceb47671d942a8a95de3e9a7c247a217f2e4c24a4932723c0fefe279efadc09511665db573b09a10eb301fc5e007431d132b9df17c0c266d2be366ad20769a5c348b0ee2b877d27b223fb8ca0e337e1204447660025a938f032ff958f31f6545c220c4e06d52cbcf988885bd247f16ce69383f3109791cd20fcc945e18a765a66c29b7ecac6e3baa078e75bac8df576e0f33e9df36697c0e7afa46b", @ANYRESDEC=r1, @ANYRESHEX], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) 286.950591ms ago: executing program 4 (id=72): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) (fail_nth: 6) 265.812303ms ago: executing program 2 (id=73): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000540)=""/250, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) setgroups(0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) 55.979254ms ago: executing program 3 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x3000000}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x10000}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x4, 0x0, 0xffffffff, 0x3}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x536d}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xbe0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 50.633864ms ago: executing program 4 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) io_cancel(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x34, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r5 = syz_clone(0x4a000400, &(0x7f0000000080)="260d297c29032c419465778e82", 0xd, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="8e169e2d8b0a496ab2edbdd39416533216fc4f66f2107bbe34") r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000380)=""/100, 0x64}], 0x1, 0x6, 0x0) sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x4) 0s ago: executing program 0 (id=76): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") chdir(&(0x7f0000000240)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) r0 = socket$inet6(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x91c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2d88b01}, 0x1c) kernel console output (not intermixed with test programs): [ 18.316078][ T29] audit: type=1400 audit(1763191813.614:60): avc: denied { rlimitinh } for pid=3204 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.318567][ T29] audit: type=1400 audit(1763191813.614:61): avc: denied { siginh } for pid=3204 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 25.324223][ T29] audit: type=1400 audit(1763191820.624:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.347180][ T29] audit: type=1400 audit(1763191820.644:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.347888][ T3301] cgroup: Unknown subsys name 'net' [ 25.374779][ T29] audit: type=1400 audit(1763191820.674:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.508706][ T3301] cgroup: Unknown subsys name 'cpuset' [ 25.514879][ T3301] cgroup: Unknown subsys name 'rlimit' [ 25.664586][ T29] audit: type=1400 audit(1763191820.964:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.687839][ T29] audit: type=1400 audit(1763191820.964:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.703323][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.708263][ T29] audit: type=1400 audit(1763191820.964:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.737201][ T29] audit: type=1400 audit(1763191820.964:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.754865][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.757519][ T29] audit: type=1400 audit(1763191820.974:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.790949][ T29] audit: type=1400 audit(1763191820.974:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.814251][ T29] audit: type=1400 audit(1763191821.024:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.923727][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.012036][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.019127][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.026291][ T3311] bridge_slave_0: entered allmulticast mode [ 27.032767][ T3311] bridge_slave_0: entered promiscuous mode [ 27.039480][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.046514][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.053697][ T3311] bridge_slave_1: entered allmulticast mode [ 27.060166][ T3311] bridge_slave_1: entered promiscuous mode [ 27.078728][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.089099][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.120992][ T3311] team0: Port device team_slave_0 added [ 27.147662][ T3311] team0: Port device team_slave_1 added [ 27.183749][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.190802][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.216695][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.234080][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.241072][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.267067][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.285345][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.296613][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.326224][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.353948][ T3311] hsr_slave_0: entered promiscuous mode [ 27.359872][ T3311] hsr_slave_1: entered promiscuous mode [ 27.386188][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.454332][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.461398][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.468568][ T3318] bridge_slave_0: entered allmulticast mode [ 27.474894][ T3318] bridge_slave_0: entered promiscuous mode [ 27.481592][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.488682][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.495774][ T3318] bridge_slave_1: entered allmulticast mode [ 27.502053][ T3318] bridge_slave_1: entered promiscuous mode [ 27.515043][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.522148][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.529355][ T3313] bridge_slave_0: entered allmulticast mode [ 27.535721][ T3313] bridge_slave_0: entered promiscuous mode [ 27.555102][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.562220][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.569443][ T3313] bridge_slave_1: entered allmulticast mode [ 27.575775][ T3313] bridge_slave_1: entered promiscuous mode [ 27.586883][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.593975][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.601089][ T3316] bridge_slave_0: entered allmulticast mode [ 27.607452][ T3316] bridge_slave_0: entered promiscuous mode [ 27.620901][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.638881][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.645987][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.653176][ T3316] bridge_slave_1: entered allmulticast mode [ 27.659627][ T3316] bridge_slave_1: entered promiscuous mode [ 27.669601][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.687377][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.694494][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.701861][ T3320] bridge_slave_0: entered allmulticast mode [ 27.708359][ T3320] bridge_slave_0: entered promiscuous mode [ 27.731984][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.741272][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.748388][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.755513][ T3320] bridge_slave_1: entered allmulticast mode [ 27.761935][ T3320] bridge_slave_1: entered promiscuous mode [ 27.773060][ T3318] team0: Port device team_slave_0 added [ 27.779981][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.792046][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.807963][ T3318] team0: Port device team_slave_1 added [ 27.818612][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.856463][ T3313] team0: Port device team_slave_0 added [ 27.862812][ T3316] team0: Port device team_slave_0 added [ 27.869464][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.878822][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.885755][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.911781][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.923014][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.930028][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.955957][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.967301][ T3313] team0: Port device team_slave_1 added [ 27.973639][ T3316] team0: Port device team_slave_1 added [ 27.980282][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.024772][ T3320] team0: Port device team_slave_0 added [ 28.030700][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.037616][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.063599][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.075802][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.082784][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.108784][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.122853][ T3320] team0: Port device team_slave_1 added [ 28.128989][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.135958][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.162016][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.173022][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.180012][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.205949][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.262376][ T3316] hsr_slave_0: entered promiscuous mode [ 28.268689][ T3316] hsr_slave_1: entered promiscuous mode [ 28.274458][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.280206][ T3316] Cannot create hsr debugfs directory [ 28.287545][ T3318] hsr_slave_0: entered promiscuous mode [ 28.293726][ T3318] hsr_slave_1: entered promiscuous mode [ 28.299624][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.305322][ T3318] Cannot create hsr debugfs directory [ 28.311449][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.318411][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.344305][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.355667][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.362635][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.388567][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.405597][ T3313] hsr_slave_0: entered promiscuous mode [ 28.411482][ T3313] hsr_slave_1: entered promiscuous mode [ 28.417285][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.423023][ T3313] Cannot create hsr debugfs directory [ 28.429310][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.455973][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.480964][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.504467][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.528509][ T3320] hsr_slave_0: entered promiscuous mode [ 28.534572][ T3320] hsr_slave_1: entered promiscuous mode [ 28.540460][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.546189][ T3320] Cannot create hsr debugfs directory [ 28.668533][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.682701][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.696490][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.708635][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.724074][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.732970][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.742120][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.750606][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.774506][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.795118][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.803925][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.812343][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.823445][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.843141][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.852421][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.859484][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.873494][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.880581][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.916856][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.926436][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.935242][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.943825][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.957273][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.971148][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.002857][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.012590][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.029109][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.041194][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.048331][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.062123][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.069216][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.077902][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.084956][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.104230][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.111303][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.125189][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.147879][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.155161][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.164398][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.171453][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.190191][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.201226][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.234134][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.258269][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.265373][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.287457][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.294589][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.312655][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.362322][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.381617][ T3311] veth0_vlan: entered promiscuous mode [ 29.395248][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.410383][ T3311] veth1_vlan: entered promiscuous mode [ 29.432626][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.449387][ T3311] veth0_macvtap: entered promiscuous mode [ 29.457453][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.469678][ T3311] veth1_macvtap: entered promiscuous mode [ 29.488997][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.506106][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.527276][ T2479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.556278][ T3438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.581682][ T3318] veth0_vlan: entered promiscuous mode [ 29.596438][ T3438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.610623][ T3318] veth1_vlan: entered promiscuous mode [ 29.622968][ T3438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.633822][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.637438][ T3316] veth0_vlan: entered promiscuous mode [ 29.684494][ T3316] veth1_vlan: entered promiscuous mode [ 29.713547][ T3318] veth0_macvtap: entered promiscuous mode [ 29.725391][ T3320] veth0_vlan: entered promiscuous mode [ 29.736115][ T3313] veth0_vlan: entered promiscuous mode [ 29.743930][ T3318] veth1_macvtap: entered promiscuous mode [ 29.752192][ T3488] FAULT_INJECTION: forcing a failure. [ 29.752192][ T3488] name failslab, interval 1, probability 0, space 0, times 1 [ 29.757302][ T3316] veth0_macvtap: entered promiscuous mode [ 29.765037][ T3488] CPU: 1 UID: 0 PID: 3488 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.765119][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.765131][ T3488] Call Trace: [ 29.765136][ T3488] [ 29.765143][ T3488] __dump_stack+0x1d/0x30 [ 29.765169][ T3488] dump_stack_lvl+0xe8/0x140 [ 29.765251][ T3488] dump_stack+0x15/0x1b [ 29.765269][ T3488] should_fail_ex+0x265/0x280 [ 29.765288][ T3488] should_failslab+0x8c/0xb0 [ 29.765315][ T3488] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 29.765349][ T3488] ? __alloc_skb+0x101/0x320 [ 29.765377][ T3488] __alloc_skb+0x101/0x320 [ 29.765404][ T3488] netlink_alloc_large_skb+0xbf/0xf0 [ 29.765477][ T3488] netlink_sendmsg+0x3cf/0x6b0 [ 29.765498][ T3488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 29.765517][ T3488] __sock_sendmsg+0x145/0x180 [ 29.765540][ T3488] ____sys_sendmsg+0x31e/0x4e0 [ 29.765644][ T3488] ___sys_sendmsg+0x17b/0x1d0 [ 29.765731][ T3488] __x64_sys_sendmsg+0xd4/0x160 [ 29.765752][ T3488] x64_sys_call+0x191e/0x3000 [ 29.765809][ T3488] do_syscall_64+0xd2/0x200 [ 29.765829][ T3488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 29.765856][ T3488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 29.765960][ T3488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.765980][ T3488] RIP: 0033:0x7f54976ef6c9 [ 29.765996][ T3488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.766028][ T3488] RSP: 002b:00007f549614f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.766051][ T3488] RAX: ffffffffffffffda RBX: 00007f5497945fa0 RCX: 00007f54976ef6c9 [ 29.766063][ T3488] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 29.766074][ T3488] RBP: 00007f549614f090 R08: 0000000000000000 R09: 0000000000000000 [ 29.766086][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.766167][ T3488] R13: 00007f5497946038 R14: 00007f5497945fa0 R15: 00007ffe1ecc0848 [ 29.766183][ T3488] [ 29.973961][ T3313] veth1_vlan: entered promiscuous mode [ 29.979332][ T3492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.986571][ T3313] veth0_macvtap: entered promiscuous mode [ 29.999663][ T3320] veth1_vlan: entered promiscuous mode [ 30.013359][ T3316] veth1_macvtap: entered promiscuous mode [ 30.029694][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.038683][ T3313] veth1_macvtap: entered promiscuous mode [ 30.058849][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.067539][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.084169][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.092889][ T3495] FAULT_INJECTION: forcing a failure. [ 30.092889][ T3495] name failslab, interval 1, probability 0, space 0, times 0 [ 30.105643][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.105681][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 30.105691][ T3495] Call Trace: [ 30.105696][ T3495] [ 30.105702][ T3495] __dump_stack+0x1d/0x30 [ 30.105725][ T3495] dump_stack_lvl+0xe8/0x140 [ 30.105751][ T3495] dump_stack+0x15/0x1b [ 30.105791][ T3495] should_fail_ex+0x265/0x280 [ 30.105811][ T3495] ? fw_change+0x47f/0x770 [ 30.105881][ T3495] should_failslab+0x8c/0xb0 [ 30.105912][ T3495] __kmalloc_cache_noprof+0x4c/0x4a0 [ 30.105968][ T3495] fw_change+0x47f/0x770 [ 30.105999][ T3495] ? __pfx_fw_change+0x10/0x10 [ 30.106086][ T3495] tc_new_tfilter+0xde4/0x10a0 [ 30.106173][ T3495] ? __rcu_read_unlock+0x4f/0x70 [ 30.106201][ T3495] ? ns_capable+0x7d/0xb0 [ 30.106223][ T3495] ? __pfx_tc_new_tfilter+0x10/0x10 [ 30.106317][ T3495] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 30.106345][ T3495] netlink_rcv_skb+0x123/0x220 [ 30.106373][ T3495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 30.106396][ T3495] rtnetlink_rcv+0x1c/0x30 [ 30.106431][ T3495] netlink_unicast+0x5c0/0x690 [ 30.106456][ T3495] netlink_sendmsg+0x58b/0x6b0 [ 30.106473][ T3495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.106491][ T3495] __sock_sendmsg+0x145/0x180 [ 30.106517][ T3495] ____sys_sendmsg+0x31e/0x4e0 [ 30.106574][ T3495] ___sys_sendmsg+0x17b/0x1d0 [ 30.106704][ T3495] __x64_sys_sendmsg+0xd4/0x160 [ 30.106727][ T3495] x64_sys_call+0x191e/0x3000 [ 30.106754][ T3495] do_syscall_64+0xd2/0x200 [ 30.106771][ T3495] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 30.106830][ T3495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 30.106871][ T3495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.106894][ T3495] RIP: 0033:0x7f54976ef6c9 [ 30.106909][ T3495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.106989][ T3495] RSP: 002b:00007f549614f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.107009][ T3495] RAX: ffffffffffffffda RBX: 00007f5497945fa0 RCX: 00007f54976ef6c9 [ 30.107022][ T3495] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000007 [ 30.107035][ T3495] RBP: 00007f549614f090 R08: 0000000000000000 R09: 0000000000000000 [ 30.107048][ T3495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.107061][ T3495] R13: 00007f5497946038 R14: 00007f5497945fa0 R15: 00007ffe1ecc0848 [ 30.107080][ T3495] [ 30.114762][ T3320] veth0_macvtap: entered promiscuous mode [ 30.359852][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.371128][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.380089][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.389077][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.399224][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.407850][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.417210][ T3320] veth1_macvtap: entered promiscuous mode [ 30.429694][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.451838][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.468983][ T3327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.484726][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.504357][ T3327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.528293][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 30.528307][ T29] audit: type=1400 audit(1763191825.834:104): avc: denied { allowed } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.565079][ T3327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.605614][ T29] audit: type=1400 audit(1763191825.864:105): avc: denied { sqpoll } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.620781][ T3327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.624707][ T29] audit: type=1400 audit(1763191825.864:106): avc: denied { create } for pid=3496 comm="syz.1.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.654284][ T29] audit: type=1400 audit(1763191825.864:107): avc: denied { map } for pid=3496 comm="syz.1.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.668946][ T3327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.678327][ T29] audit: type=1400 audit(1763191825.864:108): avc: denied { read write } for pid=3496 comm="syz.1.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.705360][ T3327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.711474][ T29] audit: type=1400 audit(1763191825.884:109): avc: denied { create } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.740310][ T29] audit: type=1400 audit(1763191825.884:110): avc: denied { write } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.740537][ T3327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.760589][ T29] audit: type=1400 audit(1763191825.884:111): avc: denied { read } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.789294][ T29] audit: type=1400 audit(1763191825.884:112): avc: denied { create } for pid=3496 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.852471][ T3327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.861324][ T3327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.894443][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.975167][ T3523] SELinux: ebitmap: truncated map [ 30.982204][ T3327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.993423][ T3523] SELinux: failed to load policy [ 30.996793][ T3327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.998503][ T29] audit: type=1400 audit(1763191825.984:113): avc: denied { create } for pid=3505 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.131226][ T3523] infiniband syz!: set active [ 31.131303][ T3523] infiniband syz!: added team_slave_0 [ 31.174328][ T3523] RDS/IB: syz!: added [ 31.184849][ T3523] smc: adding ib device syz! with port count 1 [ 31.202713][ T3509] loop2: detected capacity change from 0 to 1024 [ 31.206195][ T3523] smc: ib device syz! port 1 has no pnetid [ 31.243678][ T3509] ======================================================= [ 31.243678][ T3509] WARNING: The mand mount option has been deprecated and [ 31.243678][ T3509] and is ignored by this kernel. Remove the mand [ 31.243678][ T3509] option from the mount to silence this warning. [ 31.243678][ T3509] ======================================================= [ 31.247265][ T3509] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 31.319327][ T3509] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.319547][ T3509] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.319729][ T3509] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3: Failed to acquire dquot type 0 [ 31.319831][ T3509] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 31.319876][ T3509] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3: mark_inode_dirty error [ 31.319948][ T3509] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 31.319976][ T3509] EXT4-fs (loop2): 1 orphan inode deleted [ 31.320614][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.358419][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.432379][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 31.575496][ T3542] process 'syz.4.14' launched './file0' with NULL argv: empty string added [ 31.594241][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.594411][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.594479][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 31.594760][ T3318] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 31.594847][ T3318] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 31.594896][ T3318] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 31.826080][ T3555] tipc: Enabling of bearer rejected, failed to enable media [ 31.862728][ T3560] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16'. [ 32.008865][ T3569] loop0: detected capacity change from 0 to 1024 [ 32.067289][ T3569] loop0: detected capacity change from 0 to 1024 [ 32.157190][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3577 comm=syz.1.25 [ 32.159107][ T3577] random: crng reseeded on system resumption [ 32.281742][ T3582] netlink: 'syz.2.28': attribute type 30 has an invalid length. [ 32.336696][ T3582] bond1: option arp_missed_max: invalid value (0) [ 32.336733][ T3582] bond1: option arp_missed_max: allowed values 1 - 255 [ 32.377503][ T3582] bond1 (unregistering): Released all slaves [ 32.490175][ T3592] loop2: detected capacity change from 0 to 256 [ 32.563577][ T3592] FAT-fs (loop2): Directory bread(block 64) failed [ 32.563600][ T3592] FAT-fs (loop2): Directory bread(block 65) failed [ 32.563683][ T3592] FAT-fs (loop2): Directory bread(block 66) failed [ 32.563700][ T3592] FAT-fs (loop2): Directory bread(block 67) failed [ 32.563724][ T3592] FAT-fs (loop2): Directory bread(block 68) failed [ 32.563752][ T3592] FAT-fs (loop2): Directory bread(block 69) failed [ 32.563800][ T3592] FAT-fs (loop2): Directory bread(block 70) failed [ 32.563818][ T3592] FAT-fs (loop2): Directory bread(block 71) failed [ 32.563842][ T3592] FAT-fs (loop2): Directory bread(block 72) failed [ 32.563856][ T3592] FAT-fs (loop2): Directory bread(block 73) failed [ 32.571523][ T3592] syz.2.30: attempt to access beyond end of device [ 32.571523][ T3592] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 32.571560][ T3592] syz.2.30: attempt to access beyond end of device [ 32.571560][ T3592] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 32.643726][ T3598] FAULT_INJECTION: forcing a failure. [ 32.643726][ T3598] name failslab, interval 1, probability 0, space 0, times 0 [ 32.702645][ T3598] CPU: 0 UID: 0 PID: 3598 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.702670][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 32.702681][ T3598] Call Trace: [ 32.702688][ T3598] [ 32.702695][ T3598] __dump_stack+0x1d/0x30 [ 32.702713][ T3598] dump_stack_lvl+0xe8/0x140 [ 32.702729][ T3598] dump_stack+0x15/0x1b [ 32.702743][ T3598] should_fail_ex+0x265/0x280 [ 32.702763][ T3598] should_failslab+0x8c/0xb0 [ 32.702789][ T3598] kmem_cache_alloc_noprof+0x50/0x480 [ 32.702816][ T3598] ? mas_alloc_nodes+0x1a2/0x210 [ 32.702835][ T3598] mas_alloc_nodes+0x1a2/0x210 [ 32.702851][ T3598] mas_preallocate+0x2ca/0x510 [ 32.702873][ T3598] __split_vma+0x240/0x650 [ 32.702898][ T3598] ? mas_find+0x5d5/0x700 [ 32.702917][ T3598] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 32.702944][ T3598] do_vmi_align_munmap+0x1ac/0x3d0 [ 32.702970][ T3598] do_vmi_munmap+0x1db/0x220 [ 32.702988][ T3598] do_munmap+0x79/0xb0 [ 32.703009][ T3598] mremap_to+0x192/0x430 [ 32.703034][ T3598] ? check_prep_vma+0x49c/0x660 [ 32.703062][ T3598] __se_sys_mremap+0x981/0xb30 [ 32.703093][ T3598] ? ksys_write+0x192/0x1a0 [ 32.703115][ T3598] __x64_sys_mremap+0x67/0x80 [ 32.703142][ T3598] x64_sys_call+0x2a28/0x3000 [ 32.703160][ T3598] do_syscall_64+0xd2/0x200 [ 32.703176][ T3598] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 32.703197][ T3598] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 32.703226][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.703245][ T3598] RIP: 0033:0x7f3152a1f6c9 [ 32.703257][ T3598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.703272][ T3598] RSP: 002b:00007f315147f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 32.703291][ T3598] RAX: ffffffffffffffda RBX: 00007f3152c75fa0 RCX: 00007f3152a1f6c9 [ 32.703303][ T3598] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 32.703314][ T3598] RBP: 00007f315147f090 R08: 0000200000a00000 R09: 0000000000000000 [ 32.703326][ T3598] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 32.703336][ T3598] R13: 00007f3152c76038 R14: 00007f3152c75fa0 R15: 00007ffc2ff90018 [ 32.703350][ T3598] [ 33.002864][ T3615] netlink: 104 bytes leftover after parsing attributes in process `syz.4.37'. [ 33.029051][ T3619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 33.083889][ T3621] Illegal XDP return value 498752483 on prog (id 39) dev N/A, expect packet loss! [ 33.149752][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 33.159214][ T3630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.44'. [ 33.170638][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 33.181795][ T3630] xt_hashlimit: max too large, truncated to 1048576 [ 33.191830][ T3630] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 33.289827][ T3641] loop3: detected capacity change from 0 to 256 [ 33.301672][ T3641] FAT-fs (loop3): Directory bread(block 1285) failed [ 33.318600][ T3632] syz.1.45 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.371591][ T3641] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.378931][ T3641] vhci_hcd: invalid port number 96 [ 33.384029][ T3641] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 33.391864][ T3641] FAT-fs (loop3): Directory bread(block 1285) failed [ 33.399262][ T3641] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 33.420753][ T3641] FAT-fs (loop3): Directory bread(block 1285) failed [ 33.427524][ T3641] FAT-fs (loop3): Directory bread(block 1285) failed [ 33.434282][ T3641] FAT-fs (loop3): Directory bread(block 1285) failed [ 33.485863][ T3650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=3650 comm=syz.1.54 [ 33.490509][ T3649] loop2: detected capacity change from 0 to 128 [ 33.530210][ T3649] syz.2.52: attempt to access beyond end of device [ 33.530210][ T3649] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.543813][ T3653] loop3: detected capacity change from 0 to 512 [ 33.551573][ T3649] syz.2.52: attempt to access beyond end of device [ 33.551573][ T3649] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.556595][ T3655] loop1: detected capacity change from 0 to 1024 [ 33.565567][ T3649] syz.2.52: attempt to access beyond end of device [ 33.565567][ T3649] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 33.584928][ T3653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.593159][ T3655] EXT4-fs: Ignoring removed nobh option [ 33.603267][ T3649] syz.2.52: attempt to access beyond end of device [ 33.603267][ T3649] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 33.620166][ T3653] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 33.657950][ T3653] EXT4-fs (loop3): mount failed [ 33.663568][ T3649] syz.2.52: attempt to access beyond end of device [ 33.663568][ T3649] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 33.677722][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.701645][ T3656] syz.2.52: attempt to access beyond end of device [ 33.701645][ T3656] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 33.718487][ T3664] FAULT_INJECTION: forcing a failure. [ 33.718487][ T3664] name failslab, interval 1, probability 0, space 0, times 0 [ 33.725730][ T3649] syz.2.52: attempt to access beyond end of device [ 33.725730][ T3649] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 33.731190][ T3664] CPU: 1 UID: 0 PID: 3664 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.731216][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.731229][ T3664] Call Trace: [ 33.731236][ T3664] [ 33.731244][ T3664] __dump_stack+0x1d/0x30 [ 33.731265][ T3664] dump_stack_lvl+0xe8/0x140 [ 33.731359][ T3664] dump_stack+0x15/0x1b [ 33.731376][ T3664] should_fail_ex+0x265/0x280 [ 33.731395][ T3664] should_failslab+0x8c/0xb0 [ 33.731495][ T3664] kmem_cache_alloc_noprof+0x50/0x480 [ 33.731523][ T3664] ? alloc_empty_file+0x76/0x200 [ 33.731542][ T3664] alloc_empty_file+0x76/0x200 [ 33.731560][ T3664] path_openat+0x68/0x2170 [ 33.731582][ T3664] ? mntput+0x4b/0x80 [ 33.731652][ T3664] ? terminate_walk+0x27f/0x2a0 [ 33.731681][ T3664] ? path_openat+0x1bf8/0x2170 [ 33.731702][ T3664] ? _parse_integer_limit+0x170/0x190 [ 33.731809][ T3664] do_filp_open+0x109/0x230 [ 33.731841][ T3664] do_open_execat+0xd8/0x260 [ 33.731863][ T3664] alloc_bprm+0x25/0x350 [ 33.731919][ T3664] do_execveat_common+0x12e/0x750 [ 33.731999][ T3664] ? getname_flags+0x154/0x3b0 [ 33.732042][ T3664] __x64_sys_execveat+0x73/0x90 [ 33.732133][ T3664] x64_sys_call+0x1fec/0x3000 [ 33.732180][ T3664] do_syscall_64+0xd2/0x200 [ 33.732200][ T3664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.732228][ T3664] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.732291][ T3664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.732365][ T3664] RIP: 0033:0x7f3f087af6c9 [ 33.732380][ T3664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.732397][ T3664] RSP: 002b:00007f3f071f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 33.732415][ T3664] RAX: ffffffffffffffda RBX: 00007f3f08a06090 RCX: 00007f3f087af6c9 [ 33.732425][ T3664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 33.732436][ T3664] RBP: 00007f3f071f6090 R08: 0000000000001000 R09: 0000000000000000 [ 33.732448][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.732460][ T3664] R13: 00007f3f08a06128 R14: 00007f3f08a06090 R15: 00007ffccf0ca578 [ 33.732489][ T3664] [ 33.833889][ T3656] syz.2.52: attempt to access beyond end of device [ 33.833889][ T3656] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 34.003284][ T3655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3655 comm=syz.1.56 [ 34.017905][ T3678] netlink: 3 bytes leftover after parsing attributes in process `syz.0.61'. [ 34.065958][ T3678] 0ªX¹¦À: renamed from caif0 [ 34.073819][ T3678] 0ªX¹¦À: entered allmulticast mode [ 34.079207][ T3678] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 34.124582][ T3655] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 34.180748][ T3684] FAULT_INJECTION: forcing a failure. [ 34.180748][ T3684] name failslab, interval 1, probability 0, space 0, times 0 [ 34.193435][ T3684] CPU: 0 UID: 0 PID: 3684 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.193458][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.193469][ T3684] Call Trace: [ 34.193475][ T3684] [ 34.193482][ T3684] __dump_stack+0x1d/0x30 [ 34.193577][ T3684] dump_stack_lvl+0xe8/0x140 [ 34.193667][ T3684] dump_stack+0x15/0x1b [ 34.193682][ T3684] should_fail_ex+0x265/0x280 [ 34.193699][ T3684] should_failslab+0x8c/0xb0 [ 34.193723][ T3684] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 34.193756][ T3684] ? __alloc_skb+0x101/0x320 [ 34.193850][ T3684] __alloc_skb+0x101/0x320 [ 34.193877][ T3684] netlink_alloc_large_skb+0xbf/0xf0 [ 34.193910][ T3684] netlink_sendmsg+0x3cf/0x6b0 [ 34.193947][ T3684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.193963][ T3684] __sock_sendmsg+0x145/0x180 [ 34.194049][ T3684] ____sys_sendmsg+0x31e/0x4e0 [ 34.194079][ T3684] ___sys_sendmsg+0x17b/0x1d0 [ 34.194137][ T3684] __x64_sys_sendmsg+0xd4/0x160 [ 34.194157][ T3684] x64_sys_call+0x191e/0x3000 [ 34.194175][ T3684] do_syscall_64+0xd2/0x200 [ 34.194195][ T3684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.194249][ T3684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.194335][ T3684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.194354][ T3684] RIP: 0033:0x7f504219f6c9 [ 34.194366][ T3684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.194389][ T3684] RSP: 002b:00007f5040bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.194405][ T3684] RAX: ffffffffffffffda RBX: 00007f50423f5fa0 RCX: 00007f504219f6c9 [ 34.194416][ T3684] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 34.194426][ T3684] RBP: 00007f5040bff090 R08: 0000000000000000 R09: 0000000000000000 [ 34.194436][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.194446][ T3684] R13: 00007f50423f6038 R14: 00007f50423f5fa0 R15: 00007fff531e1b68 [ 34.194532][ T3684] [ 34.459071][ T3684] veth2: entered promiscuous mode [ 34.464154][ T3684] veth2: entered allmulticast mode [ 34.492992][ T3692] FAULT_INJECTION: forcing a failure. [ 34.492992][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 34.505663][ T3692] CPU: 0 UID: 0 PID: 3692 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.505744][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.505757][ T3692] Call Trace: [ 34.505763][ T3692] [ 34.505771][ T3692] __dump_stack+0x1d/0x30 [ 34.505794][ T3692] dump_stack_lvl+0xe8/0x140 [ 34.505845][ T3692] dump_stack+0x15/0x1b [ 34.505860][ T3692] should_fail_ex+0x265/0x280 [ 34.505876][ T3692] should_failslab+0x8c/0xb0 [ 34.505900][ T3692] __kmalloc_noprof+0xa5/0x570 [ 34.505932][ T3692] ? security_prepare_creds+0x52/0x120 [ 34.505964][ T3692] security_prepare_creds+0x52/0x120 [ 34.506031][ T3692] prepare_creds+0x34a/0x4c0 [ 34.506054][ T3692] selinux_lsm_setattr+0x1a4/0x660 [ 34.506091][ T3692] selinux_setprocattr+0x4f/0x70 [ 34.506124][ T3692] security_setprocattr+0x1a7/0x1d0 [ 34.506146][ T3692] proc_pid_attr_write+0x1eb/0x220 [ 34.506194][ T3692] vfs_writev+0x406/0x8b0 [ 34.506225][ T3692] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 34.506320][ T3692] ? mutex_lock+0xd/0x30 [ 34.506394][ T3692] do_writev+0xe7/0x210 [ 34.506503][ T3692] __x64_sys_writev+0x45/0x50 [ 34.506591][ T3692] x64_sys_call+0x1e9a/0x3000 [ 34.506615][ T3692] do_syscall_64+0xd2/0x200 [ 34.506635][ T3692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.506745][ T3692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.506775][ T3692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.506806][ T3692] RIP: 0033:0x7f3f087af6c9 [ 34.506819][ T3692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.506835][ T3692] RSP: 002b:00007f3f07217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 34.506961][ T3692] RAX: ffffffffffffffda RBX: 00007f3f08a05fa0 RCX: 00007f3f087af6c9 [ 34.507039][ T3692] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 34.507052][ T3692] RBP: 00007f3f07217090 R08: 0000000000000000 R09: 0000000000000000 [ 34.507064][ T3692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.507076][ T3692] R13: 00007f3f08a06038 R14: 00007f3f08a05fa0 R15: 00007ffccf0ca578 [ 34.507095][ T3692] [ 34.761671][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.804797][ T3697] loop0: detected capacity change from 0 to 2048 [ 34.865083][ T3697] Alternate GPT is invalid, using primary GPT. [ 34.871448][ T3697] loop0: p1 p2 p3 [ 34.871894][ T3712] FAULT_INJECTION: forcing a failure. [ 34.871894][ T3712] name failslab, interval 1, probability 0, space 0, times 0 [ 34.887891][ T3712] CPU: 0 UID: 0 PID: 3712 Comm: syz.4.72 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.887916][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.887926][ T3712] Call Trace: [ 34.887932][ T3712] [ 34.887939][ T3712] __dump_stack+0x1d/0x30 [ 34.887959][ T3712] dump_stack_lvl+0xe8/0x140 [ 34.888031][ T3712] dump_stack+0x15/0x1b [ 34.888127][ T3712] should_fail_ex+0x265/0x280 [ 34.888214][ T3712] should_failslab+0x8c/0xb0 [ 34.888240][ T3712] kmem_cache_alloc_noprof+0x50/0x480 [ 34.888270][ T3712] ? dst_alloc+0xbd/0x100 [ 34.888325][ T3712] dst_alloc+0xbd/0x100 [ 34.888350][ T3712] ? ip_route_input_rcu+0xd62/0x1cd0 [ 34.888379][ T3712] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 34.888464][ T3712] ip_route_output_flow+0x65/0x110 [ 34.888528][ T3712] udp_sendmsg+0x11b0/0x13c0 [ 34.888551][ T3712] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 34.888592][ T3712] udpv6_sendmsg+0x812/0x15b0 [ 34.888647][ T3712] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 34.888674][ T3712] inet6_sendmsg+0xac/0xd0 [ 34.888702][ T3712] __sock_sendmsg+0x8b/0x180 [ 34.888725][ T3712] ____sys_sendmsg+0x345/0x4e0 [ 34.888810][ T3712] ___sys_sendmsg+0x17b/0x1d0 [ 34.888882][ T3712] __sys_sendmmsg+0x178/0x300 [ 34.888909][ T3712] __x64_sys_sendmmsg+0x57/0x70 [ 34.888924][ T3712] x64_sys_call+0x1c4a/0x3000 [ 34.888945][ T3712] do_syscall_64+0xd2/0x200 [ 34.888965][ T3712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.889014][ T3712] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.889044][ T3712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.889063][ T3712] RIP: 0033:0x7f3152a1f6c9 [ 34.889155][ T3712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.889169][ T3712] RSP: 002b:00007f315147f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 34.889186][ T3712] RAX: ffffffffffffffda RBX: 00007f3152c75fa0 RCX: 00007f3152a1f6c9 [ 34.889196][ T3712] RDX: 0000000000000002 RSI: 0000200000005f40 RDI: 0000000000000004 [ 34.889207][ T3712] RBP: 00007f315147f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.889218][ T3712] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 34.889269][ T3712] R13: 00007f3152c76038 R14: 00007f3152c75fa0 R15: 00007ffc2ff90018 [ 34.889360][ T3712] [ 35.164843][ T3304] ================================================================== [ 35.165605][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 35.172954][ T3304] BUG: KCSAN: data-race in set_nlink / set_nlink [ 35.172983][ T3304] [ 35.191282][ T3304] write to 0xffff8881074cf388 of 4 bytes by task 3302 on cpu 0: [ 35.198899][ T3304] set_nlink+0x99/0xb0 [ 35.202967][ T3304] kernfs_iop_permission+0x1e2/0x220 [ 35.208246][ T3304] inode_permission+0x1ca/0x310 [ 35.213086][ T3304] link_path_walk+0x162/0x900 [ 35.217752][ T3304] path_openat+0x1de/0x2170 [ 35.222240][ T3304] do_filp_open+0x109/0x230 [ 35.226764][ T3304] do_sys_openat2+0xa6/0x110 [ 35.231338][ T3304] __x64_sys_openat+0xf2/0x120 [ 35.236087][ T3304] x64_sys_call+0x2eab/0x3000 [ 35.240747][ T3304] do_syscall_64+0xd2/0x200 [ 35.245252][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.251126][ T3304] [ 35.253447][ T3304] read to 0xffff8881074cf388 of 4 bytes by task 3304 on cpu 1: [ 35.260971][ T3304] set_nlink+0x29/0xb0 [ 35.265054][ T3304] kernfs_iop_permission+0x1e2/0x220 [ 35.270329][ T3304] inode_permission+0x1ca/0x310 [ 35.275170][ T3304] link_path_walk+0x162/0x900 [ 35.279835][ T3304] path_openat+0x1de/0x2170 [ 35.284320][ T3304] do_filp_open+0x109/0x230 [ 35.288808][ T3304] do_sys_openat2+0xa6/0x110 [ 35.293378][ T3304] __x64_sys_openat+0xf2/0x120 [ 35.298121][ T3304] x64_sys_call+0x2eab/0x3000 [ 35.302783][ T3304] do_syscall_64+0xd2/0x200 [ 35.307272][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.313147][ T3304] [ 35.315448][ T3304] value changed: 0x0000000b -> 0x00000008 [ 35.321143][ T3304] [ 35.323450][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 35.329581][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.338848][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.348882][ T3304] ================================================================== [ 35.376422][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 35.376963][ T3722] loop0: detected capacity change from 0 to 2048 [ 35.391713][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 35.403262][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 35.415399][ T3722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.434715][ T3719] team0 (unregistering): Port device team_slave_0 removed [ 35.454926][ T3719] team0 (unregistering): Port device team_slave_1 removed [ 35.463041][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.