last executing test programs: 2.556245931s ago: executing program 3 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 2.250629164s ago: executing program 1 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0xd72}, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x19}, 0x0, @in=@empty, 0xfffffffd}}, 0xe4) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x850003d1) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000000840), &(0x7f0000000880), 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) 2.020118334s ago: executing program 0 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x88c7, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x44}}, 0x0) 1.917394769s ago: executing program 1 (id=35): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 1.63951294s ago: executing program 2 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x4f1992808a9c2a8c, &(0x7f0000000180)=[{&(0x7f00000004c0)="5500000020007fafb72d13b284a2719302000000030b4b026cefc911d29c048df61e26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc133899cf000000000104004ae583de0dd7d8319f98af84fd", 0x55}], 0x1}, 0x0) r3 = fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.320838184s ago: executing program 3 (id=37): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r1, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) 1.202450659s ago: executing program 3 (id=40): r0 = io_uring_setup(0x65d3, &(0x7f00000001c0)={0x0, 0xa9e4, 0x80, 0x1, 0x388}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000980)={0x2, 0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/114, 0x72}, {0x0}], &(0x7f0000000940)=[0x4]}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x7, 0x0, 0xce35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40064}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") 1.099401693s ago: executing program 3 (id=42): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.098538964s ago: executing program 4 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 1.077213565s ago: executing program 4 (id=44): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x52, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 1.072113445s ago: executing program 3 (id=45): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.054851305s ago: executing program 4 (id=46): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 910.885522ms ago: executing program 0 (id=47): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) getpid() setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 825.083545ms ago: executing program 0 (id=48): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1fbb, &(0x7f0000000280)={0x0, 0x8f2b, 0x8, 0x0, 0x308}) syz_io_uring_setup(0x49c, &(0x7f0000000200)={0x0, 0x79af, 0x400, 0x4, 0x40024a}, &(0x7f0000000340), &(0x7f0000000040)) 805.019926ms ago: executing program 0 (id=49): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000180), &(0x7f0000000740)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 788.072167ms ago: executing program 2 (id=50): poll(0x0, 0x0, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x3, 0x85, 0x7, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'user.', '($(#{@$\x00'}, &(0x7f0000000300)=""/145, 0x91) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48084) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 688.908651ms ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1b, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xfff3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x8], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0xe30f, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}}, 0x0) 630.476493ms ago: executing program 2 (id=52): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 598.219095ms ago: executing program 0 (id=53): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000080000000e00000000000083ee9973b019e18d222b45211266da49b066", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc", 0xf) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) gettid() timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 479.44931ms ago: executing program 2 (id=54): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x4, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8011}, 0x800) sendmmsg(r1, 0x0, 0x0, 0x200000c1) syz_genetlink_get_family_id$tipc(&(0x7f000000d780), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8884) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000db40)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f000000dc40)) socket$inet_udplite(0x2, 0x2, 0x88) getsockname(0xffffffffffffffff, 0x0, &(0x7f000000df40)) 406.216813ms ago: executing program 1 (id=55): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x6, 0x5a1, 0x408, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setrlimit(0x9, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000bf6f5b29ebe9c5d98200020000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}}, 0x0) 389.695024ms ago: executing program 2 (id=56): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ea, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x12, 0xb29}, 0x120, 0x10002, 0x33f8, 0x1, 0x101, 0xd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ee0000/0x3000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 327.044266ms ago: executing program 2 (id=57): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 326.396856ms ago: executing program 1 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 274.749729ms ago: executing program 1 (id=59): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x13d4, &(0x7f0000000940)={0x0, 0x7718, 0x800, 0x8002, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00'}) io_uring_enter(r3, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 141.282164ms ago: executing program 3 (id=60): setsockopt(0xffffffffffffffff, 0x2082, 0x7d, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000410, &(0x7f0000000b40), 0x4, 0x4ef, &(0x7f00000015c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 140.706934ms ago: executing program 4 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) socket(0x11, 0x2, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 97.612866ms ago: executing program 4 (id=62): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 81.523687ms ago: executing program 4 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mount$nfs(0x0, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000200), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="524fdc746d59e85296a96ceb09541c8fbff3834c62f900"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) io_uring_setup(0x73d6, &(0x7f0000000000)={0x0, 0x194b8, 0x1, 0x2, 0x28a}) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 0s ago: executing program 1 (id=64): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 24.854141][ T29] audit: type=1400 audit(1764526972.827:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.877087][ T29] audit: type=1400 audit(1764526972.847:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.877792][ T3302] cgroup: Unknown subsys name 'net' [ 24.904685][ T29] audit: type=1400 audit(1764526972.877:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.039481][ T3302] cgroup: Unknown subsys name 'cpuset' [ 25.045565][ T3302] cgroup: Unknown subsys name 'rlimit' [ 25.234404][ T29] audit: type=1400 audit(1764526973.207:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.257630][ T29] audit: type=1400 audit(1764526973.207:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.278124][ T29] audit: type=1400 audit(1764526973.207:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.298452][ T29] audit: type=1400 audit(1764526973.207:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.318723][ T29] audit: type=1400 audit(1764526973.217:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.325637][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.343571][ T29] audit: type=1400 audit(1764526973.217:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.375757][ T29] audit: type=1400 audit(1764526973.327:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.409157][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.186007][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.220840][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.311047][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.318094][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.329120][ T3314] bridge_slave_0: entered allmulticast mode [ 27.335527][ T3314] bridge_slave_0: entered promiscuous mode [ 27.344241][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.351339][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.358432][ T3314] bridge_slave_1: entered allmulticast mode [ 27.364783][ T3314] bridge_slave_1: entered promiscuous mode [ 27.375210][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.382251][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.389365][ T3319] bridge_slave_0: entered allmulticast mode [ 27.395759][ T3319] bridge_slave_0: entered promiscuous mode [ 27.402427][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.409463][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.416593][ T3319] bridge_slave_1: entered allmulticast mode [ 27.422960][ T3319] bridge_slave_1: entered promiscuous mode [ 27.431158][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.449753][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.463825][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.476004][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.494090][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.510449][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.524675][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.570773][ T3319] team0: Port device team_slave_0 added [ 27.587554][ T3314] team0: Port device team_slave_0 added [ 27.593763][ T3319] team0: Port device team_slave_1 added [ 27.610598][ T3314] team0: Port device team_slave_1 added [ 27.622187][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.629266][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.636384][ T3316] bridge_slave_0: entered allmulticast mode [ 27.642766][ T3316] bridge_slave_0: entered promiscuous mode [ 27.649194][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.656295][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.663468][ T3316] bridge_slave_1: entered allmulticast mode [ 27.669734][ T3316] bridge_slave_1: entered promiscuous mode [ 27.675926][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.683098][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690318][ T3320] bridge_slave_0: entered allmulticast mode [ 27.696598][ T3320] bridge_slave_0: entered promiscuous mode [ 27.720510][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.727639][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.734778][ T3320] bridge_slave_1: entered allmulticast mode [ 27.741362][ T3320] bridge_slave_1: entered promiscuous mode [ 27.752209][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.759223][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.785136][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.809613][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.816606][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.842599][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.854025][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.861031][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.886894][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.897697][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.904859][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.912125][ T3312] bridge_slave_0: entered allmulticast mode [ 27.918379][ T3312] bridge_slave_0: entered promiscuous mode [ 27.925699][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.939661][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.946608][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.972562][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.987359][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.994414][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.001592][ T3312] bridge_slave_1: entered allmulticast mode [ 28.007847][ T3312] bridge_slave_1: entered promiscuous mode [ 28.014928][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.029220][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.040193][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.064337][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.074715][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.106312][ T3320] team0: Port device team_slave_0 added [ 28.112730][ T3316] team0: Port device team_slave_0 added [ 28.131174][ T3320] team0: Port device team_slave_1 added [ 28.137414][ T3316] team0: Port device team_slave_1 added [ 28.144954][ T3314] hsr_slave_0: entered promiscuous mode [ 28.150915][ T3314] hsr_slave_1: entered promiscuous mode [ 28.157500][ T3312] team0: Port device team_slave_0 added [ 28.169284][ T3319] hsr_slave_0: entered promiscuous mode [ 28.175327][ T3319] hsr_slave_1: entered promiscuous mode [ 28.181140][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.186840][ T3319] Cannot create hsr debugfs directory [ 28.207261][ T3312] team0: Port device team_slave_1 added [ 28.222300][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.229271][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.255172][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.273892][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.280885][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.306773][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.322740][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.329737][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.355696][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.366604][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.373559][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.399426][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.410283][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.417243][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.443245][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.466223][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.473235][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.499145][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.555378][ T3320] hsr_slave_0: entered promiscuous mode [ 28.561367][ T3320] hsr_slave_1: entered promiscuous mode [ 28.567054][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.572807][ T3320] Cannot create hsr debugfs directory [ 28.579989][ T3316] hsr_slave_0: entered promiscuous mode [ 28.585850][ T3316] hsr_slave_1: entered promiscuous mode [ 28.591728][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.597435][ T3316] Cannot create hsr debugfs directory [ 28.629470][ T3312] hsr_slave_0: entered promiscuous mode [ 28.635416][ T3312] hsr_slave_1: entered promiscuous mode [ 28.641361][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.647095][ T3312] Cannot create hsr debugfs directory [ 28.763851][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.774283][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.785563][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.803011][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.833270][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.847393][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.855629][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.863990][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.883536][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.893547][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.908093][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.923379][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.960749][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.969768][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.978443][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.994152][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.011017][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.020587][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.029139][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.041480][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.054435][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.072887][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.084190][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.100146][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.107183][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.125471][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.135830][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.150232][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.157280][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.180636][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.195327][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.210504][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.217598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.233773][ T2783] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.240839][ T2783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.253631][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.275062][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.282102][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.290830][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.297902][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.317054][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.339398][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.348481][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.357987][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.368379][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.380583][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.395709][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.406243][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.424296][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.432963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.440022][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.455785][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.462841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.487636][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.494769][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.522293][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.536455][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.546845][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.563197][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.570265][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.607932][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.673899][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.695084][ T3319] veth0_vlan: entered promiscuous mode [ 29.712633][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.733065][ T3319] veth1_vlan: entered promiscuous mode [ 29.745006][ T3314] veth0_vlan: entered promiscuous mode [ 29.759615][ T3314] veth1_vlan: entered promiscuous mode [ 29.783475][ T3314] veth0_macvtap: entered promiscuous mode [ 29.792131][ T3320] veth0_vlan: entered promiscuous mode [ 29.805710][ T3319] veth0_macvtap: entered promiscuous mode [ 29.813875][ T3319] veth1_macvtap: entered promiscuous mode [ 29.822706][ T3320] veth1_vlan: entered promiscuous mode [ 29.834017][ T3314] veth1_macvtap: entered promiscuous mode [ 29.852321][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.860097][ T3320] veth0_macvtap: entered promiscuous mode [ 29.871477][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.885647][ T3312] veth0_vlan: entered promiscuous mode [ 29.892849][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.903068][ T3456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.913548][ T3312] veth1_vlan: entered promiscuous mode [ 29.922718][ T3320] veth1_macvtap: entered promiscuous mode [ 29.930532][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.939440][ T3456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.948137][ T3456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.965133][ T3316] veth0_vlan: entered promiscuous mode [ 29.974009][ T3456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.983918][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.996023][ T3316] veth1_vlan: entered promiscuous mode [ 30.007373][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.015160][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.023926][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.036812][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.036862][ T29] audit: type=1400 audit(1764526978.007:81): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.Lf2OPc/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.042510][ T3312] veth0_macvtap: entered promiscuous mode [ 30.058887][ T29] audit: type=1400 audit(1764526978.017:82): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.094561][ T29] audit: type=1400 audit(1764526978.017:83): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.Lf2OPc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.119706][ T29] audit: type=1400 audit(1764526978.017:84): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.141416][ T29] audit: type=1400 audit(1764526978.017:85): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.Lf2OPc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.168002][ T29] audit: type=1400 audit(1764526978.017:86): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.Lf2OPc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.195295][ T29] audit: type=1400 audit(1764526978.017:87): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.216111][ T29] audit: type=1400 audit(1764526978.187:88): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.238837][ T29] audit: type=1400 audit(1764526978.187:89): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.262987][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.263208][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.291350][ T29] audit: type=1400 audit(1764526978.267:90): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.300470][ T3312] veth1_macvtap: entered promiscuous mode [ 30.347037][ T381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355986][ T3316] veth0_macvtap: entered promiscuous mode [ 30.378109][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.387493][ T3456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.402833][ T3316] veth1_macvtap: entered promiscuous mode [ 30.412828][ T3456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.423174][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.448249][ T3456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.461348][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.488721][ T3456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500524][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.524738][ T3456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.533647][ T3491] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 30.543065][ T3491] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 30.562961][ T3456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.573595][ T3494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7'. [ 30.576136][ T3456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.626416][ T3456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661294][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.689105][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.708001][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.717571][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.790217][ T3513] netlink: 'syz.1.10': attribute type 39 has an invalid length. [ 31.095075][ T3520] loop4: detected capacity change from 0 to 32768 [ 31.170279][ T3524] loop2: detected capacity change from 0 to 512 [ 31.183534][ T3520] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 31.190909][ T3520] loop4: p1 start 460800 is beyond EOD, truncated [ 31.197388][ T3520] loop4: p2 size 83886080 extends beyond EOD, truncated [ 31.219438][ T3520] loop4: p5 start 460800 is beyond EOD, truncated [ 31.225975][ T3520] loop4: p6 size 83886080 extends beyond EOD, truncated [ 31.491150][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.533563][ T3524] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.551249][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 31.563393][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 31.575089][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 31.586917][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 31.640534][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.674479][ T3524] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 31.684579][ T3537] netlink: 'syz.4.17': attribute type 39 has an invalid length. [ 31.701669][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.747421][ T3524] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 31.765459][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.780886][ T3524] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 31.808918][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.849534][ T3524] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 31.866222][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.885884][ T3524] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 31.897127][ T3524] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.13: corrupted xattr block 6: invalid header [ 31.925768][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.949623][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 31.970104][ T3544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3544 comm=syz.3.21 [ 31.988837][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 32.380079][ C1] hrtimer: interrupt took 49364 ns [ 32.470601][ T3592] nft_compat: unsupported protocol 0 [ 32.517347][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 32.527658][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 32.540649][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.566279][ T3597] bridge_slave_1 (unregistering): left allmulticast mode [ 32.573354][ T3597] bridge_slave_1 (unregistering): left promiscuous mode [ 32.580395][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.609832][ T3599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.886043][ T3602] netlink: 57 bytes leftover after parsing attributes in process `syz.2.36'. [ 33.329029][ T3612] loop3: detected capacity change from 0 to 512 [ 33.342846][ T3612] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.371386][ T3612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.385236][ T3612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.506301][ T3628] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 33.513976][ T3628] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 33.521526][ T3628] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.45'. [ 33.795116][ T3638] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 33.851497][ T3599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.907204][ T3599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.937174][ T3644] loop0: detected capacity change from 0 to 512 [ 33.954359][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.967002][ T3644] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.997100][ T3599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.052083][ T3649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.064820][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.079163][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.087457][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.095893][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.217704][ T3657] serio: Serial port ptm0 [ 34.398934][ T3667] loop3: detected capacity change from 0 to 512 [ 34.442129][ T3671] nfs: Unknown parameter 'ROÜtmYčR–Šlë TŋķƒLbų' [ 34.446363][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.461400][ T3667] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.527189][ T3647] ================================================================== [ 34.535288][ T3647] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 34.543275][ T3647] [ 34.545589][ T3647] write to 0xffff888119c29c9c of 4 bytes by task 3644 on cpu 1: [ 34.553200][ T3647] xas_set_mark+0x12b/0x140 [ 34.557777][ T3647] __folio_start_writeback+0x155/0x390 [ 34.563224][ T3647] ext4_bio_write_folio+0x5ad/0x9f0 [ 34.568412][ T3647] mpage_process_page_bufs+0x4a1/0x620 [ 34.573859][ T3647] mpage_prepare_extent_to_map+0x786/0xc00 [ 34.579651][ T3647] ext4_do_writepages+0xa05/0x2750 [ 34.584743][ T3647] ext4_writepages+0x176/0x300 [ 34.589496][ T3647] do_writepages+0x1c6/0x310 [ 34.594071][ T3647] file_write_and_wait_range+0x156/0x2c0 [ 34.599691][ T3647] generic_buffers_fsync_noflush+0x45/0x120 [ 34.605574][ T3647] ext4_sync_file+0x1ab/0x690 [ 34.610233][ T3647] vfs_fsync_range+0x10d/0x130 [ 34.614981][ T3647] ext4_buffered_write_iter+0x34f/0x3c0 [ 34.620509][ T3647] ext4_file_write_iter+0x387/0xf60 [ 34.625688][ T3647] iter_file_splice_write+0x666/0xa60 [ 34.631052][ T3647] direct_splice_actor+0x156/0x2a0 [ 34.636146][ T3647] splice_direct_to_actor+0x312/0x680 [ 34.641502][ T3647] do_splice_direct+0xda/0x150 [ 34.646254][ T3647] do_sendfile+0x380/0x650 [ 34.650659][ T3647] __x64_sys_sendfile64+0x105/0x150 [ 34.655849][ T3647] x64_sys_call+0x2bb4/0x3000 [ 34.660511][ T3647] do_syscall_64+0xd2/0x200 [ 34.664999][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.670878][ T3647] [ 34.673182][ T3647] read to 0xffff888119c29c9c of 4 bytes by task 3647 on cpu 0: [ 34.680702][ T3647] file_write_and_wait_range+0x10e/0x2c0 [ 34.686325][ T3647] generic_buffers_fsync_noflush+0x45/0x120 [ 34.692203][ T3647] ext4_sync_file+0x1ab/0x690 [ 34.696862][ T3647] vfs_fsync_range+0x10d/0x130 [ 34.701614][ T3647] ext4_buffered_write_iter+0x34f/0x3c0 [ 34.707140][ T3647] ext4_file_write_iter+0x387/0xf60 [ 34.712321][ T3647] iter_file_splice_write+0x666/0xa60 [ 34.717678][ T3647] direct_splice_actor+0x156/0x2a0 [ 34.722771][ T3647] splice_direct_to_actor+0x312/0x680 [ 34.728131][ T3647] do_splice_direct+0xda/0x150 [ 34.732881][ T3647] do_sendfile+0x380/0x650 [ 34.737287][ T3647] __x64_sys_sendfile64+0x105/0x150 [ 34.742475][ T3647] x64_sys_call+0x2bb4/0x3000 [ 34.747137][ T3647] do_syscall_64+0xd2/0x200 [ 34.751624][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.757501][ T3647] [ 34.759805][ T3647] value changed: 0x0a000021 -> 0x04000021 [ 34.765506][ T3647] [ 34.767808][ T3647] Reported by Kernel Concurrency Sanitizer on: [ 34.773949][ T3647] CPU: 0 UID: 0 PID: 3647 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.783479][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.793517][ T3647] ================================================================== [ 34.977494][ T3647] syz.0.53 (3647) used greatest stack depth: 9736 bytes left [ 35.012026][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.163120][ T3667] Set syz1 is full, maxelem 65536 reached [ 35.195463][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.