last executing test programs: 4.99306626s ago: executing program 3 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x3, 0x11, r0, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x100) mmap(&(0x7f0000439000/0x4000)=nil, 0x4000, 0x0, 0x852, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53b, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000480000000000069078ac141400ac1e00010703f444140a", @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\x00'], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x41, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401000000000000fa67000900020073797a3100000000080041007278650014"], 0x38}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) poll(0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x20000000003fd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) semget$private(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0x0, 0x0, 0x2, 0x1}, 0x48) 4.656581348s ago: executing program 3 (id=9): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000403000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r0, 0x3ea99000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000400)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000080800054000000021100011800a0001006d61746368000000140000001000010000000000000000000084000aa6c79f77241eae4d4e57949d94ebf28be17f92238ade94aba2d2c4839102f01ddb431e20bf1a226a0e27c2a604400100f6083eed74557a1e5ff5d8bb74cb2dcaa4c067090ef89088b346ea"], 0x94}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r3}, &(0x7f00000003c0)) timer_settime(0x0, 0x5, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000680)=0xe8) setresuid(r4, r5, 0xee00) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1) r7 = signalfd4(r6, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) openat(r7, &(0x7f00000006c0)='./file0\x00', 0x68cc1d473e3616d6, 0xf9cb2a212d51e35e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000001f00)={'syztnl0\x00', &(0x7f0000001e40)={'tunl0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @empty}}}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) 3.720590915s ago: executing program 3 (id=15): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000355090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.648872301s ago: executing program 3 (id=17): io_uring_setup(0x7fdb, &(0x7f0000000080)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) 3.64807805s ago: executing program 3 (id=18): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private=0x29}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) 3.589089146s ago: executing program 3 (id=20): socket$inet6_tcp(0xa, 0x1, 0x0) rename(0x0, &(0x7f0000000840)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080)=0x1ff, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x0, 0xffffffffffffffff}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000520c0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x5, "737b383178b698"}) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xc080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)) r10 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x2, 0xfffff001) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(r4, &(0x7f0000000340)=@abs, &(0x7f0000000140)=0x6e, 0x80800) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.239605514s ago: executing program 4 (id=26): r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x81) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000098000000980000000a00000000000000000000090400000001000000010000060400000001000000010000000400000009000005010000001000000002000000060000001000000000000000700000000700000002000000ad0c00000f00000001000000060000000300000002000000ff0000000300000002000000ff0000000c00000001000000010000000a000000038000000700000002000000010000000100008000612e"], 0x0, 0xba, 0x0, 0x1, 0x2}, 0x20) 3.056744009s ago: executing program 4 (id=30): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='mm_page_free_batched\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x0, 0x6, {0x6, 0x6c, 0x43, 0x8, 0x0, 0x348e, 0x0, @in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_sec_ctx={0xc, 0x18, 0x9, 0xff, 0x56, "95e46b86459fe95b6c0805e284b6f352b7c93bb8ceb87f131092ab5025b39d328db02eb5d3fdd8e6c79b16f8ee522ffdd1e7b2f4fc24b5a29593bfda3a1909990cf031ec185a3cd7da84e38bc6d87f5dc00fda760a83"}]}, 0xb0}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203f4ff0a0000000000000000000000030006000000000002000000e0000009000000000000000002000100000000fd0000000007000000000300050000000000020000007f0000010000000000000000"], 0x50}}, 0x20040840) r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) openat(r8, &(0x7f0000000300)='./file0\x00', 0x105841, 0x8) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000000680), 0x0, 0x5) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000000140)={0x2, 0x1, 0x10}) 3.024761292s ago: executing program 4 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa) acct(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x16ca, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5d, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.80352546s ago: executing program 1 (id=36): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000020600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1e00010c0001800800014000000000050014000100000005000500020000000500010006"], 0x6c}}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r4) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f"], 0x7c8) stat(0x0, &(0x7f0000000580)) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d4d77b296432d4bc686bc962768914dabba88a0e0c9f116332d51e280b5d05cfe06809f1ea26ee83655c7877db2dfa8cef8e044b7c4f85a5dc420795a5a4b45d240a4915401de7da160c6a86748994b67e259df5c241817a8fef4186a10dd087fcd599fc3a4e9845abb1809726fcc74d0fda55c0379cb54241b7a2871dde2ff262dc79519349b230ad713d6d49516fad22687f2b0a62d61be4c9541c8c902b5", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r6]) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x2b}, 0x20) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 2.80298901s ago: executing program 4 (id=37): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x165}], 0x1}}], 0x1, 0x11) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 2.785016492s ago: executing program 4 (id=38): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x25}, @sack_perm={0x4, 0x2}, @generic={0x0, 0x12, "dbec59ab1a01e7c86a31fcbefaf1aafe"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @mptcp=@ack={0x1e, 0x7, 0x0, 0x4, "5882a0"}]}}}}}}}}, 0x0) 2.751692954s ago: executing program 1 (id=40): io_uring_setup(0x7fdb, &(0x7f0000000080)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) 2.751106574s ago: executing program 1 (id=41): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3c9vG1kdAPDvOHZp2nSTBQ6wEsvCLkorqJ1s2N2Iw7JICE6VgHIvIXGiKE4cxU7bRBWk4g9AQgiQOMGFCxJ/ABKqxIUjQqoEZxAgEIIWDhygs7I9SdN0nLitG6fx5yON582bH9/3HM9k3szTTABD67WIeC8iHqRpeikixrP8QjbETmdoLXf/3q351pBEml79ZxJJlre7rSQbn89WOxsRX/tyxDeTx+M2trZX5mq16kY2XWmurlcaW9uXl1fnlqpL1bWZmem3Z9+ZfWt2qi/1vBAR737xrz/47s++9O6vPnPjT9f+fvFbrWKNZfP31+MJFQ+b2al6qf1d7F9h4ymDnUTFdg0zo3lLjDyWc/s5lwkAgHytc/wPRsQnI+JSjMfI4aezAAAAwAso/fxY/C+JSPOd6ZIPAAAAvEAK7T6wSaGc9QUYi0KhXO704f1wnCvU6o3mpxfrm2sLnb6yE1EqLC7XqlNZX+GJKCWt6el2+uH0mwemZyLi5Yj4/vhoe7o8X68tDPriBwAAAAyJ8wfa//8Z77T/AQAAgFNmYtAFAAAAAJ477X8AAAA4/bT/AQAA4FT7ypUrrSHdff/1wvWtzZX69csL1cZKeXVzvjxf31gvL9XrS+1n9q0etb1avb7+2VjbvFlpVhvNSmNr+9pqfXOteW35kVdgAwAAAMfo5Y/f+UMSETufG20PLWd6W7XHxYCTqriXSrJxzm79x5c6478cU6GAYzEy6AIAA1McdAGAgSkNugDAwCVHzO/aeee32fgT/S0PAADQf5Mf7X7/v3DomjuHzwZOPDsxDC/3/2F4te//99qT18kCnColZwAw9J75/v+R0vSJCgQAAPTdWHtICuXs8t5YFArlcsSF9msBSsnicq06FREvRcTvx0sfaE1Pt9dMjmwzAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAJxqEYW/Jb/uPMt/cvyNsYPXB84k/x2P7BWhN3589Yc355rNjelW/r/28ps/yvLfHMQVDAAAABgKT/QC/912+m47HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66f69W/O7w3HG/ccXImIiL34xzrbHZ6MUEef+nURx33pJRIz0If5o6+MjefGTVrH2QubFH+1D/J3bh8aPiexbyIt/vg/xYZjdaR1/3svb/wrxWnucv/8VIx6Zflrdj3+xd/wb6bL/X+gxxit3f1HpGv92xCvF/OPPbvykS/zXe4z/ja9vb3ebl/4kYjL3/0/ySKxKc3W90tjavry8OrdUXaquzcxMvz37zuxbs1OVxeVaNfvMjfG9j/3ywWH1P9cl/sQR9X+jx/r//+7Nex/qJEt58S++nhP/Nz/NlsiP3/pNfKr9K+2UZXI3vdNJ7/fqz3/36mH1X+hS/6P+/hd7rP+lr37nzz0uCgAcg8bW9spcrVbdOLWJViv9BBRD4gQmvt3XDaZpmrb2qWfYThIn4WtpJwZ9ZAIAAPrt4Un/oEsCAAAAAAAAAAAAAAAAAAAAw+s4Hid2MObOXirpxyO0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD64v0AAAD//9Ut2VM=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, 0x0, 0x2a) socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x174}, 0x90) 2.648674093s ago: executing program 4 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3f0, 0x80000000, 0x2, 0x40, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f00000002c0), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.452821339s ago: executing program 1 (id=45): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/171, 0xab}, {0x0}], 0x3, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x1000000, @broadcast}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000fff000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000f4c14338909f75ffff000000000000000000000000e0000000000000000000000000000000000000000400"/102], 0xb8}}, 0x20000000) 2.264886854s ago: executing program 1 (id=49): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000140)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000940)=@IORING_OP_UNLINKAT={0x24, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0}) pselect6(0x40, &(0x7f0000001680)={0x9, 0x40000000400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.221735927s ago: executing program 1 (id=51): r0 = socket$kcm(0x2, 0x0, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x118, 0x118, 0x1b0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000080)={0x70, r5, 0x3d53d6d1ed9228ab, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x3}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x18, {0x0, "bd5be707aa11", @long="b3e81f2f2062147202d889869cab90e3"}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}}, 0x1090) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x2f, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=@framed={{}, [@generic={0x62}]}, &(0x7f0000000180)='GPL\x00', 0x8}, 0x90) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() fsmount(0xffffffffffffffff, 0x1, 0x49) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0xcc, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xfc9c}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcd, 0xffffff00}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0xcc}, 0x1, 0xba01}, 0x0) 1.59133574s ago: executing program 2 (id=59): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = creat(&(0x7f0000000400)='./file1\x00', 0x80) close(r6) epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000002060b000a0000000000000000000000020000006269746d61703a706f72740005000400000000000900020073794c4e0c940000050005000000000005000100060000000c0007800600040000000000a3abf54aec7ebb"], 0x54}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000a00)="cd", 0x1}, {&(0x7f0000000300)="5ea61fab740a227ae3b9b6af015c62dbc6f2b2b08f7b7780d9f0a5f84acf46d9eff322ca314cf4a2c7145ac63b5b7c22", 0x30}], 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) 1.521076295s ago: executing program 2 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) sched_setscheduler(r0, 0x2, &(0x7f0000000340)) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000380)={'ip6gre0\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) r4 = socket$inet(0x2, 0xa, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440), 0x0, 0xffffffffffffff4c, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000000)=0x200, 0x4) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000100001040000000000000000000000002ea6d25a5a7be4d6762f4070a84666ffee45d6f9ab14f5861458349085a46c80612dbf88c4264de244157b11462ec4d84ae417b36bf395b86422f3b4658c0bab53a0cd8ad3f08505713ace98fc1122817d14b3a9f2c196e2f95f9a281653d7e52f5a0eca957e9e2b53fbf75942b254d93da10bc8db5681ed27442cb25b46858027790089e4630e13693f4728c2fa1584dc05b78cc3b72289c624e99540da65c795921798ec8773db5e15aaef401a34ea0508f542137027610107aac05fcbe7109556101c3d", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d008b0000000500010004"], 0x4c}}, 0xad249be1739c74aa) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x1000, 0x1}, {0xa5, 0x3}]}) ioctl$TIOCGPTPEER(r7, 0x5441, 0x8) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000000c0)={0x40000319, &(0x7f0000000080)=[{}, {}, {}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf2, 0x1, 0x2, 0xfc, 0x0, 0x0, 0xa0804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x3) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0) 527.193367ms ago: executing program 2 (id=65): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x2004000) 507.950008ms ago: executing program 2 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x1b}}, {@noblock_validity}]}, 0x1, 0x633, &(0x7f0000000bc0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@delalloc}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 397.506347ms ago: executing program 2 (id=67): syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa4005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) ioperm(0x0, 0x7fff, 0x15f9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x0, 0xffffffffffffffff}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)) r2 = semget$private(0x0, 0x1, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semtimedop(r2, &(0x7f0000000040)=[{0x1, 0x1, 0x1000}], 0x1, 0x0) unshare(0x800) r3 = semget(0x1, 0x4, 0x412) semtimedop(r3, &(0x7f00000002c0)=[{0x3, 0x2, 0x1000}, {0x3, 0x4, 0x1000}, {0x1, 0x0, 0x800}, {0x4, 0xf, 0x1000}, {0x4, 0x5, 0x800}, {0x0, 0x4001, 0x1000}, {0x3, 0x3, 0x800}, {0x2, 0x3, 0x1000}], 0x8, &(0x7f0000000140)={0x0, 0x3938700}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0x2, 0x100, 0x0, 0x1000]) semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x2, 0x3, 0x3000}, {0x0, 0x101, 0x1800}, {0x3, 0x1, 0x800}], 0x3) semctl$IPC_RMID(r2, 0x0, 0x0) r4 = semget(0x1, 0x1, 0x42) geteuid() unshare(0x20000200) r5 = socket(0x10, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = dup(r1) write$binfmt_elf32(r6, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) r8 = getegid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000300)={{0x1, r7, r8, r7, r8, 0x30, 0x8001}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) 318.392724ms ago: executing program 2 (id=68): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/198, 0xc6) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000100000000000001b11eb95"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='io_uring_cqring_wait\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x72c2, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0x45d0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) 143.604128ms ago: executing program 0 (id=69): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x165}], 0x1}}], 0x1, 0x11) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000ffffff800000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 134.692909ms ago: executing program 0 (id=70): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) sendmsg$inet(r0, 0x0, 0x24000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001480)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000014c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x0, 0x7, 0x3, 0x200, 0xa8, 0x20200c0, r2}) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000400001008000700ac1414aa08000800e000000106000b00020000000800020005"], 0x34}}, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'wg1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000ec0)={0x5c, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}}, 0x0) listen(r6, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000780600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001321"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000040)=0x102, 0x4) 75.471244ms ago: executing program 0 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x161002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020301021f9387c7d7a50000000000000000000000100892010001c52d491c58bc9384c63f94780be4994ae01846c8a1aec1d1c6c58ec2d0454aaa9ddf589c9b5fea9de93acb21637828fed7d2315714185c6a3dff4b6813ceb1f90a83feb2c6e8"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x90) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0xf8, 0x400, 0x32, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8000, 0x7, 0x7, 0x9}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r7, @ANYBLOB="020025bdba7d8d0d3f2071c3c727988929ce36327000befa6e5809ca8ae921a90197587d810d78f9b40b4bdec6d0bf25195c6e749bb1d6de8c42a45012149872c64875fb34270a24185f9eed3adc", @ANYRES32=r8, @ANYRESOCT=r4, @ANYRES8=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006970365f76", @ANYBLOB, @ANYRES64=r2, @ANYBLOB="316c7f9cd6e061", @ANYRESDEC=r0, @ANYRES32=r3, @ANYRES16, @ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x40890) 4.8188ms ago: executing program 0 (id=72): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x911}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac010000100033060000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x1ac}}, 0x0) 4.576749ms ago: executing program 0 (id=73): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) dup3(r1, r0, 0x0) 0s ago: executing program 0 (id=74): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x16ca, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5d, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 18.496197][ T29] audit: type=1400 audit(1723925914.119:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. [ 21.457345][ T29] audit: type=1400 audit(1723925917.069:82): avc: denied { mounton } for pid=3246 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.457896][ T3246] cgroup: Unknown subsys name 'net' [ 21.480067][ T29] audit: type=1400 audit(1723925917.069:83): avc: denied { mount } for pid=3246 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.507749][ T29] audit: type=1400 audit(1723925917.129:84): avc: denied { unmount } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.655434][ T3246] cgroup: Unknown subsys name 'rlimit' [ 21.777702][ T29] audit: type=1400 audit(1723925917.389:85): avc: denied { setattr } for pid=3246 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.801043][ T29] audit: type=1400 audit(1723925917.389:86): avc: denied { create } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.807636][ T3250] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.821444][ T29] audit: type=1400 audit(1723925917.389:87): avc: denied { write } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.841402][ T3246] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.850278][ T29] audit: type=1400 audit(1723925917.389:88): avc: denied { read } for pid=3246 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.879240][ T29] audit: type=1400 audit(1723925917.389:89): avc: denied { mounton } for pid=3246 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.904065][ T29] audit: type=1400 audit(1723925917.389:90): avc: denied { mount } for pid=3246 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.927357][ T29] audit: type=1400 audit(1723925917.449:91): avc: denied { relabelto } for pid=3250 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.430551][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 23.513704][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 23.536319][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.543381][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.550571][ T3259] bridge_slave_0: entered allmulticast mode [ 23.557018][ T3259] bridge_slave_0: entered promiscuous mode [ 23.565751][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 23.587124][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.594205][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.601433][ T3259] bridge_slave_1: entered allmulticast mode [ 23.607885][ T3259] bridge_slave_1: entered promiscuous mode [ 23.622301][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 23.660370][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.687284][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.694338][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.701551][ T3258] bridge_slave_0: entered allmulticast mode [ 23.707828][ T3258] bridge_slave_0: entered promiscuous mode [ 23.715203][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.736305][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.743458][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.750731][ T3258] bridge_slave_1: entered allmulticast mode [ 23.756999][ T3258] bridge_slave_1: entered promiscuous mode [ 23.773544][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780640][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.787940][ T3264] bridge_slave_0: entered allmulticast mode [ 23.794252][ T3264] bridge_slave_0: entered promiscuous mode [ 23.813419][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.820492][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.827780][ T3264] bridge_slave_1: entered allmulticast mode [ 23.834110][ T3264] bridge_slave_1: entered promiscuous mode [ 23.845402][ T3259] team0: Port device team_slave_0 added [ 23.852009][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.861147][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.868242][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.875399][ T3262] bridge_slave_0: entered allmulticast mode [ 23.881571][ T3262] bridge_slave_0: entered promiscuous mode [ 23.889971][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.897086][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.904220][ T3262] bridge_slave_1: entered allmulticast mode [ 23.910503][ T3262] bridge_slave_1: entered promiscuous mode [ 23.921930][ T3259] team0: Port device team_slave_1 added [ 23.928337][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.940993][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 23.972771][ T3258] team0: Port device team_slave_0 added [ 23.984106][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.001883][ T3258] team0: Port device team_slave_1 added [ 24.013036][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.022882][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.036255][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.043279][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.069154][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.086733][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.100634][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.107590][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.133480][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.148572][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.155513][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.181424][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.196626][ T3264] team0: Port device team_slave_0 added [ 24.202952][ T3264] team0: Port device team_slave_1 added [ 24.215689][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.222691][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.248626][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.282966][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.290039][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.297276][ T3257] bridge_slave_0: entered allmulticast mode [ 24.303549][ T3257] bridge_slave_0: entered promiscuous mode [ 24.310318][ T3262] team0: Port device team_slave_0 added [ 24.317031][ T3262] team0: Port device team_slave_1 added [ 24.326704][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.333633][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.359525][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.371658][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.378610][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.404689][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.415560][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.422589][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.429733][ T3257] bridge_slave_1: entered allmulticast mode [ 24.436142][ T3257] bridge_slave_1: entered promiscuous mode [ 24.447613][ T3259] hsr_slave_0: entered promiscuous mode [ 24.453511][ T3259] hsr_slave_1: entered promiscuous mode [ 24.479341][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.486293][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.512176][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.528932][ T3258] hsr_slave_0: entered promiscuous mode [ 24.534901][ T3258] hsr_slave_1: entered promiscuous mode [ 24.540690][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.548319][ T3258] Cannot create hsr debugfs directory [ 24.563123][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.570072][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.596010][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.619642][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.629786][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.662415][ T3257] team0: Port device team_slave_0 added [ 24.668882][ T3257] team0: Port device team_slave_1 added [ 24.680517][ T3264] hsr_slave_0: entered promiscuous mode [ 24.686518][ T3264] hsr_slave_1: entered promiscuous mode [ 24.692319][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.699872][ T3264] Cannot create hsr debugfs directory [ 24.718806][ T3262] hsr_slave_0: entered promiscuous mode [ 24.724783][ T3262] hsr_slave_1: entered promiscuous mode [ 24.730634][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.738189][ T3262] Cannot create hsr debugfs directory [ 24.763094][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.770085][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.796019][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.807130][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.814163][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.840154][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.881686][ T3257] hsr_slave_0: entered promiscuous mode [ 24.887756][ T3257] hsr_slave_1: entered promiscuous mode [ 24.893538][ T3257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.901098][ T3257] Cannot create hsr debugfs directory [ 25.018776][ T3264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.033399][ T3264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.041675][ T3264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.053828][ T3264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.073770][ T3259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.082728][ T3259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.094046][ T3259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.103528][ T3259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.143307][ T3258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.155972][ T3262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.164775][ T3262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.172819][ T3258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.181647][ T3258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.192215][ T3258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.200471][ T3262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.208952][ T3262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.229663][ T3257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.241264][ T3257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.256683][ T3257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.265428][ T3257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.299623][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.324492][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.340541][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.356387][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.363430][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.374286][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.381351][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.400193][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.425661][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.450362][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.461398][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.468459][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.477305][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.484333][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.505051][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.524965][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.535095][ T2071] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.542143][ T2071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.555881][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.564224][ T2071] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.571332][ T2071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.589870][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.601874][ T2071] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.609027][ T2071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.627476][ T2071] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.634631][ T2071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.643067][ T2071] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.650116][ T2071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.658893][ T2071] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.665975][ T2071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.680965][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.747298][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.755362][ T3258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.765933][ T3258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.796510][ T3257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.838163][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.868254][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.913104][ T3264] veth0_vlan: entered promiscuous mode [ 25.930507][ T3264] veth1_vlan: entered promiscuous mode [ 25.942906][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.964184][ T3259] veth0_vlan: entered promiscuous mode [ 25.987897][ T3259] veth1_vlan: entered promiscuous mode [ 26.008649][ T3264] veth0_macvtap: entered promiscuous mode [ 26.026176][ T3264] veth1_macvtap: entered promiscuous mode [ 26.039628][ T3262] veth0_vlan: entered promiscuous mode [ 26.054869][ T3259] veth0_macvtap: entered promiscuous mode [ 26.063038][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.074546][ T3262] veth1_vlan: entered promiscuous mode [ 26.082997][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.093071][ T3259] veth1_macvtap: entered promiscuous mode [ 26.111755][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.122231][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.135133][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.143274][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.152013][ T3264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.160724][ T3264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.169415][ T3264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.181216][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.191671][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.202184][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.210616][ T3259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.219510][ T3259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.228307][ T3259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.237073][ T3259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.252291][ T3262] veth0_macvtap: entered promiscuous mode [ 26.260884][ T3262] veth1_macvtap: entered promiscuous mode [ 26.276204][ T3258] veth0_vlan: entered promiscuous mode [ 26.291016][ T3258] veth1_vlan: entered promiscuous mode [ 26.297113][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.307553][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.317513][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.327966][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.338337][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.352657][ T3257] veth0_vlan: entered promiscuous mode [ 26.372420][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.382940][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.392763][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.403205][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.417284][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.425715][ T3262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.434668][ T3262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.443360][ T3262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.452215][ T3262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.469333][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 26.469345][ T29] audit: type=1400 audit(1723925922.079:116): avc: denied { read write } for pid=3264 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.469607][ T3257] veth1_vlan: entered promiscuous mode [ 26.484631][ T29] audit: type=1400 audit(1723925922.099:117): avc: denied { open } for pid=3264 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.526034][ T3257] veth0_macvtap: entered promiscuous mode [ 26.542855][ T29] audit: type=1400 audit(1723925922.119:118): avc: denied { ioctl } for pid=3264 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.548073][ T3258] veth0_macvtap: entered promiscuous mode [ 26.568470][ T29] audit: type=1400 audit(1723925922.119:119): avc: denied { prog_load } for pid=3399 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.592891][ T29] audit: type=1400 audit(1723925922.119:120): avc: denied { bpf } for pid=3399 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.592910][ T29] audit: type=1400 audit(1723925922.119:121): avc: denied { perfmon } for pid=3399 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.592927][ T29] audit: type=1400 audit(1723925922.149:122): avc: denied { create } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.593020][ T29] audit: type=1400 audit(1723925922.149:123): avc: denied { write } for pid=3398 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.593039][ T29] audit: type=1400 audit(1723925922.149:124): avc: denied { prog_run } for pid=3399 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.593130][ T29] audit: type=1400 audit(1723925922.149:125): avc: denied { open } for pid=3399 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.717898][ T3257] veth1_macvtap: entered promiscuous mode [ 26.719027][ T3258] veth1_macvtap: entered promiscuous mode [ 26.758683][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.769339][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.769412][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.769470][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.769478][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.769490][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.771839][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.834166][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.834181][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.834189][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.834200][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.834207][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.885113][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.885122][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.885134][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.886637][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.930605][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.941351][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.941361][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.941490][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.941499][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.941510][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.943940][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.005869][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.016382][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.016391][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.016403][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.016410][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.016420][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.016432][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.016444][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.017255][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.067352][ T3412] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 27.095696][ T3257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109465][ T3257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109496][ T3257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109578][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.110004][ T3407] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 27.110020][ T3407] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 27.111837][ T3407] syz.3.4 (3407) used greatest stack depth: 11248 bytes left [ 27.144971][ T3415] 9pnet_fd: Insufficient options for proto=fd [ 27.150825][ T3258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.159195][ T3415] loop3: detected capacity change from 0 to 512 [ 27.161545][ T3258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.175318][ T3411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.176246][ T3258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.211552][ T3258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.226388][ T3411] veth1_to_bridge: entered promiscuous mode [ 27.236457][ T3411] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 27.270049][ T3415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.270238][ T3415] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.293071][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.423647][ T3426] loop2: detected capacity change from 0 to 512 [ 27.447431][ T3426] /dev/loop2: Can't open blockdev [ 27.448127][ T3262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.466204][ T3428] loop4: detected capacity change from 0 to 256 [ 27.541308][ T3431] loop1: detected capacity change from 0 to 512 [ 27.550377][ T3431] EXT4-fs: dax option not supported [ 28.311162][ T3450] loop0: detected capacity change from 0 to 256 [ 28.330356][ T3450] FAT-fs (loop0): Directory bread(block 64) failed [ 28.337450][ T3450] FAT-fs (loop0): Directory bread(block 65) failed [ 28.345223][ T3450] FAT-fs (loop0): Directory bread(block 66) failed [ 28.351736][ T3450] FAT-fs (loop0): Directory bread(block 67) failed [ 28.358524][ T3450] FAT-fs (loop0): Directory bread(block 68) failed [ 28.366693][ T3450] FAT-fs (loop0): Directory bread(block 69) failed [ 28.373259][ T3450] FAT-fs (loop0): Directory bread(block 70) failed [ 28.392429][ T3450] FAT-fs (loop0): Directory bread(block 71) failed [ 28.399064][ T3450] FAT-fs (loop0): Directory bread(block 72) failed [ 28.419093][ T3450] FAT-fs (loop0): Directory bread(block 73) failed [ 28.446774][ T3456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.465020][ T3456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.484316][ T3456] loop2: detected capacity change from 0 to 128 [ 28.494920][ T3456] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 28.504000][ T3456] FAT-fs (loop2): bogus number of directory entries (203) [ 28.511125][ T3456] FAT-fs (loop2): Can't find a valid FAT filesystem [ 28.529576][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.547691][ T3462] loop0: detected capacity change from 0 to 128 [ 28.554413][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.589908][ T3473] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21'. [ 28.650211][ T50] nci: nci_rsp_packet: unknown rsp opcode 0xe26 [ 28.652467][ T3479] ieee802154 phy0 wpan0: encryption failed: -22 [ 28.679724][ T3479] syz.0.19: attempt to access beyond end of device [ 28.679724][ T3479] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 28.781104][ T3482] Process accounting resumed [ 28.904924][ T3495] sch_fq: defrate 0 ignored. [ 28.915719][ T3495] loop2: detected capacity change from 0 to 1024 [ 28.922668][ T3495] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 28.922668][ T3495] [ 28.933426][ T3495] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 28.978447][ T3501] loop2: detected capacity change from 0 to 256 [ 28.991196][ T3501] FAT-fs (loop2): Directory bread(block 64) failed [ 28.998675][ T3501] FAT-fs (loop2): Directory bread(block 65) failed [ 29.006037][ T3501] FAT-fs (loop2): Directory bread(block 66) failed [ 29.012662][ T3501] FAT-fs (loop2): Directory bread(block 67) failed [ 29.032706][ T3501] FAT-fs (loop2): Directory bread(block 68) failed [ 29.040404][ T3501] FAT-fs (loop2): Directory bread(block 69) failed [ 29.047467][ T3501] FAT-fs (loop2): Directory bread(block 70) failed [ 29.054224][ T3501] FAT-fs (loop2): Directory bread(block 71) failed [ 29.061958][ T3503] loop4: detected capacity change from 0 to 128 [ 29.069027][ T3501] FAT-fs (loop2): Directory bread(block 72) failed [ 29.076059][ T3501] FAT-fs (loop2): Directory bread(block 73) failed [ 29.087168][ T3503] capability: warning: `syz.4.30' uses 32-bit capabilities (legacy support in use) [ 29.190584][ T3508] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32'. [ 29.265130][ T11] nci: nci_rsp_packet: unknown rsp opcode 0xe26 [ 29.347727][ T3524] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 29.353655][ T3526] sch_fq: defrate 0 ignored. [ 29.371986][ T3526] loop2: detected capacity change from 0 to 1024 [ 29.378954][ T3526] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 29.378954][ T3526] [ 29.389706][ T3526] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 29.403652][ T3526] loop2: detected capacity change from 0 to 1024 [ 29.412195][ T3526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.422474][ T3526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 29.427533][ T3524] syz.4.38 (3524) used greatest stack depth: 10848 bytes left [ 29.432549][ T3526] System zones: 0-1, 3-36 [ 29.443746][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.446308][ T3532] loop1: detected capacity change from 0 to 512 [ 29.472382][ T3532] ======================================================= [ 29.472382][ T3532] WARNING: The mand mount option has been deprecated and [ 29.472382][ T3532] and is ignored by this kernel. Remove the mand [ 29.472382][ T3532] option from the mount to silence this warning. [ 29.472382][ T3532] ======================================================= [ 29.509179][ T3532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.520591][ T3532] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.528376][ T3532] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.41: bg 0: block 248: padding at end of block bitmap is not set [ 29.543709][ T3532] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.41: Failed to acquire dquot type 1 [ 29.566893][ T3532] EXT4-fs (loop1): 1 truncate cleaned up [ 29.581982][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 29.586323][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.595446][ T3538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 29.603608][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.611755][ T3538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 29.632315][ T3538] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 29.634339][ T3532] syz.1.41 (3532) used greatest stack depth: 9416 bytes left [ 29.647769][ T3538] bridge0: entered promiscuous mode [ 29.656746][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.678430][ T3542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.46'. [ 29.682542][ T3547] loop1: detected capacity change from 0 to 256 [ 29.692264][ T3549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 29.702675][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 29.708004][ T3547] FAT-fs (loop1): Directory bread(block 64) failed [ 29.718029][ T3547] FAT-fs (loop1): Directory bread(block 65) failed [ 29.724790][ T3547] FAT-fs (loop1): Directory bread(block 66) failed [ 29.731381][ T3547] FAT-fs (loop1): Directory bread(block 67) failed [ 29.737981][ T3547] FAT-fs (loop1): Directory bread(block 68) failed [ 29.745343][ T3547] FAT-fs (loop1): Directory bread(block 69) failed [ 29.751934][ T3547] FAT-fs (loop1): Directory bread(block 70) failed [ 29.764567][ T3547] FAT-fs (loop1): Directory bread(block 71) failed [ 29.773140][ T3547] FAT-fs (loop1): Directory bread(block 72) failed [ 29.780076][ T3547] FAT-fs (loop1): Directory bread(block 73) failed [ 29.793255][ T3552] Process accounting resumed [ 29.924808][ T3564] FAULT_INJECTION: forcing a failure. [ 29.924808][ T3564] name failslab, interval 1, probability 0, space 0, times 1 [ 29.937589][ T3564] CPU: 0 UID: 0 PID: 3564 Comm: syz.0.50 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 29.948089][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 29.958203][ T3564] Call Trace: [ 29.961550][ T3564] [ 29.964482][ T3564] dump_stack_lvl+0xf2/0x150 [ 29.967159][ T3568] loop2: detected capacity change from 0 to 512 [ 29.969095][ T3564] dump_stack+0x15/0x20 [ 29.979532][ T3564] should_fail_ex+0x229/0x230 [ 29.984215][ T3564] ? io_uring_alloc_task_context+0x4d/0x2d0 [ 29.990171][ T3564] should_failslab+0x8f/0xb0 [ 29.994770][ T3564] __kmalloc_cache_noprof+0x4b/0x2a0 [ 30.000064][ T3564] io_uring_alloc_task_context+0x4d/0x2d0 [ 30.005787][ T3564] ? kstrtouint_from_user+0xb0/0xe0 [ 30.011076][ T3564] __io_uring_add_tctx_node+0x1e0/0x2b0 [ 30.016632][ T3564] __io_uring_add_tctx_node_from_submit+0x6d/0xd0 [ 30.023050][ T3564] __se_sys_io_uring_enter+0x13d4/0x15a0 [ 30.028700][ T3564] ? fput+0x13b/0x180 [ 30.032683][ T3564] ? ksys_write+0x178/0x1b0 [ 30.037214][ T3564] __x64_sys_io_uring_enter+0x78/0x90 [ 30.042632][ T3564] x64_sys_call+0x2567/0x2d60 [ 30.047311][ T3564] do_syscall_64+0xc9/0x1c0 [ 30.051819][ T3564] ? clear_bhb_loop+0x55/0xb0 [ 30.056581][ T3564] ? clear_bhb_loop+0x55/0xb0 [ 30.061263][ T3564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.067172][ T3564] RIP: 0033:0x7f799a919e79 [ 30.071601][ T3564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.091227][ T3564] RSP: 002b:00007f7999576038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 30.099740][ T3564] RAX: ffffffffffffffda RBX: 00007f799aab6058 RCX: 00007f799a919e79 [ 30.107740][ T3564] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000003 [ 30.115710][ T3564] RBP: 00007f7999576090 R08: 0000000000000000 R09: 0000000000000000 [ 30.123685][ T3564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.127591][ T3567] mmap: syz.2.53 (3567): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 30.131636][ T3564] R13: 0000000000000001 R14: 00007f799aab6058 R15: 00007ffedcd64328 [ 30.131655][ T3564] [ 30.233721][ T3574] sch_fq: defrate 0 ignored. [ 30.242889][ T3574] loop2: detected capacity change from 0 to 1024 [ 30.249824][ T3574] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 30.249824][ T3574] [ 30.260545][ T3574] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 30.274703][ T3574] loop2: detected capacity change from 0 to 1024 [ 30.281523][ T3574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.291068][ T3574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 30.299338][ T3574] System zones: 0-1, 3-36 [ 30.304495][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.324123][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.402484][ T3582] loop2: detected capacity change from 0 to 512 [ 30.425481][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.438023][ T3582] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.458838][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.474424][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 30.484603][ T3587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 30.495357][ T3587] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 30.503734][ T3587] bridge0: entered promiscuous mode [ 30.509504][ T3587] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 30.517103][ T3587] Cannot create hsr debugfs directory [ 30.596172][ T58] nci: nci_rsp_packet: unknown rsp opcode 0xe26 [ 30.742240][ T3601] loop0: detected capacity change from 0 to 512 [ 30.755380][ T3601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.765887][ T3601] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.773345][ T3601] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.61: bg 0: block 248: padding at end of block bitmap is not set [ 30.789043][ T3601] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.61: Failed to acquire dquot type 1 [ 30.801061][ T3601] EXT4-fs (loop0): 1 truncate cleaned up [ 30.993400][ T3601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.014707][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.030829][ T3605] Process accounting resumed [ 31.131967][ T3611] Zero length message leads to an empty skb [ 31.243724][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.250651][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.257334][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.290431][ T3613] infiniband syz2: set active [ 31.295212][ T3613] infiniband syz2: added ip6gretap0 [ 31.321296][ T35] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.370876][ T3613] RDS/IB: syz2: added [ 31.375029][ T3613] smc: adding ib device syz2 with port count 1 [ 31.381243][ T3613] smc: ib device syz2 port 1 has pnetid [ 31.387355][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.421182][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.457670][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.490755][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.524411][ T3613] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.557634][ T35] ip6gretap0 speed is unknown, defaulting to 1000 [ 31.595488][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 31.595500][ T29] audit: type=1400 audit(1723926183.215:476): avc: denied { connect } for pid=3616 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.609123][ T3619] sch_fq: defrate 0 ignored. [ 31.622424][ T29] audit: type=1400 audit(1723926183.215:477): avc: denied { write } for pid=3616 comm="syz.2.65" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.636417][ T3619] loop2: detected capacity change from 0 to 1024 [ 31.656339][ T3619] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 31.656339][ T3619] [ 31.667161][ T3619] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 31.682241][ T3619] loop2: detected capacity change from 0 to 1024 [ 31.689099][ T3619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.698731][ T3619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 31.706932][ T3619] System zones: 0-1, 3-36 [ 31.711760][ T3619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.732555][ T3259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.764324][ T29] audit: type=1326 audit(1723926183.385:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c006b9e79 code=0x7ffc0000 [ 31.787529][ T29] audit: type=1326 audit(1723926183.385:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c006b9e79 code=0x7ffc0000 [ 31.812981][ T29] audit: type=1326 audit(1723926183.385:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c006b8810 code=0x7ffc0000 [ 31.836144][ T29] audit: type=1326 audit(1723926183.385:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c006bb6a7 code=0x7ffc0000 [ 31.859321][ T29] audit: type=1326 audit(1723926183.385:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c006b9e79 code=0x7ffc0000 [ 31.882486][ T29] audit: type=1326 audit(1723926183.385:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3c006bb6a7 code=0x7ffc0000 [ 31.905828][ T29] audit: type=1326 audit(1723926183.385:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c006b8b0a code=0x7ffc0000 [ 31.928897][ T29] audit: type=1326 audit(1723926183.385:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c006b9e79 code=0x7ffc0000 [ 32.136020][ T3644] Process accounting resumed [ 32.179437][ T3348] ================================================================== [ 32.187519][ T3348] BUG: KCSAN: data-race in __flush_work / __flush_work [ 32.194365][ T3348] [ 32.196679][ T3348] write to 0xffff8881155ce3e8 of 8 bytes by task 3644 on cpu 1: [ 32.204298][ T3348] __flush_work+0x30b/0x570 [ 32.208788][ T3348] flush_delayed_work+0x66/0x70 [ 32.213636][ T3348] io_fallback_tw+0x24b/0x320 [ 32.218303][ T3348] tctx_task_work_run+0xd1/0x1b0 [ 32.223235][ T3348] tctx_task_work+0x40/0x80 [ 32.227740][ T3348] task_work_run+0x13a/0x1a0 [ 32.232412][ T3348] do_exit+0x5dd/0x1720 [ 32.236557][ T3348] do_group_exit+0x102/0x150 [ 32.241138][ T3348] get_signal+0xf2f/0x1080 [ 32.245542][ T3348] arch_do_signal_or_restart+0x95/0x4b0 [ 32.251073][ T3348] syscall_exit_to_user_mode+0x59/0x130 [ 32.256608][ T3348] do_syscall_64+0xd6/0x1c0 [ 32.261101][ T3348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.266984][ T3348] [ 32.269288][ T3348] read to 0xffff8881155ce3e8 of 8 bytes by task 3348 on cpu 0: [ 32.276811][ T3348] __flush_work+0x42a/0x570 [ 32.281296][ T3348] flush_delayed_work+0x66/0x70 [ 32.286143][ T3348] io_uring_try_cancel_requests+0x35b/0x370 [ 32.292028][ T3348] io_ring_exit_work+0x160/0x500 [ 32.296952][ T3348] process_scheduled_works+0x483/0x9a0 [ 32.302401][ T3348] worker_thread+0x526/0x700 [ 32.306981][ T3348] kthread+0x1d1/0x210 [ 32.311039][ T3348] ret_from_fork+0x4b/0x60 [ 32.315442][ T3348] ret_from_fork_asm+0x1a/0x30 [ 32.320196][ T3348] [ 32.322502][ T3348] value changed: 0x0000000000c00000 -> 0xffff88810006c205 [ 32.329593][ T3348] [ 32.331905][ T3348] Reported by Kernel Concurrency Sanitizer on: [ 32.338034][ T3348] CPU: 0 UID: 0 PID: 3348 Comm: kworker/u8:6 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 32.348872][ T3348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.358925][ T3348] Workqueue: iou_exit io_ring_exit_work [ 32.364462][ T3348] ================================================================== [ 32.381398][ T3649] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 32.388886][ T3603] IPVS: starting estimator thread 0... [ 32.485281][ T3650] IPVS: using max 2832 ests per chain, 141600 per kthread