last executing test programs: 3.064207453s ago: executing program 1 (id=2): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x220141, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0) poll(&(0x7f0000000340)=[{r1, 0x14}], 0x1, 0x7) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000440)="e0", 0x1}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000002c0)=""/241, 0xf1, 0x0, &(0x7f00000003c0)=""/75, 0x4b}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, [@generic={0xf8, 0xd, 0xe, 0xa166, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @generic={0x8, 0x2, 0x9, 0x1000, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0xd, 0x8, 0x0, 0x4, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8cbf, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x3, 0xf, 0x5}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0x800}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f"], 0x38}}, 0x0) 3.049749784s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ftruncate(r3, 0x7f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r5, 0x201, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]]}, 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400400012800b0001006272696467650000300002800c002000040000000000000006000800a80900000c0021000500fcff010000000c001e00000000e0ad57e202"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040844) 3.048879704s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x100}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) 2.735846559s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000a667001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000006d0600000055f700ffdbdf250000000025eb774f762e1c5b3597cd377f526e7abcd7da3acf198df9488402e718fe8297c7d1ebb2349fd3660a5e037650d771b6beca4e1c9c58d10e71", @ANYRES32=0x0, @ANYBLOB="0110040004e80200040034801400030076657468315f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) 2.575539811s ago: executing program 0 (id=1): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r4 = dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080)="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", &(0x7f0000000180)=@tcp=r4, 0x1}, 0x20) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f00000002c0)={{}, {r9, r10+10000000}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.559100241s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2.414720243s ago: executing program 2 (id=7): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004fb11a5846f2de47"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) getpid() write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0, 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x7144}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 2.383775744s ago: executing program 1 (id=17): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004fb11a5846f2de47"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) getpid() write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0, 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x7144}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 2.136674857s ago: executing program 4 (id=8): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r4 = dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080)="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", &(0x7f0000000180)=@tcp=r4, 0x1}, 0x20) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f00000002c0)={{}, {r10, r11+10000000}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.995598799s ago: executing program 3 (id=9): syz_read_part_table(0x5e0, &(0x7f0000000000)="$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") r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x18, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x20040081) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x71}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f0000001240)=[{{&(0x7f0000000600)=@l2={0x1f, 0x10, @none, 0x7, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000680)="f4f58134976e768312e397dca3572a84227df91459932d6f9f0939c67c884c65404bd4128a1435490488c4e5d8154d9b006f5f43aa8ff5a07e5309ab02e8240de2af5a04a2ffa6a98e983033fc157305cf5d0d6a5ea995b136afeca247e89de8f129314303cd6990b52410714006d64a0f75550fb181b8707ed0b55789a6c15585062ffe3e75ca30a6b07204e0e12621a7b95abbe5aa7aa76333a50c2e3dfa98", 0xa0}, {&(0x7f0000000740)="c23254e233124224a54512d235dbe7930d35521180bceb2dd2b9d21be062b6c3ad9a2bd5efe57135c5c88228b2a6189a7e1ef1068f5706270beaf3bb66f3adda33e3038e9974e4c3d97e94842b4708a2933c8961629b9b2a5ac8c250027e82807b2b0c4c2f7cc8495ce7b6334a99bdf5edd45607262bfdffe1fe9d5d27823cc0c2ba5218b141236cbd4363ee3bb22f67a478f61e1a621a33a3b852b53587a42d604287acbe3e38", 0xa7}, {&(0x7f0000000800)="60075a9e642bc4fdbd8a4f80b9aabcc82f899a3dcab8fb0b059ed647327dcb7425165c51127c05b9b1c720086c584f4f269d31d6c1becef9158ce955b1e29ef07575d1c64a27552601bf26a60ed0c3627f9e40037425ba456d2ed7b519cf3a7cce0b37f23038bbec88754007d1dbe4faeb7867a942ae6c2d430eaa8e4e2db1b8e68803c0018c30f0f5323480c7d0e9a2ee4c51e24a2d81a4892ec2a087685ee7b36d316fc2a8e275bc2f01ea010649", 0xaf}, {0x0}, {&(0x7f0000000a00)="fe525fede6b48c7b43a6b657793b0e0aefffcaa5bb25d9e5f2cbb1cbc910f30a3c05122c1e3192f64693969be24b8e7f1784da3657f041430ea64c5bf8aeaa0425d9241917320312d9d2b6243e4d1ea411a596b66502e5fa5859976b6142e56afcec459d08c3f2dc7abbf1457f0c4eb16fa2e854dd8b6fc50ebcd64c3ac657b32ec059ab727ec7ffd7de6b2dae66e252df9029628acf192a0191fe9eadd69aba450c6d183a9a6c9a32fa93eb701936e7d8f89964a7eab6614c3e3c5d42fc3d860fca9efd38095ee6dc700a8319d24943cd9647f00aadf443182f0c458e", 0xdd}, {&(0x7f0000000b00)="ade54c87de1c2b0769920afb6170c139560cea8902b16796056d2f3d3876080fdd2a2dee51772096bc67934289020c4a9bcc4b757acf093e5de1962ccd4b0159314426cb64e1cbe7b5b52e306a0a136730f74b805af6e6abc6800f65a71a3ebfb8d37163ac97f7131ff3a137d46057edb392076828c1c0523f8a8a9cac420d1f3041968be89982accb42fc86b7b22430977e90cecbca637944d8a2a5b3b07c105a5118a584de7570cc57e34f1b575924a2f6c70cf29929c6fb2901d8", 0xbc}, {&(0x7f0000000bc0)="d94e6a1f3b6212f3adfaebca8eddff3807e0f00ea1b310ed1ca283be394574aea6ec29478b5f883599b804f4d86ded886ba331dbb9299db6e28a46ce6ee7e9315e4023d4e78d6c65295a00aa98478abf40556f18c0c87b4f439cb8a6fcaf0d88f718689b23fe4092e88fffc1f1c88f1f2e34e4441ce91d20ede8edcc300427a2424f042a3a2b850b689b4267abaf25cd22a8fb99f376b2a0a229828d04b5d8a72446b45b26a0be7d8867dda3291ca47b6233f45d", 0xb4}, {0x0}], 0x8}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d00)="6d5c3d563f1280ed1cb53c04f8f6e104d8bb4cfc1ffbe751b0c27f74787c0dc696aabd6136aaaaafff5ec0a90ddb7485f14130949534886f95c521841618b3dbfdc65b7ffdc710de3ff6ab0298b24d40260840c57fe420843e480d4b0791562bd0c36935f4258e1664a5ec67d794c93d4694", 0x72}, {&(0x7f0000000d80)="d47e2516ce4d44568e502e9fc5a1b72cfddd4d37f09c8dc1f5737dd4c93b10ee6a865eb7a69767bb599e576ee145054cc388535a3415813e30a31616e6f560f0b2cd430eb4a1df27", 0x48}, {&(0x7f0000000e00)="ed0616", 0x3}, {&(0x7f0000000e40)="e27d254804fc5df371e5034e6a70d897f534e720c82497a788f51bcfe17a07f582770fa1b90a34337eee747611fe30303d5dd8075582f5971bdca025b4588d61e3af3f9c6db978e97e68747aa6d9238b88fabc26f39ae58f23ae4fd9147e4145c74c337ca9342aa7ad78d0a912ed59822b04a5e60a862a1c411b9f2f00e867079834078dd94177b74f873c55b30e11052f38a00048eb8c234efa8333287007156f091dc0f5d88d03180eddf5f301b384f459e1c81f303f7a397ceec2a57f6f607902048c3e1a9b39dd6b86f8e944aef30acfe7", 0xd3}, {&(0x7f0000000f40)="b7c3ce5d1988a3897b0da6e971aa54915285e87b57a7e925f65a643c634750b805fc6ae98bc48ce189383d2ccb434d5ae31ba4caf17672b960d38c0b1adc2b8e432c6158cf34acab94ad7f82a14d492324423fcf80db0f36ea20b54bf35ee556c3db302efcfd6e2a66cc533b9d6af0e482b788e36cc053e93dd17dcdcd5f8a56a6441a838f17bcf6de4dc5b47fc88f8edc4d3bd2d41cfcbc", 0x98}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000001000)="e04ffc339c568c0166c3fc58791c59b27feebcbf3daffaa03a1cfc0106f25e934b6d4f2d07dfa18e7d347e6526d43ba05e5bd970235afabe206efdc68ec3375f378f3ea8178ad6efdd1833570ab397b6bbe005f8ec2571769d5f0ace30b0205a415771bcb2e08cb9f36348711caae403a1825e3640282161c647636dbbce79850f9197f0e6d1f4c3f7d15bf79cb6055d6329cd3e6943ddee41aaafe4d2691352c675a6584d43356c5792c9d50618e222231982741732747c801d2144736697765f024a614771deaf702329d16909ac59c6b173b1a980cb49ad0df842a3cf71aab31b16aedd1bdeae655c79", 0xeb}, {&(0x7f0000001100)="b887a4eadbe2e9e55586af770c5635cd862c7ce7a4a2eac4b5700d22b5fe780e6903b775a74ce74e53", 0x29}, {&(0x7f0000001140)="d249682359cdf739e4ec2623e53bb8a0c7609f21fb2894190b25be847253b72e12ef1099", 0x24}, {&(0x7f0000001180)="cd37546e79f63d7fe488d6bcc368dc80cb1997830b8c0d1a53d1236b1849def09f3e053097d9e5636635b38d645aee49ac5e3021f0387402df45127f144428c0b6e63f19b48c9072a97a9bdd711bb9863c5c82aae70f65e3bfd4ecd408116f9049d4805320a250916e2fbff63e00f69fc15da704d1f4570cc188fa3002637103aa8a5c7ccbebc5f57568fd4e1336a48ea3", 0x91}], 0xa, &(0x7f00000013c0)=[{0x58, 0x3a, 0x61a, "c1d925b16beb86dbfe174f04266443cac2cf2f46f91815b7878a6857b51158e0d91dc7f49bd026bf056164020f0079acc7221a6da4116ad3c094a616b266926d9d0d62c9f9fedff0"}, {0xb0, 0x84, 0x101, "77f21f8c1417a44a13025bf559437561b6d16dbe7464b7265121c7fbcb80fa3a6cb0ce6cdbe69e7aae492c7dfeb6ed100df2d117ab4b40c4cbc9cdad5e7cb52a3713025f673ca6ecf7a65c98d96510c37eb6a980456be7bab5a38399270a991472acfe6f70095e15d15348c4e5730c81d6ed7d1616dfa06bbfcc509542c0a5c59740af9c3d5f701799424e117d1088908ae8bb5532a5a5150504f462e1cb85"}, {0x48, 0x117, 0x8, "2593831df0ccda4808dda813d73b0eead6862b1c029fac9535bfd1806257ecd9e922101364b250aade8c8da34a7ad92adb55f04f3b"}, {0x80, 0x10b, 0x6, "03c30e0e93f91c143494a42a9d526f7917061f468e2d12a70cd8330c09f4fe5e2222d7cfa3d14ddd4f9827b6405dd1b8ed37d84229cae766497915a9313e52cd096b9eb645afaa7ad2836a54f5077e66bfd4cae604405cf816a360136f9992c203b199849f9b65efb4c9c0065da1"}, {0x80, 0x10b, 0xfffffff5, "55050ff44670bbee95849051f29187462ccdc7f2521e625b687e988ef1404f3a82f8ea49af6c8e9b72577eabfaa6e550cbc4ca06e3eead419f00c1058cc70068b1baea3dc5bbdba1fb7f112e9f5b87f4c194e7801f8292a73e6b2c55b09a1cf5b1b02447cc58be56da4cbe52311bc4f4"}], 0x250}}], 0x2, 0x40000) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000007) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 993.150755ms ago: executing program 4 (id=10): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x1ac81, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2a) 988.925735ms ago: executing program 0 (id=21): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r4 = dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080)="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", &(0x7f0000000180)=@tcp=r4, 0x1}, 0x20) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f00000002c0)={{}, {r9, r10+10000000}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 402.943783ms ago: executing program 2 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000a667001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000006d0600000055f700ffdbdf250000000025eb774f762e1c5b3597cd377f526e7abcd7da3acf198df9488402e718fe8297c7d1ebb2349fd3660a5e037650d771b6beca4e1c9c58d10e71", @ANYRES32=0x0, @ANYBLOB="0110040004e80200040034801400030076657468315f746f5f626f6e64000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) 342.941284ms ago: executing program 1 (id=12): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004fb11a5846f2de47"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) getpid() write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0, 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x7144}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x34}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 252.344106ms ago: executing program 2 (id=13): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x94, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000000c0)='fsi_master_acf_cmd_abs_addr\x00', r1, 0x0, 0x834}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000740)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487b8010000000f01c166bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4e}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80801, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_', @ANYRES64=r0]) sendfile(r0, r1, 0x0, 0x7ffff004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x11b22}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x92) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x28, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="595300000000000000086b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009d"], 0x38}}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0x2c, 0x1b, 0x40, 0x19d2, 0xa778, 0x96b0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x9, 0x1, 0xe0, 0x1, 0x3, 0x40, [], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x4, 0x5, 0x8}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a68c9a203d1be201d0620102030109021b0001000010000904bc0001179cbd00090582020002000200"], 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 77.414578ms ago: executing program 0 (id=14): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000003d40)=ANY=[@ANYBLOB="1800000000000000000000001e0000009500000000000000514fcf52dc6d41a73d359204"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sync() flock(0xffffffffffffffff, 0x9d77734ed0a70dd1) sync() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000003d80)=ANY=[@ANYBLOB="18000000000000000000000000000000c3011800000000009500000000000000834df753a907915d441365727fe428d1f185c3861f88"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000003dc0)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000740)=""/154, 0x9a}], 0x2, &(0x7f00000014c0)=""/4096, 0x1000}}, {{&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/82, 0x52}, {&(0x7f0000000900)=""/177, 0xb1}, {&(0x7f00000009c0)=""/225, 0xe1}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000ac0)=""/34, 0x22}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/103, 0x67}], 0x4}, 0xc}, {{&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/39, 0x27}, {&(0x7f0000000f80)=""/123, 0x7b}], 0x2, &(0x7f0000001080)=""/44, 0x2c}, 0x7}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/11, 0xb}, {&(0x7f00000011c0)=""/122, 0x7a}, {&(0x7f0000001240)=""/116, 0x74}, {&(0x7f00000012c0)=""/155, 0x9b}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000001040)}], 0x7, &(0x7f00000024c0)=""/210, 0xd2}, 0x5}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001440)=""/22, 0x16}], 0x1, &(0x7f0000002600)=""/194, 0xc2}, 0x6}, {{&(0x7f0000002700)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002780)=""/106, 0x6a}, {&(0x7f0000002800)=""/87, 0x57}, {&(0x7f0000002880)=""/226, 0xe2}, {0x0}, {&(0x7f0000002a00)=""/190, 0xbe}], 0x5, &(0x7f0000002b40)=""/4096, 0x1000}, 0x7}], 0x7, 0x120, &(0x7f0000003d00)={0x0, 0x3938700}) sync() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 0s ago: executing program 4 (id=15): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x220141, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0) poll(&(0x7f0000000340)=[{r1, 0x14}], 0x1, 0x7) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000440)="e0", 0x1}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000002c0)=""/241, 0xf1, 0x0, &(0x7f00000003c0)=""/75, 0x4b}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, [@generic={0xf8, 0xd, 0xe, 0xa166, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @generic={0x8, 0x2, 0x9, 0x1000, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0xd, 0x8, 0x0, 0x4, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8cbf, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x3, 0xf, 0x5}, {0x5, 0x1, 0x8, 0x4}, {0x5, 0x3, 0x1, 0x1}], 0x10, 0x800}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 20.295282][ T28] audit: type=1400 audit(1751497926.693:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.296300][ T275] cgroup: Unknown subsys name 'net' [ 20.317938][ T28] audit: type=1400 audit(1751497926.693:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.345260][ T28] audit: type=1400 audit(1751497926.723:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.345424][ T275] cgroup: Unknown subsys name 'devices' [ 20.484028][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.489641][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.592144][ T28] audit: type=1400 audit(1751497926.983:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.615326][ T28] audit: type=1400 audit(1751497926.993:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.640318][ T28] audit: type=1400 audit(1751497926.993:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.641710][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.672824][ T28] audit: type=1400 audit(1751497927.073:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.698400][ T28] audit: type=1400 audit(1751497927.073:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.699902][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.724235][ T28] audit: type=1400 audit(1751497927.093:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.758154][ T28] audit: type=1400 audit(1751497927.093:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.952940][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.960006][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.967463][ T283] device bridge_slave_0 entered promiscuous mode [ 21.975960][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.983064][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.990402][ T283] device bridge_slave_1 entered promiscuous mode [ 22.046561][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.053646][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.060910][ T285] device bridge_slave_0 entered promiscuous mode [ 22.069347][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.076440][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.083887][ T285] device bridge_slave_1 entered promiscuous mode [ 22.124725][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.131761][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.139205][ T287] device bridge_slave_0 entered promiscuous mode [ 22.153774][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.160823][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.168284][ T284] device bridge_slave_0 entered promiscuous mode [ 22.174901][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.181940][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.189402][ T287] device bridge_slave_1 entered promiscuous mode [ 22.206833][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.213940][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.221230][ T284] device bridge_slave_1 entered promiscuous mode [ 22.288639][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.295791][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.303226][ T286] device bridge_slave_0 entered promiscuous mode [ 22.323621][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.330675][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.338137][ T286] device bridge_slave_1 entered promiscuous mode [ 22.436982][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.444132][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.485340][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.492416][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.499675][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.506711][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.519165][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.526703][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.533966][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.541938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.549707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.572643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.581014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.589451][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.596503][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.603899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.612023][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.619059][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.647545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.665327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.684546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.693114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.701012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.709383][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.716434][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.723852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.731940][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.738977][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.746339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.781037][ T283] device veth0_vlan entered promiscuous mode [ 22.787756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.796691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.805130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.812722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.820709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.828878][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.835915][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.843265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.851152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.859339][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.866358][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.873745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.881617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.889619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.905207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.912915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.928803][ T287] device veth0_vlan entered promiscuous mode [ 22.941661][ T285] device veth0_vlan entered promiscuous mode [ 22.949462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.958003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.966619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.975188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.983151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.990484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.998026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.005427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.013047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.021323][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.028374][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.035839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.044824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.053170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.061298][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.068333][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.077365][ T283] device veth1_macvtap entered promiscuous mode [ 23.091197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.099600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.113822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.121332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.130783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.139361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.147725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.155919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.165864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.174103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.184960][ T287] device veth1_macvtap entered promiscuous mode [ 23.194826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.202873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.211156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.219674][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.226744][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.234458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.242867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.250997][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.258047][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.265411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.273808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.282376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.290893][ T285] device veth1_macvtap entered promiscuous mode [ 23.304959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.312782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.320786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.329724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.337988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.359417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.367818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.376240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.384788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.393161][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.401312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.409758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.418022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.426384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.434758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.457969][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 23.471221][ T284] device veth0_vlan entered promiscuous mode [ 23.483292][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.491721][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.500292][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.508422][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.516722][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.524247][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.540256][ T284] device veth1_macvtap entered promiscuous mode [ 23.554576][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.575386][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.585431][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.593290][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.601761][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.611828][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.625991][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.634559][ T310] syz.1.2[310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.634635][ T310] syz.1.2[310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.641710][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.665508][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.673842][ T310] loop1: detected capacity change from 0 to 128 [ 23.680431][ T310] ======================================================= [ 23.680431][ T310] WARNING: The mand mount option has been deprecated and [ 23.680431][ T310] and is ignored by this kernel. Remove the mand [ 23.680431][ T310] option from the mount to silence this warning. [ 23.680431][ T310] ======================================================= [ 23.722648][ T286] device veth0_vlan entered promiscuous mode [ 23.730534][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.743602][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.756544][ T310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 23.756816][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.772947][ T310] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 23.785021][ T310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 23.792955][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.824466][ T310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 23.841683][ T286] device veth1_macvtap entered promiscuous mode [ 23.868489][ T283] EXT4-fs (loop1): unmounting filesystem. [ 23.876270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.893907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.921464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.929787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.939162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.948449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.958982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.962660][ T324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1645 sclass=netlink_route_socket pid=324 comm=syz.1.6 [ 23.985017][ T324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.199834][ T334] loop2: detected capacity change from 0 to 512 [ 24.221735][ T334] EXT4-fs: Ignoring removed mblk_io_submit option [ 24.228382][ T334] EXT4-fs: Ignoring removed bh option [ 24.234596][ T334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.245995][ T334] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.246354][ T337] loop1: detected capacity change from 0 to 512 [ 24.269622][ T334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 24.289127][ T334] EXT4-fs (loop2): 1 truncate cleaned up [ 24.296993][ T334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 24.322058][ T337] EXT4-fs: Ignoring removed mblk_io_submit option [ 24.350441][ T337] EXT4-fs: Ignoring removed bh option [ 24.367752][ T337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.402215][ T337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 24.471671][ T337] EXT4-fs (loop1): 1 truncate cleaned up [ 24.477655][ T337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.534940][ T334] netlink: 'syz.2.7': attribute type 27 has an invalid length. [ 24.588743][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.596028][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.616276][ T347] loop3: detected capacity change from 0 to 2048 [ 24.640693][ T345] netlink: 'syz.1.17': attribute type 27 has an invalid length. [ 24.643041][ T347] loop3: p3 p4 < > [ 24.725293][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732525][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.771287][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.798181][ T340] device veth0_vlan left promiscuous mode [ 24.811857][ T340] device veth0_vlan entered promiscuous mode [ 24.819245][ T340] device veth1_macvtap left promiscuous mode [ 24.826229][ T340] device veth1_macvtap entered promiscuous mode [ 24.840306][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.853297][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.860396][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.872992][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.880093][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.927871][ T337] device veth0_vlan left promiscuous mode [ 24.939357][ T337] device veth0_vlan entered promiscuous mode [ 24.948087][ T337] device veth1_macvtap left promiscuous mode [ 24.952213][ T294] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.955213][ T337] device veth1_macvtap entered promiscuous mode [ 24.973625][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.981590][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.001702][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.020998][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.036183][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.044874][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.053547][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.061777][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.070165][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.078852][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.087299][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.095843][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.103496][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.111461][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.119987][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.127057][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.134709][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.142123][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 25.143133][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.156271][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163333][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.171050][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.171109][ T294] usb 4-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 25.179547][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.197788][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.201347][ T294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.206088][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.222927][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.228051][ T294] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.231157][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.248232][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.250192][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.256978][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.272484][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.277208][ T294] usb 4-1: Product: syz [ 25.280745][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.291133][ T294] usb 4-1: Manufacturer: syz [ 25.293017][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.301595][ T294] usb 4-1: SerialNumber: syz [ 25.305719][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.318369][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.326905][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.335114][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.343355][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.351531][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.359765][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.368281][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.369379][ T352] syz.4.8 (352) used greatest stack depth: 21984 bytes left [ 25.376881][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.392164][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.400156][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.407810][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.415382][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.423733][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.431953][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.439804][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.448022][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.456471][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.464688][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.472977][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.481139][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.489603][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.497809][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.506094][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.725342][ T294] usb 4-1: 0:2 : does not exist [ 25.939816][ T359] loop4: detected capacity change from 0 to 512 [ 25.948795][ T359] EXT4-fs: Ignoring removed oldalloc option [ 25.961254][ T359] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.10: Parent and EA inode have the same ino 15 [ 25.974304][ T359] EXT4-fs (loop4): Remounting filesystem read-only [ 25.980878][ T359] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.993945][ T359] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.10: Parent and EA inode have the same ino 15 [ 26.006798][ T359] EXT4-fs (loop4): Remounting filesystem read-only [ 26.013438][ T359] EXT4-fs (loop4): 1 orphan inode deleted [ 26.019166][ T359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.061652][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 26.061667][ T28] audit: type=1400 audit(1751497932.453:124): avc: denied { mounton } for pid=353 comm="syz.4.10" path="/2/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.090572][ T28] audit: type=1400 audit(1751497932.453:125): avc: denied { create } for pid=353 comm="syz.4.10" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.111085][ T28] audit: type=1400 audit(1751497932.513:126): avc: denied { read } for pid=353 comm="syz.4.10" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.134381][ T28] audit: type=1400 audit(1751497932.513:127): avc: denied { read } for pid=353 comm="syz.4.10" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.157136][ T28] audit: type=1400 audit(1751497932.513:128): avc: denied { open } for pid=353 comm="syz.4.10" path="/2/file0/file0/file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.181208][ T337] syz.1.17 (337) used greatest stack depth: 21088 bytes left [ 26.200073][ T286] EXT4-fs (loop2): unmounting filesystem. [ 26.209800][ T28] audit: type=1400 audit(1751497932.513:129): avc: denied { write open } for pid=353 comm="syz.4.10" path="/2/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.242780][ T364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1645 sclass=netlink_route_socket pid=364 comm=syz.2.11 [ 26.249065][ T347] raw_sendmsg: syz.3.9 forgot to set AF_INET. Fix it! [ 26.269086][ T283] EXT4-fs (loop1): unmounting filesystem. [ 26.300016][ T367] loop1: detected capacity change from 0 to 512 [ 26.307027][ T367] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.314669][ T367] EXT4-fs: Ignoring removed bh option [ 26.320517][ T367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.331993][ T367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 26.344833][ T367] EXT4-fs (loop1): 1 truncate cleaned up [ 26.352492][ T367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.375315][ T294] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 26.387305][ T28] audit: type=1400 audit(1751497932.783:130): avc: denied { write } for pid=369 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.401941][ T294] usb 4-1: USB disconnect, device number 2 [ 26.438268][ T372] netlink: 'syz.1.12': attribute type 27 has an invalid length. [ 26.475459][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.482690][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.522420][ T370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'. [ 26.547305][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.561921][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.569050][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.577193][ T287] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 26.587023][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604413][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.613400][ T28] audit: type=1400 audit(1751497933.013:131): avc: denied { write } for pid=369 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.618385][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 26.640059][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.644869][ T367] device veth0_vlan left promiscuous mode [ 26.657741][ T28] audit: type=1400 audit(1751497933.053:132): avc: denied { remove_name } for pid=287 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.675968][ T367] device veth0_vlan entered promiscuous mode [ 26.684998][ T28] audit: type=1400 audit(1751497933.053:133): avc: denied { unlink } for pid=287 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 26.706939][ T367] device veth1_macvtap left promiscuous mode [ 26.713755][ T287] ------------[ cut here ]------------ [ 26.720414][ T367] device veth1_macvtap entered promiscuous mode [ 26.725020][ T287] kernel BUG at fs/namei.c:2954! [ 26.738334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.742942][ T287] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.746318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.751805][ T287] CPU: 1 PID: 287 Comm: syz-executor Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 26.759581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.768850][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.768862][ T287] RIP: 0010:may_delete+0x701/0x710 [ 26.768885][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.768897][ T287] RSP: 0018:ffffc9000da8fc20 EFLAGS: 00010293 [ 26.777570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.786979][ T287] [ 26.786999][ T287] RAX: ffffffff81c03a81 RBX: ffff88811684b000 RCX: ffff88810de40000 [ 26.787012][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 26.787021][ T287] RBP: ffffc9000da8fc88 R08: 0000000000000004 R09: 0000000000000003 [ 26.793728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.811698][ T287] R10: fffff52001b51f64 R11: 1ffff92001b51f64 R12: dffffc0000000000 [ 26.811715][ T287] R13: 0000000000000001 R14: ffff88810ebe1470 R15: 1ffff11022d09600 [ 26.811725][ T287] FS: 000055557e185500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.811738][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.811748][ T287] CR2: 0000001b2d320220 CR3: 00000001309ee000 CR4: 00000000003526a0 [ 26.818507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.825841][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.825856][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.825864][ T287] Call Trace: [ 26.825869][ T287] [ 26.825877][ T287] vfs_rmdir+0x32/0x500 [ 26.828896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.836147][ T287] incfs_kill_sb+0x105/0x220 [ 26.836172][ T287] deactivate_locked_super+0xb5/0x120 [ 26.836190][ T287] deactivate_super+0xaf/0xe0 [ 26.844939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.852097][ T287] cleanup_mnt+0x45f/0x4e0 [ 26.852125][ T287] __cleanup_mnt+0x19/0x20 [ 26.860475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.867962][ T287] task_work_run+0x1db/0x240 [ 26.867992][ T287] ? __cfi_task_work_run+0x10/0x10 [ 26.876811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.884849][ T287] ? __x64_sys_umount+0x125/0x160 [ 26.884874][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.884890][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 26.892007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.899491][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 26.899513][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 26.899531][ T287] do_syscall_64+0x58/0xa0 [ 26.899543][ T287] ? clear_bhb_loop+0x30/0x80 [ 26.899558][ T287] ? clear_bhb_loop+0x30/0x80 [ 26.899574][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.899591][ T287] RIP: 0033:0x7f1fa9b8fc57 [ 26.899603][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.899614][ T287] RSP: 002b:00007ffece715fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.899632][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1fa9b8fc57 [ 26.899642][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffece716070 [ 26.899652][ T287] RBP: 00007ffece716070 R08: 0000000000000000 R09: 0000000000000000 [ 26.899661][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffece717160 [ 26.899669][ T287] R13: 00007f1fa9c10925 R14: 000000000000675c R15: 00007ffece718230 [ 26.899682][ T287] [ 26.909048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.915513][ T287] Modules linked in: [ 26.920306][ T287] ---[ end trace 0000000000000000 ]--- [ 26.924762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.927082][ T287] RIP: 0010:may_delete+0x701/0x710 [ 26.930174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.934005][ T287] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 a0 16 f4 ff e9 77 fe ff ff e8 f6 bc af ff 0f 0b e8 ef bc af ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 26.934022][ T287] RSP: 0018:ffffc9000da8fc20 EFLAGS: 00010293 [ 26.934039][ T287] RAX: ffffffff81c03a81 RBX: ffff88811684b000 RCX: ffff88810de40000 [ 26.934052][ T287] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 26.934063][ T287] RBP: ffffc9000da8fc88 R08: 0000000000000004 R09: 0000000000000003 [ 26.934073][ T287] R10: fffff52001b51f64 R11: 1ffff92001b51f64 R12: dffffc0000000000 [ 26.943171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.946705][ T287] R13: 0000000000000001 R14: ffff88810ebe1470 R15: 1ffff11022d09600 [ 27.240434][ T287] FS: 000055557e185500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 27.249928][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.256966][ T287] CR2: 000055557f00b4a8 CR3: 00000001309ee000 CR4: 00000000003526b0 [ 27.265096][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.273456][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.281548][ T287] Kernel panic - not syncing: Fatal exception [ 27.287894][ T287] Kernel Offset: disabled [ 27.292206][ T287] Rebooting in 86400 seconds..