last executing test programs: 5.064169994s ago: executing program 2 (id=3): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYRES8=r3], 0x90}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES8=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYBLOB="00000000000000000000000000000000000000009bf2b23f42758241da84", @ANYRES32=0x0], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES64=r4], 0x9) 4.957788898s ago: executing program 1 (id=2): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYRES8=r3], 0x90}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYBLOB="00000000000000000000000000000000000000009bf2b23f42758241da84", @ANYRES32=0x0], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES64=r4], 0x9) 4.791317575s ago: executing program 0 (id=1): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x300}, 0x80) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x30}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.773846406s ago: executing program 3 (id=4): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x3, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.641134871s ago: executing program 4 (id=5): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000180)={0x40003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x3, 0x4, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.313552346s ago: executing program 4 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100003}, {0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x8000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x84, 0x0, 0x400}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x10}, 0x1c) 4.229022699s ago: executing program 3 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100003}, {0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x8000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x84, 0x0, 0x400}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x10}, 0x1c) 2.385078588s ago: executing program 4 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000008340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaae187a58b0a0101020a01010101441411f36401010200000009e0000001fffffff70000004e274e2700"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2fffd907800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES16=r3, @ANYRES8=r3, @ANYRES8=r4, @ANYBLOB="8bba0f88e3fbf955e9bf03813861d399515d0124c774adc144cd197f99c24cd6a9214f4a38661a81f30b95b7ca95ae9bd6b35f442b9a21fa9486dfe1f84da7dfd9ab84d003378f857cd81ee94b84898d2cd86c3e8baa3e3c57c9681cf46ca22161d0c35123a2667d14d420b284eb8515fa84aa76500bc4e09fdff7128091c7134f6e260698c6be112efabc3a8a2ca247e93dd7ce0c94dccfa13211b791f69f9daaabad010a0421c2f80cbaab3bf109b93c4b90ca98107f1adbf4dd", @ANYRES16=r5, @ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="73e2ef72920eb3b2526fb4c7d868c688c68de6c803fda347650573f011e9a293bf9d46c0886f7e9461ac0039dfc53b4fd7bad4e84163dfe11e09aab0ee00ae654fb60cb6820b2d2f1dc8d976cdbe26930aff2417c89b94538d440732855227456314a2411450ca"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000220014000000000000181100005df38fe29a65988d68e52e1867f12f5e26669789f6d70bed742e4cc2ad1a75881d58db4274747daf9c091278fd4df8e2f993f75685d2bc28bf504066fd5a4574562a2c37c34ed47241b653b9b72a7aaeba23c6b7ee1b6c28f684651fffa59983bc191742e687d5dcd3620a91738dc196900eeee262fdad92bef1d7ea979f91e1a32fdeecb4a0c13c5920", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_clone(0x27054700, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) wait4(r7, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x14, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r8, 0x20, &(0x7f00000003c0)={&(0x7f0000000580)=""/255, 0xff, 0x0, &(0x7f0000000680)=""/200, 0xc8}}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fec}]}) sched_getscheduler(0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.369012019s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100003}, {0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x8000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x84, 0x0, 0x400}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x10}, 0x1c) 2.368104329s ago: executing program 3 (id=10): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x200000) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000380)=0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000003c0)={@rand_addr, @loopback, @dev}, &(0x7f0000000400)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0x4, 0x2}, 0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000500)=0x0) setpgid(r4, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000540)={0x2, 'ip_vti0\x00'}, 0x18) waitid(0x2, r4, &(0x7f0000000580), 0x2, &(0x7f0000000600)) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10, 0x800) setrlimit(0xd, &(0x7f0000000740)={0x9, 0x6}) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r6 = accept(r1, 0x0, &(0x7f0000000880)) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000008c0)="ed000eaa13ced56a970aa95fb9d0a0d54ea45f95d0045a8111c6f6f79f8f97c0865d9d6f00df22e8808757a50668557430fc04f38c3a096057f4883519b2f26cf3ff544811806ac5fe5c54eab55d21a061caa95596601bd61887e2bf6477503d210145d945f6883ba160de4f161d3ab77d12deb2f0bd10ab2b7e87132bf2bd6123ee2df57e43506107f4cff6218714759f44545f2ffc50761827e9f04725f513be93926359", 0xa5}, {&(0x7f0000000980)="3effbb7f1e8796314ea536188d4c9284e567b72281117c1bbc3beb00794255d5dedff1f94787e08c195de6ceadb545cb84f4ca3b939529cde8ee826404019edd9e81d77a2bf8438e84627a48d992c03e030d464cd6c34e8034", 0x59}, {&(0x7f0000000a00)="52fe3d62b6f1cb119c043c68b48a8988f05f51344762b6927fc7c212d2d6763f4b2febb4fe3e229e18e0", 0x2a}], 0x3) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000a80)="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", 0x1000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003b00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000003b40)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000003c40)={&(0x7f0000001a80), 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x24080000) fchdir(r1) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000003cc0), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, r11, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000003dc0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000003f80)={'broute\x00', 0x0, 0x4, 0xa5, [0x8000000000000000, 0x7, 0x3, 0x7fff, 0x8, 0x5], 0xa, &(0x7f0000003e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000003ec0)=""/165}, &(0x7f0000004000)=0x78) 2.32545099s ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="021228bd7000fbdbdf250800000030000380080005007f0000010800010002000000080003000000000014000600ff02000000000000000000000000000108000500000200002400028006000b000a000000080009089c00d80104000006000e004e210000240002800800090000000000060002004e24000005000d00010000000800060007000000080005000600000008000400010000804400038008000500e000000a1400ad04ead4a3d236060000000000000000000000ffffe0100001080003000200000014000600fe8800000000000000000000000001010600"/233], 0xe8}, 0x1, 0x0, 0x0, 0x5}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') getdents64(r3, &(0x7f00000088c0)=""/42, 0x2a) getdents(r3, 0xffffffffffffffff, 0x5a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r9}, 0x18) 2.059062282s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100003}, {0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x8000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x84, 0x0, 0x400}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x10}, 0x1c) 917.810131ms ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f00000004c0)=ANY=[], 0xff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x2044448, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f00000000c0)='./file1\x00', 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 812.300555ms ago: executing program 2 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 511.237808ms ago: executing program 1 (id=15): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfb, 0x4a0, &(0x7f0000000e00)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x441, &(0x7f0000000180)=ANY=[@ANYRES64], 0xf9, 0x292, &(0x7f0000001340)="$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") open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x8001) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 0s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100003}, {0x9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x8000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x84, 0x0, 0x400}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x10}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 18.815323][ T24] audit: type=1400 audit(1764304335.720:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.816291][ T267] cgroup: Unknown subsys name 'net' [ 18.819388][ T24] audit: type=1400 audit(1764304335.720:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.824635][ T24] audit: type=1400 audit(1764304335.720:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.824788][ T267] cgroup: Unknown subsys name 'devices' [ 18.914474][ T267] cgroup: Unknown subsys name 'hugetlb' [ 18.920082][ T267] cgroup: Unknown subsys name 'rlimit' [ 19.117468][ T24] audit: type=1400 audit(1764304336.020:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.129569][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.141003][ T24] audit: type=1400 audit(1764304336.020:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.173932][ T24] audit: type=1400 audit(1764304336.020:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.197172][ T24] audit: type=1400 audit(1764304336.060:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.222639][ T24] audit: type=1400 audit(1764304336.060:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.249411][ T24] audit: type=1400 audit(1764304336.160:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.274890][ T24] audit: type=1400 audit(1764304336.160:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.274939][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.109649][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.116828][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.124300][ T276] device bridge_slave_0 entered promiscuous mode [ 21.132666][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.139872][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.147296][ T276] device bridge_slave_1 entered promiscuous mode [ 21.208375][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.215938][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.223296][ T278] device bridge_slave_0 entered promiscuous mode [ 21.236445][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.243533][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.250896][ T278] device bridge_slave_1 entered promiscuous mode [ 21.268356][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.275504][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.282767][ T275] device bridge_slave_0 entered promiscuous mode [ 21.301509][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.308621][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.315962][ T279] device bridge_slave_0 entered promiscuous mode [ 21.322565][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.329678][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.337140][ T275] device bridge_slave_1 entered promiscuous mode [ 21.352892][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.359928][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.367358][ T279] device bridge_slave_1 entered promiscuous mode [ 21.399942][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.406996][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.414287][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.421377][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.436091][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.443441][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.450798][ T277] device bridge_slave_0 entered promiscuous mode [ 21.460155][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.467479][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.474881][ T277] device bridge_slave_1 entered promiscuous mode [ 21.526577][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.533632][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.540896][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.547947][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.577598][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.585088][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.592299][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.599554][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.607320][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.614738][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.643489][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.651198][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.659448][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.666484][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.673925][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.682021][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.689046][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.696685][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.705082][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.712167][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.719499][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.727634][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.734655][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.774000][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.781891][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.790540][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.805006][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.812648][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.820775][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.827802][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.835408][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.866457][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.875718][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.883810][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.891908][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.898979][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.910041][ T278] device veth0_vlan entered promiscuous mode [ 21.922084][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.930651][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.938423][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.946516][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.954069][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.963522][ T276] device veth0_vlan entered promiscuous mode [ 21.970656][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.981662][ T278] device veth1_macvtap entered promiscuous mode [ 21.990815][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.998531][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.006107][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.014515][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.022575][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.029604][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.037035][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.049939][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.058152][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.066434][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.073469][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.082271][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.097435][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.105608][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.112609][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.119961][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.128704][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.135736][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.143626][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.152087][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.176454][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.184858][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.192848][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.200847][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.209209][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.217899][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.225832][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.234069][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.241896][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.250242][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.258608][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.266999][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.275232][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.283111][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.290937][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.298967][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.306830][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.314692][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.322878][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.331144][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.339536][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.347068][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.354539][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.361874][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.372121][ T276] device veth1_macvtap entered promiscuous mode [ 22.381415][ T277] device veth0_vlan entered promiscuous mode [ 22.388082][ T275] device veth0_vlan entered promiscuous mode [ 22.394365][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.402585][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.410803][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.427878][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.436236][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.445069][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.453691][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.466348][ T277] device veth1_macvtap entered promiscuous mode [ 22.473213][ T278] request_module fs-gadgetfs succeeded, but still no fs? [ 22.478535][ T275] device veth1_macvtap entered promiscuous mode [ 22.488261][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.491815][ T279] device veth0_vlan entered promiscuous mode [ 22.505799][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.514229][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.523047][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.531043][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.540530][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.548859][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.556648][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.565813][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.574481][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.582581][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.626530][ T279] device veth1_macvtap entered promiscuous mode [ 22.636623][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.644278][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.651743][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.660352][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.668846][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.677465][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.686078][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.694891][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.713245][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.721538][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.740270][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.750288][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.769444][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.815057][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.837315][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.853258][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.876110][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.919536][ T310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.520059][ T331] sched: RT throttling activated [ 25.217701][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 25.217710][ T24] audit: type=1400 audit(1764304342.120:107): avc: denied { getopt } for pid=338 comm="syz.3.10" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.282944][ T24] audit: type=1400 audit(1764304342.160:108): avc: denied { create } for pid=342 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 25.553752][ T348] SELinux: Context Ü is not valid (left unmapped). [ 25.640426][ T24] audit: type=1400 audit(1764304342.160:109): avc: denied { setopt } for pid=342 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.665041][ T355] ====================================================== [ 26.665041][ T355] WARNING: the mand mount option is being deprecated and [ 26.665041][ T355] will be removed in v5.15! [ 26.665041][ T355] ====================================================== [ 26.741172][ T24] audit: type=1400 audit(1764304342.170:110): avc: denied { prog_run } for pid=336 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.798573][ T355] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 26.905275][ T24] audit: type=1400 audit(1764304343.690:111): avc: denied { unlink } for pid=354 comm="syz.0.13" name="#1" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.031420][ T24] audit: type=1400 audit(1764304343.690:112): avc: denied { mount } for pid=354 comm="syz.0.13" name="/" dev="overlay" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.053577][ T24] audit: type=1400 audit(1764304343.690:113): avc: denied { remount } for pid=354 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.142960][ T363] Zero length message leads to an empty skb [ 27.207217][ T355] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.245779][ T24] audit: type=1400 audit(1764304344.030:114): avc: denied { create } for pid=356 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.299531][ T365] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.1.15: corrupted xattr block 95 [ 27.313562][ T365] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 27.347807][ T355] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 27.384916][ T365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.15: bg 0: block 7: invalid block bitmap [ 27.430865][ T365] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 27.443915][ T365] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2931: inode #11: comm syz.1.15: corrupted xattr block 95 [ 27.506800][ T24] audit: type=1400 audit(1764304344.410:115): avc: denied { write } for pid=354 comm="syz.0.13" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.516965][ T365] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 27.547341][ T355] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.13: Allocating blocks 497-513 which overlap fs metadata [ 27.557647][ T365] EXT4-fs (loop1): 1 orphan inode deleted [ 27.567291][ T365] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.573444][ T24] audit: type=1400 audit(1764304344.410:116): avc: denied { add_name } for pid=354 comm="syz.0.13" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.617140][ T355] EXT4-fs (loop0): pa ffff88811a4bcdc8: logic 128, phys. 385, len 8 [ 27.625275][ T355] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 27.866507][ T376] syz.1.15[376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.867253][ T376] syz.1.15[376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.733499][ T355] ================================================================== [ 28.752619][ T355] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3a6a/0x4920 [ 28.760692][ T355] Read of size 4 at addr ffff888129e33c18 by task syz.0.13/355 [ 28.768221][ T355] [ 28.770558][ T355] CPU: 1 PID: 355 Comm: syz.0.13 Not tainted syzkaller #0 [ 28.777652][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.787713][ T355] Call Trace: [ 28.790999][ T355] __dump_stack+0x21/0x24 [ 28.795331][ T355] dump_stack_lvl+0x169/0x1d8 [ 28.800002][ T355] ? show_regs_print_info+0x18/0x18 [ 28.805188][ T355] ? thaw_kernel_threads+0x220/0x220 [ 28.810466][ T355] print_address_description+0x7f/0x2c0 [ 28.816000][ T355] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 28.821634][ T355] kasan_report+0xe2/0x130 [ 28.826072][ T355] ? __read_extent_tree_block+0x1e8/0x790 [ 28.831783][ T355] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 28.837538][ T355] __asan_report_load4_noabort+0x14/0x20 [ 28.843177][ T355] ext4_ext_remove_space+0x3a6a/0x4920 [ 28.848627][ T355] ? __bpf_trace_kmem_free+0x6f/0x90 [ 28.853993][ T355] ? count_rsvd+0x156/0x8a0 [ 28.858502][ T355] ? __es_remove_extent+0xdc5/0x16f0 [ 28.863777][ T355] ? _raw_write_lock+0x8e/0xe0 [ 28.868536][ T355] ? ext4_da_release_space+0x19f/0x410 [ 28.873984][ T355] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 28.880039][ T355] ext4_ext_truncate+0x169/0x1f0 [ 28.884962][ T355] ext4_truncate+0xaea/0x1290 [ 28.889631][ T355] ? __ext4_mark_inode_dirty+0x610/0x610 [ 28.895259][ T355] ? __kasan_check_read+0x11/0x20 [ 28.900278][ T355] ext4_write_begin+0xd78/0x15a0 [ 28.905211][ T355] ? ext4_readahead+0x110/0x110 [ 28.910058][ T355] ? can_reuse_spf_vma+0xe0/0xe0 [ 28.914986][ T355] ? __ext4_get_inode_loc+0x544/0xc20 [ 28.920353][ T355] ? __kasan_check_write+0x14/0x20 [ 28.925455][ T355] ? down_read_trylock+0x100/0x150 [ 28.930640][ T355] ? __init_rwsem+0x1c0/0x1c0 [ 28.935308][ T355] ext4_da_write_begin+0x455/0xe80 [ 28.940668][ T355] ? up_read+0x12/0x50 [ 28.944735][ T355] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 28.950007][ T355] ? __ext4_journal_stop+0x36/0x1a0 [ 28.955206][ T355] ? exc_page_fault+0x67/0xc0 [ 28.959875][ T355] ? asm_exc_page_fault+0x1e/0x30 [ 28.964897][ T355] ? __get_user_nocheck_1+0x6/0x10 [ 28.969999][ T355] generic_perform_write+0x2be/0x510 [ 28.975271][ T355] ? preempt_count_add+0x90/0x1b0 [ 28.980290][ T355] ? grab_cache_page_write_begin+0xb0/0xb0 [ 28.986102][ T355] ? down_write+0xac/0x110 [ 28.990506][ T355] ? down_read_killable+0xe0/0xe0 [ 28.995518][ T355] ? futex_wait+0x526/0x680 [ 29.000012][ T355] ? generic_write_checks+0x3b3/0x480 [ 29.005363][ T355] ext4_buffered_write_iter+0x4b8/0x640 [ 29.010890][ T355] ext4_file_write_iter+0x536/0x1980 [ 29.016157][ T355] ? avc_policy_seqno+0x1b/0x70 [ 29.020985][ T355] ? selinux_file_permission+0x2a5/0x510 [ 29.026603][ T355] ? ext4_file_read_iter+0x530/0x530 [ 29.031867][ T355] ? security_file_permission+0x83/0xa0 [ 29.037387][ T355] ? iov_iter_init+0x3f/0x120 [ 29.042041][ T355] vfs_write+0x725/0xd60 [ 29.046259][ T355] ? kernel_write+0x3c0/0x3c0 [ 29.050914][ T355] ? __fget_files+0x2c4/0x320 [ 29.055915][ T355] ? __fdget+0x1a1/0x230 [ 29.060145][ T355] ? __x64_sys_pwrite64+0xec/0x220 [ 29.065230][ T355] __x64_sys_pwrite64+0x191/0x220 [ 29.070235][ T355] ? ksys_pwrite64+0x1b0/0x1b0 [ 29.074974][ T355] ? __kasan_check_read+0x11/0x20 [ 29.079973][ T355] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 29.085579][ T355] do_syscall_64+0x31/0x40 [ 29.089971][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.095835][ T355] RIP: 0033:0x7fd86700d749 [ 29.100229][ T355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.120017][ T355] RSP: 002b:00007fd865a75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 29.128595][ T355] RAX: ffffffffffffffda RBX: 00007fd867263fa0 RCX: 00007fd86700d749 [ 29.136549][ T355] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 000000000000000c [ 29.144499][ T355] RBP: 00007fd867091f91 R08: 0000000000000000 R09: 0000000000000000 [ 29.152452][ T355] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 29.160401][ T355] R13: 00007fd867264038 R14: 00007fd867263fa0 R15: 00007ffd8a14cdb8 [ 29.168354][ T355] [ 29.170660][ T355] The buggy address belongs to the page: [ 29.176271][ T355] page:ffffea0004a78cc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x129e33 [ 29.186485][ T355] flags: 0x4000000000000000() [ 29.191224][ T355] raw: 4000000000000000 ffffea0004a79408 ffffea0004a78d08 0000000000000000 [ 29.199867][ T355] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 29.208421][ T355] page dumped because: kasan: bad access detected [ 29.214811][ T355] page_owner tracks the page as freed [ 29.220180][ T355] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 337, ts 25381635515, free_ts 27550456037 [ 29.234670][ T355] prep_new_page+0x179/0x180 [ 29.239237][ T355] get_page_from_freelist+0x2235/0x23d0 [ 29.244754][ T355] __alloc_pages_nodemask+0x268/0x5f0 [ 29.250096][ T355] shmem_alloc_page+0x1b1/0x300 [ 29.254921][ T355] shmem_alloc_and_acct_page+0x36f/0x7b0 [ 29.260612][ T355] shmem_getpage_gfp+0x625/0x2110 [ 29.265697][ T355] shmem_fault+0x2b7/0x640 [ 29.270087][ T355] handle_pte_fault+0x1fa5/0x3750 [ 29.275092][ T355] handle_mm_fault+0xf3f/0x16a0 [ 29.279920][ T355] __get_user_pages+0xbe9/0x13e0 [ 29.284830][ T355] __mm_populate+0x33b/0x420 [ 29.289400][ T355] vm_mmap_pgoff+0x223/0x340 [ 29.294405][ T355] ksys_mmap_pgoff+0xfd/0x1e0 [ 29.299073][ T355] __x64_sys_mmap+0xfa/0x110 [ 29.303639][ T355] do_syscall_64+0x31/0x40 [ 29.308059][ T355] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.313921][ T355] page last free stack trace: [ 29.318574][ T355] free_unref_page_prepare+0x2b7/0x2d0 [ 29.324009][ T355] free_unref_page_list+0x12e/0x9b0 [ 29.329215][ T355] release_pages+0xe38/0xe80 [ 29.333774][ T355] __pagevec_release+0x71/0xe0 [ 29.338713][ T355] shmem_undo_range+0x6e1/0x1760 [ 29.343629][ T355] shmem_evict_inode+0x1fd/0x9c0 [ 29.348627][ T355] evict+0x478/0x910 [ 29.352495][ T355] iput+0x638/0x7c0 [ 29.356277][ T355] dentry_unlink_inode+0x2cf/0x380 [ 29.361362][ T355] __dentry_kill+0x44f/0x650 [ 29.365947][ T355] dentry_kill+0xc0/0x2a0 [ 29.370254][ T355] dput+0x42/0x80 [ 29.373864][ T355] __fput+0x4fe/0x770 [ 29.377817][ T355] ____fput+0x15/0x20 [ 29.381780][ T355] task_work_run+0x127/0x190 [ 29.386351][ T355] do_exit+0xa4f/0x2480 [ 29.390474][ T355] [ 29.392776][ T355] Memory state around the buggy address: [ 29.398382][ T355] ffff888129e33b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.406419][ T355] ffff888129e33b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.414548][ T355] >ffff888129e33c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.422644][ T355] ^ [ 29.427468][ T355] ffff888129e33c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.435504][ T355] ffff888129e33d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.443645][ T355] ================================================================== [ 29.451949][ T355] Disabling lock debugging due to kernel taint [ 29.532009][ T379] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 203 with max blocks 1 with error 117 [ 29.548009][ T379] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.548009][ T379] [ 30.393370][ T379] device bridge_slave_1 left promiscuous mode [ 30.399565][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.407265][ T379] device bridge_slave_0 left promiscuous mode [ 30.413543][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.421708][ T379] device veth1_macvtap left promiscuous mode [ 30.427899][ T379] device veth0_vlan left promiscuous mode