last executing test programs: 6.122053043s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 5.818113437s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 5.811185098s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 4.848052923s ago: executing program 4 (id=8): socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.432435712s ago: executing program 3 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000fcdbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 3.535330544s ago: executing program 4 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100283d7000fcdbdf250c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 3.374017032s ago: executing program 3 (id=14): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.855160726s ago: executing program 3 (id=16): pipe(0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.754233021s ago: executing program 3 (id=18): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x58, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x40008}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2.55180104s ago: executing program 3 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000fcdbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 2.503838173s ago: executing program 1 (id=20): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x7ff, 0x18}, 0xc) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) 2.463427154s ago: executing program 0 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 2.376930979s ago: executing program 1 (id=22): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12000b", 0x28, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x407, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x4e, 0x1}, {0x5, 0x5}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x80, 0x400e}}) 2.3363399s ago: executing program 1 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 2.274812473s ago: executing program 2 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) 1.122736437s ago: executing program 4 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100283d7000fcdbdf"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 1.023645432s ago: executing program 3 (id=26): listen(0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a000}, 0x0) 974.823634ms ago: executing program 0 (id=27): add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000001a40), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 727.861276ms ago: executing program 1 (id=28): epoll_create(0x10002e78) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000010a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210000, &(0x7f0000000140)={[{@noquota}, {@noquota}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@noquota}, {@nojournal_checksum}, {@errors_continue}, {@barrier}, {@usrjquota}, {}, {@abort}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x841, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) 441.637399ms ago: executing program 0 (id=29): socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 420.26985ms ago: executing program 0 (id=30): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = gettid() tkill(r3, 0x13) 411.576651ms ago: executing program 1 (id=31): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc404) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) r0 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0xfdffffff, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080), 0x1}, 0x20) 328.794924ms ago: executing program 1 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r8 = gettid() tkill(r8, 0x2a) epoll_pwait(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) close_range(0xffffffffffffffff, r4, 0x200000000000000) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0xc) 258.756148ms ago: executing program 0 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 0s ago: executing program 4 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0xfffffeff) fallocate(r0, 0x20, 0x0, 0x4000) kernel console output (not intermixed with test programs): [ 21.753268][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 21.753284][ T29] audit: type=1400 audit(1790165004.867:118): avc: denied { write } for pid=3229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.787121][ T29] audit: type=1400 audit(1790165004.907:119): avc: denied { write } for pid=3240 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.847142][ T29] audit: type=1400 audit(1790165004.967:120): avc: denied { write } for pid=3243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.858622][ T29] audit: type=1400 audit(1790165004.977:121): avc: denied { write } for pid=3254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.931180][ T29] audit: type=1400 audit(1790165005.047:122): avc: denied { write } for pid=3257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.961709][ T29] audit: type=1400 audit(1790165005.077:123): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.439731][ T29] audit: type=1400 audit(1790165005.557:124): avc: denied { write } for pid=3271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.470856][ T29] audit: type=1400 audit(1790165005.587:125): avc: denied { write } for pid=3282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 28.327413][ T29] audit: type=1400 audit(1790165011.447:126): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.327650][ T29] audit: type=1400 audit(1790165011.447:127): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.328095][ T3294] cgroup: Unknown subsys name 'net' [ 28.328321][ T29] audit: type=1400 audit(1790165011.447:128): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.454495][ T3294] cgroup: Unknown subsys name 'cpuset' [ 28.455068][ T3294] cgroup: Unknown subsys name 'rlimit' [ 28.559538][ T29] audit: type=1400 audit(1790165011.677:129): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.560671][ T29] audit: type=1400 audit(1790165011.677:130): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.560737][ T29] audit: type=1400 audit(1790165011.677:131): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.560912][ T29] audit: type=1400 audit(1790165011.677:132): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.565668][ T29] audit: type=1400 audit(1790165011.687:133): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.565699][ T29] audit: type=1400 audit(1790165011.687:134): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.608947][ T29] audit: type=1400 audit(1790165011.727:135): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.656941][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.735448][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.014986][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.015072][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.015132][ T3309] bridge_slave_0: entered allmulticast mode [ 30.015658][ T3309] bridge_slave_0: entered promiscuous mode [ 30.059642][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.059720][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.059813][ T3309] bridge_slave_1: entered allmulticast mode [ 30.060334][ T3309] bridge_slave_1: entered promiscuous mode [ 30.060623][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.060675][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.060721][ T3315] bridge_slave_0: entered allmulticast mode [ 30.061249][ T3315] bridge_slave_0: entered promiscuous mode [ 30.073206][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.074511][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.084767][ T3309] team0: Port device team_slave_0 added [ 30.085715][ T3309] team0: Port device team_slave_1 added [ 30.095715][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.095729][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.095757][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.096340][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.096351][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.096379][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.113217][ T3309] hsr_slave_0: entered promiscuous mode [ 30.113532][ T3309] hsr_slave_1: entered promiscuous mode [ 30.151350][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.151379][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.151530][ T3315] bridge_slave_1: entered allmulticast mode [ 30.152004][ T3315] bridge_slave_1: entered promiscuous mode [ 30.160618][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.160695][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.160749][ T3305] bridge_slave_0: entered allmulticast mode [ 30.161256][ T3305] bridge_slave_0: entered promiscuous mode [ 30.177667][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.177699][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.177863][ T3305] bridge_slave_1: entered allmulticast mode [ 30.178280][ T3305] bridge_slave_1: entered promiscuous mode [ 30.237421][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.237607][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.237636][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.237716][ T3304] bridge_slave_0: entered allmulticast mode [ 30.238225][ T3304] bridge_slave_0: entered promiscuous mode [ 30.248882][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.253695][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.254324][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.254354][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.254428][ T3304] bridge_slave_1: entered allmulticast mode [ 30.254775][ T3304] bridge_slave_1: entered promiscuous mode [ 30.270248][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.293334][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.301133][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.301176][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.301226][ T3311] bridge_slave_0: entered allmulticast mode [ 30.301692][ T3311] bridge_slave_0: entered promiscuous mode [ 30.303364][ T3315] team0: Port device team_slave_0 added [ 30.304523][ T3315] team0: Port device team_slave_1 added [ 30.310986][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.323309][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.323348][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.323431][ T3311] bridge_slave_1: entered allmulticast mode [ 30.324142][ T3311] bridge_slave_1: entered promiscuous mode [ 30.325406][ T3305] team0: Port device team_slave_0 added [ 30.326530][ T3305] team0: Port device team_slave_1 added [ 30.350282][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.350295][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.350323][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.356513][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.356526][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.356563][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.365250][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.365263][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.365292][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.366018][ T3304] team0: Port device team_slave_0 added [ 30.367068][ T3304] team0: Port device team_slave_1 added [ 30.367275][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.367286][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.367314][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.385121][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.389219][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.390609][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.391845][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.407878][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.409955][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.410621][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.419072][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.432508][ T3315] hsr_slave_0: entered promiscuous mode [ 30.432859][ T3315] hsr_slave_1: entered promiscuous mode [ 30.433144][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.433157][ T3315] Cannot create hsr debugfs directory [ 30.433512][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.433523][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.433656][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.434262][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.434273][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.434376][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.443787][ T3311] team0: Port device team_slave_0 added [ 30.449397][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.456124][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.464448][ T3311] team0: Port device team_slave_1 added [ 30.466923][ T3305] hsr_slave_0: entered promiscuous mode [ 30.467193][ T3305] hsr_slave_1: entered promiscuous mode [ 30.467401][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.467413][ T3305] Cannot create hsr debugfs directory [ 30.508990][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.509007][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.509038][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.512017][ T3304] hsr_slave_0: entered promiscuous mode [ 30.512442][ T3304] hsr_slave_1: entered promiscuous mode [ 30.512661][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.512674][ T3304] Cannot create hsr debugfs directory [ 30.517159][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.517173][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.517211][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.568568][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.568602][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.568850][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.568898][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.577431][ T3311] hsr_slave_0: entered promiscuous mode [ 30.577819][ T3311] hsr_slave_1: entered promiscuous mode [ 30.578068][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 30.578080][ T3311] Cannot create hsr debugfs directory [ 30.720611][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.725648][ T3315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.742256][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.742837][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.746317][ T3315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.761705][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.765127][ T3315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.806712][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.817295][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.124344][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.132687][ T3315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.153609][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.159900][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.162535][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.163162][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.169704][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.183895][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.191450][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.205520][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.207462][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.207977][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.209742][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.210724][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.210797][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.223967][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.229699][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.255229][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.259754][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.261696][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.266625][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.267888][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.267918][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.281246][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.281919][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.286999][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.299001][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.308231][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.323448][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.328812][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.332055][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.341361][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.349435][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.358312][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.358347][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.359989][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.360019][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.429875][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.452092][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.453360][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.477251][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.477287][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.486622][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.486656][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.496470][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.502148][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.502181][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.517534][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.517570][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.571991][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.589134][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.593835][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.593867][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.617529][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.617565][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.680810][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.736327][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.788981][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.839698][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.879477][ T3309] veth0_vlan: entered promiscuous mode [ 31.881862][ T3309] veth1_vlan: entered promiscuous mode [ 31.898795][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.903719][ T3309] veth0_macvtap: entered promiscuous mode [ 31.910009][ T3309] veth1_macvtap: entered promiscuous mode [ 31.928146][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.942513][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.983789][ T3315] veth0_vlan: entered promiscuous mode [ 32.006048][ T3315] veth1_vlan: entered promiscuous mode [ 32.030936][ T3315] veth0_macvtap: entered promiscuous mode [ 32.047196][ T3315] veth1_macvtap: entered promiscuous mode [ 32.050738][ T3309] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.093366][ T3311] veth0_vlan: entered promiscuous mode [ 32.103514][ T3305] veth0_vlan: entered promiscuous mode [ 32.104832][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.104906][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.104968][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105008][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.106111][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.114868][ T3311] veth1_vlan: entered promiscuous mode [ 32.116434][ T3305] veth1_vlan: entered promiscuous mode [ 32.119601][ T3304] veth0_vlan: entered promiscuous mode [ 32.122753][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.130270][ T3304] veth1_vlan: entered promiscuous mode [ 32.163069][ T3305] veth0_macvtap: entered promiscuous mode [ 32.169197][ T3311] veth0_macvtap: entered promiscuous mode [ 32.180670][ T3305] veth1_macvtap: entered promiscuous mode [ 32.182483][ T3304] veth0_macvtap: entered promiscuous mode [ 32.201834][ T3311] veth1_macvtap: entered promiscuous mode [ 32.203439][ T3304] veth1_macvtap: entered promiscuous mode [ 32.222936][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.227113][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.229436][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.230869][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.240592][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.244098][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.604332][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.684411][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705133][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705315][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705623][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.706800][ T374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707063][ T374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707355][ T374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707633][ T374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707801][ T374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707964][ T374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734178][ T374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734710][ T432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734751][ T432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734860][ T432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734893][ T432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.021393][ T3515] syz.3.4 (3515) used greatest stack depth: 10400 bytes left [ 33.667766][ T3535] syz.4.5 (3535) used greatest stack depth: 9400 bytes left [ 33.802105][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 33.802147][ T29] audit: type=1400 audit(1790165016.917:168): avc: denied { create } for pid=3543 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.839671][ T29] audit: type=1400 audit(1790165016.957:169): avc: denied { create } for pid=3543 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.866433][ T29] audit: type=1400 audit(1790165016.987:170): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.866540][ T29] audit: type=1400 audit(1790165016.987:171): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.866567][ T29] audit: type=1400 audit(1790165016.987:172): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.228172][ T29] audit: type=1400 audit(1790165018.347:173): avc: denied { mount } for pid=3566 comm="syz.1.13" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.228546][ T29] audit: type=1400 audit(1790165018.347:174): avc: denied { search } for pid=3566 comm="syz.1.13" name="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.228571][ T29] audit: type=1400 audit(1790165018.347:175): avc: denied { search } for pid=3566 comm="syz.1.13" name="target" dev="configfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.229014][ T29] audit: type=1400 audit(1790165018.347:176): avc: denied { search } for pid=3566 comm="syz.1.13" name="core" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.229038][ T29] audit: type=1400 audit(1790165018.347:177): avc: denied { write search } for pid=3566 comm="syz.1.13" name="core" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.885637][ T3582] FAULT_INJECTION: forcing a failure. [ 35.885637][ T3582] name failslab, interval 1, probability 0, space 0, times 1 [ 35.885710][ T3582] CPU: 1 UID: 0 PID: 3582 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.885735][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.885753][ T3582] Call Trace: [ 35.885759][ T3582] [ 35.885792][ T3582] __dump_stack+0x1d/0x30 [ 35.885823][ T3582] dump_stack_lvl+0x95/0xd0 [ 35.885876][ T3582] dump_stack+0x15/0x1b [ 35.885914][ T3582] should_fail_ex+0x262/0x280 [ 35.885941][ T3582] should_failslab+0x8c/0xb0 [ 35.886051][ T3582] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 35.886091][ T3582] ? security_context_to_sid_core+0xab/0x420 [ 35.886131][ T3582] ? security_context_to_sid_core+0xab/0x420 [ 35.886159][ T3582] kstrdup+0x3e/0xd0 [ 35.886183][ T3582] security_context_to_sid_core+0xab/0x420 [ 35.886276][ T3582] security_context_to_sid_force+0x30/0x40 [ 35.886299][ T3582] selinux_lsm_setattr+0x31e/0x650 [ 35.886402][ T3582] selinux_setselfattr+0x33/0x50 [ 35.886472][ T3582] security_setselfattr+0x22a/0x260 [ 35.886587][ T3582] __x64_sys_lsm_set_self_attr+0xa0/0xe0 [ 35.886613][ T3582] x64_sys_call+0x1de6/0x2550 [ 35.886638][ T3582] do_syscall_64+0x112/0x360 [ 35.886657][ T3582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.886680][ T3582] RIP: 0033:0x7f267dd5e159 [ 35.886706][ T3582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.886728][ T3582] RSP: 002b:00007f267c7b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 35.886746][ T3582] RAX: ffffffffffffffda RBX: 00007f267dfe5fa0 RCX: 00007f267dd5e159 [ 35.886760][ T3582] RDX: 0000000000000021 RSI: 0000200000000440 RDI: 0000000000000066 [ 35.886772][ T3582] RBP: 00007f267ddf506b R08: 0000000000000000 R09: 0000000000000000 [ 35.886785][ T3582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.886799][ T3582] R13: 00007f267dfe6038 R14: 00007f267dfe5fa0 R15: 00007ffddaa9d8a8 [ 35.886894][ T3582] [ 35.890058][ T432] IPVS: starting estimator thread 0... [ 35.983946][ T3585] IPVS: using max 2400 ests per chain, 120000 per kthread [ 36.220829][ T3593] netlink: 'syz.1.20': attribute type 21 has an invalid length. [ 36.221016][ T3593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20'. [ 36.923296][ T3603] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 38.000556][ T3617] loop1: detected capacity change from 0 to 1024 [ 38.038553][ T3617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.073047][ T3615] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 38.201939][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 38.201997][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.201997][ T31] [ 38.202010][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 38.202023][ T31] EXT4-fs (loop1): Free/Dirty block details [ 38.202035][ T31] EXT4-fs (loop1): free_blocks=20480 [ 38.202048][ T31] EXT4-fs (loop1): dirty_blocks=320 [ 38.202060][ T31] EXT4-fs (loop1): Block reservation details [ 38.202116][ T31] EXT4-fs (loop1): i_reserved_data_blocks=20 [ 38.205841][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.370984][ T3633] bridge_slave_1: left allmulticast mode [ 38.371009][ T3633] bridge_slave_1: left promiscuous mode [ 38.371177][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.372168][ T3633] bridge_slave_0: left allmulticast mode [ 38.372184][ T3633] bridge_slave_0: left promiscuous mode [ 38.372346][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.659625][ T3637] EXT4-fs (sda1): shut down requested (0) [ 38.891090][ T3637] ================================================================== [ 38.891125][ T3637] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 38.891161][ T3637] [ 38.891167][ T3637] read-write to 0xffff888107674908 of 8 bytes by task 31 on cpu 1: [ 38.891183][ T3637] __xa_clear_mark+0xf5/0x1e0 [ 38.891204][ T3637] __folio_end_writeback+0xe7/0x530 [ 38.891240][ T3637] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 38.891264][ T3637] folio_end_writeback+0x1c/0x70 [ 38.891282][ T3637] ext4_finish_bio+0x454/0x770 [ 38.891302][ T3637] ext4_release_io_end+0x9f/0x1f0 [ 38.891325][ T3637] ext4_end_io_end+0x18d/0x240 [ 38.891348][ T3637] ext4_end_io_rsv_work+0x15b/0x1f0 [ 38.891374][ T3637] process_scheduled_works+0x56a/0xa50 [ 38.891407][ T3637] worker_thread+0x569/0x750 [ 38.891435][ T3637] kthread+0x223/0x270 [ 38.891453][ T3637] ret_from_fork+0x146/0x330 [ 38.891484][ T3637] ret_from_fork_asm+0x1a/0x30 [ 38.891513][ T3637] [ 38.891519][ T3637] read to 0xffff888107674908 of 8 bytes by task 3637 on cpu 0: [ 38.891538][ T3637] xas_find_marked+0x211/0x650 [ 38.891559][ T3637] filemap_get_folios_tag+0xf7/0x400 [ 38.891580][ T3637] filemap_fdatawait_keep_errors+0x6c/0x190 [ 38.891613][ T3637] sync_inodes_sb+0x424/0x4d0 [ 38.891642][ T3637] sync_filesystem+0x108/0x190 [ 38.891665][ T3637] freeze_super+0x375/0xa50 [ 38.891697][ T3637] fs_bdev_freeze+0x149/0x2b0 [ 38.891728][ T3637] bdev_freeze+0xf3/0x1a0 [ 38.891761][ T3637] ext4_force_shutdown+0x190/0x2f0 [ 38.891791][ T3637] ext4_ioctl+0x16fd/0x3210 [ 38.891821][ T3637] __se_sys_ioctl+0xce/0x140 [ 38.891854][ T3637] __x64_sys_ioctl+0x43/0x50 [ 38.891886][ T3637] x64_sys_call+0x239d/0x2550 [ 38.891914][ T3637] do_syscall_64+0x112/0x360 [ 38.891931][ T3637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.891955][ T3637] [ 38.891959][ T3637] value changed: 0xfffffffffff00000 -> 0xffffffe000000000 [ 38.891973][ T3637] [ 38.891977][ T3637] Reported by Kernel Concurrency Sanitizer on: [ 38.891989][ T3637] CPU: 0 UID: 0 PID: 3637 Comm: syz.4.34 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.892012][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.892023][ T3637] ================================================================== [ 39.037031][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 39.037046][ T29] audit: type=1400 audit(1790165022.157:230): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.216459][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.267117][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.336450][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.376719][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.439382][ T31] bridge_slave_1: left allmulticast mode [ 39.439483][ T31] bridge_slave_1: left promiscuous mode [ 39.439625][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.440324][ T31] bridge_slave_0: left allmulticast mode [ 39.440398][ T31] bridge_slave_0: left promiscuous mode [ 39.440588][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.522382][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.523606][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.542823][ T31] bond0 (unregistering): Released all slaves [ 39.555346][ T3029] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.564284][ T3029] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.573214][ T3029] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.585968][ T3029] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.609209][ T31] hsr_slave_0: left promiscuous mode [ 39.613390][ T31] hsr_slave_1: left promiscuous mode [ 39.625205][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.625224][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.625798][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.625881][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.628681][ T31] veth1_macvtap: left promiscuous mode [ 39.628709][ T31] veth0_macvtap: left promiscuous mode [ 39.628835][ T31] veth1_vlan: left promiscuous mode [ 39.628941][ T31] veth0_vlan: left promiscuous mode [ 39.734709][ T31] team0 (unregistering): Port device team_slave_1 removed [ 39.737400][ T31] team0 (unregistering): Port device team_slave_0 removed [ 39.988168][ T31] IPVS: stop unused estimator thread 0...