last executing test programs: 3m41.869088453s ago: executing program 32 (id=2980): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m24.149046045s ago: executing program 33 (id=3295): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="540336b7a1e9"], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4e00, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 43.541855674s ago: executing program 34 (id=6490): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xa}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) getpid() r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00'}, 0x18) sendto$inet6(r9, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x8}, 0x8) 39.211784522s ago: executing program 35 (id=6572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000001440)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9abaeed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264736d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5c553110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba62e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea4c64dec53db7713485bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b8e97fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f000000d824c3106871274a1c37ff06bcb145fb9868158e1a35fe4caac682c9fe759b489323da422ddc2e16", 0x5a8, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x60, 0x0, 0x0, 0x0) 37.832362178s ago: executing program 36 (id=6591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0xb0}, 0x20000000) 36.610685898s ago: executing program 37 (id=6601): syz_pidfd_open(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000001b00000000000000", @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX], 0x50) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r2 = io_uring_setup(0x3054, &(0x7f0000000080)={0x0, 0x6d33, 0x0, 0x0, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 32.54348806s ago: executing program 4 (id=6665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000011000400000000110000000000000000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x6}}, 0x20) 32.542567039s ago: executing program 4 (id=6666): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 32.484594105s ago: executing program 4 (id=6667): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @initdev}}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="3702000013", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="3702000013", 0x5}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x400) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100ffff000000000000000085000000d200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x22da, &(0x7f0000000580)={0x0, 0xb1c9, 0x1000, 0x8003, 0x20001c2}, &(0x7f0000000540), &(0x7f0000000680)) (async) r2 = syz_io_uring_setup(0x22da, &(0x7f0000000580)={0x0, 0xb1c9, 0x1000, 0x8003, 0x20001c2}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x2, 0x7, 0x41, 0x1}, 0x50) unshare(0x2040400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfd09, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfd09, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.347701749s ago: executing program 4 (id=6668): socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f0000000400000000000000000000008066b7ec850e0000000000000088b953bcb24d92c8db2eeb9732e2f7159161a5", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2000001}, 0x1c) recvmmsg(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r2, &(0x7f0000000140)={0x27, r5, 0xffffffffffffffff, 0x5, 0x6, 0x3, "45f679bf10f871501c4c3303be02047d0497f3816cbe42862ccf68cf96caf64d2260cb51c52acd0232d1efded2fcc34a17d24582e42269fae082008b6ac3fe", 0x27}, 0x60) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 31.497014853s ago: executing program 4 (id=6688): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e1f, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 29.156956084s ago: executing program 4 (id=6731): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xa}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) 29.084470241s ago: executing program 38 (id=6731): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xa}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) 23.156484566s ago: executing program 8 (id=6826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x11) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x100, @time={0x2950, 0x9}, 0x2, {0x5, 0x7}, 0x6e, 0x1, 0xfc}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r3, &(0x7f00000002c0)={0x2, 0x2, 0x1, 0x6}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r4, 0x2, 0x0, &(0x7f0000000340)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000380)=@framed={{}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6029}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @exit, @ldst={0x3, 0x2, 0x4, 0x5, 0x1, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x5a, &(0x7f0000000440)=""/90, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0x400}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x4, 0xd}], 0x10, 0x3ff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r5, r6, 0x1b, 0x0, @void}, 0x10) connect$unix(r6, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'syzkaller1\x00', 'dummy0\x00', {}, {}, 0x33, 0x1, 0xf}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x2, 0x5, 0x1, 0x0, 0x1], 0x4, 0x2}, {0x2, [0x1, 0x4, 0x0, 0x2, 0x1, 0x1], 0x1, 0x5}}}}, {{@ip={@loopback, @multicast1, 0xffffff, 0x0, 'rose0\x00', 'ipvlan0\x00', {}, {}, 0x1d, 0x1}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x0, 0x1, 0x1, 0x2, 0x1], 0x1, 0x3}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x3, 0x9], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mlockall(0x1) r7 = socket$inet(0x2, 0x80000, 0x9fc0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='rxrpc_rx_done\x00', r5}, 0x18) ioperm(0x7fffffff, 0xe, 0x6) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000c80)=0x1, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4040000) r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000e40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000e80)={"cce999ff2001098e2a622404fa5c0760", 0x0, 0x0, {0xffffffffffff7326, 0x3}, {0x7fff, 0x2}, 0x3, [0xa00000000, 0x9, 0x6ede, 0x8, 0x7, 0x5, 0x8000000000000000, 0x8, 0xa3, 0xffffffffffff271d, 0x0, 0xb, 0xd3, 0x0, 0x6, 0x154bfd63]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000f80)={"356332832812599fae8ebe4aee95c37d", r10, r11, {0x0, 0x401}, {0xa, 0x7}, 0x1ff, [0x0, 0x6, 0x0, 0x2, 0x9, 0x7, 0x1000, 0xb4, 0xffffffff7fffffff, 0x6, 0xc9a, 0x8, 0xee, 0xfffffffffffffffc, 0x6]}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000001080)={0x5, [0x101, 0x7], 0x352c}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r12, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc814) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0x0, 0xa01, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x6aa9ef41d98db4a8) 22.518804758s ago: executing program 8 (id=6838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "f1a1173fb9462df9f6a31854ec01e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad49300", 0x35}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x39, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r9, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000000)=[0x2, 0x9a800000], 0x2) r10 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) pipe2(&(0x7f0000000300), 0x84800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, 0x0, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) 22.436818727s ago: executing program 8 (id=6841): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 22.435449167s ago: executing program 8 (id=6842): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2000001}, 0x1c) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r3, &(0x7f0000000140)={0x27, r6, 0xffffffffffffffff, 0x5, 0x6, 0x3, "45f679bf10f871501c4c3303be02047d0497f3816cbe42862ccf68cf96caf64d2260cb51c52acd0232d1efded2fcc34a17d24582e42269fae082008b6ac3fe", 0x27}, 0x60) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 21.58509978s ago: executing program 1 (id=6854): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000af1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)='\t', 0x1}], 0x1}}], 0x1, 0x4000001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)=ANY=[], 0x8) 21.58424839s ago: executing program 8 (id=6855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/resume_offset', 0x242, 0x2bd) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) keyctl$join(0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x14404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @value=r1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6) write$binfmt_elf32(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4f, 0x9, 0x4, 0x3, 0x4, 0x3, 0x3e, 0x401, 0x330, 0x38, 0x45, 0x8000, 0x8, 0x20, 0x1, 0xfff, 0x9, 0x2}, [{0x5, 0x401, 0x4, 0x4, 0x1, 0x2, 0x3ba, 0x9}], "62b59476274a1c2e43022376c4b65b1584b384b29b62739b2071a7b9b80fe05e0374c7b0e69d6a60704ccbea9ccfe93700a2996e86cdf27ea76dbd509c04b7b48cf4cf0d079d742ae94af6d0394a109bc187c710b17f07704d35ea2c99514d8db6691d75de68ca1ec0f176e9584da7d1c59f8b4b70182c4f9cb89c39453f7a3291868e300fba277c9009e88ae88bca11b0f6492110252f76d7bd15c5729b4e14e1cd121247c8da23bf46c5d073369ed11b67f22f8b4418da92e1e6a15aac3d63be9e958d204878963ee109db878c2b9a8099731adacabd5d9f5b9af02ce6f1621922939f26db30", ['\x00', '\x00', '\x00', '\x00']}, 0x53f) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 21.579931941s ago: executing program 1 (id=6856): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r5, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000500), &(0x7f0000000600)=r2}, 0x20) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000900)=@urb_type_iso={0x0, {0xa, 0x1}, 0x0, 0x0, &(0x7f0000000380)="14fb291fac66b717dba879bdf1ae48ffa9d0d141a0bd95feb8a47e8d8c1056daf0d4dd05813f608a38c6ca1a480b421d293508211bbe17c9bf075f87243e35e446b035267615", 0x46, 0x2, 0x5, 0xb, 0x7, 0xf816, &(0x7f0000000640)="2bd4bbdf828a827308770e1b5eab957f6ee7daa3373d73c3c12925bbf75297200b2ec7015ee67f1d9e063e15b6a76a6acf5c5d0f3057795630d06c817a2c5fdb3150e22ec0022dc0dd8971c53c90db07578a92f891334dfd6060b8d128965d7804162bafa083354e997851d53436d1dee3b302f899a2719f", [{0x5, 0xa, 0x1}, {0x4, 0xe1, 0x1}, {0x3, 0x800, 0x81}, {0x7a6d, 0x82, 0x1}, {0x0, 0x0, 0xcb2}, {0x4, 0x4, 0x4}, {0x8, 0x200, 0x78}, {0x7, 0x6, 0x8}, {0xfff, 0x7fff, 0xf7cf}, {0x40, 0x1, 0xc3}, {0x7ff, 0x800, 0x1}]}) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f00000013c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES16=r7], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) dup(0xffffffffffffffff) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) 21.300897048s ago: executing program 8 (id=6860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 21.300645448s ago: executing program 39 (id=6860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 20.426694724s ago: executing program 1 (id=6865): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x1, 0x5, 0xc, 0x0, 0x40, 0x800}}, {0x4}}]}]}, 0x5c}}, 0x0) truncate(0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cc", 0x1, 0x200980) r4 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x9, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x7c, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x24, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6, 0x2a, 0xf, 0x20}, 0x8a, &(0x7f0000000180)={0x5, 0xf, 0x8a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1339c0dd3db7f9f7822a4b5705ffcb4b"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "fede9d70e4387ece6c6b55ba7ec55673"}, @generic={0x4c, 0x10, 0x4, "7d7fe682aa6c2e5c8bf170a4c237cc5fc795667bfe66b012373e4fd73fafdf8e4dc66df0c90a0fb1aa1cd227aadef1116333d4637b7520b36f1d1434f47d4a62d024f8d5338a077167"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5c, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x9, 0x8001}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x101, &(0x7f0000000800)=@string={0x101, 0x3, "05e2107a0cdbeb6ae6976088101c1511928feb370d42ad364fc6744cacfdf72d49b32400468592ef8fd7fffc0463c1b2a9fdebb280d4b083610305bd2bc56049ee1a022fb2dbb250503d6993d5e5679c54a338ff30f6ebcae65b4c9d5e9dd31030998402e9b5bbc0fa196a951aa3f8ea31a45483e11c8dbcd09a169050b1de4ab76a6636825625063ee72bb4e6451f7dad387e0bbb23f667aabfad8fd63d89acd10150f6ff0a26da5f19ab0c31ebb8bac5fdc2f29f9b244cf3e1b03d2e1cff0a33f87ed6f9167249b90f308cfec241144f92afd33647472c01f1bea457154ad0f8cf7da9d3366f33db9488f20b63b4c13457dd53704ee55953b2e91f2f5692"}}, {0xfa, &(0x7f0000000300)=@string={0xfa, 0x3, "929aed9b7f090bd0c66f66b3dd2df9022a031c68fcc1c07086e1aca6b42245dfcf0f4b2003767af8661c18583595d11f94af8bd7e64142480b4c4a5b53c8cf7799a4ba0a7f6620528878804b9369b38f1be3f4196a58ba1e9f718b9a2794ce0284be0ded45fa5411afb298292eec35b8e71e2d80338aeae3df29df755c0e7778ffa34609f94dfb3e74dcd48fb65856a04169529175c757ccb5aa0e35e891e7f85b49721dede9d40a0494d608d4f7a7481211937dbd59a01789a9a1cff138946a2d485a1ae9a36736dde1a8664b90ad75fdbc7cc1df77169b21fda28479e0ae5a4439b246aedd1329fcf42e54faaf871d4417c4ff7a428d3e"}}]}) syz_usb_ep_write(r4, 0x6, 0xc3, &(0x7f00000009c0)="28d4c95a7907220733634b10da6965bb8b6f2125867b72054aa3d78be32156f1f1d6c75ab2f32cf15a87e9e22fca5c02683985c9a5d7ca587a213e0bcee4c64b03aaff81f0a108cb242fef377cb0983c7712320de2fe7f3ee8463350767a2d9bf7cf5f0001b9422fbc869d2db7800610c66c443c0b6fa1beacaac573e21136ff6cb11c100a8ae7e742eb921f59fa29f8d453ca6afc53b96a393c1e7dd05a86521d1ba3e1b331eaa29b11ab898cc9e72952343d0449367168a267e6396e7ca932c8cc54") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 19.644693652s ago: executing program 1 (id=6874): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2000001}, 0x1c) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r3, &(0x7f0000000140)={0x27, r6, 0xffffffffffffffff, 0x5, 0x6, 0x3, "45f679bf10f871501c4c3303be02047d0497f3816cbe42862ccf68cf96caf64d2260cb51c52acd0232d1efded2fcc34a17d24582e42269fae082008b6ac3fe", 0x27}, 0x60) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 18.800819665s ago: executing program 1 (id=6888): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x80000000000}, 0x18) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 18.608545604s ago: executing program 1 (id=6891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000480)=""/127, 0x7f, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) getsockname$netlink(r5, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_dump={0x40, 0x545ee402, 0x231}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20004846) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r2, 0x0, 0x1, 0x10001, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 18.608023724s ago: executing program 40 (id=6891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000480)=""/127, 0x7f, 0x2a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) getsockname$netlink(r5, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_dump={0x40, 0x545ee402, 0x231}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20004846) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r2, 0x0, 0x1, 0x10001, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 15.300809431s ago: executing program 0 (id=6933): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x1, 0x8, 0xa0}, &(0x7f00000003c0), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e1f, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 15.272408293s ago: executing program 0 (id=6934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x0) getsockname(r1, &(0x7f0000000040)=@can={0x1d, 0x0}, &(0x7f00000000c0)=0x80) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x8b}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r4, 0x7}, 0x8) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/92) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)='veth0_to_hsr\x00', 0x3, 0x2, 0x6e61}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000480), &(0x7f00000004c0)=0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@private0, 0x0}, &(0x7f0000000580)=0x14) getpeername$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000028c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002880)={&(0x7f0000000640)=@newtaction={0x2220, 0x30, 0x400, 0x70bd28, 0x25dfdbff, {}, [{0xaf8, 0x1, [@m_connmark={0x190, 0x2, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0xb, 0x3, 0x2}, 0xd55a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7c45, 0x1, 0x0, 0xfff, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xcca, 0x20000000, 0xff, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x5, 0x4, 0x57e}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0xffffffffffffffff, 0x3, 0x9e}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x81, 0x3, 0x55, 0x2}, 0x6}}]}, {0xb7, 0x6, "9eb464cf6ea43f86f23c7000220080d87fe8aef09ecc9e49ee9cfc727a40e9554a7245d90c270c74eca4ef27ae3d880cb12e820b3ff480cacc099b32fabddf376f3d56163119d010ff3b389b26ac0d60a9c83d69483260253c2cd111c22710be0186b7ff49fc321bb103178d84ceeffa0e3b4198364009a03a97016f8a9e8fbbc816303e4212ac9427740c327c7334a2194eb71aa9499bb9e981d66144abe1649447bb5cbba7542364d14fe43d76eaffb38cca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x17c, 0xe, 0x0, 0x0, {{0x7}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x66, 0x6, {0x3da, 'filter\x00', 0x1, 0x8, "1cb8e06739b7224bd572afdc0f56a7680e01da95176de640c2528393ffb440e81e47c2a0a881f5e99f299d631f70eaf106d2a3f56c7d402b4a99b382"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x9e, 0x6, "6e5b0760c01318f28e1f8414e932fe4a1cc98fbfd1d325ba1d94a6d91c7d1cf3f7b5e2510bf0c0e0966e1db5f548be2c7022bdcf3105cd6f3da648188cd93ff08a6b8a7944900f98516eda48ae9ee3ddd1e8404034b912a16dabb1ff3d88f7d53df9d4ac071fcb092c709a249107fee8b053123e5e480405fe9fda5c5e06dc0925e090eba22bd6b176f3c2df396b295c677c8f483617d46e1c7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x228, 0x8, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x3, 0x9ce, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x5, 0x4, 0x5}, 0xfffd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x0, 0x4f6, 0xf}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3ff, 0x4, 0xbc1, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x8, 0x3a1a, 0xc3fe}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x386, 0xaf, 0x7, 0x1, 0x9}, 0xbfe6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x71c, 0xa, 0x8, 0x1}, 0xf99}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x2, 0x200, 0x3ff}, 0xfff7}}]}, {0xfc, 0x6, "049f86312309c7068b2161b0a22446efc35c8223802fb09437cef205b7c0c6fe2b534e16dca871b4cf10ac3ba7e66bfb2e1f7ae870abb6ecb254917f1b6138175b24d47d899d679ff655fe2517afe8815f308bba1e3c74571bf5aa29c8e5bb09daef163aeb54489ad3cf2777cf460700ac8afd933c28f7336cdc58f5249aaf2473afa855b3fb9d5a3d13781d6153c089fdef2ffe343f7245ff3a63c6a063025dd619b039123ee22cedcf664e83accb8f20dd05157cb641de46c2be137dbc853d9552863ec530fbf9eed9d8a69e69ac7654d928349723577ca935f257a875eab43ce6d5d224d87880db616f71b66c7d486b8cf646a005b95a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x14c, 0x11, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x6, 0x7, 0xc8, 0xd}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x7, 0x10000000, 0x6, 0x3}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xac, 0x6, "0d945f099673f8c416b68f3a4e7730486cdb63f447a8b4e394e3c4dde0ac85f561060e6bcc7c4dc48fc28336df8d26a495e9e8598197020d34999be03956606acd80b5282914ae7dd06ed2301a721565a9e5bfe1b9fb668e48c0a2126600e124e57c61e82f537277e2ccf892aa4f42a168a596bdc27086651cef1c17eec336982938416db5f2b14525fcaea027f9bcb306b7c163a3d8547f945a0cb49da5ec9c9f1d1dbb637e9294"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x16c, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x8, 0x5}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x17, 0x5, 0x8, 0x1}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x4, 0x73d6, 0x3}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x30000009, 0xb03}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x2}, 0x39}}]}, {0xb2, 0x6, "2cab17dfbe2952b832853479065c0e558a9a03ce0a89db66d796169dd35bbb7ffefa22674435326b805419b3d78d6c42f5c55326de21f361df41c0ae8c172a2587b6983d0389e87d4fcd30ac51856fb10d28ecc588b576f503f73bf863473fcfb377b5344ca658bc2571fcd94d1ef55f19218f925a5c28faffae0f9d1e92d678269171176b0f0c64bc22b151c16c178c924f305a197cade48477504b028402797a6437967493989a9307b41644d2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x174, 0xf, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6e34, 0x4, 0x5, 0xffff}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x5, 0x7, 0x9}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x2, 0x0, 0x5, 0x2}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbfe, 0x4b6, 0x0, 0x89, 0xfd}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x6f, 0x5, 0xb, 0x400}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6d5, 0xea, 0xa, 0x7f, 0x6}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0xdfd, 0xfffffffb}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x20000000, 0x8, 0x2d}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000000, 0x8, 0x10000000, 0x1, 0xfffffffe}, 0x47}}]}, {0x4a, 0x6, "66934cb65f8bc8689c93b584dfe6c13da81fd76a2c6c41fa98a10a4c160f51167a6666797957472d267040b10835b55fe9c8ff3d159d02deaceafe43e5e8bc7100bc2b78caac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x194, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x8, 0x7fffffff}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x2f94, 0x6, 0x9, 0x49}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x0, 0x6, 0x3ae0}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x6, 0x6, 0x0, 0xa3}, 0x3, r2}}]}, {0xe5, 0x6, "401f785201031caf007c046652c685e614e6869f5d09afe1ce203d7816ef409f1793caa50b373fe0180c7779915a5f2d4472392d1a01e2fb09d56eed8f818606e3ef133e6505b5370548cdcb55003ca1e3d60ee0d0cdcda19913176cccbe227eb456aa49103fb82ca5cd6090ee12381780911fd174fa5269bddeb6c0b116cfdce59802d19800cae433ee2747baaccdd16c739bf2bba393eb308ec92164b1219daa48123bd33b9b6503826ab05a429a65f573783769107c0abf990ddcee69e7952de37f46728d1fb2587a8e8c9113a09c21f8817b8fc25b4a5d5640eceb472b6d66"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1714, 0x1, [@m_mirred={0x130, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x10000000, 0x0, 0x2}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x7, 0x1, 0x612}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x3316, 0x8, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x456, 0x1, 0x8001, 0x100}, 0x1, r8}}]}, {0x84, 0x6, "1227ee73777f33ee76ecf13d6c4547f487b41cc946fa45493a3692867dadf8da0b45ad43b0374f967bb09f618ef27160fe061e8e2040ad00c69c50a20f161f8589fb61c40cb861406445714eb326f4d3de87a8e84caab80e0ffd3ccf71ec1a5e64bfc2fac080af396ca8e8eff172d7c2f05c82fc2d95191fe979539ed1cb53df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xa4, 0x20, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_ZONE={0x6, 0x4, 0x400}]}, {0x57, 0x6, "8ccbfc94df8ce3db9c6cff388746939eca1c1d3beb78e408b4e4f7e6b7d1c706e1f8e1381946e144debd8f0c69a89a1090922073ca19bcdf636acdfcc7ccd3bb44e4f2cee0319085289dd41016ec653d66f043"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_csum={0x10a0, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8001, 0xffffffffffffffff, 0xa, 0x6}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x5, 0x1, 0x6}, 0x130c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbb3, 0x3, 0x20000000, 0x7, 0xfff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x4, 0x3ff, 0x1}, 0x71}}]}, {0x1004, 0x6, "0c028ff3f74266acc6a170b7cbaea9ef54d53057273506e2c31f39861ffb4fd4cb786e97deb6bce1cae3afe4ef2c637149b74ee69138cd05f892abfdd495b05871a613185a2f0098c2ee7cadc059c1cdc2f683037ea11c8d9547a4e85cb7614f29e8a3d5008e8782931b26cfae307413e00503e9dc9314ce9cfbdb7c2cfec958aa34fe7644a723c06578194020d3d1ff64c31f2c4639d0ad0853004cb04da730d2249d4bb1dd6c8c0104bc42aa86a5c9c69cb5fc5f8bb5f98e697e64fff0e45179c4b0f0d2e37a83d83d3493697589daef51174b54d650f2aca095e49364d3f5e916fa42d2352741b32c03cf8f072816c05afc124486e30092d6941826bcce20271c936890a53c804d8eb3a199365a7c00db99b95a96e049c4e67819385f127b6e3adc60246ac756a309eab99e2a15e71101526433324288dd5fc33cc7cbc9d071813e957a3003ea23347e23e2dd499550585de4df6111f87afb07c38e05387e5cce602c9d8f31aead0812bda43c1bcc1d26b070a9bbd26c7562fc5860335811e7f11cf04e1afa0511f47fe8ee5ae949870dc063fe8c50c96b2c46fe013c3f1e8be2000c9c4c5e1fd0349a397520a20fc28036b85bb33e993ce4c0af497820b645fb5c7fca33e2679ad402f6b0aaa23e44ab5c14625bf95b2067bea6d67668ecfb157ac3fbc131a32c5c00407cad167209396514a2a6d4ea99b0653bc133d9f1ed34119f7b935c3e6ff999b58b8b1b346c582c7c2192ce404839103a39014eeaa3efad73dcb72960f52f253e1b62f549c1effa111b0bd66bd66b7345b53551cdfe105a40def732b0e8b93839f8623c07139a6d358778dc4a007d036f1c065b5597df4b5426450dd79aeab2d27238f48c548d268762a472f5cde78f31b9f411e7458bbd8f26659c9d502446ec85c3a5a1c936d8ae291c1ff397bcf2547d9fb35bf09a251a93fe2412b8e8da0658c20901150fe67fadb8d9f366751cf7f1d66fccf866553646e336d2b563b46ee0bd8b01bc49e43813df017e6375502ff479024d724321a1bb851c5fd33aa8df7aa876cdb01a41c1fdcc6e39f62da8b18e23dee896a78516f20e32d6ee55f210c266fca08da230712a318ceaa7ed5d99a56fdd95f91d49fe609b16a67e7dcd7aafc3dc3d3cba3a014a2da9d5018a14b8a3ef58df5fbb32cc46424c8998da3a024ddd4c1227fb229fc6c1f8c5877dd15ff5c6826423a602fedbc3f929d9b31e9ca577835b313198a6eb078fd2bd1304eb3285b463c630ed4bf229fa15ffb8a02d5ccedb22e898f0f1c169ed7afd13600eb74f93162308cb52de2c07432716e0d532c63403b44d7f057ba4f79e0dbfab690b904166d0753c830fdf6787fc7933c1330da38cf2a9d6fef2194fab34b2bc14a139cf72f2d83a33530ee51373e35d3e8addc38a5b33a71f2d0c4f878c1938a91cb9c602b0b027dd0d5beb3e6d90671ed13033a169cd5fe0ca31a86fbaaf053c88e21d429ce922fba50c9927bfaae30e4348ae22405531ac5a5af7360e3d23a3f118b0d752b67d35c27bd0d63201cb9166b9616218c4d0d5731b2de639fd16fb3627ce3946399a9e3222ff67be21325dea11fbefbd4f232491a9044262e9ed579ef361264adea5755d14688502e3521f4d27ce7553c1420957c894d18072fe5562ad9cda3243d8cee9f419d633354c5970f456a7b0913d53cbba7607c02b85fcdc8e1ccbe300a2a64a897c9289c0921da2001d96f3f7fd9e2881d4356e8baaecb544f4e818b038fc648fb79fcf7b9e41d747db98a8ca87635073017dd06638dbdd3d39b325804e3a1e521e07706720916c26bbdb119630d596e74e52b48a8759f540fc2c07be03a5c301035ed26f1de6fa13e3da8c812236dba78bfc9c0fd9d7874595216562f6ed3176b9cb71b61c9d4c67e660f194777b0230b4c604dbb259b444a2f8099ddbc3e4a6f21b3b2c0ed96232c75bdc77abc5cfbf0da6541cbad7ccc8a7f40c064d84c0a74f82bf2f649d1b7a319de185e0efa207ea6910169cf50fa6062d31868e884ba4512cabbb754b32afbfc4d555e29e90e1b9a15305944220f258794db38f1816c4e450bbdec82a745fea4dfd7ca68dadda5b3aa58dabc4a25663e4c6e143efc82297d4ed0fb907bb9067dc8008a1fa665109b4b2308956916b5efea0741d658f58b62993b03c6aa21140ed01a586c9df15f12cc71bd02b22ad8d8b514e1a3fb5fd6e4acbe74bbb6698cdefd6debcf5bf13ac38108e83bf1fc986d6b3c6b57544c0bafee0fa4e63b54bd0f0540c8224f980fe46e4a95f3957136a9611197285d6ee6f22576cf98489e8e50bc5687ea6f48c15adca416996bb7f746445fe7350d169e6cd51382afd207beae74a3eb2a8deb7de5ebfe3d355b6cb5183545fbba36a72de1d6adba702af70081ff2025b01a4788a8b2ac2b6ab7201e806fe70f415c18f4978c285627f531be215c871d721c21b06473aa936661ed586342ca2f103a2155f5e1df8adf9ec70ccb7a509ea9ab75df31746eb651bb4586b9a2058d78bef7f283de9ff89f94ae7120f8fdec7e8200660765418ad18f8bedd24eda34bd0535ba77aec5938722b3f4381834eec42c18932ddd676d301005a80e59f0fdb208476b37cb3afd05b06fb622ea13a2906e9463d8b6518d62ba1eefef571a246a07618886ead043bcb5f12ee7c2c41ee086c244023acdfc5efc48615edcac90e42a7f8eae71ce82763aa9f5900e667344ff75c6583dc2a0fb243b59c4f4a412be41e98824f14dc8020bd9c2b4318cbdabdd41f39e3f81d345c47526911bccec53fa89694c6b8399b19dd3a5cc57ea935c4d4cf369e957d5d2f47fa10ee1c16f598c8129dc5779e4751e04f7367ba0d91930a8d7e6f74b9edbc9ff29efd3d3492363e098a9fd3bb3698cb741c40f002f7676da8217b427e41a9eca26060c21ff7deac04561b551c432178e20cdaa09331f9abaf954d07981ddbc98f240a62c63db465585e1fed8f7d8f91683701ee410941728e2a65ac3d0661c664fa03a3bf9fb85ea06fd13ba182783de1dc009af76c25b667444f897d305d79ec9e40ca4681a306da6f0c0af89a2c879276ebcb87bfcd555430fb769fa7472d30760cc79bdd7910b25b457e2b8ec5fe14a6f05bcc6525651ddf67f97415d83327323c5c8a50b0ab4341904ff2a1be452d5e2f7a3a75b9cbbd435f0721cf5698529fa1c3f2fa072dbb9c87d6c07a7daa32e25b2ccfbed44fa7705da84af3fd1c31d3c8c775b0fc06e9aae94a1cbc9d2da71190ff983536afc895b5618966a999b47b1bb1e517b9f7b621e301a5fd95c5ceb829d19a41baf9b34b90c58b8261f7ff17387d9197d40f0a0db345b591094b9546c9134d60f512596fa40b52ab32e7fc025759c5cdf9c09acb146535375049d87389e16ba7bfbfbe17c4e9e9ba7b371b05caa4e6c8bf815ee231a9c2f05c9dbc6d218eb789422d38b84682def99a86087716faa6a7444408d0e4ab47fbae42905e1846f0a2c7bf4e3dc05e54572fb3fd0a1793a26ddb3ded8b8c6c353f75eb22a35f7e4b93bdd5ec67ee6f15e266455b1a28f8887c1cb1b6a560472f8479f6f2538509f841f264933e79b2e672be3346812d9c58b3dd6dd2f7843a296ab09a4875eb93a133841c40cca3077f7903ef96b9ce5fc4d8decd448e4deefca244e4f679fac4e7a9ec882d55b6605ed44590d5bdd440c7320acc9779c22f0cdd63b16b67d2460f25a2618e79826d337131fce99383fda5839eff9cf8436042ea76a7033df359512c3aa1e2160e92a6de24f3aa3836a9d94954c415da6ce12c0a335e43f6a65ed6df736f17abeac9c79db9ecc1c7d0e7cc6cee9a8b58a5d5006d8b03be09665704e71ad26e6e7c21b1a9c1133c9302d7e6a900672f1f7962e0cd951190fda40f00c82343823d150a9d93b86189626ea5ffef999844f872e60a4169f8bb46e6afb756d271e2b21cffef76b2a96dfe1a21e67151a4bfd9bda441ab71d2d937ddf9017d18fb4d3af1f84f019ed8cc85d176e451dfc85dd01c95a83dbf304dc53309d47ea49b11a3966ebd533b9683983cecbfeed7a725b52c76dbdc7e777230eaa3ff9c82b13cf4210d220afa9585332e47f60b2c8b0b77c49e29d09ed90e7a921c33dc336794515accc6eb842a221fefd8710a23f1c3c617b3903ba4f2abd30ad0ea9343080fa69ff8648e0232757c7338f5aaef7e7ccaf19f5bd1e94f328bdb1d47c27e470a3064f8813354880615632b24fda8b59e83d3b25801f29a87c6756d7ea668bf7ef408631c5c04b0175aa18bd7c04a8125b4e6d7fbf93075cfaaf1252e411cd2508b7b50e0a5c87270d1418c57fb9ada41c65d63fa9eb9420885450bc3ad309fe2803712fb715f6edcf1cb8066ddbb0686d9a72638c4edc07c2b031d09a227cb2f4b4031770f821a4b76bdbc86f1305a4171ebc5f3374a2dea09a1342db1526ae69e6813e99a10c5f99fcc4257dc0955a8c12e4b78d3a4420a70c7d07b7a276c58ae7e43182dbf3492dcd957f412aa77f5e23f576f0bd07ba31de3d6825d9351467a277688d6cb79b07f14d103f45fdb81d2d5acd6c7406d9a47c2835d970b7df8fe3724108ccdd3e2b68981a1e6c11a404d90a6e3f7da58c6f96fb4585f9f8acbad1679917cf49dd3bd704fb7d36a7e99ebd5356e50ba47a7beb8786b4b2f612d107ead75b4e5f23c9f92bd911ddca82af6617cbe6ba8867cd629457471ce0949bee80f0dbcb1f5d60a5c2cb5c41560bf5ce317df9083f06b8100cb488a203d449ce444b9f1267622ead1030ca23a6cc4a2324b73e1083d60312575135862120d5d71db3ba5e1b72c052a88a67f561243a343a9bf5a6deafdd699cebf6fd756909aba7e4d16ab70c8dce7ab225a43853d74442780d75e0dfac6e6aed698adbb1b8b50fdababa15313e009a3c55904b80773f10253074e3eaa9a23136d86a69ccfa2e0f8b6d05cc5a0c88fb88f8a2316f4bc9d61f5ae66dc4d75d3bd5dd44d566c9a1a57926722fd77b5d2e0bf7b506250e261a6b5356fa070dd8e5be2fbdb7a2539e439c4708330c41bf6ad225ac9ab2b1fafd97e5e04187e17bdda800f64e6d98eeee2af13f4ae9cdf024d431c276d8d1c704110005638bc4b78dbd31d839354c8bf0074e3419b4a0d0dd88b920c46f22a74df3eea67f6211310004529748af740f312f03b53790fa2be7d71ad33a3d96bc16c79f4e8e93c7210ee36d71f38937ab63f1a1fc949dbc95600ab7b765e3037c0f3433ad6279cccfaf04e492672d17ea6bb3703f1aa83b7826c9f07f3ee2d06514334f5d98c5db515375418c4eb576f86da9d63cc47de77dc7af077db4f5efeee58cb5a13673667980b33b7f67cc57300b68fb5e3f8b827cdc8cf084b4338abf28a6262e2c61a5b8c543e52cd97dd7859e97c81af201f84af924f42d65c4dfbe5ba0104dd1d78869e54452dd7c1aa6343bf664c32e6cf08995ec0422aa4346935d1da896cbaa80b945aade2a7f21aa39601be059d2af52c9a2fae3e9c1d7f2afd2d502e2be85902857823baf4395670d8e99424dca395b3d1a11e21d19f8058bcb17e99c2d05038e833ef3fb77c61c17ace292aeabef4989ec5b24b37de95769295d09e0f35cbdc949f8accb9bafa147c79e46ab0f9126ecf069388b5ea1404c91a9d3f4152dca92d95c5011a004c9fe28ce915ad0591883ebbb6aa2b078e9a1945350a4dca1e77459ceac8ce6be9197d3b6f77cbdb441d13bb65763c34f0099b818deec3ddbf9fd5a4607dc466cf89a89d3504b6f6a623fe"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x160, 0x13, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe9, 0x5cb, 0x5, 0x56e, 0xbe}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10, 0x7, 0xbb}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x1, 0x7}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x31eaabd1, 0x4, 0x3, 0x40, 0x4}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8a95, 0x0, 0x10, 0xc}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x1, 0x7, 0x1}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0xffffffffffffffff, 0xffff}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x4, 0xffffffffffffffff, 0x6, 0x8000}, 0x2}}]}, {0x52, 0x6, "c592b716d7bf00e706bd3c1d64c67bf0d777a2a3f6d5aaae10839cc5b0a37a7f0c6354b24e94dc273c14634015f5312df06a43ad330ef709c8e82fd3c0906baa58d3a49c23b080535eb6a482c635"}, {0xc}, {0xc}}}, @m_mirred={0x180, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x10000000, 0x8, 0xfffffffb}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x20000000, 0x7, 0xa54a}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x91a6, 0x6, 0x2, 0x6}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x8, 0x7ff, 0x7}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1ff, 0x5, 0x7, 0x8}, 0x1, r2}}]}, {0xb1, 0x6, "6942aac21a66209a9495ffe20d7023c54146296f6515a1201b9cab49123076103fabd5023f537e089a76715c0f081d2c8c400fd8b770aab4e9129961f6884b5fa0565bceab1c54bc0bce77f8bb494899d07c019008d9873d8cf84cd3478c74a8fc66a10629350754ca16c70f17611bcb1bb8c0c69cab2e88f1298cc4125e0ae7e154fd01d6913cdd77871ba68e094c09776303d863e39e3bd42c21482b5b3e04d32fbb6dd7ac850bdcf8c4c68d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0xdc1a66920c15f6a6}}}}, @m_simple={0x134, 0x1a, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x2, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0xf, 0x3, '/dev/vcsa#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xc, 0x1, 0xffffffff, 0x6}}, @TCA_DEF_DATA={0x8, 0x3, ']*&\x00'}, @TCA_DEF_DATA={0xf, 0x3, '/dev/vcsa#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0xffffffffdffffffb, 0x7fffffff, 0x37}}]}, {0x95, 0x6, "b8c82d827d2a97d5c3754f906c89bfbf881f15d39fa5dd2e401741216da6a2d1329a17e6aca32c3b1fd49c5a8912dc8163b012978d44bb91c61d25997823fc540fc47a8503988ccc45f87ad241361f39be4bdd51e9879e5f683f743845a4efdfbaa130da8fa79d3190506c580d1a097826489ad44329d46e04ce8343336efdafa493c092aed9906a14d5601c3490ace1e2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x88, 0x10, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x8, 0xc7, 0xeb, 0x5}, {0x742e, 0x4, 0xa, 0x28}, {0xf, 0xd, 0x32, 0x6}, {0x81, 0x2, 0x6, 0x4}, {0x0, 0x40, 0xaa, 0x7}, {0x8000, 0x6, 0x9, 0x7c}, {0x7, 0x5, 0x7, 0x84}, {0x7, 0x70, 0x69, 0xffff4546}, {0x9, 0x4, 0xf4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2220}, 0x1, 0x0, 0x0, 0x64000850}, 0x40080) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000002900)=0x4000) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000002940)=0x7) r9 = perf_event_open(&(0x7f0000002a00)={0x3, 0x80, 0x80, 0x2, 0x5, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x2, @perf_config_ext={0x8, 0x2}, 0x8081, 0xffffffffffffff0e, 0xfffffffa, 0x4, 0x0, 0x80, 0x3, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000002980)={0x0, 0x80, 0xc, 0x1, 0x0, 0x8, 0x0, 0x0, 0x18, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8000000000000000, 0x2f07}, 0x118a89, 0x72eb1f39, 0x9, 0x1, 0x926d, 0xbe, 0x8, 0x0, 0x5, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r9, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) epoll_pwait(r3, &(0x7f0000002a80)=[{}, {}], 0x2, 0x5, &(0x7f0000002ac0)={[0x101]}, 0x8) accept4$bt_l2cap(r1, &(0x7f0000002b00)={0x1f, 0x0, @none}, &(0x7f0000002b40)=0xe, 0x0) r10 = socket(0x15, 0x3, 0x80000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r10, 0x65, 0x3, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) 15.20871934s ago: executing program 0 (id=6935): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) timer_create(0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000001480)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/j`\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\x01\x80\x00\x00\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9dLD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6\xc9`\x85\xc9p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00d(N\xe6\xf9\xf3\a\xa1\xf9\"\xda\xa5b\xea\x99\xc6\xe0\x95\t%\x93\x95o\xe2}\xbb\xb1\xa4`:u\xef\xb1\x8e\x1c\xf8\x93\x9d\x96\xb1\x18\rx\xcf\xa9\x1b96b\x87\x96\"\xbc\xba\xcdd\x16\x00\x94\xe2\xd5P\x04p\xaa\x94,\x8f\xfb\x13`\x9e\xaf(\xef\xd7l\x1cuwm*\xea\x9bA|$\xf6\xf7\xfe\xbc\xefP\x15\xa7I\xd6`Rp\xc0\x994k\x88\xa8\x80mB0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000500)=[{0x3f, 0x0, [0x0, 0x7a9, 0x7, 0x6, 0x0, 0x2, 0x4, 0x5, 0x5, 0xfffffffd, 0x1c0, 0xde, 0x8000, 0x5, 0x4, 0x6e6]}, {0x10, 0x0, [0x6, 0xc, 0x8, 0x7, 0xef, 0xffffffbd, 0x2, 0x5, 0x4, 0xfffffffd, 0xdd, 0x5, 0x9, 0x3, 0x9, 0x8]}, {0x20, 0x0, [0x8, 0xe, 0x9, 0x6, 0x6, 0x5, 0x0, 0x7fff, 0x1, 0x0, 0xa93a, 0x8, 0xfffffffa, 0x0, 0xa, 0x7]}], r6, 0x1, 0x1, 0xd8}}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0xd4}, 0x18) getrandom(0x0, 0x0, 0x2) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r9, 0x0, 0x5}, 0x18) mbind(&(0x7f0000295000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80000001, 0x2) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) 15.064493754s ago: executing program 0 (id=6936): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f0000000400000000000000000000008066b7ec850e0000000000000088b953bcb24d92c8db2eeb9732e2f7159161a5", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2000001}, 0x1c) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r3, &(0x7f0000000140)={0x27, r6, 0xffffffffffffffff, 0x5, 0x6, 0x3, "45f679bf10f871501c4c3303be02047d0497f3816cbe42862ccf68cf96caf64d2260cb51c52acd0232d1efded2fcc34a17d24582e42269fae082008b6ac3fe", 0x27}, 0x60) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 14.166575302s ago: executing program 0 (id=6951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 13.752289283s ago: executing program 0 (id=6957): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_clone(0x2856080, &(0x7f00000002c0)="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", 0xfe, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="74fe1917dbdf22abde3b8d00fe5daf78677061b3acdf399229d9f3ed4fddae2015e22076bf026f2e30a4476f40a8cc53969a4a7fb0f8e980d10a9f298808a347f571008e590cfc035f1d4419") syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/time\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="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", 0x291}], 0x1}}], 0x3, 0xc041) 13.718011876s ago: executing program 41 (id=6957): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_clone(0x2856080, &(0x7f00000002c0)="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", 0xfe, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="74fe1917dbdf22abde3b8d00fe5daf78677061b3acdf399229d9f3ed4fddae2015e22076bf026f2e30a4476f40a8cc53969a4a7fb0f8e980d10a9f298808a347f571008e590cfc035f1d4419") syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/time\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="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", 0x291}], 0x1}}], 0x3, 0xc041) 11.021255533s ago: executing program 7 (id=6995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x80000000000}, 0x18) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 10.94492866s ago: executing program 7 (id=6998): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) rseq(0x0, 0x0, 0x1, 0x0) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r3, 0x0) write(r2, &(0x7f0000000080)="8f85ff46f10b3fc137c9a716806170609e419c41043d19033d40323e118cb3390426a84d212ee40b5321d27fd3d2003d", 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x406, r5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) r7 = getpid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f0000000100)={r5, r6, 0x7}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r9, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x5452, &(0x7f000001f900)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 10.832332572s ago: executing program 7 (id=7001): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="b9ff", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x0, 0x51}, 0x18) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8140, 0x170) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2f, 0x10000, {0x0, 0x0, 0x0, r6, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 10.672666677s ago: executing program 7 (id=7004): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f0000000400000000000000000000008066b7ec850e0000000000000088b953bcb24d92c8db2eeb9732e2f7159161a5", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2000001}, 0x1c) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r3, &(0x7f0000000140)={0x27, r6, 0xffffffffffffffff, 0x5, 0x6, 0x3, "45f679bf10f871501c4c3303be02047d0497f3816cbe42862ccf68cf96caf64d2260cb51c52acd0232d1efded2fcc34a17d24582e42269fae082008b6ac3fe", 0x27}, 0x60) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 9.8282107s ago: executing program 7 (id=7025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000050000000000000006000000009803000e0000009500000000000000de4d76ad72d5a13ce951b20ddaf3600bf4afc5077a263eb6cde9d39ea978557f122896a64c4ab90c79ac2c5070c23caef03f4a04ebd7e7a929813148c16494b5ce90ef269c254df302700a820ca2d3ff56741b74920323c08776e58875a32e16323e64a78349bec10cdd34a300636708dcdff6cb934966f5adaa52"], &(0x7f0000000b80)='GPL\x00', 0x25e2, 0x92, &(0x7f0000000bc0)=""/146, 0x41000, 0x1c, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x6, &(0x7f0000001080)=[r0, r0, 0xffffffffffffffff], &(0x7f00000010c0)=[{0x0, 0x3, 0x4, 0xa}, {0x0, 0x2, 0x4, 0x91dd0b0a3d0ea1ca}, {0x3, 0x3, 0x6, 0xa}, {0x3, 0x5, 0xe, 0x3}, {0x2, 0x3, 0x4}, {0x2, 0x4, 0x3, 0x5}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x27, 0xe, 0x0, &(0x7f0000000200)="f802040000000000000000000800", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r0, 0x1f, 0x554446120900450d, 0x9, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 9.592899104s ago: executing program 7 (id=7026): getpid() sched_setscheduler(0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0xc3, &(0x7f0000000540)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="04ff056ab005b8353681cb"], 0x2c}], 0x1}, 0x0) 9.592664444s ago: executing program 42 (id=7026): getpid() sched_setscheduler(0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0xc3, &(0x7f0000000540)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="04ff056ab005b8353681cb"], 0x2c}], 0x1}, 0x0) 4.291112296s ago: executing program 6 (id=7122): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='jbd2_submit_inode_data\x00', r5, 0x0, 0xc0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x3006004) 4.167134709s ago: executing program 6 (id=7127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100800, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x400000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 4.089938776s ago: executing program 6 (id=7129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 4.05259515s ago: executing program 6 (id=7132): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r10}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockname$packet(r8, 0x0, 0x0) pause() r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x4}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 3.181924336s ago: executing program 6 (id=7147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xb12a}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x11) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x100, @time={0x2950, 0x9}, 0x2, {0x5, 0x7}, 0x6e, 0x1, 0xfc}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r3, &(0x7f00000002c0)={0x2, 0x2, 0x1, 0x6}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r4, 0x2, 0x0, &(0x7f0000000340)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000380)=@framed={{}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6029}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @exit, @ldst={0x3, 0x2, 0x4, 0x5, 0x1, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x5a, &(0x7f0000000440)=""/90, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0x400}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x4, 0xd}], 0x10, 0x3ff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r5, r6, 0x1b, 0x0, @void}, 0x10) connect$unix(r6, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'syzkaller1\x00', 'dummy0\x00', {}, {}, 0x33, 0x1, 0xf}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x2, 0x5, 0x1, 0x0, 0x1], 0x4, 0x2}, {0x2, [0x1, 0x4, 0x0, 0x2, 0x1, 0x1], 0x1, 0x5}}}}, {{@ip={@loopback, @multicast1, 0xffffff, 0x0, 'rose0\x00', 'ipvlan0\x00', {}, {}, 0x1d, 0x1}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x0, 0x1, 0x1, 0x2, 0x1], 0x1, 0x3}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x3, 0x9], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mlockall(0x1) r7 = socket$inet(0x2, 0x80000, 0x9fc0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='rxrpc_rx_done\x00', r5}, 0x18) ioperm(0x7fffffff, 0xe, 0x6) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000c80)=0x1, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4040000) r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000e40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000e80)={"cce999ff2001098e2a622404fa5c0760", 0x0, 0x0, {0xffffffffffff7326, 0x3}, {0x7fff, 0x2}, 0x3, [0xa00000000, 0x9, 0x6ede, 0x8, 0x7, 0x5, 0x8000000000000000, 0x8, 0xa3, 0xffffffffffff271d, 0x0, 0xb, 0xd3, 0x0, 0x6, 0x154bfd63]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000f80)={"356332832812599fae8ebe4aee95c37d", r10, r11, {0x0, 0x401}, {0xa, 0x7}, 0x1ff, [0x0, 0x6, 0x0, 0x2, 0x9, 0x7, 0x1000, 0xb4, 0xffffffff7fffffff, 0x6, 0xc9a, 0x8, 0xee, 0xfffffffffffffffc, 0x6]}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000001080)={0x5, [0x101, 0x7], 0x352c}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r12, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc814) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0x0, 0xa01, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x6aa9ef41d98db4a8) 2.42931196s ago: executing program 6 (id=7160): socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 1.508698461s ago: executing program 2 (id=7178): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 1.446364397s ago: executing program 2 (id=7179): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) 1.445741627s ago: executing program 2 (id=7180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000011000400000000110000000000000000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x6}}, 0x20) 1.42006667s ago: executing program 2 (id=7183): syz_io_uring_setup(0x109, 0x0, &(0x7f00000003c0), &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffe000000000003, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2e, &(0x7f0000000240)=""/254, &(0x7f0000000080)=0xfe) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x8, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x2, 0x0, 0x8, 0x2}, {0x7, 0x2, 0x3, 0x5}, {0xfffb, 0x47, 0xba, 0x10001}, {0x0, 0xbf, 0x2, 0xea27}, {0x3, 0x6, 0x0, 0x4}, {0x2, 0xfa, 0x0, 0xfffffffd}, {0x2c51, 0x7, 0xd, 0xb84d}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000e00004017000e401c04"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000100)=r1, 0x4) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r7, 0x1000}], 0x1, 0x0, 0x0, 0x0) r8 = dup2(r6, r7) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000340)={'bridge_slave_0\x00', {0x2, 0x4e24, @multicast1}}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0xfffffdcc}, 0x1, 0x0, 0x0, 0x804}, 0x44800) getitimer(0x2, 0x0) epoll_create1(0x0) 983.994373ms ago: executing program 5 (id=7188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r1 = io_uring_setup(0x3054, &(0x7f0000000080)={0x0, 0x6d33, 0x0, 0x0, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 934.789518ms ago: executing program 5 (id=7189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 917.721509ms ago: executing program 5 (id=7190): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 860.866065ms ago: executing program 5 (id=7191): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x56bb, &(0x7f0000000140)={0x0, 0x5135, 0x800, 0x0, 0x78}, &(0x7f0000000080), &(0x7f00000001c0)) (fail_nth: 1) 648.376356ms ago: executing program 5 (id=7193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xafc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 613.55535ms ago: executing program 5 (id=7194): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6984794c52d23f20c325f53fe011480b7fe52a3335ddc72d5b777d3f2c9dad309e525fe7efae33d9647e736396878f182b5a70c1e922b3dc125c9028528f0f69016e8ac3fd9c69dfb63ede192dab4a5ab1537817b7b5875a400653727eea577a30069ab0cd8176b566"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='virtio_transport_alloc_pkt\x00', r5, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESHEX=r1], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x7a, '\x00', 0x0, 0x0, r2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 540.738316ms ago: executing program 2 (id=7195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000011000400000000110000000000000000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x6}}, 0x20) 540.002337ms ago: executing program 2 (id=7196): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r10}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockname$packet(r8, 0x0, 0x0) pause() r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x4}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 371.990353ms ago: executing program 3 (id=7200): socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x20}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, 0x0, 0x8041, 0x1c3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 335.659007ms ago: executing program 9 (id=7202): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 319.563749ms ago: executing program 9 (id=7203): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 279.143212ms ago: executing program 3 (id=7204): connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2"], 0x178) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0) pread64(r1, &(0x7f0000001600)=""/4081, 0x7, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x3, '\x00', r0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcb}}, './file1\x00'}) close(r2) syz_io_uring_setup(0x2eb7, &(0x7f0000000540)={0x0, 0xc98e, 0x400, 0x12, 0x2f2, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000010110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500006bf37f08866e6ba67522d0970d"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r5, r5, 0x0) pipe(&(0x7f0000000500)) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x46000004) inotify_add_watch(r8, &(0x7f0000000240)='./file0\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe(&(0x7f00000000c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001401018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r9], 0x40}}, 0x0) 231.140997ms ago: executing program 3 (id=7205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 222.172018ms ago: executing program 9 (id=7206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0) 216.598328ms ago: executing program 3 (id=7207): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 195.138941ms ago: executing program 3 (id=7208): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="b9ff", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x0, 0x51}, 0x18) r4 = open(&(0x7f0000000000)='./bus\x00', 0x8140, 0x170) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2f, 0x10000, {0x0, 0x0, 0x0, r6, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 179.699352ms ago: executing program 9 (id=7209): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setresuid(0xee00, 0xee01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000b00)="396f5cf957", 0x5}], 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 152.528405ms ago: executing program 9 (id=7210): socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x20}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, 0x0, 0x8041, 0x1c3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 150.895345ms ago: executing program 3 (id=7211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xb12a}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x11) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000001c0)={0x100, @time={0x2950, 0x9}, 0x2, {0x5, 0x7}, 0x6e, 0x1, 0xfc}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r3, &(0x7f00000002c0)={0x2, 0x2, 0x1, 0x6}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r4, 0x2, 0x0, &(0x7f0000000340)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000380)=@framed={{}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6029}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @exit, @ldst={0x3, 0x2, 0x4, 0x5, 0x1, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x5a, &(0x7f0000000440)=""/90, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0x400}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x0, 0x4, 0xd}], 0x10, 0x3ff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r5, r6, 0x1b, 0x0, @void}, 0x10) connect$unix(r6, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xf0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'syzkaller1\x00', 'dummy0\x00', {}, {}, 0x33, 0x1, 0xf}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x2, 0x5, 0x1, 0x0, 0x1], 0x4, 0x2}, {0x2, [0x1, 0x4, 0x0, 0x2, 0x1, 0x1], 0x1, 0x5}}}}, {{@ip={@loopback, @multicast1, 0xffffff, 0x0, 'rose0\x00', 'ipvlan0\x00', {}, {}, 0x1d, 0x1}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x0, 0x1, 0x1, 0x2, 0x1], 0x1, 0x3}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x3, 0x9], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mlockall(0x1) r7 = socket$inet(0x2, 0x80000, 0x9fc0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='rxrpc_rx_done\x00', r5}, 0x18) ioperm(0x7fffffff, 0xe, 0x6) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000c80)=0x1, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44041}, 0x4040000) r9 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000e40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000e80)={"cce999ff2001098e2a622404fa5c0760", 0x0, 0x0, {0xffffffffffff7326, 0x3}, {0x7fff, 0x2}, 0x3, [0xa00000000, 0x9, 0x6ede, 0x8, 0x7, 0x5, 0x8000000000000000, 0x8, 0xa3, 0xffffffffffff271d, 0x0, 0xb, 0xd3, 0x0, 0x6, 0x154bfd63]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000f80)={"356332832812599fae8ebe4aee95c37d", r10, r11, {0x0, 0x401}, {0xa, 0x7}, 0x1ff, [0x0, 0x6, 0x0, 0x2, 0x9, 0x7, 0x1000, 0xb4, 0xffffffff7fffffff, 0x6, 0xc9a, 0x8, 0xee, 0xfffffffffffffffc, 0x6]}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000001080)={0x5, [0x101, 0x7], 0x352c}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r12, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc814) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0x0, 0xa01, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x6aa9ef41d98db4a8) 0s ago: executing program 9 (id=7212): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) kernel console output (not intermixed with test programs): all (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.037997][T20728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.049907][T20728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.056918][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.083075][T20728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.109201][T20760] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.128256][T20728] hsr_slave_0: entered promiscuous mode [ 370.134757][T20728] hsr_slave_1: entered promiscuous mode [ 370.140839][T20728] debugfs: 'hsr0' already exists in 'hsr' [ 370.146606][T20728] Cannot create hsr debugfs directory [ 370.174119][T20760] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.217463][ T8044] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.237784][ T8044] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.261025][ T8044] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.276172][T20728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.285370][ T8044] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.293731][T20728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.302833][T20728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.311950][T20728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 370.355940][T20728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.370978][T20728] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.383583][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.390727][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.402758][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.409880][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.430087][T20728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.440662][T20728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.528208][T20728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.541666][ T8042] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.654709][ T8042] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.712070][ T8042] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.766325][T20728] veth0_vlan: entered promiscuous mode [ 370.820064][T20728] veth1_vlan: entered promiscuous mode [ 370.859919][T20728] veth0_macvtap: entered promiscuous mode [ 370.867602][T20728] veth1_macvtap: entered promiscuous mode [ 370.915112][ T8042] bridge_slave_1: left allmulticast mode [ 370.921116][ T8042] bridge_slave_1: left promiscuous mode [ 370.926869][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.002256][ T8042] bridge_slave_0: left allmulticast mode [ 371.008059][ T8042] bridge_slave_0: left promiscuous mode [ 371.013946][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.242056][ T8042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.259748][T20800] Set syz1 is full, maxelem 65536 reached [ 371.267337][ T8042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.277044][T20812] loop2: detected capacity change from 0 to 128 [ 371.277148][ T8042] bond0 (unregistering): Released all slaves [ 371.284495][T20812] FAT-fs (loop2): Directory bread(block 414) failed [ 371.296189][T20812] FAT-fs (loop2): Directory bread(block 415) failed [ 371.307751][T20812] FAT-fs (loop2): Directory bread(block 416) failed [ 371.314457][T20812] FAT-fs (loop2): Directory bread(block 417) failed [ 371.321257][T20812] FAT-fs (loop2): Directory bread(block 418) failed [ 371.327947][T20812] FAT-fs (loop2): Directory bread(block 419) failed [ 371.335127][T20812] FAT-fs (loop2): Directory bread(block 420) failed [ 371.341899][T20812] FAT-fs (loop2): Directory bread(block 421) failed [ 371.345673][T20807] wg2: entered promiscuous mode [ 371.353683][T20807] wg2: entered allmulticast mode [ 371.388339][ T8042] hsr_slave_0: left promiscuous mode [ 371.393269][T20812] FAT-fs (loop2): FAT read failed (blocknr 128) [ 371.400031][ T8042] hsr_slave_1: left promiscuous mode [ 371.407195][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.410848][T20812] FAT-fs (loop2): Directory bread(block 414) failed [ 371.414889][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.439131][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.446582][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.446631][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 371.446649][ T29] audit: type=1326 audit(1760568215.128:60414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.483722][ T29] audit: type=1326 audit(1760568215.128:60415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.507495][ T29] audit: type=1326 audit(1760568215.128:60416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.531596][ T29] audit: type=1326 audit(1760568215.128:60417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.555369][ T29] audit: type=1326 audit(1760568215.128:60418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.579201][ T29] audit: type=1326 audit(1760568215.128:60419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.602936][ T29] audit: type=1326 audit(1760568215.128:60420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.626918][ T29] audit: type=1326 audit(1760568215.128:60421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.650701][ T29] audit: type=1326 audit(1760568215.128:60422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.674429][ T29] audit: type=1326 audit(1760568215.128:60423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20817 comm="syz.6.6596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 371.702965][ T8042] veth1_macvtap: left promiscuous mode [ 371.708619][ T8042] veth0_macvtap: left promiscuous mode [ 371.714416][ T8042] veth1_vlan: left promiscuous mode [ 371.719952][ T8042] veth0_vlan: left promiscuous mode [ 371.789780][ T8042] team0 (unregistering): Port device team_slave_1 removed [ 371.803661][ T8042] team0 (unregistering): Port device team_slave_0 removed [ 371.840100][T20728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.848761][T20728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.863667][ T8036] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.878605][ T8036] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.887642][ T8036] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.896663][ T8036] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.002670][T20803] chnl_net:caif_netlink_parms(): no params data found [ 372.016659][T20833] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.074151][T20803] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.081297][T20803] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.088593][T20803] bridge_slave_0: entered allmulticast mode [ 372.095312][T20803] bridge_slave_0: entered promiscuous mode [ 372.102370][T20803] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.109466][T20803] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.116682][T20803] bridge_slave_1: entered allmulticast mode [ 372.123421][T20803] bridge_slave_1: entered promiscuous mode [ 372.133141][T20833] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.175567][T20803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.190408][T20803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.226171][T20833] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.239501][T20803] team0: Port device team_slave_0 added [ 372.246480][T20803] team0: Port device team_slave_1 added [ 372.273968][ T8042] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.310627][T20803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.317719][T20803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.343773][T20803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.357198][T20833] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.375656][T20803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.382797][T20803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.408920][T20803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.429548][ T8042] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.460664][T20803] hsr_slave_0: entered promiscuous mode [ 372.467186][T20803] hsr_slave_1: entered promiscuous mode [ 372.467587][T20864] __nla_validate_parse: 2 callbacks suppressed [ 372.467604][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6610'. [ 372.491065][ T8042] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.512052][ T8044] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.523731][ T8036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.534838][ T8042] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.557240][ T8044] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.575462][ T8038] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.579313][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6611'. [ 372.696363][T20842] chnl_net:caif_netlink_parms(): no params data found [ 372.714728][ T8042] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.751493][T20803] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 372.761821][ T8042] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.792595][T20803] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 372.802954][ T8042] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.832150][T20803] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 372.841357][T20803] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 372.853142][T20842] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.860330][T20842] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.867512][T20842] bridge_slave_0: entered allmulticast mode [ 372.874219][T20842] bridge_slave_0: entered promiscuous mode [ 372.881229][T20842] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.888350][T20842] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.895747][T20842] bridge_slave_1: entered allmulticast mode [ 372.902837][T20842] bridge_slave_1: entered promiscuous mode [ 372.921418][ T8042] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.951373][T20842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.962157][T20842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.986367][T20842] team0: Port device team_slave_0 added [ 372.994449][T20842] team0: Port device team_slave_1 added [ 373.022938][T20842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.030047][T20842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.056377][T20842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.072424][T20842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.079528][T20842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.105469][T20842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.137277][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'. [ 373.153399][ T8042] bridge_slave_1: left allmulticast mode [ 373.159372][ T8042] bridge_slave_1: left promiscuous mode [ 373.165120][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.179355][ T8042] bridge_slave_0: left allmulticast mode [ 373.185326][ T8042] bridge_slave_0: left promiscuous mode [ 373.191251][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.200384][ T8042] bridge_slave_1: left allmulticast mode [ 373.206136][ T8042] bridge_slave_1: left promiscuous mode [ 373.211947][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.221645][ T8042] bridge_slave_0: left allmulticast mode [ 373.227398][ T8042] bridge_slave_0: left promiscuous mode [ 373.233090][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.341385][ T8042] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.350942][ T8042] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.360471][ T8042] .` (unregistering): Released all slaves [ 373.422223][ T8042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.432515][ T8042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.442390][ T8042] bond0 (unregistering): Released all slaves [ 373.452440][T20842] hsr_slave_0: entered promiscuous mode [ 373.458495][T20842] hsr_slave_1: entered promiscuous mode [ 373.464855][T20842] debugfs: 'hsr0' already exists in 'hsr' [ 373.470676][T20842] Cannot create hsr debugfs directory [ 373.524378][ T8042] hsr_slave_0: left promiscuous mode [ 373.530741][ T8042] hsr_slave_1: left promiscuous mode [ 373.536509][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.544442][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.552600][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.560065][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.569481][ T8042] hsr_slave_0: left promiscuous mode [ 373.575346][ T8042] hsr_slave_1: left promiscuous mode [ 373.581243][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.588733][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.597046][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.604609][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.618940][ T8042] veth1_macvtap: left promiscuous mode [ 373.624613][ T8042] veth0_macvtap: left promiscuous mode [ 373.630304][ T8042] veth1_vlan: left promiscuous mode [ 373.635750][ T8042] veth0_vlan: left promiscuous mode [ 373.641962][ T8042] veth1_macvtap: left promiscuous mode [ 373.647657][ T8042] veth0_macvtap: left promiscuous mode [ 373.668936][ T8042] veth1_vlan: left promiscuous mode [ 373.674430][ T8042] veth0_vlan: left promiscuous mode [ 373.809342][ T8042] team0 (unregistering): Port device team_slave_1 removed [ 373.828622][ T8042] team0 (unregistering): Port device team_slave_0 removed [ 373.849846][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6628'. [ 373.898545][ T8042] team0 (unregistering): Port device team_slave_1 removed [ 373.910465][ T8042] team0 (unregistering): Port device team_slave_0 removed [ 373.978139][T20803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.000021][T20803] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.011672][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.018851][ T8039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.031105][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.038217][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.078256][T20935] 9pnet_fd: Insufficient options for proto=fd [ 374.117929][T20803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.256896][T20803] veth0_vlan: entered promiscuous mode [ 374.266013][T20803] veth1_vlan: entered promiscuous mode [ 374.282941][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6633'. [ 374.294648][T20803] veth0_macvtap: entered promiscuous mode [ 374.302264][T20803] veth1_macvtap: entered promiscuous mode [ 374.313999][T20803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.326679][T20803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.339598][ T8039] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.364065][ T8039] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.377960][ T8039] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.387830][ T8039] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.421066][T20962] loop9: detected capacity change from 0 to 1024 [ 374.427135][T20842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.427938][T20962] EXT4-fs: Ignoring removed bh option [ 374.440009][T20962] EXT4-fs: inline encryption not supported [ 374.446263][T20962] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 374.448264][T20842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.460430][T20962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 374.474464][T20962] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.6593: lblock 2 mapped to illegal pblock 2 (length 1) [ 374.489272][T20842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.498305][T20842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.507800][T20962] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.6593: lblock 0 mapped to illegal pblock 48 (length 1) [ 374.525169][T20962] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.6593: Failed to acquire dquot type 0 [ 374.537230][T20962] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 374.548604][T20962] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.6593: mark_inode_dirty error [ 374.560512][T20962] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 374.571934][T20962] EXT4-fs (loop9): 1 orphan inode deleted [ 374.578131][T20962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.591124][ T8036] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 374.606464][ T8036] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:40: Failed to release dquot type 0 [ 374.627756][T20842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.642275][T20842] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.652734][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.659848][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.680057][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.687167][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.755371][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6638'. [ 374.798150][T20842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.840219][T20992] netlink: 'syz.6.6642': attribute type 10 has an invalid length. [ 374.983979][T21008] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.005903][T20842] veth0_vlan: entered promiscuous mode [ 375.021632][T20842] veth1_vlan: entered promiscuous mode [ 375.030821][T21008] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.070260][T20842] veth0_macvtap: entered promiscuous mode [ 375.077828][T20842] veth1_macvtap: entered promiscuous mode [ 375.097666][T20842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.108543][T21008] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.124655][T20842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.143107][ T8042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.163259][ T8042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.173348][T21008] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.187853][ T8042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.203286][ T8042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.530936][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6655'. [ 375.571015][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.581126][T20803] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 375.594691][T20803] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 375.604853][T20803] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 375.751840][T21051] loop8: detected capacity change from 0 to 512 [ 375.759865][T21051] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 375.778394][T21051] EXT4-fs (loop8): 1 truncate cleaned up [ 375.788217][T21051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.572236][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 376.572255][ T29] audit: type=1326 audit(1760568220.258:60788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.605247][ T29] audit: type=1326 audit(1760568220.258:60789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.628932][ T29] audit: type=1326 audit(1760568220.258:60790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.652649][ T29] audit: type=1326 audit(1760568220.258:60791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.676397][ T29] audit: type=1326 audit(1760568220.258:60792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.699988][ T29] audit: type=1326 audit(1760568220.258:60793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.723955][ T29] audit: type=1326 audit(1760568220.258:60794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.747674][ T29] audit: type=1326 audit(1760568220.258:60795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.771503][ T29] audit: type=1326 audit(1760568220.258:60796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.795099][ T29] audit: type=1326 audit(1760568220.258:60797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21081 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd95e2eec9 code=0x7ffc0000 [ 376.820958][T20728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.849119][ T8042] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.866957][ T8042] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.892967][ T8042] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.901794][ T8036] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.985686][T21102] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 376.997782][T21102] netlink: 'syz.6.6680': attribute type 5 has an invalid length. [ 377.005706][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6680'. [ 377.020455][T21102] ip6erspan0: entered promiscuous mode [ 377.035168][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 377.100191][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6682'. [ 377.114016][T21111] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 377.250439][T21126] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.290718][T21126] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.390875][T21126] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.450891][T21126] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.774999][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6692'. [ 377.898491][T21138] loop8: detected capacity change from 0 to 512 [ 377.905692][T21138] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 377.917411][T21138] EXT4-fs (loop8): 1 truncate cleaned up [ 377.923739][T21138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.013640][T20728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.036948][T21144] cgroup: fork rejected by pids controller in /syz6 [ 378.091953][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6698'. [ 378.163681][T21291] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.201027][T21291] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.270938][T21291] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.331084][T21291] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.387053][ T8039] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.398570][ T8039] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.410078][ T8038] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.422640][ T8039] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.466312][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6704'. [ 379.336221][T21342] netlink: 664 bytes leftover after parsing attributes in process `syz.9.6723'. [ 379.361706][T21342] loop9: detected capacity change from 0 to 1024 [ 379.364981][T21348] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6725'. [ 379.368365][T21342] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 379.523629][ T8036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.612337][ T8036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.663080][ T8036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.732152][ T8036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.757009][T21396] loop9: detected capacity change from 0 to 256 [ 379.773734][T21396] FAT-fs (loop9): Directory bread(block 64) failed [ 379.780723][T21396] FAT-fs (loop9): Directory bread(block 65) failed [ 379.787337][T21396] FAT-fs (loop9): Directory bread(block 66) failed [ 379.794230][T21396] FAT-fs (loop9): Directory bread(block 67) failed [ 379.801762][T21396] FAT-fs (loop9): Directory bread(block 68) failed [ 379.809330][T21396] FAT-fs (loop9): Directory bread(block 69) failed [ 379.815950][T21396] FAT-fs (loop9): Directory bread(block 70) failed [ 379.822026][ T8036] bridge_slave_1: left allmulticast mode [ 379.822938][T21396] FAT-fs (loop9): Directory bread(block 71) failed [ 379.828493][ T8036] bridge_slave_1: left promiscuous mode [ 379.835291][T21396] FAT-fs (loop9): Directory bread(block 72) failed [ 379.840770][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.848509][T21396] FAT-fs (loop9): Directory bread(block 73) failed [ 379.861799][ T8036] bridge_slave_0: left allmulticast mode [ 379.867482][ T8036] bridge_slave_0: left promiscuous mode [ 379.873476][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.953957][ T8036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.963919][ T8036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.973697][ T8036] bond0 (unregistering): Released all slaves [ 380.002051][T21380] chnl_net:caif_netlink_parms(): no params data found [ 380.035802][ T8036] hsr_slave_0: left promiscuous mode [ 380.049369][ T8036] hsr_slave_1: left promiscuous mode [ 380.055375][ T8036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.063152][ T8036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.072084][ T8036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.079608][ T8036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.079872][T21406] loop9: detected capacity change from 0 to 2048 [ 380.096170][ T8036] veth1_macvtap: left promiscuous mode [ 380.101844][ T8036] veth0_macvtap: left promiscuous mode [ 380.107605][ T8036] veth1_vlan: left promiscuous mode [ 380.112922][ T8036] veth0_vlan: left promiscuous mode [ 380.184777][ T8036] team0 (unregistering): Port device team_slave_1 removed [ 380.195521][ T8036] team0 (unregistering): Port device team_slave_0 removed [ 380.207944][T21410] loop9: detected capacity change from 0 to 128 [ 380.216043][T21410] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6745'. [ 380.246138][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6745'. [ 380.246339][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.262332][T21380] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.269697][T21380] bridge_slave_0: entered allmulticast mode [ 380.276138][T21380] bridge_slave_0: entered promiscuous mode [ 380.283244][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.290458][T21380] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.298794][T21380] bridge_slave_1: entered allmulticast mode [ 380.305346][T21380] bridge_slave_1: entered promiscuous mode [ 380.327763][T21380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.338555][T21380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.361793][T21380] team0: Port device team_slave_0 added [ 380.368549][T21380] team0: Port device team_slave_1 added [ 380.387245][T21380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.394240][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.420433][T21380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.432241][T21380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.439314][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.465322][T21380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.494827][T21380] hsr_slave_0: entered promiscuous mode [ 380.501155][T21380] hsr_slave_1: entered promiscuous mode [ 380.507252][T21380] debugfs: 'hsr0' already exists in 'hsr' [ 380.513199][T21380] Cannot create hsr debugfs directory [ 380.796754][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6753'. [ 380.836458][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6750'. [ 380.919833][T21380] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.948973][T21380] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.965205][T21380] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.981893][T21380] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.013934][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6756'. [ 381.052616][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.066200][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.092234][T21380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.102688][T21380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.121430][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.128600][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.160277][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.167383][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.221982][ T8037] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.266355][ T8037] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.274800][ T8037] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.295865][ T8037] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.321185][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.511590][T21380] veth0_vlan: entered promiscuous mode [ 381.530629][T21380] veth1_vlan: entered promiscuous mode [ 381.570672][T21380] veth0_macvtap: entered promiscuous mode [ 381.599965][T21380] veth1_macvtap: entered promiscuous mode [ 381.622474][T21380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.641091][T21380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.663813][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 381.663828][ T29] audit: type=1326 audit(1760568225.348:61096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.694207][ T29] audit: type=1326 audit(1760568225.378:61097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.696177][ T8036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.745178][ T29] audit: type=1326 audit(1760568225.428:61098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.760990][ T8036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.769113][ T29] audit: type=1326 audit(1760568225.428:61099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.789469][ T8036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.802588][ T29] audit: type=1326 audit(1760568225.428:61100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.833986][ T29] audit: type=1326 audit(1760568225.428:61101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.840222][ T8036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.857634][ T29] audit: type=1326 audit(1760568225.428:61102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.890069][ T29] audit: type=1326 audit(1760568225.428:61103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.913647][ T29] audit: type=1326 audit(1760568225.428:61104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 381.937620][ T29] audit: type=1326 audit(1760568225.428:61105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21469 comm="syz.3.6761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 382.332156][T21493] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.401149][T21493] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.480950][T21493] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.570995][T21493] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.626712][ T8037] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.641968][ T8037] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.662417][ T8037] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.678482][ T8037] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.958443][T21517] __nla_validate_parse: 2 callbacks suppressed [ 382.958464][T21517] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6778'. [ 383.258656][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6782'. [ 383.537691][T21548] 9pnet_fd: Insufficient options for proto=fd [ 383.587450][T21553] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 383.758743][T21561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6797'. [ 383.791545][T21565] wireguard0: entered promiscuous mode [ 383.797059][T21565] wireguard0: entered allmulticast mode [ 383.826557][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6799'. [ 383.884123][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6799'. [ 384.094387][T21588] 9pnet_fd: Insufficient options for proto=fd [ 384.139306][T21592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6807'. [ 384.269698][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6808'. [ 384.398318][T21599] sit0: entered promiscuous mode [ 384.403373][T21599] sit0: entered allmulticast mode [ 384.751227][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6810'. [ 385.042733][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 385.195048][T21640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.532315][T21653] loop1: detected capacity change from 0 to 256 [ 385.560153][T21653] FAT-fs (loop1): Directory bread(block 64) failed [ 385.571198][T21653] FAT-fs (loop1): Directory bread(block 65) failed [ 385.583798][T21653] FAT-fs (loop1): Directory bread(block 66) failed [ 385.596000][T21653] FAT-fs (loop1): Directory bread(block 67) failed [ 385.602745][T21653] FAT-fs (loop1): Directory bread(block 68) failed [ 385.609485][T21653] FAT-fs (loop1): Directory bread(block 69) failed [ 385.616201][T21653] FAT-fs (loop1): Directory bread(block 70) failed [ 385.624760][T21653] FAT-fs (loop1): Directory bread(block 71) failed [ 385.631427][T21653] FAT-fs (loop1): Directory bread(block 72) failed [ 385.638020][T21653] FAT-fs (loop1): Directory bread(block 73) failed [ 385.906856][T21669] veth0: entered promiscuous mode [ 385.956409][T21669] 9pnet_fd: Insufficient options for proto=fd [ 385.996464][T21666] veth0: left promiscuous mode [ 386.205648][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6840'. [ 386.340533][T21696] 9pnet_fd: Insufficient options for proto=fd [ 386.673199][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 386.673214][ T29] audit: type=1326 audit(1760568230.358:61493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.6850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.703189][ T29] audit: type=1326 audit(1760568230.358:61494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.6850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.727388][ T29] audit: type=1326 audit(1760568230.418:61495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.6850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.755313][ T29] audit: type=1326 audit(1760568230.438:61496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.6850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.778950][ T29] audit: type=1326 audit(1760568230.438:61497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.1.6850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.940063][ T29] audit: type=1326 audit(1760568230.628:61498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.963794][ T29] audit: type=1326 audit(1760568230.628:61499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 386.988916][ T29] audit: type=1326 audit(1760568230.628:61500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 387.012590][ T29] audit: type=1326 audit(1760568230.628:61501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 387.036279][ T29] audit: type=1326 audit(1760568230.628:61502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21716 comm="syz.1.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7f90eec9 code=0x7ffc0000 [ 387.133283][T21728] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.212439][T21728] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.262626][T21728] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.334161][ T8038] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.351202][T21728] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.380321][ T8038] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.456642][ T8038] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.478241][ T8037] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.492925][ T8039] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.503676][ T8038] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.519327][ T8039] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.548260][ T8039] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.583811][ T8038] bridge_slave_1: left allmulticast mode [ 387.589672][ T8038] bridge_slave_1: left promiscuous mode [ 387.595594][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.605005][ T8038] bridge_slave_0: left allmulticast mode [ 387.610736][ T8038] bridge_slave_0: left promiscuous mode [ 387.616480][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.703518][ T8038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.713718][ T8038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.723513][ T8038] bond0 (unregistering): Released all slaves [ 387.732761][ T8038] bond1 (unregistering): Released all slaves [ 387.766926][T21740] chnl_net:caif_netlink_parms(): no params data found [ 387.792259][ T8038] hsr_slave_0: left promiscuous mode [ 387.798052][ T8038] hsr_slave_1: left promiscuous mode [ 387.803930][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.811415][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.819130][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.826557][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.837345][ T8038] veth1_macvtap: left promiscuous mode [ 387.842964][ T8038] veth0_macvtap: left promiscuous mode [ 387.848485][ T8038] veth1_vlan: left promiscuous mode [ 387.853714][ T8038] veth0_vlan: left promiscuous mode [ 387.942666][ T8038] team0 (unregistering): Port device team_slave_1 removed [ 387.953870][ T8038] team0 (unregistering): Port device team_slave_0 removed [ 387.961792][T21755] FAULT_INJECTION: forcing a failure. [ 387.961792][T21755] name failslab, interval 1, probability 0, space 0, times 0 [ 387.974640][T21755] CPU: 0 UID: 0 PID: 21755 Comm: syz.9.6864 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.974711][T21755] Tainted: [W]=WARN [ 387.974721][T21755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.974839][T21755] Call Trace: [ 387.974847][T21755] [ 387.974857][T21755] __dump_stack+0x1d/0x30 [ 387.974886][T21755] dump_stack_lvl+0xe8/0x140 [ 387.974912][T21755] dump_stack+0x15/0x1b [ 387.974929][T21755] should_fail_ex+0x265/0x280 [ 387.974968][T21755] should_failslab+0x8c/0xb0 [ 387.975043][T21755] kmem_cache_alloc_noprof+0x50/0x480 [ 387.975070][T21755] ? skb_clone+0x151/0x1f0 [ 387.975108][T21755] skb_clone+0x151/0x1f0 [ 387.975328][T21755] __netlink_deliver_tap+0x2c9/0x500 [ 387.975380][T21755] netlink_unicast+0x66b/0x690 [ 387.975413][T21755] netlink_sendmsg+0x58b/0x6b0 [ 387.975448][T21755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.975640][T21755] __sock_sendmsg+0x145/0x180 [ 387.975665][T21755] ____sys_sendmsg+0x31e/0x4e0 [ 387.975698][T21755] ___sys_sendmsg+0x17b/0x1d0 [ 387.975751][T21755] __x64_sys_sendmsg+0xd4/0x160 [ 387.975883][T21755] x64_sys_call+0x191e/0x3000 [ 387.975913][T21755] do_syscall_64+0xd2/0x200 [ 387.975945][T21755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 387.976032][T21755] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 387.976086][T21755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.976111][T21755] RIP: 0033:0x7efd95e2eec9 [ 387.976129][T21755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.976149][T21755] RSP: 002b:00007efd94897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.976169][T21755] RAX: ffffffffffffffda RBX: 00007efd96085fa0 RCX: 00007efd95e2eec9 [ 387.976227][T21755] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 387.976240][T21755] RBP: 00007efd94897090 R08: 0000000000000000 R09: 0000000000000000 [ 387.976252][T21755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.976337][T21755] R13: 00007efd96086038 R14: 00007efd96085fa0 R15: 00007fff5ac647f8 [ 387.976363][T21755] [ 388.224077][T21755] bridge_slave_0: left allmulticast mode [ 388.229857][T21755] bridge_slave_0: left promiscuous mode [ 388.235543][T21755] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.251500][T21755] bridge_slave_1: left allmulticast mode [ 388.257285][T21755] bridge_slave_1: left promiscuous mode [ 388.263470][T21755] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.280734][T21759] loop1: detected capacity change from 0 to 128 [ 388.287402][T21755] bond0: (slave bond_slave_0): Releasing backup interface [ 388.296102][T21759] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.308518][T21755] bond0: (slave bond_slave_1): Releasing backup interface [ 388.309437][T21759] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 388.352918][T21755] team0: Port device team_slave_0 removed [ 388.361896][T21755] team0: Port device team_slave_1 removed [ 388.368777][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.376294][T21755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.385031][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.392492][T21755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.402755][T21755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.445077][T21759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.453749][T21759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.475442][T21740] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.482810][T21740] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.490512][T21740] bridge_slave_0: entered allmulticast mode [ 388.497128][T21740] bridge_slave_0: entered promiscuous mode [ 388.497435][T21776] __nla_validate_parse: 3 callbacks suppressed [ 388.497454][T21776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 388.504310][T21740] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.525457][T21740] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.532849][T21740] bridge_slave_1: entered allmulticast mode [ 388.539771][T21740] bridge_slave_1: entered promiscuous mode [ 388.566144][T21740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.578875][T21740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.602159][T21740] team0: Port device team_slave_0 added [ 388.609288][T21740] team0: Port device team_slave_1 added [ 388.627771][T21740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.634802][T21740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.660931][T21740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.725647][T21740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.732663][T21740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.758728][T21740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.810181][T21740] hsr_slave_0: entered promiscuous mode [ 388.816516][T21740] hsr_slave_1: entered promiscuous mode [ 388.822479][T21740] debugfs: 'hsr0' already exists in 'hsr' [ 388.828270][T21740] Cannot create hsr debugfs directory [ 388.915513][T21785] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.989136][T21380] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.000742][T21785] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.073605][T21785] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.145408][T21740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.158248][T21785] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.170247][T21740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.179708][T21740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.189118][T21740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.209540][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6875'. [ 389.221802][ T8047] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.235427][T21740] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.242562][T21740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.249898][T21740] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.256964][T21740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.268918][ T8039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.278136][ T8039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.286674][ T8039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.313027][T21740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.323769][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.332281][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.346520][T21740] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.357084][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.364191][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.375230][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.382349][ T8039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.474828][T21740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.562867][T21740] veth0_vlan: entered promiscuous mode [ 389.571328][T21740] veth1_vlan: entered promiscuous mode [ 389.587896][T21740] veth0_macvtap: entered promiscuous mode [ 389.595564][T21740] veth1_macvtap: entered promiscuous mode [ 389.607507][T21740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.618891][T21740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.630314][ T8047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.639580][ T8047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.648515][ T8047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.669243][ T8047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.843741][T21838] tmpfs: Unknown parameter 'çÿÿÿ' [ 389.853295][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6886'. [ 389.955789][T21841] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.001568][T21841] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.027980][ T8038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.061722][T21841] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.103289][ T8038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.141159][T21841] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.162326][T21855] FAULT_INJECTION: forcing a failure. [ 390.162326][T21855] name failslab, interval 1, probability 0, space 0, times 0 [ 390.163330][ T8038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.175067][T21855] CPU: 0 UID: 0 PID: 21855 Comm: syz.0.6893 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.175127][T21855] Tainted: [W]=WARN [ 390.175137][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.175157][T21855] Call Trace: [ 390.175167][T21855] [ 390.175184][T21855] __dump_stack+0x1d/0x30 [ 390.175281][T21855] dump_stack_lvl+0xe8/0x140 [ 390.175310][T21855] dump_stack+0x15/0x1b [ 390.175334][T21855] should_fail_ex+0x265/0x280 [ 390.175440][T21855] should_failslab+0x8c/0xb0 [ 390.175481][T21855] __kvmalloc_node_noprof+0x12e/0x670 [ 390.175526][T21855] ? xt_alloc_entry_offsets+0x4d/0x60 [ 390.175627][T21855] xt_alloc_entry_offsets+0x4d/0x60 [ 390.175669][T21855] translate_table+0xc7/0x1100 [ 390.175744][T21855] ? __rcu_read_unlock+0x4f/0x70 [ 390.175780][T21855] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 390.175838][T21855] ? should_fail_ex+0xdb/0x280 [ 390.175887][T21855] ? _copy_from_user+0x89/0xb0 [ 390.175961][T21855] do_arpt_set_ctl+0x68a/0x9a0 [ 390.175990][T21855] ? lock_sock_nested+0x112/0x140 [ 390.176032][T21855] ? _raw_spin_unlock_bh+0x36/0x40 [ 390.176116][T21855] nf_setsockopt+0x199/0x1b0 [ 390.176240][T21855] ip_setsockopt+0x102/0x110 [ 390.176356][T21855] udp_setsockopt+0x99/0xb0 [ 390.176395][T21855] sock_common_setsockopt+0x69/0x80 [ 390.176426][T21855] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 390.176459][T21855] __sys_setsockopt+0x184/0x200 [ 390.176518][T21855] __x64_sys_setsockopt+0x64/0x80 [ 390.176602][T21855] x64_sys_call+0x20ec/0x3000 [ 390.176636][T21855] do_syscall_64+0xd2/0x200 [ 390.176759][T21855] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 390.176805][T21855] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 390.176914][T21855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.176946][T21855] RIP: 0033:0x7f4ccf1feec9 [ 390.176968][T21855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.176998][T21855] RSP: 002b:00007f4ccdc67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 390.177091][T21855] RAX: ffffffffffffffda RBX: 00007f4ccf455fa0 RCX: 00007f4ccf1feec9 [ 390.177104][T21855] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 390.177142][T21855] RBP: 00007f4ccdc67090 R08: 0000000000000418 R09: 0000000000000000 [ 390.177160][T21855] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 390.177187][T21855] R13: 00007f4ccf456038 R14: 00007f4ccf455fa0 R15: 00007ffe6b2078b8 [ 390.177214][T21855] [ 390.354162][T21864] FAULT_INJECTION: forcing a failure. [ 390.354162][T21864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.421162][T21866] netlink: 324 bytes leftover after parsing attributes in process `syz.9.6898'. [ 390.426326][T21864] CPU: 0 UID: 0 PID: 21864 Comm: syz.0.6897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.426372][T21864] Tainted: [W]=WARN [ 390.426383][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.426469][T21864] Call Trace: [ 390.426480][T21864] [ 390.426492][T21864] __dump_stack+0x1d/0x30 [ 390.426522][T21864] dump_stack_lvl+0xe8/0x140 [ 390.426551][T21864] dump_stack+0x15/0x1b [ 390.426576][T21864] should_fail_ex+0x265/0x280 [ 390.426675][T21864] should_fail+0xb/0x20 [ 390.426720][T21864] should_fail_usercopy+0x1a/0x20 [ 390.426766][T21864] _copy_from_iter+0xd2/0xe80 [ 390.426799][T21864] ? __build_skb_around+0x1ab/0x200 [ 390.426837][T21864] ? __alloc_skb+0x223/0x320 [ 390.426953][T21864] netlink_sendmsg+0x471/0x6b0 [ 390.427000][T21864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.427044][T21864] __sock_sendmsg+0x145/0x180 [ 390.427074][T21864] ____sys_sendmsg+0x31e/0x4e0 [ 390.427271][T21864] ___sys_sendmsg+0x17b/0x1d0 [ 390.427333][T21864] __x64_sys_sendmsg+0xd4/0x160 [ 390.427405][T21864] x64_sys_call+0x191e/0x3000 [ 390.427438][T21864] do_syscall_64+0xd2/0x200 [ 390.427472][T21864] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 390.427515][T21864] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 390.427549][T21864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.427635][T21864] RIP: 0033:0x7f4ccf1feec9 [ 390.427656][T21864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.427683][T21864] RSP: 002b:00007f4ccdc67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.427711][T21864] RAX: ffffffffffffffda RBX: 00007f4ccf455fa0 RCX: 00007f4ccf1feec9 [ 390.427767][T21864] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 390.427786][T21864] RBP: 00007f4ccdc67090 R08: 0000000000000000 R09: 0000000000000000 [ 390.427802][T21864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.427820][T21864] R13: 00007f4ccf456038 R14: 00007f4ccf455fa0 R15: 00007ffe6b2078b8 [ 390.427847][T21864] [ 390.602245][T21871] loop0: detected capacity change from 0 to 2048 [ 390.690003][T21846] chnl_net:caif_netlink_parms(): no params data found [ 390.704040][T21871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.716902][T21871] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.732714][ T8038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.795200][T21846] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.802476][T21846] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.810259][T21846] bridge_slave_0: entered allmulticast mode [ 390.816822][T21846] bridge_slave_0: entered promiscuous mode [ 390.824580][T21846] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.831785][T21846] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.839103][T21846] bridge_slave_1: entered allmulticast mode [ 390.845876][T21846] bridge_slave_1: entered promiscuous mode [ 390.867147][T21846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.878070][T21846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.902877][T21846] team0: Port device team_slave_0 added [ 390.909832][T21846] team0: Port device team_slave_1 added [ 390.937701][T21846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.944823][T21846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.970786][T21846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.995099][ T8038] bridge_slave_1: left allmulticast mode [ 391.000872][ T8038] bridge_slave_1: left promiscuous mode [ 391.006577][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.023615][ T8038] bridge_slave_0: left allmulticast mode [ 391.029501][ T8038] bridge_slave_0: left promiscuous mode [ 391.035210][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.121902][ T8038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.132675][ T8038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.142646][ T8038] bond0 (unregistering): Released all slaves [ 391.151807][T21846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.158887][T21846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.184874][T21846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.223787][T21892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6903'. [ 391.239859][ T8038] hsr_slave_0: left promiscuous mode [ 391.269118][ T8038] hsr_slave_1: left promiscuous mode [ 391.274883][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.282314][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.290376][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.297800][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.309161][ T8038] veth1_macvtap: left promiscuous mode [ 391.314788][ T8038] veth0_macvtap: left promiscuous mode [ 391.320618][ T8038] veth1_vlan: left promiscuous mode [ 391.326046][ T8038] veth0_vlan: left promiscuous mode [ 391.431147][ T8038] team0 (unregistering): Port device team_slave_1 removed [ 391.452076][ T8038] team0 (unregistering): Port device team_slave_0 removed [ 391.542533][T21740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.584623][T21846] hsr_slave_0: entered promiscuous mode [ 391.605660][T21846] hsr_slave_1: entered promiscuous mode [ 391.619711][T21846] debugfs: 'hsr0' already exists in 'hsr' [ 391.625478][T21846] Cannot create hsr debugfs directory [ 391.718952][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 391.718970][ T29] audit: type=1326 audit(1760568235.398:62018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.754049][ T29] audit: type=1326 audit(1760568235.408:62019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.777784][ T29] audit: type=1326 audit(1760568235.408:62020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.801699][ T29] audit: type=1326 audit(1760568235.408:62021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.825597][ T29] audit: type=1326 audit(1760568235.408:62022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.849275][ T29] audit: type=1326 audit(1760568235.408:62023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.872985][ T29] audit: type=1326 audit(1760568235.408:62024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.896901][ T29] audit: type=1326 audit(1760568235.408:62025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.921451][ T29] audit: type=1326 audit(1760568235.408:62026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 391.945234][ T29] audit: type=1326 audit(1760568235.408:62027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21907 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf1feec9 code=0x7ffc0000 [ 392.009666][T21913] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 392.228998][T21846] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.246266][T21846] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.255994][T21846] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 392.265728][T21846] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.322043][T21846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.339683][T21846] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.349613][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.356726][ T8031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.375960][T21846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.386475][T21846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.400794][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.407917][ T8031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.501147][T21930] loop9: detected capacity change from 0 to 512 [ 392.508211][T21930] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 392.531945][T21930] EXT4-fs (loop9): 1 truncate cleaned up [ 392.534842][T21846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.545096][T21930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.695548][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.720618][T21945] tmpfs: Unknown parameter 'çÿÿÿ' [ 392.740110][T21945] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6916'. [ 392.770327][T21846] veth0_vlan: entered promiscuous mode [ 392.780922][T21846] veth1_vlan: entered promiscuous mode [ 392.800329][T21846] veth0_macvtap: entered promiscuous mode [ 392.808870][T21846] veth1_macvtap: entered promiscuous mode [ 392.825021][T21846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.837515][T21846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.849888][ T8036] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.860559][ T8036] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.884144][ T8036] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.904292][ T8036] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.430507][T21995] tmpfs: Unknown parameter 'çÿÿÿ' [ 393.439388][T21995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6935'. [ 393.694689][ T8031] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.710164][ T8031] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.722110][ T8031] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.730422][ T8031] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.989791][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6946'. [ 394.043112][T22025] loop9: detected capacity change from 0 to 512 [ 394.050499][T22025] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 394.070669][T22025] EXT4-fs (loop9): 1 truncate cleaned up [ 394.076786][T22025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.233128][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.269182][T22029] FAULT_INJECTION: forcing a failure. [ 394.269182][T22029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.282475][T22029] CPU: 0 UID: 0 PID: 22029 Comm: syz.9.6949 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.282515][T22029] Tainted: [W]=WARN [ 394.282523][T22029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.282537][T22029] Call Trace: [ 394.282544][T22029] [ 394.282553][T22029] __dump_stack+0x1d/0x30 [ 394.282645][T22029] dump_stack_lvl+0xe8/0x140 [ 394.282748][T22029] dump_stack+0x15/0x1b [ 394.282771][T22029] should_fail_ex+0x265/0x280 [ 394.282816][T22029] should_fail+0xb/0x20 [ 394.282856][T22029] should_fail_usercopy+0x1a/0x20 [ 394.282947][T22029] copy_fpstate_to_sigframe+0x628/0x7d0 [ 394.282985][T22029] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 394.283120][T22029] ? x86_task_fpu+0x36/0x60 [ 394.283155][T22029] get_sigframe+0x34d/0x490 [ 394.283173][T22029] ? get_signal+0xdc7/0xf70 [ 394.283206][T22029] x64_setup_rt_frame+0xa8/0x580 [ 394.283233][T22029] arch_do_signal_or_restart+0x23e/0x440 [ 394.283320][T22029] exit_to_user_mode_loop+0x77/0x110 [ 394.283346][T22029] do_syscall_64+0x1d6/0x200 [ 394.283371][T22029] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 394.283414][T22029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.283437][T22029] RIP: 0033:0x7efd95e2eec7 [ 394.283453][T22029] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 394.283475][T22029] RSP: 002b:00007efd94897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.283501][T22029] RAX: 0000000000000000 RBX: 00007efd96085fa0 RCX: 00007efd95e2eec9 [ 394.283518][T22029] RDX: 0000000000000026 RSI: 0000200000000440 RDI: 0000000000000009 [ 394.283535][T22029] RBP: 00007efd94897090 R08: 0000000000000000 R09: 0000000000000000 [ 394.283554][T22029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.283577][T22029] R13: 00007efd96086038 R14: 00007efd96085fa0 R15: 00007fff5ac647f8 [ 394.283598][T22029] [ 394.553023][T22033] loop9: detected capacity change from 0 to 2048 [ 394.571007][T22033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.600870][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.629655][T22038] FAULT_INJECTION: forcing a failure. [ 394.629655][T22038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.642898][T22038] CPU: 1 UID: 0 PID: 22038 Comm: syz.9.6953 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.642942][T22038] Tainted: [W]=WARN [ 394.642951][T22038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.642969][T22038] Call Trace: [ 394.642977][T22038] [ 394.642986][T22038] __dump_stack+0x1d/0x30 [ 394.643014][T22038] dump_stack_lvl+0xe8/0x140 [ 394.643058][T22038] dump_stack+0x15/0x1b [ 394.643079][T22038] should_fail_ex+0x265/0x280 [ 394.643190][T22038] should_fail+0xb/0x20 [ 394.643231][T22038] should_fail_usercopy+0x1a/0x20 [ 394.643256][T22038] strncpy_from_user+0x25/0x230 [ 394.643293][T22038] ? kmem_cache_alloc_noprof+0x242/0x480 [ 394.643404][T22038] ? getname_flags+0x80/0x3b0 [ 394.643602][T22038] getname_flags+0xae/0x3b0 [ 394.643641][T22038] user_path_at+0x28/0x130 [ 394.643768][T22038] do_fchmodat+0x9c/0x180 [ 394.643797][T22038] __x64_sys_chmod+0x38/0x50 [ 394.643833][T22038] x64_sys_call+0x2920/0x3000 [ 394.643862][T22038] do_syscall_64+0xd2/0x200 [ 394.643916][T22038] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 394.643953][T22038] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 394.643999][T22038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.644092][T22038] RIP: 0033:0x7efd95e2eec9 [ 394.644112][T22038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.644136][T22038] RSP: 002b:00007efd94897038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 394.644161][T22038] RAX: ffffffffffffffda RBX: 00007efd96085fa0 RCX: 00007efd95e2eec9 [ 394.644177][T22038] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000000000000 [ 394.644274][T22038] RBP: 00007efd94897090 R08: 0000000000000000 R09: 0000000000000000 [ 394.644289][T22038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.644304][T22038] R13: 00007efd96086038 R14: 00007efd96085fa0 R15: 00007fff5ac647f8 [ 394.644327][T22038] [ 394.909769][ T8038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.986371][ T8038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.130804][ T8038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.161099][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6947'. [ 395.192897][ T8038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.290085][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6962'. [ 395.314338][ T8038] bridge_slave_1: left allmulticast mode [ 395.320423][ T8038] bridge_slave_1: left promiscuous mode [ 395.326461][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.349174][ T8038] bridge_slave_0: left allmulticast mode [ 395.355168][ T8038] bridge_slave_0: left promiscuous mode [ 395.360953][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.552632][ T8038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.573266][T22072] loop7: detected capacity change from 0 to 512 [ 395.596271][T22072] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.612952][ T8038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.626043][T22072] EXT4-fs (loop7): mount failed [ 395.641829][ T8038] bond0 (unregistering): Released all slaves [ 395.698644][ T8038] hsr_slave_0: left promiscuous mode [ 395.706718][ T8038] hsr_slave_1: left promiscuous mode [ 395.719310][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.726763][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.738481][ T8038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.746099][ T8038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.758977][ T8038] veth1_macvtap: left promiscuous mode [ 395.764616][ T8038] veth0_macvtap: left promiscuous mode [ 395.770311][ T8038] veth1_vlan: left promiscuous mode [ 395.775643][ T8038] veth0_vlan: left promiscuous mode [ 395.866918][ T8038] team0 (unregistering): Port device team_slave_1 removed [ 395.876902][ T8038] team0 (unregistering): Port device team_slave_0 removed [ 395.916265][ T4074] kernel read not supported for file bpf-map (pid: 4074 comm: kworker/0:4) [ 395.925159][T22081] loop9: detected capacity change from 0 to 256 [ 396.011750][T22052] chnl_net:caif_netlink_parms(): no params data found [ 396.079445][T22052] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.086692][T22052] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.094680][T22052] bridge_slave_0: entered allmulticast mode [ 396.101366][T22052] bridge_slave_0: entered promiscuous mode [ 396.109853][T22052] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.117198][T22052] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.124824][T22052] bridge_slave_1: entered allmulticast mode [ 396.131821][T22052] bridge_slave_1: entered promiscuous mode [ 396.156193][T22052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.281360][T22052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.304273][T22052] team0: Port device team_slave_0 added [ 396.311465][T22052] team0: Port device team_slave_1 added [ 396.344619][T22052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.351678][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.378295][T22052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.436718][T22052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.443768][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.469792][T22052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.527755][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6976'. [ 396.530397][T22052] hsr_slave_0: entered promiscuous mode [ 396.543118][T22052] hsr_slave_1: entered promiscuous mode [ 396.549594][T22052] debugfs: 'hsr0' already exists in 'hsr' [ 396.555431][T22052] Cannot create hsr debugfs directory [ 396.578723][T22109] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.636001][T22109] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.681267][T22109] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.761472][T22109] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.801200][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6977'. [ 396.808265][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 396.808287][ T29] audit: type=1326 audit(1760568240.488:62427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.841593][ T29] audit: type=1326 audit(1760568240.498:62428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.865553][ T29] audit: type=1326 audit(1760568240.498:62429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.889507][ T29] audit: type=1326 audit(1760568240.498:62430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.913330][ T29] audit: type=1326 audit(1760568240.498:62431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.937388][ T29] audit: type=1326 audit(1760568240.498:62432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.961110][ T29] audit: type=1326 audit(1760568240.498:62433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 396.985416][ T29] audit: type=1326 audit(1760568240.498:62434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 397.009140][ T29] audit: type=1326 audit(1760568240.498:62435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 397.032768][ T29] audit: type=1326 audit(1760568240.498:62436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22119 comm="syz.3.6980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 397.100781][ T8030] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.119510][ T8030] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.128080][ T8030] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.138658][ T8030] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.152935][T22130] ªªªªªª: renamed from vlan0 (while UP) [ 397.184480][T22132] loop7: detected capacity change from 0 to 1764 [ 397.191490][T22132] iso9660: Unknown parameter 'utf)ì•' [ 397.202202][T22052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.214713][T22132] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6985'. [ 397.226428][T22052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.236179][T22052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.249853][T22052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.276844][T22144] tmpfs: Unknown parameter 'çÿÿÿ' [ 397.284158][T22144] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6989'. [ 397.320113][T22052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.353286][T22148] tipc: Started in network mode [ 397.358268][T22148] tipc: Node identity ac14140f, cluster identity 4711 [ 397.380793][T22148] tipc: New replicast peer: 255.255.255.83 [ 397.386770][T22148] tipc: Enabled bearer , priority 10 [ 397.394831][T22052] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.404884][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.412195][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.430994][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.438154][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.466466][T22052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.477524][T22052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.543156][T22052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.795724][T22052] veth0_vlan: entered promiscuous mode [ 397.806489][T22052] veth1_vlan: entered promiscuous mode [ 397.850681][T22052] veth0_macvtap: entered promiscuous mode [ 397.863084][T22052] veth1_macvtap: entered promiscuous mode [ 397.871792][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7001'. [ 397.878350][T22052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.894047][T22052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.905666][ T8038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.914963][ T8038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.926073][ T8038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.935630][ T8038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.983273][T22195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7003'. [ 398.320796][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7014'. [ 398.379270][ T3418] tipc: Node number set to 2886997007 [ 398.403074][T22239] loop9: detected capacity change from 0 to 1024 [ 398.410101][T22239] EXT4-fs: inline encryption not supported [ 398.417611][T22239] EXT4-fs (loop9): orphan cleanup on readonly fs [ 398.435190][T22239] EXT4-fs (loop9): 1 truncate cleaned up [ 398.441939][T22239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.455083][T22237] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.7017: iget: bad extra_isize 202 (inode size 1024) [ 398.479750][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.047820][ T8031] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.114464][ T8031] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.182143][ T8031] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.194213][T22264] __nla_validate_parse: 1 callbacks suppressed [ 399.194234][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7028'. [ 399.253767][ T8031] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.288912][T22245] syz.3.7020 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 399.299734][T22245] CPU: 0 UID: 0 PID: 22245 Comm: syz.3.7020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.299767][T22245] Tainted: [W]=WARN [ 399.299805][T22245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.299824][T22245] Call Trace: [ 399.299832][T22245] [ 399.299843][T22245] __dump_stack+0x1d/0x30 [ 399.299871][T22245] dump_stack_lvl+0xe8/0x140 [ 399.299898][T22245] dump_stack+0x15/0x1b [ 399.299917][T22245] dump_header+0x81/0x220 [ 399.300027][T22245] oom_kill_process+0x342/0x400 [ 399.300102][T22245] out_of_memory+0x979/0xb80 [ 399.300170][T22245] try_charge_memcg+0x610/0xa10 [ 399.300208][T22245] charge_memcg+0x51/0xc0 [ 399.300233][T22245] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 399.300259][T22245] __read_swap_cache_async+0x17b/0x2d0 [ 399.300442][T22245] swap_cluster_readahead+0x362/0x3c0 [ 399.300467][T22245] swapin_readahead+0xde/0x6f0 [ 399.300488][T22245] ? kvm_sched_clock_read+0x11/0x20 [ 399.300514][T22245] ? sched_clock+0x3f/0x60 [ 399.300632][T22245] ? css_rstat_updated+0xb7/0x240 [ 399.300679][T22245] ? __rcu_read_unlock+0x4f/0x70 [ 399.300737][T22245] ? swap_cache_get_folio+0x277/0x280 [ 399.300777][T22245] do_swap_page+0x2ae/0x2370 [ 399.300830][T22245] ? __set_next_task_fair+0x5b/0x150 [ 399.300863][T22245] ? _raw_spin_unlock+0x26/0x50 [ 399.300893][T22245] ? finish_task_switch+0xad/0x2b0 [ 399.300917][T22245] ? __pfx_default_wake_function+0x10/0x10 [ 399.301002][T22245] handle_mm_fault+0x9a5/0x2be0 [ 399.301031][T22245] ? vma_start_read+0x141/0x1f0 [ 399.301101][T22245] do_user_addr_fault+0x630/0x1080 [ 399.301131][T22245] ? fpregs_restore_userregs+0xad/0x1d0 [ 399.301235][T22245] ? switch_fpu_return+0xe/0x20 [ 399.301271][T22245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 399.301365][T22245] exc_page_fault+0x62/0xa0 [ 399.301448][T22245] asm_exc_page_fault+0x26/0x30 [ 399.301469][T22245] RIP: 0033:0x7f3823161788 [ 399.301486][T22245] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 399.301568][T22245] RSP: 002b:00007fff4806b930 EFLAGS: 00010293 [ 399.301587][T22245] RAX: 0000000000000000 RBX: 00007f3823385fa0 RCX: 00007f3823161785 [ 399.301601][T22245] RDX: 00007fff4806b970 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.301613][T22245] RBP: 00007f3823387da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 399.301626][T22245] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000061792 [ 399.301638][T22245] R13: 00007fff4806ba90 R14: ffffffffffffffff R15: 00007fff4806bab0 [ 399.301659][T22245] [ 399.301739][T22245] memory: usage 307200kB, limit 307200kB, failcnt 2405 [ 399.501594][T22279] 9pnet_fd: Insufficient options for proto=fd [ 399.508978][T22245] memory+swap: usage 372924kB, limit 9007199254740988kB, failcnt 0 [ 399.579974][T22245] kmem: usage 241760kB, limit 9007199254740988kB, failcnt 0 [ 399.587278][T22245] Memory cgroup stats for /syz3: [ 399.588238][T22258] chnl_net:caif_netlink_parms(): no params data found [ 399.589903][T22245] cache 67010560 [ 399.603686][T22245] rss 0 [ 399.606457][T22245] shmem 0 [ 399.609435][T22245] mapped_file 0 [ 399.612905][T22245] dirty 0 [ 399.615846][T22245] writeback 0 [ 399.619283][T22245] workingset_refault_anon 2920 [ 399.624124][T22245] workingset_refault_file 19851 [ 399.628994][T22245] swap 67301376 [ 399.632588][T22245] swapcached 0 [ 399.635984][T22245] pgpgin 789837 [ 399.639516][T22245] pgpgout 773477 [ 399.643086][T22245] pgfault 614125 [ 399.646693][T22245] pgmajfault 469 [ 399.650293][T22245] inactive_anon 0 [ 399.653956][T22245] active_anon 0 [ 399.657446][T22245] inactive_file 0 [ 399.661306][T22245] active_file 0 [ 399.664862][T22245] unevictable 67010560 [ 399.668995][T22245] hierarchical_memory_limit 314572800 [ 399.674642][T22245] hierarchical_memsw_limit 9223372036854771712 [ 399.681147][T22245] total_cache 67010560 [ 399.685238][T22245] total_rss 0 [ 399.688573][T22245] total_shmem 0 [ 399.692178][T22245] total_mapped_file 0 [ 399.696333][T22245] total_dirty 0 [ 399.699963][T22245] total_writeback 0 [ 399.703831][T22245] total_workingset_refault_anon 2920 [ 399.709462][T22245] total_workingset_refault_file 19851 [ 399.710068][T22284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.714891][T22245] total_swap 67301376 [ 399.714904][T22245] total_swapcached 0 [ 399.714911][T22245] total_pgpgin 789837 [ 399.714919][T22245] total_pgpgout 773477 [ 399.714928][T22245] total_pgfault 614125 [ 399.714938][T22245] total_pgmajfault 469 [ 399.733027][T22284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.735274][T22245] total_inactive_anon 0 [ 399.735286][T22245] total_active_anon 0 [ 399.735296][T22245] total_inactive_file 0 [ 399.767894][T22245] total_active_file 0 [ 399.771931][T22245] total_unevictable 67010560 [ 399.776678][T22245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7020,pid=22245,uid=0 [ 399.791702][T22245] Memory cgroup out of memory: Killed process 22245 (syz.3.7020) total-vm:93824kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 399.834983][T22258] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.842322][T22258] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.861490][T22258] bridge_slave_0: entered allmulticast mode [ 399.868106][T22258] bridge_slave_0: entered promiscuous mode [ 399.877335][T22258] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.884442][T22258] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.891930][T22258] bridge_slave_1: entered allmulticast mode [ 399.898545][T22258] bridge_slave_1: entered promiscuous mode [ 399.938417][T22258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.967567][T22258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.979608][ T8031] bridge_slave_1: left allmulticast mode [ 399.985343][ T8031] bridge_slave_1: left promiscuous mode [ 399.991100][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.009379][ T8031] bridge_slave_0: left allmulticast mode [ 400.015184][ T8031] bridge_slave_0: left promiscuous mode [ 400.020973][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.141890][ T8031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.152262][ T8031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.167857][ T8031] bond0 (unregistering): Released all slaves [ 400.190220][T22258] team0: Port device team_slave_0 added [ 400.197375][T22258] team0: Port device team_slave_1 added [ 400.216543][T22258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.223565][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.249775][T22258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.263462][T22258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.270489][T22258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.296458][T22258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.325976][ T8031] hsr_slave_0: left promiscuous mode [ 400.332338][ T8031] hsr_slave_1: left promiscuous mode [ 400.338140][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.345637][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.353384][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.360890][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.372583][ T8031] veth1_macvtap: left promiscuous mode [ 400.378185][ T8031] veth0_macvtap: left promiscuous mode [ 400.384633][ T8031] veth1_vlan: left promiscuous mode [ 400.390325][ T8031] veth0_vlan: left promiscuous mode [ 400.496842][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 400.509211][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 400.570635][T22316] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.593828][T22258] hsr_slave_0: entered promiscuous mode [ 400.600310][T22258] hsr_slave_1: entered promiscuous mode [ 400.606287][T22258] debugfs: 'hsr0' already exists in 'hsr' [ 400.612215][T22258] Cannot create hsr debugfs directory [ 400.626353][T22316] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.719859][T22316] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.810265][T22316] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.866971][ T8030] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.877972][ T8030] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.890080][ T8030] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.902895][ T8030] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.109615][T22258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.119933][T22258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.139547][T22258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.150276][T22258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.184380][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7055'. [ 401.250522][T22258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.264934][T22258] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.275479][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.282616][ T8039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.311049][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.318182][ T8039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.372298][T22368] loop9: detected capacity change from 0 to 512 [ 401.381628][T22362] loop5: detected capacity change from 0 to 4096 [ 401.389390][T22368] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 401.401535][T22362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.415129][T22368] EXT4-fs (loop9): 1 truncate cleaned up [ 401.416330][T22258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.436514][T22368] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.470159][T22052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.508589][T22382] loop5: detected capacity change from 0 to 512 [ 401.516629][T22382] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.528769][T22382] EXT4-fs (loop5): 1 truncate cleaned up [ 401.535135][T22382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.554452][T22258] veth0_vlan: entered promiscuous mode [ 401.562619][T22258] veth1_vlan: entered promiscuous mode [ 401.580334][T22258] veth0_macvtap: entered promiscuous mode [ 401.587856][T22258] veth1_macvtap: entered promiscuous mode [ 401.600109][T22258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.610709][T22258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.621659][ T8039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.631153][ T8039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.640811][ T8039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.650358][ T8039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.753476][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7067'. [ 402.033528][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 402.033544][ T29] audit: type=1326 audit(1760568245.718:62733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.063882][ T29] audit: type=1326 audit(1760568245.718:62734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.087900][ T29] audit: type=1326 audit(1760568245.748:62735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.111617][ T29] audit: type=1326 audit(1760568245.748:62736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.135273][ T29] audit: type=1326 audit(1760568245.748:62737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.158867][ T29] audit: type=1326 audit(1760568245.748:62738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.182669][ T29] audit: type=1326 audit(1760568245.748:62739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.206419][ T29] audit: type=1326 audit(1760568245.748:62740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.230044][ T29] audit: type=1326 audit(1760568245.748:62741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.253674][ T29] audit: type=1326 audit(1760568245.748:62742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22406 comm="syz.6.7069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78621eec9 code=0x7ffc0000 [ 402.292781][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.350174][T22052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.413170][T22423] loop9: detected capacity change from 0 to 512 [ 402.421176][T22423] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 402.433209][T22423] EXT4-fs (loop9): 1 truncate cleaned up [ 402.439481][T22423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.505411][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7078'. [ 402.546505][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.592481][T22435] loop9: detected capacity change from 0 to 512 [ 402.609217][T22435] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 402.629125][T22444] ªªªªªª: renamed from vlan0 (while UP) [ 402.655060][T22435] EXT4-fs (loop9): 1 truncate cleaned up [ 402.663884][T22435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.714969][T22449] loop2: detected capacity change from 0 to 8192 [ 402.731592][T22451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7086'. [ 402.741609][T22451] 0ªX¹¦À: renamed from caif0 [ 402.748059][T22451] 0ªX¹¦À: entered allmulticast mode [ 402.753314][T22451] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 403.350319][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7092'. [ 403.415176][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7094'. [ 403.427956][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.516790][T22480] tipc: Enabling of bearer rejected, failed to enable media [ 403.537352][T22480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22480 comm=syz.6.7098 [ 403.780825][T22498] vhci_hcd: invalid port number 96 [ 403.785977][T22498] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 403.800269][T22498] netlink: 'syz.5.7105': attribute type 12 has an invalid length. [ 403.858541][T22512] netlink: 324 bytes leftover after parsing attributes in process `syz.6.7110'. [ 403.877972][T22514] FAULT_INJECTION: forcing a failure. [ 403.877972][T22514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.891414][T22514] CPU: 0 UID: 0 PID: 22514 Comm: syz.5.7111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 403.891463][T22514] Tainted: [W]=WARN [ 403.891498][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.891515][T22514] Call Trace: [ 403.891524][T22514] [ 403.891534][T22514] __dump_stack+0x1d/0x30 [ 403.891563][T22514] dump_stack_lvl+0xe8/0x140 [ 403.891590][T22514] dump_stack+0x15/0x1b [ 403.891612][T22514] should_fail_ex+0x265/0x280 [ 403.891743][T22514] should_fail+0xb/0x20 [ 403.891844][T22514] should_fail_usercopy+0x1a/0x20 [ 403.891870][T22514] _copy_from_user+0x1c/0xb0 [ 403.891895][T22514] ___sys_recvmsg+0xaa/0x370 [ 403.891950][T22514] ? _parse_integer+0x27/0x40 [ 403.892000][T22514] do_recvmmsg+0x1ef/0x540 [ 403.892044][T22514] ? fput+0x8f/0xc0 [ 403.892083][T22514] __x64_sys_recvmmsg+0xe5/0x170 [ 403.892124][T22514] x64_sys_call+0x27aa/0x3000 [ 403.892183][T22514] do_syscall_64+0xd2/0x200 [ 403.892231][T22514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 403.892265][T22514] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 403.892292][T22514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.892409][T22514] RIP: 0033:0x7f5dc9d3eec9 [ 403.892432][T22514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.892457][T22514] RSP: 002b:00007f5dc879f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.892483][T22514] RAX: ffffffffffffffda RBX: 00007f5dc9f95fa0 RCX: 00007f5dc9d3eec9 [ 403.892500][T22514] RDX: 0000000000000002 RSI: 0000200000002800 RDI: 0000000000000003 [ 403.892516][T22514] RBP: 00007f5dc879f090 R08: 0000000000000000 R09: 0000000000000000 [ 403.892601][T22514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.892614][T22514] R13: 00007f5dc9f96038 R14: 00007f5dc9f95fa0 R15: 00007ffe9fec5868 [ 403.892635][T22514] [ 404.143292][T22525] batman_adv: batadv0: Adding interface: dummy0 [ 404.149770][T22525] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.175847][T22525] batman_adv: batadv0: Interface activated: dummy0 [ 404.187282][T22525] batadv0: mtu less than device minimum [ 404.193500][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.204347][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.215145][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.225985][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.236746][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.247507][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.258381][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.269151][T22525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.392114][T22544] xt_TPROXY: Can be used only with -p tcp or -p udp [ 404.550516][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7126'. [ 404.662791][T22570] IPv6: Can't replace route, no match found [ 404.674916][T22571] loop5: detected capacity change from 0 to 512 [ 404.679473][T22571] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 404.701223][T22574] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.713604][T22571] EXT4-fs (loop5): 1 truncate cleaned up [ 404.719862][T22571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.741515][T22574] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.823071][T22574] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.842881][T22052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.950896][T22574] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.984156][T22583] wg2: entered promiscuous mode [ 404.989236][T22583] wg2: entered allmulticast mode [ 405.007866][ T8031] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.027514][ T8031] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.036295][ T8031] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.044630][ T8031] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.133972][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7141'. [ 405.273296][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7145'. [ 405.565948][T22611] netlink: 324 bytes leftover after parsing attributes in process `syz.3.7149'. [ 405.729723][T22614] netlink: 'syz.2.7150': attribute type 1 has an invalid length. [ 405.738020][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7150'. [ 405.791519][T22617] FAULT_INJECTION: forcing a failure. [ 405.791519][T22617] name failslab, interval 1, probability 0, space 0, times 0 [ 405.804316][T22617] CPU: 1 UID: 0 PID: 22617 Comm: syz.2.7150 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 405.804350][T22617] Tainted: [W]=WARN [ 405.804357][T22617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.804379][T22617] Call Trace: [ 405.804386][T22617] [ 405.804410][T22617] __dump_stack+0x1d/0x30 [ 405.804436][T22617] dump_stack_lvl+0xe8/0x140 [ 405.804459][T22617] dump_stack+0x15/0x1b [ 405.804477][T22617] should_fail_ex+0x265/0x280 [ 405.804553][T22617] ? audit_log_d_path+0x8d/0x150 [ 405.804574][T22617] should_failslab+0x8c/0xb0 [ 405.804605][T22617] __kmalloc_cache_noprof+0x4c/0x4a0 [ 405.804640][T22617] audit_log_d_path+0x8d/0x150 [ 405.804735][T22617] audit_log_d_path_exe+0x42/0x70 [ 405.804759][T22617] audit_log_task+0x1e9/0x250 [ 405.804804][T22617] ? kstrtouint+0x76/0xc0 [ 405.804846][T22617] audit_seccomp+0x61/0x100 [ 405.804878][T22617] ? __seccomp_filter+0x82d/0x1250 [ 405.804953][T22617] __seccomp_filter+0x83e/0x1250 [ 405.804985][T22617] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.805096][T22617] ? vfs_write+0x7e8/0x960 [ 405.805126][T22617] ? __rcu_read_unlock+0x4f/0x70 [ 405.805152][T22617] ? __fget_files+0x184/0x1c0 [ 405.805186][T22617] __secure_computing+0x82/0x150 [ 405.805288][T22617] syscall_trace_enter+0xcf/0x1e0 [ 405.805392][T22617] do_syscall_64+0xac/0x200 [ 405.805449][T22617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 405.805485][T22617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 405.805516][T22617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.805545][T22617] RIP: 0033:0x7f25a351eec9 [ 405.805561][T22617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.805617][T22617] RSP: 002b:00007f25a1f66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 405.805643][T22617] RAX: ffffffffffffffda RBX: 00007f25a3776090 RCX: 00007f25a351eec9 [ 405.805661][T22617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.805678][T22617] RBP: 00007f25a1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 405.805695][T22617] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 405.805712][T22617] R13: 00007f25a3776128 R14: 00007f25a3776090 R15: 00007ffeb7a514e8 [ 405.805735][T22617] [ 406.068812][T22621] ªªªªªª: renamed from vlan0 (while UP) [ 406.181921][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7157'. [ 406.197891][T22634] loop2: detected capacity change from 0 to 128 [ 406.285203][T22642] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.329183][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7159'. [ 406.342210][T22651] netlink: 'syz.5.7162': attribute type 10 has an invalid length. [ 406.350334][T22651] batman_adv: batadv0: Interface deactivated: dummy0 [ 406.357793][T22651] batman_adv: batadv0: Removing interface: dummy0 [ 406.374584][T22651] team0: Port device dummy0 added [ 406.382325][T22642] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.424035][T22642] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.475309][T22656] netlink: 324 bytes leftover after parsing attributes in process `syz.5.7164'. [ 406.500734][T22642] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.661534][T22666] loop5: detected capacity change from 0 to 512 [ 406.668860][T22666] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.724109][T22669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7170'. [ 407.166160][T22687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7187'. [ 407.269575][T22699] bridge0: entered promiscuous mode [ 407.275610][T22699] macsec1: entered promiscuous mode [ 407.379234][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 407.379253][ T29] audit: type=1326 audit(1760568251.048:63061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.409342][ T29] audit: type=1326 audit(1760568251.048:63062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.432990][ T29] audit: type=1326 audit(1760568251.058:63063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f382312ef03 code=0x7ffc0000 [ 407.456514][ T29] audit: type=1326 audit(1760568251.058:63064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f382312ef03 code=0x7ffc0000 [ 407.480293][ T29] audit: type=1326 audit(1760568251.058:63065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.504005][ T29] audit: type=1326 audit(1760568251.058:63066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.527647][ T29] audit: type=1326 audit(1760568251.058:63067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.551346][ T29] audit: type=1326 audit(1760568251.058:63068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.574948][ T29] audit: type=1326 audit(1760568251.058:63069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.598611][ T29] audit: type=1326 audit(1760568251.058:63070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22709 comm="syz.3.7186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382312eec9 code=0x7ffc0000 [ 407.777163][T22724] FAULT_INJECTION: forcing a failure. [ 407.777163][T22724] name failslab, interval 1, probability 0, space 0, times 0 [ 407.790183][T22724] CPU: 1 UID: 0 PID: 22724 Comm: syz.5.7191 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 407.790225][T22724] Tainted: [W]=WARN [ 407.790232][T22724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.790244][T22724] Call Trace: [ 407.790250][T22724] [ 407.790315][T22724] __dump_stack+0x1d/0x30 [ 407.790335][T22724] dump_stack_lvl+0xe8/0x140 [ 407.790353][T22724] dump_stack+0x15/0x1b [ 407.790463][T22724] should_fail_ex+0x265/0x280 [ 407.790495][T22724] should_failslab+0x8c/0xb0 [ 407.790526][T22724] kmem_cache_alloc_noprof+0x50/0x480 [ 407.790552][T22724] ? audit_log_start+0x342/0x720 [ 407.790626][T22724] audit_log_start+0x342/0x720 [ 407.790650][T22724] ? kstrtouint+0x76/0xc0 [ 407.790752][T22724] audit_seccomp+0x48/0x100 [ 407.790784][T22724] ? __seccomp_filter+0x82d/0x1250 [ 407.790820][T22724] __seccomp_filter+0x83e/0x1250 [ 407.790895][T22724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.790923][T22724] ? vfs_write+0x7e8/0x960 [ 407.790943][T22724] ? __rcu_read_unlock+0x4f/0x70 [ 407.791013][T22724] ? __fget_files+0x184/0x1c0 [ 407.791083][T22724] __secure_computing+0x82/0x150 [ 407.791133][T22724] syscall_trace_enter+0xcf/0x1e0 [ 407.791163][T22724] do_syscall_64+0xac/0x200 [ 407.791196][T22724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 407.791316][T22724] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 407.791337][T22724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.791425][T22724] RIP: 0033:0x7f5dc9d3eec9 [ 407.791440][T22724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.791457][T22724] RSP: 002b:00007f5dc879efc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 407.791475][T22724] RAX: ffffffffffffffda RBX: 00007f5dc9f95fa0 RCX: 00007f5dc9d3eec9 [ 407.791487][T22724] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 00000000000056bb [ 407.791499][T22724] RBP: 0000200000000140 R08: 0000000000000000 R09: 00002000000001c0 [ 407.791510][T22724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.791532][T22724] R13: 0000200000000080 R14: 00000000000056bb R15: 00002000000001c0 [ 407.791550][T22724] [ 408.028925][T22726] bridge0: entered promiscuous mode [ 408.034577][T22726] macvtap1: entered allmulticast mode [ 408.040115][T22726] bridge0: entered allmulticast mode [ 408.046357][T22726] bridge0: port 1(macvtap1) entered blocking state [ 408.053017][T22726] bridge0: port 1(macvtap1) entered disabled state [ 408.061464][T22726] bridge0: left allmulticast mode [ 408.066568][T22726] bridge0: left promiscuous mode [ 408.155443][T22738] loop9: detected capacity change from 0 to 512 [ 408.162382][T22738] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 408.174012][T22738] EXT4-fs (loop9): 1 truncate cleaned up [ 408.180251][T22738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.211683][T22741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.264121][T22741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.279278][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.314920][T22741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.372217][T22741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.421686][ T8039] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.442915][ T8039] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.460272][ T8039] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.469504][ T8039] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.521293][T22775] loop9: detected capacity change from 0 to 512 [ 408.528369][T22775] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 408.540103][T22775] EXT4-fs (loop9): 1 truncate cleaned up [ 408.546214][T22775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.673888][T20803] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.684786][T20803] ================================================================== [ 408.692905][T20803] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 408.700485][T20803] [ 408.702822][T20803] read-write to 0xffff888237d26a90 of 1 bytes by task 22777 on cpu 1: [ 408.710993][T20803] mlock_new_folio+0x143/0x240 [ 408.715874][T20803] folio_add_lru_vma+0x5f/0x70 [ 408.720671][T20803] handle_mm_fault+0x27e2/0x2be0 [ 408.725630][T20803] __get_user_pages+0x102a/0x1ed0 [ 408.730669][T20803] __mm_populate+0x243/0x3a0 [ 408.735367][T20803] __se_sys_mlockall+0x368/0x3d0 [ 408.740342][T20803] __x64_sys_mlockall+0x1f/0x30 [ 408.745217][T20803] x64_sys_call+0xd68/0x3000 [ 408.749856][T20803] do_syscall_64+0xd2/0x200 [ 408.754385][T20803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.760384][T20803] [ 408.762717][T20803] read to 0xffff888237d26a90 of 1 bytes by task 20803 on cpu 0: [ 408.770356][T20803] need_mlock_drain+0x30/0x50 [ 408.775131][T20803] __lru_add_drain_all+0x273/0x450 [ 408.780358][T20803] lru_add_drain_all+0x10/0x20 [ 408.785139][T20803] invalidate_bdev+0x47/0x70 [ 408.789733][T20803] ext4_put_super+0x624/0x7d0 [ 408.794547][T20803] generic_shutdown_super+0xe6/0x210 [ 408.799831][T20803] kill_block_super+0x2a/0x70 [ 408.804514][T20803] ext4_kill_sb+0x42/0x80 [ 408.808840][T20803] deactivate_locked_super+0x75/0x1c0 [ 408.814246][T20803] deactivate_super+0x97/0xa0 [ 408.818926][T20803] cleanup_mnt+0x269/0x2e0 [ 408.823350][T20803] __cleanup_mnt+0x19/0x20 [ 408.827785][T20803] task_work_run+0x131/0x1a0 [ 408.832383][T20803] exit_to_user_mode_loop+0xed/0x110 [ 408.837758][T20803] do_syscall_64+0x1d6/0x200 [ 408.842379][T20803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.848292][T20803] [ 408.850624][T20803] value changed: 0x18 -> 0x1b [ 408.855389][T20803] [ 408.857739][T20803] Reported by Kernel Concurrency Sanitizer on: [ 408.863916][T20803] CPU: 0 UID: 0 PID: 20803 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.875478][T20803] Tainted: [W]=WARN [ 408.879289][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.889353][T20803] ================================================================== [ 409.334169][ T8039] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.346489][ T8047] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.357865][ T8047] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.369717][ T8047] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0