last executing test programs: 2m41.965076941s ago: executing program 32 (id=29): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r2, 0x7ffffb, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m36.485352736s ago: executing program 33 (id=237): r0 = getpid() setreuid(0xee00, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2m31.477848666s ago: executing program 34 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (fail_nth: 7) 2m26.914917484s ago: executing program 35 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000340)={[{@quota}, {@oldalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@bsdgroups}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x3ff, 0x2, 0x1, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2m16.576907922s ago: executing program 36 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") 2m1.525190564s ago: executing program 37 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='tlb_flush\x00', r0}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000480)={0x0, 'hsr0\x00', {0x4}, 0xebd9}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000580)=0x4, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) socket$isdn(0x22, 0x3, 0x22) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xc4, 0x2, 0x7ff, 0x8000, 0xbb, 0x1, "2702d57db9898a63dab0fbf4404db55bd9b992133f59f7b7dd5994c6ec92602585f5e499c9963fadf77af59656ec3da104ed3e3de36700dab223028bbdaee5e704dd41d5f2ac4dd3963f3df3bb940bce17c4186123e130a696f0d25ed75cdd6fe5a13082873bde290b113298c26dde613390a8cf93134c521a2552588d1312e6a905cf62dc7a9ad1a703b61fcddc8c028cbeb8da89add21deddfe038d215c1b74b52e966371fe4479fce395730fc3c6ad5f31ea2c466a9d764bd9db180d215adb48fffb8"}}, 0x1dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)=ANY=[]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private1, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f000001a280)={r6, 0x6, 0x8, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001a380)={0x6, 0x1a, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf2d8}, [@call={0x85, 0x0, 0x0, 0x46}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xabe1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f000001a240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f000001a2c0)={0x2, 0x1, 0xc90, 0x80000001}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f000001a300)=[{0x3, 0x4, 0x1, 0x3}, {0x9, 0x1, 0xe, 0x7}, {0x3, 0x5, 0x5}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x2, 0x5, 0xc}, {0x3, 0x3, 0xa, 0xc}, {0x0, 0x1, 0xd, 0xa}, {0x2, 0x3, 0xf}], 0x10, 0x9, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xa) 1m57.173239709s ago: executing program 38 (id=956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800fee0ffff00124000632177fbac1414ac14141644", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="38002f800c0002000000000000000000080001000000000020000380080001"], 0x54}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r8) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004}, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(r4, 0x7001, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000006d0001002abd7000fedbdf2500000000", @ANYRES32=r12, @ANYBLOB="000800003014000008002800305b000008001f00050000002c003480140035"], 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4008010) 1m44.355725963s ago: executing program 39 (id=918): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x90ebe6ac24461bcb}, 0x18) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x585141, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x7, 0x6, 0x53e, 0x6}) recvmsg$inet_nvme(r1, &(0x7f0000001200)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f00000011c0)=""/62, 0x3e}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, 0x1403, 0x20, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8095}, 0x8000) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x4000010, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) sendfile(r1, r1, &(0x7f0000001380)=0xf, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$incfs(r0, &(0x7f00000013c0)='.log\x00', 0x50000, 0x0) connect(r1, &(0x7f0000001400)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x400000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001f40)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001580)={0x960, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c8, 0x11d, 0x0, 0x1, [{0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x33, 0x12, 0x5, 0x1b, 0x6c, 0x5, 0x5, 0xc, 0x6c, 0x30, 0x6, 0x24, 0xc, 0x1e, 0x36, 0x6c, 0x18, 0x36, 0x9, 0x30]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x18, 0x4, 0x4, 0x30, 0x2, 0x9, 0x2, 0x30, 0x1, 0x6, 0x4, 0x0, 0x16, 0x64, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x613, 0x0, 0x5, 0x9, 0x0, 0x2, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x6c, 0x9, 0x4, 0x12, 0x6c, 0x6c, 0x60, 0x1f, 0xc, 0xb, 0x4, 0x30, 0x6c, 0x9, 0x30, 0x60, 0x30, 0x2, 0x12, 0x6c, 0x36, 0x6c, 0x1, 0x2, 0x4, 0x5, 0x1b, 0xc, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0xdc, 0xff81, 0x9, 0xfff, 0x138, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x1f}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x280, 0x0, 0x8, 0x7, 0x3, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x5, 0x0, 0x7f, 0x0, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x6, 0x9, 0x6, 0x6, 0xffff, 0x7]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x8, 0x8, 0x9, 0x8, 0xffff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffc0, 0x0, 0x3f9, 0x871, 0x4, 0x81dc, 0x9, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x9, 0x7, 0xff, 0x9, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x800, 0xf006, 0x3, 0x8, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x0, 0xa3, 0x3, 0xfff7, 0x101, 0xe]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x16, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xff, 0x100, 0xffff, 0xd14, 0x1, 0x8000]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x444, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x12, 0x1b, 0x48, 0x36, 0xb, 0x16, 0x36, 0x60, 0x60, 0x5, 0x1b, 0x9, 0x60, 0x60, 0x4, 0x24, 0xb, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x3, 0x2, 0x1, 0x64c, 0xfffe, 0xb]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x3}, {0x7}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x5, 0xf83, 0x9, 0x4, 0xfffb, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3, 0x3ff, 0x3, 0x7ff, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2d, 0x2, 0x1, 0x18, 0x1b, 0x5, 0x3, 0xb, 0x5, 0x1, 0x2, 0x4, 0x1b, 0x24, 0x60, 0x1, 0x6, 0xb, 0x5, 0x1b, 0x4, 0x36, 0x48, 0x6, 0xc, 0xb, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x24, 0x24, 0x60, 0x65, 0x1]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x6, 0xa}, {0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x2}, {0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x70, 0x1, 0x4, 0xf7, 0x3, 0x1, 0x8000, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x823d, 0x4, 0x3, 0x6c, 0x3, 0x100, 0x6]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x1, 0x0, 0x6, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x6c, 0x1b, 0x16, 0x6, 0x1b, 0x16, 0x30, 0x12, 0x3, 0x1b, 0x12, 0x5, 0xb, 0x3, 0x0, 0x9, 0x36, 0x9]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x6}, {0x2, 0x9}, {0x5, 0x2}, {0x5, 0xa}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x6, 0x19d5, 0x3, 0x5, 0xda2c, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x24, 0x1, 0x16, 0x3, 0x18, 0x30, 0xc, 0x60, 0x1b, 0x2, 0x6c, 0x3, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x1, 0x9, 0xf, 0xed, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x2}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x1}, {0x4, 0x9}, {0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf0, 0x3ff, 0x0, 0x0, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x0, 0x0, 0xb, 0xff6a, 0xf696, 0xf800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x6, 0x7, 0x8, 0x6, 0x401, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x0, 0xe4, 0x71, 0x400, 0x9, 0x8]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x6, 0xc, 0xd, 0xfa, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x18, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x2, 0x81, 0x1, 0xff95, 0x9, 0x1c]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x24e8, 0x0, 0x1ff, 0x2, 0x7, 0x2, 0x54be]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x7}, {0x7}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x7}, {0x4}, {0x0, 0x5}, {0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x9}, {0x7}, {0x3, 0xa}, {0x6, 0x5}, {0x6}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x3, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xb3, 0x4, 0x5, 0x74, 0x1, 0x200]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x563, 0x0, 0x2, 0x9, 0x1, 0x6, 0x5, 0x9afc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x8}, {}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x7}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x4, 0x7, 0x800, 0xfffe, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf2b1, 0x7f, 0x4, 0x800, 0x6, 0xfffe, 0x9023, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x5, 0x0, 0x48, 0x9, 0x48, 0x1b, 0x1b, 0x1, 0x18, 0x4, 0x5, 0x9, 0x12, 0x60, 0x4, 0x5, 0x1b, 0xb, 0x16, 0x2, 0x6]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x5, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x2, 0x3}, {0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x3}]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x224, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x3, 0x9}, {0x2, 0x1f}, {0x4, 0x2}, {}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x1}, {0x5, 0x3}, {}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0xa}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x80c, 0x2, 0xff3b, 0x3, 0xde8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xc310, 0x2, 0x8, 0x9, 0x20, 0x9]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x6}, {0x5}, {0x4, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffc, 0x9, 0x800, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x9, 0x81, 0x9, 0x9, 0x8, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x9, 0x9, 0x1, 0x1, 0x1, 0x12, 0x1, 0x5, 0x9, 0x6, 0x2, 0x6c, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x60, 0x3, 0x48, 0x3]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x1b, 0x51de04231f5323e0, 0x6, 0xc, 0x36, 0x8, 0x60, 0x2d, 0xc, 0x24, 0x12, 0xc, 0x36, 0x6, 0x3, 0x16, 0x1b, 0x1, 0x0, 0x2, 0x5, 0x24, 0x16, 0x9, 0xc, 0x48, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x6}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x3, 0xcc1, 0x3, 0x6, 0x800, 0xfff9, 0x816]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x2010, 0x2, 0xffff, 0x1ff, 0x101, 0x195]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0xc, 0xf, 0x2, 0x2b, 0x400, 0x7]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xa7b, 0x3, 0x3, 0xba7, 0x80, 0xffd7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x16, 0x6c, 0x24, 0x16, 0x16, 0x6, 0x1, 0x12, 0x1b, 0x1, 0x36, 0xb, 0x1b, 0x3, 0x35, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x960}, 0x1, 0x0, 0x0, 0x810}, 0x20000004) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0xc800) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000020c0)) r9 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000002100)='bond_slave_0\x00') connect$unix(r3, &(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e) 1m23.39991878s ago: executing program 40 (id=1793): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) memfd_secret(0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0) 58.579326905s ago: executing program 2 (id=2438): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x1, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000007c0)={0x80, 0x8, 0xcc, 0x38b, 0x0, 0x102}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='rpcgss_svc_seqno_bad\x00', 0xffffffffffffffff, 0x0, 0x4}, 0xffffffed) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2c8, 0x3, 0x398, 0x0, 0x229, 0x240, 0x208, 0x4c000000, 0x300, 0x328, 0x328, 0x300, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x100000007, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "41e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="12000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) 57.729732323s ago: executing program 2 (id=2450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x5f, &(0x7f0000000100)=""/95, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES32=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r1, 0x1d2d, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x10) close(0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfa}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r10 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f00000003c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2a8, &(0x7f0000000d00)="$eJzs3UFr034YwPHnv+6/dh1bK4igoD7oRS9hqy9Ai2wgFpS5DvUgZC7V0tiOpEwq4noRr76O4dGboL6BXcSLd29DELzsIEZMmi3dutlt7Vq77wfG70me30N+a9PypNB0/e7rJ6WCaxTMqgwlVIZE6rIhkv4TNfzXGIf8eESi6nJ57MeXs3fu3b+ZzeWmZ1VnsnNXMqo6cf790+dvLnysjs2/nXgXl7X0g/Xvma9rp9ZOr/+ae1x0tehquVJVUxcqlaq5YFu6WHRLhupt2zJdS4tl13Ka8gW7srRUU7O8OJ5ccizXVbNc05JV02pFq05NzUdmsayGYeh4Uo634Tbm5FdnZ83srmkv1tEVoetGW+10nGy9dTK/egRrAgAAfWbv/j/o9Xfv/3Pzwdjh/l+E/r9L6k1bf+n/MRAcJ2smG6/fZvT/AAAAAAAAAAAAAAAAAAAAAAD8CzY8L+V5Xiocw7+4iCREJNzu9TrRHQd8/q/2aLnosMgX9xIi9qvl/HI+GIN8tiBFscWSSUnJT/98aAjimRu56Un1peWDvdKoX1nOxyQe1ofSrerPnZgK6rW5/n9JRo+fkZScbH38TMv6Ebl0MVJvSEo+PZSK2LLon9db9S+mVK/fym2rH/XnAQAAAAAwCAzdtOP63c/7ExKymR8N80H9Pj4f2HZ9PSxn2rlFJQAAAAAAODS39qxk2rblHCCIi8ghygc1iElfLGNbcE1E+mAZRxUkRCTYowcp/7ZZ3laV18acYRHp+cOyj6DX70wAAAAAOm2r6Y/u3flLIU0+v+zyqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOF7avR9YOH9HKkzsUR45XOzI/0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wOAAD//1s0H8I=") ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 57.709409755s ago: executing program 2 (id=2451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="b01bc34b6184845a83d5cb3d3b36333957316cac0cbc149ee326387000b25a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) 56.781756723s ago: executing program 2 (id=2482): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2C6kUamhNhBCtHurRkHg3/hfGk16MetHEq94NCTFcQL2smZ0ZupTdsku3XWA/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7c4GR/OH61YtTf1+9OJVEtfrWX0mt3LWrF6fKouX/bcsz1WqR39Sg3qV3IyZnZyvnivzYwpkPxubPX3hh5szkqcqpytmJY8cOH9o7eHTiSEfizOK6tvvjuT27jr9z6Y2pE5fe+ylJI487VsTRKSP53l02uJx8utOVddn2unTSX79l3y/L6UZnAt3UFxHZ4Rqo9f+h6IstN7YNxWufdbVxwLqqVqvVVV6VF6vAfSyJbrcA6I7yjT67/i2XDRp63BWuvJxfAGVxXy+WfEt/pHli38CK69tOGomIE4v/fJUtsU73IQAA6n2XjX+ebzT+S+PhPFGbtfh/MYcyHBEPRMSOiHgwInZGxEMRtbKPRMSjbda/YoakwfgnvXzHwbUgG/+9VMxt3Tz+S8siw31Fbnst/oHk5Mxs5WCxTw7EwKaTM0llfJU6vn/1ty+abasf/2VLVn85Fizacbl/xQ266cmFybXEXO/KpxG7+xvFn0Q5jZNExK6I2H2Hdcw829902+3jX0Xzp21Z9euIZ/Ljvxgr4i8lTecnx188OnFkbHPMVg6OlWfFrX7+denNZvWvKf4OyI7/1obn/434h5PNEfPnL5yuzdfOt1/H0h+fN72mafP8P769OP8Hk7drK8op1Y8mFxbOjUcMJq/fun5i+dnKfFk+i//A/sb9f0cs74nHImJPROyNiMezi8Ki7U9ExJMRsX+V+H985an3249/Y+ZKs/inb3f8o/74t5/oO/3Dt7ePf3NENDv+h2upA8WaVl7/Wm3gWvYdAAAA3Cvyz8An6eiNdJqOjuaf4d8ZW9PZufmF507OfXh2Ov+s/HAMpOWdrqG6+6Hjxb3hMj+xIn+ouG/8Zd+WWn50am52utvBQ4/b1qT/Z/7s63brgHXXgXk04B6l/0Pv0v+hNyX6P/Q0/R96V6P+/0nT0qPfrGtjgA3l/R96UmWptf6/mD80HxUA9ybv/9C79H/oSU2/G5+u6Sv/G574t/g9w7ulPfd/ItK7ohn3f6K/5R+zaCNRHcr7f7ZmU8My3X5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9h8uas") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getdents64(r0, &(0x7f0000000540)=""/124, 0x7c) getdents64(r0, &(0x7f0000000140)=""/109, 0x6d) 56.780726333s ago: executing program 2 (id=2484): sync() socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="00000000005ecb2717378e4f99000000000047acedf7a1b0e7fddc798406490000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r2, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x200050c8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 54.55692319s ago: executing program 0 (id=2532): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) 54.531495304s ago: executing program 0 (id=2534): bpf$PROG_LOAD(0x5, 0x0, 0x19ebeb2a19275019) socket$key(0xf, 0x3, 0x2) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0xffff}, {0x0, 0x20, 0x800}, {0x4, 0x5, 0x800}, {0x1, 0x3ff}, {0x7, 0xe6}], 0x3c) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000f40000000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) utimes(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200a408000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x19000000, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc001) 53.685092542s ago: executing program 0 (id=2544): gettid() syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x29, 0x2, 0x0) 53.673154603s ago: executing program 0 (id=2545): gettid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1baa87f, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x30]}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@local, @random="4930df005fb6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0x64010102}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x40}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x6, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x30}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@noload}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 53.559411276s ago: executing program 0 (id=2546): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030000000410000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmdt(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0x3}, 0x10, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)="787cf7268aba1f79082ce2f984dfabc245d1df619092cf1842592771060de15fb2ddf2954e5cc5014ba45269a98e8c81e0c0e10c12a16e55322bd44a4858a27b837cbf78b530725ee0cff73d1087540ed2114b3ef6fbdb8a4ddb14b738981286d7bedde838866fdd4fe636639e5519b27f5b2249e9ed1b9b26ea47cccda6821fe3655f983ea79f83c906c5b6cb242a4f5f74500478dfb2dd9a57deecaa947b32a2506593518203b572f3680ba1d936b443dfd3ecfa34cc9cc8337dbec1cdbea90d1f2ee98a00929529dce04aca22f3de8e92ee449db33604fc828eee05d0072e88a526a0d2d9a64bc8fe19e4f613bcc32dcf05721552861a3b0e2f3f2b807caf6e9da9646d9ea31513878ff1deda6908d822d68a5bfaef6ef46f514aa1a3c7189ab49ef73f74442f9f94458d04b10744ce3d7cb5b88dcb2a6fc10cf351f08f517cb5ebd496ec42953a3af3bd23349d30c94181d8ecd212390768bec6e2975d91311b42ee9f3627467dd57501b443364d83ebe00bc05d21373a1651776225c46e", 0x180, 0x0, &(0x7f0000000b40)={0x2, 0x11d, {0x0, 0xc, 0x12, "46ae33f3de97a4a4d0c1eca16fb537427b33", 0xfe, "dbcf002c8de2ec32b556f0de12118235248e22b83043a9cb2ad0ea841bb5c39466d3ce7157d10feea491dc45fb4af101a2c791a844c86a6f5e536cf14f6c75e314b6d7a69db2cc5d9e172dc3c92908aaef245d83a53d1c5ee48e8793c6ae1b3436083b5c0d4091ce564d14850305a7c8b7d4bf0809516d19ad1e9dc8b9ec76bfd1446023bfb0163b18a6cf174a9386beea642c3495149eaa860fa043dad8224d022d8dcabcfa1df5f9cc92dd6aa13c3679b3a3135c6dae602c518f55cf3efe955533f82016adc1680b930b4c1a65ea6242a58d5aa363117dd2806e4e6aa0a4467b0f95a3e82a75812f68855e6ddc8d80fa05eea7a42ec9efed855fc14572"}, 0x1000, "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"}, 0x1129}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 53.297524796s ago: executing program 0 (id=2547): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000540)=""/124, 0x7c) 53.297274836s ago: executing program 41 (id=2547): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2C6kUamhNhBCtHurRkHg3/hfGk16MetHEq94NCTFcQL2smZ0ZupTdsku3XWA/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7c4GR/OH61YtTf1+9OJVEtfrWX0mt3LWrF6fKouX/bcsz1WqR39Sg3qV3IyZnZyvnivzYwpkPxubPX3hh5szkqcqpytmJY8cOH9o7eHTiSEfizOK6tvvjuT27jr9z6Y2pE5fe+ylJI487VsTRKSP53l02uJx8utOVddn2unTSX79l3y/L6UZnAt3UFxHZ4Rqo9f+h6IstN7YNxWufdbVxwLqqVqvVVV6VF6vAfSyJbrcA6I7yjT67/i2XDRp63BWuvJxfAGVxXy+WfEt/pHli38CK69tOGomIE4v/fJUtsU73IQAA6n2XjX+ebzT+S+PhPFGbtfh/MYcyHBEPRMSOiHgwInZGxEMRtbKPRMSjbda/YoakwfgnvXzHwbUgG/+9VMxt3Tz+S8siw31Fbnst/oHk5Mxs5WCxTw7EwKaTM0llfJU6vn/1ty+abasf/2VLVn85Fizacbl/xQ266cmFybXEXO/KpxG7+xvFn0Q5jZNExK6I2H2Hdcw829902+3jX0Xzp21Z9euIZ/Ljvxgr4i8lTecnx188OnFkbHPMVg6OlWfFrX7+denNZvWvKf4OyI7/1obn/434h5PNEfPnL5yuzdfOt1/H0h+fN72mafP8P769OP8Hk7drK8op1Y8mFxbOjUcMJq/fun5i+dnKfFk+i//A/sb9f0cs74nHImJPROyNiMezi8Ki7U9ExJMRsX+V+H985an3249/Y+ZKs/inb3f8o/74t5/oO/3Dt7ePf3NENDv+h2upA8WaVl7/Wm3gWvYdAAAA3Cvyz8An6eiNdJqOjuaf4d8ZW9PZufmF507OfXh2Ov+s/HAMpOWdrqG6+6Hjxb3hMj+xIn+ouG/8Zd+WWn50am52utvBQ4/b1qT/Z/7s63brgHXXgXk04B6l/0Pv0v+hNyX6P/Q0/R96V6P+/0nT0qPfrGtjgA3l/R96UmWptf6/mD80HxUA9ybv/9C79H/oSU2/G5+u6Sv/G574t/g9w7ulPfd/ItK7ohn3f6K/5R+zaCNRHcr7f7ZmU8My3X5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9h8uas") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000540)=""/124, 0x7c) 41.760789483s ago: executing program 42 (id=2484): sync() socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="00000000005ecb2717378e4f99000000000047acedf7a1b0e7fddc798406490000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r2, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x200050c8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 27.339398444s ago: executing program 4 (id=3045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 27.317959946s ago: executing program 4 (id=3047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 27.236222216s ago: executing program 4 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[]) 27.212026659s ago: executing program 4 (id=3054): socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timerfd_create(0x7, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6(0xa, 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) 27.015315161s ago: executing program 4 (id=3060): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) r2 = syz_io_uring_setup(0x4173, &(0x7f0000000780)={0x0, 0xb39a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 26.925096491s ago: executing program 4 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) sync() (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) chdir(&(0x7f0000000100)='./file0\x00') (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) (async) getdents(r6, 0x0, 0x0) 25.100362493s ago: executing program 9 (id=3105): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @ethernet={0x306, @random="faccc1c39c4a"}, @nfc={0x27, 0x0, 0x1, 0x3}, @isdn={0x22, 0xe4, 0x4, 0x8, 0xff}, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x7}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_open(0x0, 0x40, 0xa, &(0x7f0000000680)={0x2, 0x8, 0x1, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 25.045582439s ago: executing program 9 (id=3107): unshare(0x24020400) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) close(r4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00', 0x0, 0x8}, 0x18) 24.717966867s ago: executing program 9 (id=3115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000062c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) r4 = dup2(r2, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xff02, 0x0) r8 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r11) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0x20}, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, r8, r11}, 0xc) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000080000032000000000000000000000000000000000000000004000000000000d1000000000000000000000000000000000040000000000000000000000000000800000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 24.698403119s ago: executing program 9 (id=3117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@quota}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d08001400000000000000000000000800120000000200000000000000000006000000000000000000000000000100fe8000000000000000000000000000aaffffffff00000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000050006"], 0xa0}}, 0x0) sendto$inet6(r1, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc53, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r5, r4, 0x0, 0x100800001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 23.849576718s ago: executing program 9 (id=3130): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @ethernet={0x306, @random="faccc1c39c4a"}, @nfc={0x27, 0x0, 0x1, 0x3}, @isdn={0x22, 0xe4, 0x4, 0x8, 0xff}, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x7}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000000640)='\x00', 0x40, 0xa, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 23.676397428s ago: executing program 9 (id=3135): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x8000, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x4}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) fchown(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x7}, {0x6}]}) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) gettid() 23.675897548s ago: executing program 43 (id=3135): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x8000, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000080)={0x4}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) fchown(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x7}, {0x6}]}) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) gettid() 14.221058703s ago: executing program 6 (id=3291): bpf$PROG_LOAD(0x5, 0x0, 0x19ebeb2a19275019) socket$key(0xf, 0x3, 0x2) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0xffff}, {0x0, 0x20, 0x800}, {0x4, 0x5, 0x800}, {0x1, 0x3ff}, {0x7, 0xe6}], 0x3c) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000f40000000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) utimes(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200a408000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x19000000, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc001) 13.38185599s ago: executing program 1 (id=3298): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0/file0\x00'}, 0x6e) (fail_nth: 4) 13.362842832s ago: executing program 6 (id=3300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "f09897f100008000", "0d07080d004fcf0000e8ffff1a8600", "cf0d1d00", "8657e2b7e43b34e4"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x8d) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 13.341143045s ago: executing program 1 (id=3302): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) 13.29744233s ago: executing program 6 (id=3303): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0xfffffcba) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x366}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x6169, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000002000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090062002780870014f51c3c975d5aec84222fd3a00b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a61990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae781ce935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f80d20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1bcaf633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee700000000770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d30300000081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca4006f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc628226037968bc0cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4450c43e93b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac810d8d1adbbe7aac5ea2e91b4e5dcc1e99cdf654ff94b5010000800000000008ed475a8e950fb82aa983addc4b52f84b6d86e14e89f8ee7664e1a5f50f3038d2cc2400"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$loop(&(0x7f00000023c0), 0x400, 0x0) pipe(0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="020100021000000029bd70000000000005000600000000000a0000000000000000000000000000000000000000000000004000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130003000000000000000535000002000100000004d581020102010000e06a6b5b1aac45a0f8392497b584e3f3635ccfcd5fe736b413b4969d8a17b4daa23600f34217d1b824fe8b7140959575a3c44fab7c"], 0x80}}, 0x0) io_uring_enter(r1, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 13.264312794s ago: executing program 6 (id=3305): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x217, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1adc51, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x3}}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) sendfile(r7, r7, 0x0, 0x80000000) utime(&(0x7f0000001140)='./file0\x00', 0x0) 13.256326115s ago: executing program 1 (id=3306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000002000000000000000001819", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) memfd_secret(0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0) 13.11878826s ago: executing program 1 (id=3307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00dfff00006c6654bf188fdc885dd5868a100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syslog(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xf, &(0x7f0000001b40)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2080c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x303}, "42ef717c34ab2a43", "56cdf14f4ca5ff9ad6aa6f53eabefe9b52815efa9092d9f6a4c6b2a511c46103", "4ac8e9f7", "47320352a75d35e7"}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup(0xffffffffffffffff) 12.645039896s ago: executing program 6 (id=3313): bpf$PROG_LOAD(0x5, 0x0, 0x19ebeb2a19275019) socket$key(0xf, 0x3, 0x2) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0xffff}, {0x0, 0x20, 0x800}, {0x4, 0x5, 0x800}, {0x1, 0x3ff}, {0x7, 0xe6}], 0x3c) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000f40000000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) utimes(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200a408000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x19000000, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc001) 12.271528239s ago: executing program 6 (id=3315): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0xfffffcba) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x366}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x6169, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$loop(&(0x7f00000023c0), 0x400, 0x0) pipe(0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="020100021000000029bd70000000000005000600000000000a0000000000000000000000000000000000000000000000004000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130003000000000000000535000002000100000004d581020102010000e06a6b5b1aac45a0f8392497b584e3f3635ccfcd5fe736b413b4969d8a17b4daa23600f34217d1b824fe8b7140959575a3c44fab7c"], 0x80}}, 0x0) io_uring_enter(r1, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 12.271146429s ago: executing program 44 (id=3315): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0xfffffcba) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x366}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x6169, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$loop(&(0x7f00000023c0), 0x400, 0x0) pipe(0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="020100021000000029bd70000000000005000600000000000a0000000000000000000000000000000000000000000000004000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130003000000000000000535000002000100000004d581020102010000e06a6b5b1aac45a0f8392497b584e3f3635ccfcd5fe736b413b4969d8a17b4daa23600f34217d1b824fe8b7140959575a3c44fab7c"], 0x80}}, 0x0) io_uring_enter(r1, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 12.270613709s ago: executing program 1 (id=3317): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000020000000300000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e26600"/17], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d84b0000000015000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r7, @ANYBLOB="08b48d29cb06a5baa474ce25dfd71b19ce942b81671dbdcfd28ed0da2af41064709729c615da9d0810cbc5b1bdfea949644d98ff86e05a217c07b92ac676009235d755e1026c960f689a7302a48416e24852952409421a766a26d082", @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r11, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bind$inet6(r10, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r10, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000b40), &(0x7f0000002a40)=0x8) 11.819569171s ago: executing program 45 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) sync() (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r5 = dup2(r4, r4) write$tun(r5, 0x0, 0x46) chdir(&(0x7f0000000100)='./file0\x00') (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) (async) getdents(r6, 0x0, 0x0) 11.418071777s ago: executing program 1 (id=3324): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r6, 0x0, 0x6}, 0x18) r7 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_emit_ethernet(0x31, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x9, 0xfb, "25a4c9e4c457f9c73ca0d1f6904f03be4a2996bb5e8e3fb5d1f923f7"}}}}, &(0x7f0000000100)={0x0, 0x3, [0xc57, 0xe8f, 0xd9b, 0xdb2]}) sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) shutdown(r8, 0x2) sendto(r8, &(0x7f0000000000)='K', 0x1, 0x20048000, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 3.88243222s ago: executing program 7 (id=3433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000062c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) dup2(r2, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff02, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.871435932s ago: executing program 7 (id=3434): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@quota}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d08001400000000000000000000000800120000000200000000000000000006000000000000000000000000000100fe8000000000000000000000000000aaffffffff00000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000050006"], 0xa0}}, 0x0) sendto$inet6(r1, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc53, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r5, r4, 0x0, 0x100800001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.80888364s ago: executing program 3 (id=3457): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.72416195s ago: executing program 8 (id=3458): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b001300000008"], 0x28}}, 0x0) r1 = io_uring_setup(0x17c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}) r2 = creat(&(0x7f0000003880)='./file0\x00', 0x143) sync_file_range(r2, 0x3c21c05f, 0x7fff, 0x8c12307a846d3eb4) r3 = socket$rxrpc(0x21, 0x2, 0xa) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000), 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f000060c000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f0000001380)=""/4096, 0x1000}], &(0x7f0000000740)=[0x3, 0x5, 0x7, 0x19, 0x1d53]}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x94) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x910}], 0x1, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.715166961s ago: executing program 3 (id=3459): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9f4d49ffc0e6ad935058bc6c2c9272bb4ab4a251481dce8fa272077c72b2ca763d3f10a68cbd50b5bb1ae3d59582c91153eb1ff483aaa481bdfb1db695cfea4f8c07de981e77270a2725be56d9992819e257026bc14565a8a2a9f04c95ad69eaddd46972954deb0e4f", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB="0000000000008328a2bc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4fc, &(0x7f0000000e00)="$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") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) 1.596529745s ago: executing program 7 (id=3446): bpf$PROG_LOAD(0x5, 0x0, 0x19ebeb2a19275019) socket$key(0xf, 0x3, 0x2) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0xffff}, {0x0, 0x20, 0x800}, {0x4, 0x5, 0x800}, {0x1, 0x3ff}, {0x7, 0xe6}], 0x3c) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000f40000000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) utimes(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200a408000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x19000000, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc001) 1.416445916s ago: executing program 8 (id=3461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.275133602s ago: executing program 8 (id=3462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'macvlan0\x00', {0x4}, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x40000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r6]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002500010000000000000000"], 0x114}], 0x1}, 0x0) 1.03966344s ago: executing program 5 (id=3469): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000020000000300000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e26600"/17], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d84b0000000015000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r7, @ANYBLOB="08b48d29cb06a5baa474ce25dfd71b19ce942b81671dbdcfd28ed0da2af41064709729c615da9d0810cbc5b1bdfea949644d98ff86e05a217c07b92ac676009235d755e1026c960f689a7302a48416e24852952409421a766a26d082", @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000b40)={r13}, &(0x7f0000002a40)=0x8) 933.383042ms ago: executing program 5 (id=3470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 932.883592ms ago: executing program 8 (id=3471): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000300)='\x00', &(0x7f0000000380)='\x00']}, &(0x7f0000000600)={[&(0x7f00000004c0)='\x00']}) 932.528992ms ago: executing program 46 (id=3471): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000300)='\x00', &(0x7f0000000380)='\x00']}, &(0x7f0000000600)={[&(0x7f00000004c0)='\x00']}) 902.457385ms ago: executing program 3 (id=3473): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, &(0x7f0000000340)=""/213, 0xd5}}], 0x1, 0x0, 0x0) 898.876226ms ago: executing program 5 (id=3474): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00dfff00006c6654bf188fdc885dd5868a100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syslog(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xf, &(0x7f0000001b40)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2080c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x303}, "42ef717c34ab2a43", "56cdf14f4ca5ff9ad6aa6f53eabefe9b52815efa9092d9f6a4c6b2a511c46103", "4ac8e9f7", "47320352a75d35e7"}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000002fcffff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) dup(0xffffffffffffffff) 837.304943ms ago: executing program 3 (id=3475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000062c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) dup2(r2, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff02, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 490.960883ms ago: executing program 7 (id=3476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80) 477.320425ms ago: executing program 7 (id=3477): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 460.666617ms ago: executing program 7 (id=3478): r0 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffd88) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bfa5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040091}, 0x0) 44.240195ms ago: executing program 5 (id=3479): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.806726ms ago: executing program 3 (id=3480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000062c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) r2 = dup2(r0, r1) r3 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r6) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20}, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, r3, r6}, 0xc) 4.70602ms ago: executing program 5 (id=3481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00dfff00006c6654bf188fdc885dd5868a100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syslog(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xf, &(0x7f0000001b40)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2080c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x303}, "42ef717c34ab2a43", "56cdf14f4ca5ff9ad6aa6f53eabefe9b52815efa9092d9f6a4c6b2a511c46103", "4ac8e9f7", "47320352a75d35e7"}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000002fcffff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r6, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup(0xffffffffffffffff) 0s ago: executing program 3 (id=3482): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="14010000250001000000000000000000"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): amps until 2038-01-19 (0x7fffffff) [ 179.099510][T12478] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3096: corrupted xattr block 32: bad e_name length [ 179.113141][T12478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 179.122114][T12478] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3096: corrupted xattr block 32: bad e_name length [ 179.135996][T12478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 179.144990][T12478] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3096: corrupted xattr block 32: bad e_name length [ 179.158499][T12478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 179.180548][T12499] loop9: detected capacity change from 0 to 2048 [ 179.185321][T12501] loop1: detected capacity change from 0 to 512 [ 179.195485][T12501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.206428][T12499] netlink: 'syz.9.3100': attribute type 4 has an invalid length. [ 179.230083][T12501] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.242806][T12501] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3102: corrupted xattr block 32: bad e_name length [ 179.242941][T12499] wg2: entered promiscuous mode [ 179.261169][T12499] wg2: entered allmulticast mode [ 179.263694][T12501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.275336][T12501] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3102: corrupted xattr block 32: bad e_name length [ 179.288942][T12501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.298069][T12501] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3102: corrupted xattr block 32: bad e_name length [ 179.315756][T12509] loop7: detected capacity change from 0 to 128 [ 179.320505][T12501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.322824][T12509] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.349522][T12509] __nla_validate_parse: 22 callbacks suppressed [ 179.349533][T12509] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 179.457820][T12520] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3109'. [ 179.550187][T12535] loop1: detected capacity change from 0 to 512 [ 179.557228][T12535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.576501][T12535] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.591071][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3113: corrupted xattr block 32: bad e_name length [ 179.606651][T12535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.616043][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3113: corrupted xattr block 32: bad e_name length [ 179.631432][T12535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.640672][T12535] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3113: corrupted xattr block 32: bad e_name length [ 179.655961][T12535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 179.735619][T12547] loop9: detected capacity change from 0 to 1024 [ 179.742552][T12547] EXT4-fs: Ignoring removed orlov option [ 179.756152][T12551] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3119'. [ 179.814352][T12557] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3120'. [ 179.831493][T12143] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.843086][T12143] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.855424][T12143] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.865967][T12562] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3121'. [ 179.866818][T12143] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.925695][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3122'. [ 179.937048][T12574] random: crng reseeded on system resumption [ 179.943339][T12567] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 179.954742][T12567] rdma_rxe: rxe_newlink: failed to add vcan0 [ 179.985215][T12574] FAULT_INJECTION: forcing a failure. [ 179.985215][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.998288][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.1.3124 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 180.009172][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.019283][T12574] Call Trace: [ 180.022609][T12574] [ 180.025533][T12574] dump_stack_lvl+0xf2/0x150 [ 180.030163][T12574] dump_stack+0x15/0x20 [ 180.034301][T12574] should_fail_ex+0x223/0x230 [ 180.038980][T12574] should_fail+0xb/0x10 [ 180.040010][T12576] FAULT_INJECTION: forcing a failure. [ 180.040010][T12576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.043157][T12574] should_fail_usercopy+0x1a/0x20 [ 180.061177][T12574] _copy_from_iter+0xd5/0xd00 [ 180.065896][T12574] ? kmalloc_reserve+0x16e/0x190 [ 180.070840][T12574] ? __build_skb_around+0x196/0x1f0 [ 180.076043][T12574] ? __alloc_skb+0x21f/0x310 [ 180.080787][T12574] ? __virt_addr_valid+0x1ed/0x250 [ 180.085905][T12574] ? __check_object_size+0x364/0x520 [ 180.091189][T12574] netlink_sendmsg+0x460/0x6e0 [ 180.095944][T12574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.101215][T12574] __sock_sendmsg+0x140/0x180 [ 180.105889][T12574] ____sys_sendmsg+0x312/0x410 [ 180.110651][T12574] __sys_sendmsg+0x1d9/0x270 [ 180.115253][T12574] __x64_sys_sendmsg+0x46/0x50 [ 180.120037][T12574] x64_sys_call+0x2689/0x2d60 [ 180.124709][T12574] do_syscall_64+0xc9/0x1c0 [ 180.129204][T12574] ? clear_bhb_loop+0x55/0xb0 [ 180.133939][T12574] ? clear_bhb_loop+0x55/0xb0 [ 180.138666][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.144669][T12574] RIP: 0033:0x7fe17762e719 [ 180.149116][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.168757][T12574] RSP: 002b:00007fe1762a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.177160][T12574] RAX: ffffffffffffffda RBX: 00007fe1777e5f80 RCX: 00007fe17762e719 [ 180.185189][T12574] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 180.193148][T12574] RBP: 00007fe1762a1090 R08: 0000000000000000 R09: 0000000000000000 [ 180.201110][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.209120][T12574] R13: 0000000000000000 R14: 00007fe1777e5f80 R15: 00007ffec69446e8 [ 180.217137][T12574] [ 180.220145][T12576] CPU: 1 UID: 0 PID: 12576 Comm: syz.6.3125 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 180.230972][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.241071][T12576] Call Trace: [ 180.244345][T12576] [ 180.247268][T12576] dump_stack_lvl+0xf2/0x150 [ 180.251847][T12576] dump_stack+0x15/0x20 [ 180.255987][T12576] should_fail_ex+0x223/0x230 [ 180.260651][T12576] should_fail+0xb/0x10 [ 180.264884][T12576] should_fail_usercopy+0x1a/0x20 [ 180.269952][T12576] fpu__restore_sig+0x11d/0xb00 [ 180.274793][T12576] restore_sigcontext+0x1b5/0x220 [ 180.279816][T12576] __do_sys_rt_sigreturn+0xfd/0x160 [ 180.285065][T12576] x64_sys_call+0x28e1/0x2d60 [ 180.289727][T12576] do_syscall_64+0xc9/0x1c0 [ 180.294219][T12576] ? clear_bhb_loop+0x55/0xb0 [ 180.298930][T12576] ? clear_bhb_loop+0x55/0xb0 [ 180.303615][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.309547][T12576] RIP: 0033:0x7f2a9b64e717 [ 180.313983][T12576] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 180.333594][T12576] RSP: 002b:00007f2a9a2c1038 EFLAGS: 00000246 [ 180.339714][T12576] RAX: 0000000000000116 RBX: 00007f2a9b805f80 RCX: 00007f2a9b64e719 [ 180.347677][T12576] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000005 [ 180.355641][T12576] RBP: 00007f2a9a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 180.363601][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.371574][T12576] R13: 0000000000000000 R14: 00007f2a9b805f80 R15: 00007ffc2500b348 [ 180.379577][T12576] [ 180.398004][T12578] x_tables: duplicate underflow at hook 2 [ 180.417462][T12580] loop7: detected capacity change from 0 to 1024 [ 180.424091][T12580] EXT4-fs: Ignoring removed orlov option [ 180.429845][T12580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.468228][T12582] loop6: detected capacity change from 0 to 512 [ 180.495652][T12582] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.508978][T12582] EXT4-fs error (device loop6): ext4_get_first_dir_block:3532: inode #12: comm syz.6.3128: Attempting to read directory block (0) that is past i_size (3) [ 180.545895][T12592] loop6: detected capacity change from 0 to 128 [ 180.552784][T12592] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.582183][T12594] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3131'. [ 180.633619][T12600] syz.6.3133[12600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.633726][T12600] syz.6.3133[12600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.645254][T12600] syz.6.3133[12600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.660743][T12600] loop6: detected capacity change from 0 to 512 [ 180.685387][T12600] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.696669][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3133'. [ 180.718993][ T40] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.757030][ T40] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.762190][T12607] loop6: detected capacity change from 0 to 2048 [ 180.773518][T12607] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.815142][ T40] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.856682][ T40] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.882083][T12609] vcan0 speed is unknown, defaulting to 1000 [ 180.928364][T12609] lo speed is unknown, defaulting to 1000 [ 180.935872][ T40] bridge_slave_1: left allmulticast mode [ 180.941503][ T40] bridge_slave_1: left promiscuous mode [ 180.947292][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.956667][ T40] bridge_slave_0: left allmulticast mode [ 180.962378][ T40] bridge_slave_0: left promiscuous mode [ 180.968058][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.095723][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.107198][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.117763][ T40] bond0 (unregistering): Released all slaves [ 181.127986][ T40] bond1 (unregistering): Released all slaves [ 181.203199][T12609] chnl_net:caif_netlink_parms(): no params data found [ 181.225878][ T40] hsr_slave_0: left promiscuous mode [ 181.243032][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.250436][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.276216][T12624] loop1: detected capacity change from 0 to 128 [ 181.288531][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.296038][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.310403][T12624] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.322672][ T40] veth1_macvtap: left promiscuous mode [ 181.328210][ T40] veth0_macvtap: left promiscuous mode [ 181.333828][ T40] veth1_vlan: left promiscuous mode [ 181.339055][ T40] veth0_vlan: left promiscuous mode [ 181.392087][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3139'. [ 181.520908][ T40] team0 (unregistering): Port device team_slave_1 removed [ 181.533291][ T40] team0 (unregistering): Port device team_slave_0 removed [ 181.632279][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.639440][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.646624][T12609] bridge_slave_0: entered allmulticast mode [ 181.653513][T12609] bridge_slave_0: entered promiscuous mode [ 181.660378][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.667457][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.675020][T12609] bridge_slave_1: entered allmulticast mode [ 181.681162][T12639] loop1: detected capacity change from 0 to 128 [ 181.682713][T12609] bridge_slave_1: entered promiscuous mode [ 181.695283][T12639] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.712268][T12643] loop6: detected capacity change from 0 to 512 [ 181.719389][T12643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.730416][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.741207][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.761848][T12609] team0: Port device team_slave_0 added [ 181.763331][T12643] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.769476][T12609] team0: Port device team_slave_1 added [ 181.780068][T12643] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3144: corrupted xattr block 32: bad e_name length [ 181.798931][T12643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 181.813546][T12643] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3144: corrupted xattr block 32: bad e_name length [ 181.827888][T12643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 181.836930][T12643] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3144: corrupted xattr block 32: bad e_name length [ 181.837508][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.850590][T12643] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 181.857324][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.892169][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.903616][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.910574][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.936536][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.965548][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3147'. [ 181.989770][T12609] hsr_slave_0: entered promiscuous mode [ 181.996302][T12609] hsr_slave_1: entered promiscuous mode [ 182.002226][T12609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.010134][T12609] Cannot create hsr debugfs directory [ 182.071200][T12661] netlink: 'syz.1.3150': attribute type 4 has an invalid length. [ 182.201926][T12681] loop1: detected capacity change from 0 to 1024 [ 182.225801][T12681] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.275502][T12609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.295662][T12609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.300788][T12696] loop7: detected capacity change from 0 to 512 [ 182.309050][T12696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.310293][T12609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.327283][T12681] netlink: 'syz.1.3158': attribute type 15 has an invalid length. [ 182.335690][T12609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.359298][T12696] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.360555][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.376749][T12609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.383829][T12696] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3162: corrupted xattr block 32: bad e_name length [ 182.384031][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.404406][T12609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.416683][T12696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 182.433271][T12696] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3162: corrupted xattr block 32: bad e_name length [ 182.449909][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.460943][T12696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 182.462514][T12707] loop6: detected capacity change from 0 to 128 [ 182.470021][T12696] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3162: corrupted xattr block 32: bad e_name length [ 182.493077][T12696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 182.502401][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.511997][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.529108][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.539985][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.547063][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.560120][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.567187][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.590687][T12609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.596293][T12718] syz.7.3170[12718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.601064][T12609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.605518][T12718] syz.7.3170[12718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.622930][T12718] syz.7.3170[12718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.668758][T12725] FAULT_INJECTION: forcing a failure. [ 182.668758][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 182.674646][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.680178][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.7.3171 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 182.680202][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.720340][T12725] Call Trace: [ 182.723636][T12725] [ 182.726564][T12725] dump_stack_lvl+0xf2/0x150 [ 182.731234][T12725] dump_stack+0x15/0x20 [ 182.735511][T12725] should_fail_ex+0x223/0x230 [ 182.740228][T12725] ? __alloc_skb+0x10b/0x310 [ 182.744836][T12725] should_failslab+0x8f/0xb0 [ 182.749429][T12725] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 182.755301][T12725] __alloc_skb+0x10b/0x310 [ 182.759762][T12725] audit_log_start+0x368/0x6b0 [ 182.760115][T12609] veth0_vlan: entered promiscuous mode [ 182.764545][T12725] audit_seccomp+0x4b/0x130 [ 182.764567][T12725] __seccomp_filter+0x6fa/0x1180 [ 182.773015][T12609] veth1_vlan: entered promiscuous mode [ 182.774464][T12725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.790541][T12725] ? vfs_write+0x596/0x920 [ 182.794316][T12609] veth0_macvtap: entered promiscuous mode [ 182.794989][T12725] ? __pfx_kfree_link+0x10/0x10 [ 182.802736][T12609] veth1_macvtap: entered promiscuous mode [ 182.805528][T12725] ? __rcu_read_unlock+0x4e/0x70 [ 182.816185][T12725] ? __fget_files+0x1d4/0x210 [ 182.816985][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.821026][T12725] __secure_computing+0x9f/0x1c0 [ 182.831433][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.836326][T12725] syscall_trace_enter+0xd1/0x1f0 [ 182.836358][T12725] do_syscall_64+0xaa/0x1c0 [ 182.846185][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.851168][T12725] ? clear_bhb_loop+0x55/0xb0 [ 182.855647][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.855656][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.866117][T12725] ? clear_bhb_loop+0x55/0xb0 [ 182.866136][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.870791][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.870803][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.880559][T12725] RIP: 0033:0x7f03617be719 [ 182.880582][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.891007][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.895611][T12725] RSP: 002b:00007f0360437038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 182.901483][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.901496][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.911260][T12725] RAX: ffffffffffffffda RBX: 00007f0361975f80 RCX: 00007f03617be719 [ 182.921679][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.926052][T12725] RDX: 0000008000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.926066][T12725] RBP: 00007f0360437090 R08: 0000000000000003 R09: 0000000000000000 [ 182.926080][T12725] R10: 0000000020045000 R11: 0000000000000246 R12: 0000000000000001 [ 182.945699][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.955425][T12725] R13: 0000000000000000 R14: 00007f0361975f80 R15: 00007fff7b154e08 [ 182.955447][T12725] [ 182.963833][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.986412][T12732] syz.7.3171[12732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.991971][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.991984][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.089591][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.101374][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.112718][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.123258][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.133067][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.143599][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.153474][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.164123][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.173948][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.184378][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.194208][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.204713][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.214611][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.225026][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.234904][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.245332][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.248969][T12743] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 183.255131][T12609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.255147][T12609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.258634][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.291513][T12743] rdma_rxe: rxe_newlink: failed to add vcan0 [ 183.308206][T12609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.316968][T12609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.325758][T12609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.334537][T12609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.387982][T12754] bpf_get_probe_write_proto: 2 callbacks suppressed [ 183.387994][T12754] syz.6.3178[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.396162][T12754] syz.6.3178[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.414183][T12754] syz.6.3178[12754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.431971][T12761] loop1: detected capacity change from 0 to 736 [ 183.529463][T12770] loop7: detected capacity change from 0 to 128 [ 183.536631][T12770] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.609300][T12787] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 183.619670][T12787] rdma_rxe: rxe_newlink: failed to add vcan0 [ 183.627985][ T29] kauditd_printk_skb: 1001 callbacks suppressed [ 183.627996][ T29] audit: type=1326 audit(1729962413.853:24115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 183.658163][ T29] audit: type=1326 audit(1729962413.863:24116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 183.681735][ T29] audit: type=1326 audit(1729962413.863:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 183.705321][ T29] audit: type=1326 audit(1729962413.883:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1776256e7 code=0x7ffc0000 [ 183.729002][ T29] audit: type=1326 audit(1729962413.883:24119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1775ca099 code=0x7ffc0000 [ 183.752646][ T29] audit: type=1326 audit(1729962413.883:24120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe17762e719 code=0x7ffc0000 [ 183.776193][ T29] audit: type=1326 audit(1729962413.883:24121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 183.799682][ T29] audit: type=1326 audit(1729962413.883:24122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 183.823211][ T29] audit: type=1326 audit(1729962413.883:24123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 183.846781][ T29] audit: type=1326 audit(1729962413.883:24124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12762 comm="syz.3.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 183.932116][T12812] xt_CT: No such helper "snmp" [ 184.127100][T12816] loop7: detected capacity change from 0 to 128 [ 184.134408][T12816] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.233039][T12822] xt_hashlimit: max too large, truncated to 1048576 [ 184.347332][T12847] hsr_slave_1 (unregistering): left promiscuous mode [ 184.410696][T12859] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 184.430602][T12867] loop1: detected capacity change from 0 to 128 [ 184.448207][T12859] rdma_rxe: rxe_newlink: failed to add vcan0 [ 184.458595][T12867] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.537892][T12879] __nla_validate_parse: 11 callbacks suppressed [ 184.537907][T12879] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3204'. [ 184.697752][T12897] syzkaller1: entered promiscuous mode [ 184.703391][T12897] syzkaller1: entered allmulticast mode [ 184.720371][T12902] FAULT_INJECTION: forcing a failure. [ 184.720371][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 184.733059][T12902] CPU: 1 UID: 0 PID: 12902 Comm: syz.6.3207 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 184.743822][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.753881][T12902] Call Trace: [ 184.757178][T12902] [ 184.760127][T12902] dump_stack_lvl+0xf2/0x150 [ 184.764766][T12902] dump_stack+0x15/0x20 [ 184.768941][T12902] should_fail_ex+0x223/0x230 [ 184.773659][T12902] ? sidtab_sid2str_get+0xb8/0x140 [ 184.778784][T12902] should_failslab+0x8f/0xb0 [ 184.783396][T12902] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 184.789760][T12902] ? vsnprintf+0xdd8/0xe30 [ 184.794269][T12902] kmemdup_noprof+0x2a/0x60 [ 184.798791][T12902] sidtab_sid2str_get+0xb8/0x140 [ 184.803793][T12902] security_sid_to_context_core+0x1eb/0x2f0 [ 184.809761][T12902] security_sid_to_context+0x27/0x30 [ 184.815162][T12902] selinux_secid_to_secctx+0x22/0x30 [ 184.820520][T12902] security_secid_to_secctx+0x48/0x90 [ 184.825973][T12902] audit_log_task_context+0x8c/0x1b0 [ 184.831328][T12902] audit_log_task+0xfb/0x180 [ 184.835982][T12902] audit_seccomp+0x68/0x130 [ 184.840617][T12902] __seccomp_filter+0x6fa/0x1180 [ 184.845609][T12902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.851260][T12902] ? vfs_write+0x596/0x920 [ 184.855747][T12902] ? __pfx_kfree_link+0x10/0x10 [ 184.860628][T12902] ? __rcu_read_unlock+0x4e/0x70 [ 184.865579][T12902] ? __fget_files+0x1d4/0x210 [ 184.870270][T12902] __secure_computing+0x9f/0x1c0 [ 184.875275][T12902] syscall_trace_enter+0xd1/0x1f0 [ 184.880315][T12902] ? fpregs_assert_state_consistent+0x83/0xa0 [ 184.886442][T12902] do_syscall_64+0xaa/0x1c0 [ 184.890971][T12902] ? clear_bhb_loop+0x55/0xb0 [ 184.895664][T12902] ? clear_bhb_loop+0x55/0xb0 [ 184.900383][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.906302][T12902] RIP: 0033:0x7f2a9b64e719 [ 184.910715][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.930465][T12902] RSP: 002b:00007f2a9a2c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 184.938881][T12902] RAX: ffffffffffffffda RBX: 00007f2a9b805f80 RCX: 00007f2a9b64e719 [ 184.946851][T12902] RDX: 0000000000000008 RSI: 00000000200001c0 RDI: ffffffffffffffff [ 184.954827][T12902] RBP: 00007f2a9a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 184.962879][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.963133][T12822] syz.7.3198 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 184.970910][T12902] R13: 0000000000000000 R14: 00007f2a9b805f80 R15: 00007ffc2500b348 [ 184.970979][T12902] [ 184.994729][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.7.3198 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 185.005516][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.015570][T12822] Call Trace: [ 185.018866][T12822] [ 185.021782][T12822] dump_stack_lvl+0xf2/0x150 [ 185.026383][T12822] dump_stack+0x15/0x20 [ 185.030527][T12822] dump_header+0x83/0x2d0 [ 185.034952][T12822] oom_kill_process+0x341/0x4c0 [ 185.039806][T12822] out_of_memory+0x9af/0xbe0 [ 185.044533][T12822] ? css_next_descendant_pre+0x11c/0x140 [ 185.050220][T12822] mem_cgroup_out_of_memory+0x13e/0x190 [ 185.055797][T12822] try_charge_memcg+0x51b/0x810 [ 185.060762][T12822] obj_cgroup_charge_pages+0xbd/0x1a0 [ 185.066133][T12822] __memcg_kmem_charge_page+0x9d/0x170 [ 185.071643][T12822] __alloc_pages_noprof+0x1bc/0x340 [ 185.076837][T12822] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 185.082211][T12822] alloc_pages_noprof+0xe1/0x100 [ 185.087159][T12822] io_pages_map+0x263/0x4e0 [ 185.091663][T12822] io_allocate_scq_urings+0x283/0x300 [ 185.097039][T12822] io_uring_create+0x53f/0x940 [ 185.101873][T12822] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 185.107330][T12822] __x64_sys_io_uring_setup+0x31/0x40 [ 185.112695][T12822] x64_sys_call+0x1f7e/0x2d60 [ 185.117426][T12822] do_syscall_64+0xc9/0x1c0 [ 185.121989][T12822] ? clear_bhb_loop+0x55/0xb0 [ 185.126722][T12822] ? clear_bhb_loop+0x55/0xb0 [ 185.131405][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.137302][T12822] RIP: 0033:0x7f03617be719 [ 185.141737][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.161384][T12822] RSP: 002b:00007f0360436fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 185.169793][T12822] RAX: ffffffffffffffda RBX: 00007f0361975f80 RCX: 00007f03617be719 [ 185.177783][T12822] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000003667 [ 185.185798][T12822] RBP: 0000000020000180 R08: 0000000000000000 R09: 0000000000000000 [ 185.193945][T12822] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 185.201909][T12822] R13: 0000000000000000 R14: 0000000000003667 R15: 0000000000000000 [ 185.209964][T12822] [ 185.216088][T12822] memory: usage 307200kB, limit 307200kB, failcnt 110 [ 185.222959][T12822] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 185.230919][T12822] kmem: usage 296692kB, limit 9007199254740988kB, failcnt 0 [ 185.238240][T12822] Memory cgroup stats for /syz7: [ 185.242640][T12822] cache 4096 [ 185.250948][T12822] rss 122880 [ 185.254187][T12822] shmem 0 [ 185.257203][T12822] mapped_file 0 [ 185.260685][T12822] dirty 0 [ 185.263635][T12822] writeback 0 [ 185.266901][T12822] workingset_refault_anon 0 [ 185.271380][T12822] workingset_refault_file 0 [ 185.275989][T12822] swap 0 [ 185.278862][T12822] swapcached 208896 [ 185.282646][T12822] pgpgin 84530 [ 185.286087][T12822] pgpgout 84477 [ 185.289529][T12822] pgfault 99959 [ 185.292962][T12822] pgmajfault 4 [ 185.296345][T12822] inactive_anon 0 [ 185.299972][T12822] active_anon 212992 [ 185.303879][T12822] inactive_file 0 [ 185.307594][T12822] active_file 4096 [ 185.311292][T12822] unevictable 0 [ 185.314797][T12822] hierarchical_memory_limit 314572800 [ 185.320175][T12822] hierarchical_memsw_limit 9223372036854771712 [ 185.326322][T12822] total_cache 4096 [ 185.330019][T12822] total_rss 122880 [ 185.333773][T12822] total_shmem 0 [ 185.337221][T12822] total_mapped_file 0 [ 185.341229][T12822] total_dirty 0 [ 185.344686][T12822] total_writeback 0 [ 185.348468][T12822] total_workingset_refault_anon 0 [ 185.353464][T12822] total_workingset_refault_file 0 [ 185.358478][T12822] total_swap 0 [ 185.361825][T12822] total_swapcached 208896 [ 185.366290][T12822] total_pgpgin 84530 [ 185.370170][T12822] total_pgpgout 84477 [ 185.374222][T12822] total_pgfault 99959 [ 185.378187][T12822] total_pgmajfault 4 [ 185.382145][T12822] total_inactive_anon 0 [ 185.386303][T12822] total_active_anon 212992 [ 185.390794][T12822] total_inactive_file 0 [ 185.394995][T12822] total_active_file 4096 [ 185.399283][T12822] total_unevictable 0 [ 185.403308][T12822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3198,pid=12821,uid=0 [ 185.417982][T12822] Memory cgroup out of memory: Killed process 12822 (syz.7.3198) total-vm:87120kB, anon-rss:740kB, file-rss:16164kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 185.502213][T12917] loop7: detected capacity change from 0 to 128 [ 185.509051][T12917] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.540684][T12920] loop7: detected capacity change from 0 to 512 [ 185.547661][T12920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.566846][T12920] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.580536][T12920] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3212: corrupted xattr block 32: bad e_name length [ 185.595646][T12920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 185.606682][T12920] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3212: corrupted xattr block 32: bad e_name length [ 185.621830][T12920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 185.631104][T12920] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3212: corrupted xattr block 32: bad e_name length [ 185.656257][T12920] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 185.995410][T12939] loop7: detected capacity change from 0 to 512 [ 186.002173][T12939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.025571][T12939] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.038165][T12939] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3219: corrupted xattr block 32: bad e_name length [ 186.051739][T12939] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 186.060734][T12939] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3219: corrupted xattr block 32: bad e_name length [ 186.074251][T12939] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 186.083344][T12939] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3219: corrupted xattr block 32: bad e_name length [ 186.096967][T12939] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 186.375342][T12949] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3222'. [ 186.401369][T12953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3223'. [ 186.416163][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3223'. [ 186.488600][T12957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3225'. [ 186.521288][T12967] loop6: detected capacity change from 0 to 512 [ 186.528470][T12967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.569223][T12967] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.597578][T12967] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3229: corrupted xattr block 32: bad e_name length [ 186.627669][T12967] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 186.649372][T12967] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3229: corrupted xattr block 32: bad e_name length [ 186.680840][T12967] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 186.700403][T12967] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3229: corrupted xattr block 32: bad e_name length [ 186.724606][T12967] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 186.789023][T12975] loop6: detected capacity change from 0 to 512 [ 186.812173][T12975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.865822][T12975] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.886186][T12975] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3231: corrupted xattr block 32: bad e_name length [ 186.918745][T12975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 186.939272][T12975] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3231: corrupted xattr block 32: bad e_name length [ 186.973314][T12975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 187.004721][T12975] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.3231: corrupted xattr block 32: bad e_name length [ 187.044666][T12975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 187.096029][T12981] loop7: detected capacity change from 0 to 128 [ 187.115825][T12981] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.202795][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3235'. [ 187.235304][T12987] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 187.247250][T12994] loop7: detected capacity change from 0 to 2048 [ 187.254007][T12987] rdma_rxe: rxe_newlink: failed to add vcan0 [ 187.445614][T13003] FAULT_INJECTION: forcing a failure. [ 187.445614][T13003] name failslab, interval 1, probability 0, space 0, times 0 [ 187.456025][T13002] loop1: detected capacity change from 0 to 2048 [ 187.458322][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.6.3240 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 187.475271][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.485408][T13003] Call Trace: [ 187.488683][T13003] [ 187.491616][T13003] dump_stack_lvl+0xf2/0x150 [ 187.496231][T13003] dump_stack+0x15/0x20 [ 187.500433][T13003] should_fail_ex+0x223/0x230 [ 187.505121][T13003] ? audit_log_d_path+0x96/0x250 [ 187.510066][T13003] should_failslab+0x8f/0xb0 [ 187.514658][T13003] __kmalloc_cache_noprof+0x4b/0x2a0 [ 187.520076][T13003] audit_log_d_path+0x96/0x250 [ 187.524863][T13003] ? get_file_rcu+0xeb/0x100 [ 187.529473][T13003] ? __rcu_read_unlock+0x4e/0x70 [ 187.534545][T13003] audit_log_d_path_exe+0x42/0x70 [ 187.539632][T13003] audit_log_task+0x155/0x180 [ 187.544309][T13003] audit_seccomp+0x68/0x130 [ 187.548813][T13003] __seccomp_filter+0x6fa/0x1180 [ 187.553858][T13003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.559502][T13003] ? vfs_write+0x596/0x920 [ 187.563961][T13003] ? __rcu_read_unlock+0x4e/0x70 [ 187.568935][T13003] ? __fget_files+0x1d4/0x210 [ 187.573653][T13003] __secure_computing+0x9f/0x1c0 [ 187.578645][T13003] syscall_trace_enter+0xd1/0x1f0 [ 187.583720][T13003] ? fpregs_assert_state_consistent+0x83/0xa0 [ 187.589819][T13003] do_syscall_64+0xaa/0x1c0 [ 187.594325][T13003] ? clear_bhb_loop+0x55/0xb0 [ 187.599070][T13003] ? clear_bhb_loop+0x55/0xb0 [ 187.603767][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.609677][T13003] RIP: 0033:0x7f2a9b64e719 [ 187.614202][T13003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.633856][T13003] RSP: 002b:00007f2a9a2a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 187.642274][T13003] RAX: ffffffffffffffda RBX: 00007f2a9b806058 RCX: 00007f2a9b64e719 [ 187.650263][T13003] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 187.658244][T13003] RBP: 00007f2a9a2a0090 R08: 0000000000000000 R09: 0000000000000000 [ 187.666214][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.674190][T13003] R13: 0000000000000000 R14: 00007f2a9b806058 R15: 00007ffc2500b348 [ 187.682168][T13003] [ 188.245892][T13018] loop7: detected capacity change from 0 to 512 [ 188.252731][T13018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.276779][T13018] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.287964][T13018] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3246: corrupted xattr block 32: bad e_name length [ 188.302895][T13018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 188.312010][T13018] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3246: corrupted xattr block 32: bad e_name length [ 188.327886][T13018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 188.338721][T13018] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3246: corrupted xattr block 32: bad e_name length [ 188.354470][T13018] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 188.406826][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3250'. [ 188.423785][T13028] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 188.424709][T13024] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3248'. [ 188.435288][T13028] rdma_rxe: rxe_newlink: failed to add vcan0 [ 188.496309][T13039] loop6: detected capacity change from 0 to 128 [ 188.503244][T13039] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.540829][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3254'. [ 188.559874][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3254'. [ 188.638874][ T29] kauditd_printk_skb: 1353 callbacks suppressed [ 188.638886][ T29] audit: type=1326 audit(1729962418.863:25477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 188.689962][ T29] audit: type=1326 audit(1729962418.863:25478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 188.713638][ T29] audit: type=1326 audit(1729962418.863:25479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 188.737110][ T29] audit: type=1326 audit(1729962418.873:25480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 188.760900][ T29] audit: type=1326 audit(1729962418.873:25481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 188.784746][ T29] audit: type=1326 audit(1729962418.873:25482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 188.808338][ T29] audit: type=1326 audit(1729962418.883:25483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 188.832209][ T29] audit: type=1326 audit(1729962418.883:25484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16a48ba099 code=0x7ffc0000 [ 188.855704][ T29] audit: type=1326 audit(1729962418.883:25485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 188.879279][ T29] audit: type=1326 audit(1729962418.893:25486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16a49156e7 code=0x7ffc0000 [ 188.954560][T13062] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 188.964361][T13071] loop1: detected capacity change from 0 to 128 [ 188.965745][T13062] rdma_rxe: rxe_newlink: failed to add vcan0 [ 188.973112][T13071] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.053301][T13083] loop7: detected capacity change from 0 to 4096 [ 189.061379][T13083] EXT4-fs mount: 52 callbacks suppressed [ 189.061388][T13083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.100726][T11418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.161197][T13093] loop7: detected capacity change from 0 to 512 [ 189.168173][T13093] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 189.178790][T13093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 189.187175][T13093] System zones: 1-12 [ 189.191506][T13093] EXT4-fs (loop7): 1 truncate cleaned up [ 189.197580][T13093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.227351][T11418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.577603][T13102] FAULT_INJECTION: forcing a failure. [ 189.577603][T13102] name failslab, interval 1, probability 0, space 0, times 0 [ 189.577619][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.6.3276 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 189.577633][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.577640][T13102] Call Trace: [ 189.577681][T13102] [ 189.577685][T13102] dump_stack_lvl+0xf2/0x150 [ 189.577707][T13102] dump_stack+0x15/0x20 [ 189.577718][T13102] should_fail_ex+0x223/0x230 [ 189.577736][T13102] ? vc_do_resize+0x21a/0xdb0 [ 189.577803][T13102] should_failslab+0x8f/0xb0 [ 189.577816][T13102] __kmalloc_noprof+0xa5/0x370 [ 189.577834][T13102] vc_do_resize+0x21a/0xdb0 [ 189.577884][T13102] ? exc_page_fault+0x32e/0x650 [ 189.577900][T13102] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 189.577918][T13102] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 189.577998][T13102] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 189.578028][T13102] ? vgacon_set_cursor_size+0x2a8/0x300 [ 189.578086][T13102] __vc_resize+0x3d/0x50 [ 189.578102][T13102] vgacon_adjust_height+0x3c8/0x450 [ 189.578115][T13102] vgacon_font_set+0x18c/0x1b0 [ 189.578126][T13102] ? __pfx_vgacon_font_set+0x10/0x10 [ 189.578196][T13102] con_font_op+0x89e/0x900 [ 189.578208][T13102] ? should_fail_ex+0xd7/0x230 [ 189.578226][T13102] vt_ioctl+0x1580/0x1810 [ 189.578306][T13102] tty_ioctl+0x815/0xbe0 [ 189.578316][T13102] ? __pfx_tty_ioctl+0x10/0x10 [ 189.578379][T13102] __se_sys_ioctl+0xcd/0x140 [ 189.578395][T13102] __x64_sys_ioctl+0x43/0x50 [ 189.578411][T13102] x64_sys_call+0x15cc/0x2d60 [ 189.578425][T13102] do_syscall_64+0xc9/0x1c0 [ 189.578437][T13102] ? clear_bhb_loop+0x55/0xb0 [ 189.578475][T13102] ? clear_bhb_loop+0x55/0xb0 [ 189.578488][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.578506][T13102] RIP: 0033:0x7f2a9b64e719 [ 189.578515][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.578609][T13102] RSP: 002b:00007f2a9a2c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.578627][T13102] RAX: ffffffffffffffda RBX: 00007f2a9b805f80 RCX: 00007f2a9b64e719 [ 189.578634][T13102] RDX: 0000000020000000 RSI: 0000000000004b72 RDI: 000000000000000b [ 189.578642][T13102] RBP: 00007f2a9a2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 189.578663][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.578670][T13102] R13: 0000000000000000 R14: 00007f2a9b805f80 R15: 00007ffc2500b348 [ 189.578725][T13102] [ 189.868163][T13105] vcan0 speed is unknown, defaulting to 1000 [ 189.896007][T13111] __nla_validate_parse: 6 callbacks suppressed [ 189.896019][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3280'. [ 189.916694][T13105] lo speed is unknown, defaulting to 1000 [ 189.984755][T13115] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3281'. [ 190.160683][T13128] wg2: entered promiscuous mode [ 190.165622][T13128] wg2: entered allmulticast mode [ 190.226655][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3292'. [ 190.238143][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3291'. [ 190.264015][T13145] loop1: detected capacity change from 0 to 512 [ 190.270717][T13145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.295194][T13145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.307797][T13145] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.319070][T13145] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3293: corrupted xattr block 32: bad e_name length [ 190.333622][T13145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.342625][T13145] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3293: corrupted xattr block 32: bad e_name length [ 190.356186][T13145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.365494][T13145] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3293: corrupted xattr block 32: bad e_name length [ 190.379071][T13145] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.396759][ T7341] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.454973][T13149] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3294'. [ 190.480574][T13153] loop1: detected capacity change from 0 to 512 [ 190.487439][T13153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.505119][T13153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.517721][T13153] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.529069][T13153] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3295: corrupted xattr block 32: bad e_name length [ 190.542597][T13153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.551584][T13153] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3295: corrupted xattr block 32: bad e_name length [ 190.565079][T13153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.574036][T13153] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.3295: corrupted xattr block 32: bad e_name length [ 190.587606][T13153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 190.604902][ T7341] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.704435][T13159] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001 [ 190.789739][T13164] FAULT_INJECTION: forcing a failure. [ 190.789739][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 190.802370][T13164] CPU: 1 UID: 0 PID: 13164 Comm: syz.1.3298 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 190.813212][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.823262][T13164] Call Trace: [ 190.826534][T13164] [ 190.829452][T13164] dump_stack_lvl+0xf2/0x150 [ 190.834125][T13164] dump_stack+0x15/0x20 [ 190.838328][T13164] should_fail_ex+0x223/0x230 [ 190.843005][T13164] ? __d_alloc+0x3d/0x340 [ 190.847338][T13164] should_failslab+0x8f/0xb0 [ 190.851955][T13164] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 190.857674][T13164] __d_alloc+0x3d/0x340 [ 190.861938][T13164] ? memcg_list_lru_alloc+0xd2/0x740 [ 190.867250][T13164] d_alloc_parallel+0x54/0xc80 [ 190.872086][T13164] ? __rcu_read_unlock+0x34/0x70 [ 190.877030][T13164] ? avc_has_perm_noaudit+0x1cc/0x210 [ 190.882400][T13164] ? lockref_get_not_dead+0x118/0x1b0 [ 190.887842][T13164] ? down_read+0x171/0x4b0 [ 190.892270][T13164] __lookup_slow+0x8d/0x250 [ 190.896803][T13164] lookup_slow+0x3c/0x60 [ 190.901112][T13164] link_path_walk+0x69e/0x820 [ 190.905785][T13164] __filename_parentat+0x13c/0x3c0 [ 190.910911][T13164] filename_create+0x77/0x2b0 [ 190.915629][T13164] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 190.921263][T13164] kern_path_create+0x39/0x110 [ 190.926071][T13164] unix_bind+0x1c0/0x870 [ 190.930321][T13164] __sys_bind+0x14f/0x1c0 [ 190.934696][T13164] __x64_sys_bind+0x41/0x50 [ 190.939196][T13164] x64_sys_call+0x201c/0x2d60 [ 190.943876][T13164] do_syscall_64+0xc9/0x1c0 [ 190.948406][T13164] ? clear_bhb_loop+0x55/0xb0 [ 190.953138][T13164] ? clear_bhb_loop+0x55/0xb0 [ 190.957803][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.963704][T13164] RIP: 0033:0x7fe17762e719 [ 190.968135][T13164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.987758][T13164] RSP: 002b:00007fe1762a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 190.996171][T13164] RAX: ffffffffffffffda RBX: 00007fe1777e5f80 RCX: 00007fe17762e719 [ 191.004135][T13164] RDX: 000000000000006e RSI: 0000000020003000 RDI: 0000000000000003 [ 191.012096][T13164] RBP: 00007fe1762a1090 R08: 0000000000000000 R09: 0000000000000000 [ 191.020066][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.028141][T13164] R13: 0000000000000000 R14: 00007fe1777e5f80 R15: 00007ffec69446e8 [ 191.036107][T13164] [ 191.045142][T13166] loop3: detected capacity change from 0 to 512 [ 191.051628][T13166] EXT4-fs: Ignoring removed oldalloc option [ 191.092979][T13166] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.3299: Parent and EA inode have the same ino 15 [ 191.094053][T13177] loop7: detected capacity change from 0 to 512 [ 191.105651][T13166] EXT4-fs (loop3): Remounting filesystem read-only [ 191.118211][T13166] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 191.128904][T13177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.129773][T13166] EXT4-fs (loop3): 1 orphan inode deleted [ 191.144235][T13166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.156684][T13166] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 191.168959][T13181] loop6: detected capacity change from 0 to 256 [ 191.171266][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.191843][T13177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.206685][T13177] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.218527][T13177] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3304: corrupted xattr block 32: bad e_name length [ 191.232215][T13177] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 191.241910][T13177] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3304: corrupted xattr block 32: bad e_name length [ 191.257621][T13183] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3306'. [ 191.267114][T13177] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 191.276842][T13177] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3304: corrupted xattr block 32: bad e_name length [ 191.307368][T13177] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 191.338098][T11418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.569062][T13199] loop7: detected capacity change from 0 to 256 [ 191.577501][T13199] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.590259][T13199] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.603059][T13199] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3311'. [ 191.774561][T13166] syz.3.3299 (13166) used greatest stack depth: 7464 bytes left [ 191.791445][T13203] FAULT_INJECTION: forcing a failure. [ 191.791445][T13203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.804671][T13203] CPU: 0 UID: 0 PID: 13203 Comm: syz.3.3314 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 191.815513][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.825558][T13203] Call Trace: [ 191.828867][T13203] [ 191.831783][T13203] dump_stack_lvl+0xf2/0x150 [ 191.836447][T13203] dump_stack+0x15/0x20 [ 191.840671][T13203] should_fail_ex+0x223/0x230 [ 191.845354][T13203] should_fail+0xb/0x10 [ 191.849499][T13203] should_fail_usercopy+0x1a/0x20 [ 191.854539][T13203] _copy_from_user+0x20/0xe0 [ 191.859115][T13203] move_addr_to_kernel+0x82/0x120 [ 191.864129][T13203] __sys_sendto+0x15c/0x260 [ 191.868687][T13203] __x64_sys_sendto+0x78/0x90 [ 191.873414][T13203] x64_sys_call+0x2959/0x2d60 [ 191.878419][T13203] do_syscall_64+0xc9/0x1c0 [ 191.882903][T13203] ? clear_bhb_loop+0x55/0xb0 [ 191.887575][T13203] ? clear_bhb_loop+0x55/0xb0 [ 191.892243][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.898184][T13203] RIP: 0033:0x7f16a491e719 [ 191.902589][T13203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.922206][T13203] RSP: 002b:00007f16a3597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 191.930603][T13203] RAX: ffffffffffffffda RBX: 00007f16a4ad5f80 RCX: 00007f16a491e719 [ 191.938594][T13203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.946548][T13203] RBP: 00007f16a3597090 R08: 0000000020000340 R09: 000000000000001c [ 191.954520][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.962548][T13203] R13: 0000000000000000 R14: 00007f16a4ad5f80 R15: 00007ffca3705358 [ 191.970515][T13203] [ 192.236769][T13209] vcan0 speed is unknown, defaulting to 1000 [ 192.273140][T13209] lo speed is unknown, defaulting to 1000 [ 192.332372][T13209] chnl_net:caif_netlink_parms(): no params data found [ 192.363169][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.370383][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.377569][T13209] bridge_slave_0: entered allmulticast mode [ 192.383887][T13209] bridge_slave_0: entered promiscuous mode [ 192.390565][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.397664][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.404947][T13209] bridge_slave_1: entered allmulticast mode [ 192.411312][T13209] bridge_slave_1: entered promiscuous mode [ 192.428278][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.438440][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.456489][T13209] team0: Port device team_slave_0 added [ 192.462702][T13209] team0: Port device team_slave_1 added [ 192.476801][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.483904][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.509848][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.521060][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.528030][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.554028][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.577816][T13209] hsr_slave_0: entered promiscuous mode [ 192.585742][T13209] hsr_slave_1: entered promiscuous mode [ 192.593606][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.602173][T13209] Cannot create hsr debugfs directory [ 192.669288][T13234] loop7: detected capacity change from 0 to 164 [ 192.678963][T13230] loop3: detected capacity change from 0 to 128 [ 192.690147][T13234] netlink: 576 bytes leftover after parsing attributes in process `syz.7.3321'. [ 192.693729][T13230] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.721076][T13209] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.766737][T13231] vcan0 speed is unknown, defaulting to 1000 [ 192.776755][T12857] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.791126][T13209] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.802209][T13231] lo speed is unknown, defaulting to 1000 [ 192.825746][T12857] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.866590][T13209] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.882638][T13231] chnl_net:caif_netlink_parms(): no params data found [ 192.918311][T12857] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.942871][T13231] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.949962][T13231] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.957079][T13231] bridge_slave_0: entered allmulticast mode [ 192.963491][T13231] bridge_slave_0: entered promiscuous mode [ 192.970536][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.977599][T13231] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.984828][T13231] bridge_slave_1: entered allmulticast mode [ 192.991245][T13231] bridge_slave_1: entered promiscuous mode [ 193.006257][T13209] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.047786][T12857] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.075388][T13231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.099773][T13231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.115664][T13209] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 193.138334][T13209] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 193.149051][T13209] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 193.168490][T13231] team0: Port device team_slave_0 added [ 193.177954][T13231] team0: Port device team_slave_1 added [ 193.192565][T13209] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.203121][T13258] ebtables: ebtables: counters copy to user failed while replacing table [ 193.231705][T13231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.238728][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.264641][T13231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.278343][T13231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.285363][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.311388][T13231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.325974][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 193.334918][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.342305][T13256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.352326][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.359841][T13256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.377819][T12857] bridge_slave_1: left allmulticast mode [ 193.383462][T12857] bridge_slave_1: left promiscuous mode [ 193.389304][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.398886][T12857] bridge_slave_0: left allmulticast mode [ 193.404587][T12857] bridge_slave_0: left promiscuous mode [ 193.410223][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.535860][T12857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.546229][T12857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.556144][T12857] bond0 (unregistering): Released all slaves [ 193.585823][T13231] hsr_slave_0: entered promiscuous mode [ 193.592264][T13231] hsr_slave_1: entered promiscuous mode [ 193.600857][T13231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.610613][T13231] Cannot create hsr debugfs directory [ 193.624983][T13266] loop7: detected capacity change from 0 to 512 [ 193.633850][T13266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 193.651817][ T29] kauditd_printk_skb: 1467 callbacks suppressed [ 193.651829][ T29] audit: type=1326 audit(1729962423.873:26954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.681842][ T29] audit: type=1326 audit(1729962423.883:26955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.689078][T13266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.705464][ T29] audit: type=1326 audit(1729962423.883:26956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.720748][T13266] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.741382][ T29] audit: type=1326 audit(1729962423.883:26957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.763407][T13266] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3327: corrupted xattr block 32: bad e_name length [ 193.775345][ T29] audit: type=1326 audit(1729962423.883:26958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.775369][ T29] audit: type=1326 audit(1729962423.883:26959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.775420][ T29] audit: type=1326 audit(1729962423.883:26960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.816196][T13266] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 193.835844][ T29] audit: type=1326 audit(1729962423.883:26961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.835869][ T29] audit: type=1326 audit(1729962423.883:26962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.861066][T13266] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3327: corrupted xattr block 32: bad e_name length [ 193.868359][ T29] audit: type=1326 audit(1729962423.883:26963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.3.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 193.883599][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.920432][T13266] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 193.968206][T13266] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.3327: corrupted xattr block 32: bad e_name length [ 193.981715][T12857] hsr_slave_0: left promiscuous mode [ 193.981824][T13266] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 193.996086][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.003600][T12857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.011448][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.019038][T12857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.027021][T11418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.037119][T12857] veth1_macvtap: left promiscuous mode [ 194.042590][T12857] veth0_macvtap: left promiscuous mode [ 194.048103][T12857] veth1_vlan: left promiscuous mode [ 194.053326][T12857] veth0_vlan: left promiscuous mode [ 194.130869][T12857] team0 (unregistering): Port device team_slave_1 removed [ 194.140645][T12857] team0 (unregistering): Port device team_slave_0 removed [ 194.191826][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.216139][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.223251][T12852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.235434][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.242466][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.298069][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.390670][T13209] veth0_vlan: entered promiscuous mode [ 194.398427][T13209] veth1_vlan: entered promiscuous mode [ 194.411985][T13209] veth0_macvtap: entered promiscuous mode [ 194.419493][T13209] veth1_macvtap: entered promiscuous mode [ 194.429030][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.439461][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.449289][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.459853][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.469661][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.480158][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.490012][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.500501][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.510403][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.520969][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.530786][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.541386][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.551191][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.561602][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.572609][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.580959][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.591536][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.601366][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.611787][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.621603][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.632128][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.641956][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.652409][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.662219][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.672686][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.682497][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.692953][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.702790][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.713327][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.734881][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.748200][T13209] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.756989][T13209] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.765874][T13209] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.774624][T13209] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.795528][T13295] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3329'. [ 194.840558][T13303] loop3: detected capacity change from 0 to 128 [ 194.848387][T13303] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.871246][T13231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.880073][T13231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.889023][T13231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 194.899782][T13231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 194.903099][T13305] loop3: detected capacity change from 0 to 128 [ 194.913409][T13305] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.926203][T13309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3333'. [ 194.953719][T13231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.967192][T13231] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.976511][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.983585][T12833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.996211][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.003344][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.024063][T13316] usb usb8: usbfs: process 13316 (syz.8.3333) did not claim interface 0 before use [ 195.043501][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3335'. [ 195.064736][T13314] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 195.079242][T13231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.084296][T13314] rdma_rxe: rxe_newlink: failed to add vcan0 [ 195.190290][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 195.199316][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 195.213285][T13332] smc: net device bond0 applied user defined pnetid SYZ0 [ 195.220831][T13332] smc: net device bond0 erased user defined pnetid SYZ0 [ 195.250459][T13231] veth0_vlan: entered promiscuous mode [ 195.261726][T13231] veth1_vlan: entered promiscuous mode [ 195.278402][T13231] veth0_macvtap: entered promiscuous mode [ 195.287200][T13231] veth1_macvtap: entered promiscuous mode [ 195.297236][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.307777][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.317625][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.328084][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.337897][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.348442][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.358319][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.368799][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.378623][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.389169][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.398989][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.409511][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.419323][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.429803][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.439637][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.450571][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.501025][T13231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.510286][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3341'. [ 195.541557][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.552099][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.561938][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.572392][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.582202][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.592621][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.602521][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.613093][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.622919][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.633359][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.643234][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.653702][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.663616][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.674054][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.683902][T13231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.694347][T13231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.705920][T13231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.714457][T13231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.723150][T13231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.732133][T13231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.741038][T13231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.817738][T13361] loop7: detected capacity change from 0 to 128 [ 195.826695][T13361] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.855960][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3344'. [ 195.890181][T13367] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3318'. [ 195.939765][T13376] loop7: detected capacity change from 0 to 512 [ 195.946545][T13376] EXT4-fs: Ignoring removed oldalloc option [ 195.949316][T13375] loop8: detected capacity change from 0 to 512 [ 195.954037][T13376] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3346: Parent and EA inode have the same ino 15 [ 195.961367][T13375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.972180][T13376] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.3346: Parent and EA inode have the same ino 15 [ 195.993179][T13376] EXT4-fs (loop7): 1 orphan inode deleted [ 196.000805][T13376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.021245][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3347'. [ 196.032106][T13375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.044840][T13375] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.057342][T13375] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3349: corrupted xattr block 32: bad e_name length [ 196.070885][T13375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 196.079977][T13375] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3349: corrupted xattr block 32: bad e_name length [ 196.094719][T13375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 196.103772][T13375] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3349: corrupted xattr block 32: bad e_name length [ 196.117462][T13375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 196.134730][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.421118][T13395] loop8: detected capacity change from 0 to 512 [ 196.427865][T13395] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 196.437919][T13395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 196.445930][T13395] System zones: 1-12 [ 196.450079][T13395] EXT4-fs (loop8): orphan cleanup on readonly fs [ 196.456605][T13395] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm syz.8.3356: Inode bitmap for bg 0 marked uninitialized [ 196.469651][T13395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.483395][T13395] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #2: block 5: comm syz.8.3356: lblock 0 mapped to illegal pblock 5 (length 1) [ 196.497852][T13395] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.3356: error -117 reading directory block [ 196.546768][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.570131][T13398] loop8: detected capacity change from 0 to 128 [ 196.577456][T13398] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.634826][T13400] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3358'. [ 196.683779][T13406] loop3: detected capacity change from 0 to 512 [ 196.690622][T13406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.705353][T13406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.725952][T13406] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.742697][T13406] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3360: corrupted xattr block 32: bad e_name length [ 196.758227][T13406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 196.761225][T11418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.767374][T13406] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3360: corrupted xattr block 32: bad e_name length [ 196.790088][T13406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 196.799216][T13406] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3360: corrupted xattr block 32: bad e_name length [ 196.849362][T13413] loop5: detected capacity change from 0 to 512 [ 196.859996][T13406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 196.886808][T13413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.901050][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3362'. [ 196.911166][T13417] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 196.932181][T13231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.092861][T12609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.095208][T13421] syz.5.3364[13421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.102137][T13421] syz.5.3364[13421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.114005][T13421] syz.5.3364[13421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.162109][T13430] loop5: detected capacity change from 0 to 512 [ 197.180519][T13430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.197075][T13430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.209943][T13430] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.220265][T13435] bond1: entered promiscuous mode [ 197.224432][T13430] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3367: corrupted xattr block 32: bad e_name length [ 197.225430][T13435] bond1: entered allmulticast mode [ 197.243003][T13430] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 197.246302][T13435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.256612][T13430] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3367: corrupted xattr block 32: bad e_name length [ 197.277875][T13430] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 197.282877][T13435] bond1 (unregistering): Released all slaves [ 197.287117][T13430] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3367: corrupted xattr block 32: bad e_name length [ 197.307930][T13430] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 197.331782][T13231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.369679][T13441] vcan0 speed is unknown, defaulting to 1000 [ 197.410548][T13441] lo speed is unknown, defaulting to 1000 [ 197.420707][T13442] loop3: detected capacity change from 0 to 512 [ 197.433842][T13442] ext4: Unknown parameter 'fowner' [ 197.453509][T13442] xt_hashlimit: max too large, truncated to 1048576 [ 197.547180][T13451] xt_TCPMSS: Only works on TCP SYN packets [ 197.559166][T13451] bond_slave_0: entered promiscuous mode [ 197.566248][T13451] bond_slave_0: left promiscuous mode [ 197.572851][T13453] loop5: detected capacity change from 0 to 128 [ 197.579580][T13453] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.629990][T13459] loop5: detected capacity change from 0 to 512 [ 197.642726][T13459] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3377: corrupted in-inode xattr: invalid ea_ino [ 197.659248][T13459] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.3377: couldn't read orphan inode 15 (err -117) [ 197.672108][T13459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.706862][T13231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.798937][T13478] loop8: detected capacity change from 0 to 128 [ 197.806055][T13478] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.124213][T13493] tmpfs: Bad value for 'mpol' [ 198.377812][T13500] bond1: entered promiscuous mode [ 198.382862][T13500] bond1: entered allmulticast mode [ 198.388184][T13500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.398705][T13500] bond1 (unregistering): Released all slaves [ 198.460552][T13504] loop3: detected capacity change from 0 to 512 [ 198.467448][T13504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.486120][T13504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.501031][T13504] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.523260][T13504] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3394: corrupted xattr block 32: bad e_name length [ 198.542825][T13504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 198.559507][T13504] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3394: corrupted xattr block 32: bad e_name length [ 198.583050][T13504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 198.600730][T13504] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3394: corrupted xattr block 32: bad e_name length [ 198.615993][T13510] loop7: detected capacity change from 0 to 128 [ 198.625232][T13512] loop5: detected capacity change from 0 to 128 [ 198.625906][T13510] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.632025][T13512] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.644704][T13504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 198.663584][ T29] kauditd_printk_skb: 1043 callbacks suppressed [ 198.663596][ T29] audit: type=1326 audit(1729962940.878:28007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03617be719 code=0x7ffc0000 [ 198.692919][ T29] audit: type=1326 audit(1729962940.878:28008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03617be719 code=0x7ffc0000 [ 198.715891][ T29] audit: type=1326 audit(1729962940.878:28009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03617be719 code=0x7ffc0000 [ 198.739044][ T29] audit: type=1326 audit(1729962940.878:28010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f03617be719 code=0x7ffc0000 [ 198.762095][ T29] audit: type=1326 audit(1729962940.878:28011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03617be719 code=0x7ffc0000 [ 198.816946][T13517] loop5: detected capacity change from 0 to 512 [ 198.830096][T13517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.840003][T12609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.855880][T13517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.868896][T13517] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.889809][T13517] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3398: corrupted xattr block 32: bad e_name length [ 198.900623][ T29] audit: type=1326 audit(1729962941.108:28012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 198.907556][T13517] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 198.926744][ T29] audit: type=1326 audit(1729962941.108:28013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 198.937004][T13517] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3398: corrupted xattr block 32: bad e_name length [ 198.959343][ T29] audit: type=1326 audit(1729962941.108:28014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 198.974475][T13517] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 198.996357][ T29] audit: type=1326 audit(1729962941.108:28015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 199.008551][T13517] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3398: corrupted xattr block 32: bad e_name length [ 199.028792][ T29] audit: type=1326 audit(1729962941.108:28016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.3.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a491e719 code=0x7ffc0000 [ 199.064065][T13536] loop8: detected capacity change from 0 to 128 [ 199.067015][T13517] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 199.082751][T13536] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.101206][T13231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.111048][T13538] loop7: detected capacity change from 0 to 128 [ 199.118445][T13538] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.148820][T13541] loop8: detected capacity change from 0 to 128 [ 199.156234][T13541] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.182886][T13546] loop8: detected capacity change from 0 to 512 [ 199.189790][T13546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.199626][T13543] pim6reg1: entered promiscuous mode [ 199.205173][T13543] pim6reg1: entered allmulticast mode [ 199.227240][T13546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.239809][T13546] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.251465][T13546] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3412: corrupted xattr block 32: bad e_name length [ 199.266363][T13546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 199.275881][T13546] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3412: corrupted xattr block 32: bad e_name length [ 199.289484][T13546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 199.298471][T13546] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3412: corrupted xattr block 32: bad e_name length [ 199.312023][T13546] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 199.331740][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.743058][T13564] loop3: detected capacity change from 0 to 512 [ 199.750064][T13564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.765893][T13564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.778457][T13564] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.789815][T13564] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3419: corrupted xattr block 32: bad e_name length [ 199.803995][T13564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 199.813005][T13564] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3419: corrupted xattr block 32: bad e_name length [ 199.826820][T13564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 199.835836][T13564] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3419: corrupted xattr block 32: bad e_name length [ 199.849522][T13564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 199.866115][T12609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.902704][T13571] tipc: Started in network mode [ 199.907601][T13571] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.914588][T13571] tipc: New replicast peer: 100.1.1.1 [ 199.920013][T13571] tipc: Enabled bearer , priority 10 [ 200.255212][T13575] __nla_validate_parse: 10 callbacks suppressed [ 200.255224][T13575] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3423'. [ 200.280763][T13577] netlink: 'syz.7.3424': attribute type 10 has an invalid length. [ 200.291358][T13577] batman_adv: batadv0: Adding interface: team0 [ 200.297617][T13577] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.322801][T13577] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 200.338276][T13580] loop5: detected capacity change from 0 to 128 [ 200.346702][T13580] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.374355][T13586] loop5: detected capacity change from 0 to 128 [ 200.381083][T13586] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.416519][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3426'. [ 200.463653][T13593] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3429'. [ 200.503174][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3431'. [ 200.513151][T13599] 9pnet: Could not find request transport: fd0x0000000000000003 [ 200.556330][T13606] loop7: detected capacity change from 0 to 1024 [ 200.562860][T13606] EXT4-fs: Ignoring removed orlov option [ 200.576921][T13606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.671282][T13611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.698338][T12833] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.746199][T12833] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.798077][T12833] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.847699][T12833] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.866516][T13616] vcan0 speed is unknown, defaulting to 1000 [ 200.896033][T13616] lo speed is unknown, defaulting to 1000 [ 200.904983][T12833] bridge_slave_1: left allmulticast mode [ 200.910873][T12833] bridge_slave_1: left promiscuous mode [ 200.916636][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.924531][T12833] bridge_slave_0: left allmulticast mode [ 200.930273][T12833] bridge_slave_0: left promiscuous mode [ 200.935899][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.015225][T12833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.026092][T12833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.034754][ T9] tipc: Node number set to 2886997162 [ 201.041751][T12833] bond0 (unregistering): Released all slaves [ 201.098201][T12833] hsr_slave_0: left promiscuous mode [ 201.103934][T12833] batman_adv: batadv0: Removing interface: team0 [ 201.110645][T12833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.118134][T12833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.125851][T12833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.133332][T12833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.143320][T12833] veth1_macvtap: left promiscuous mode [ 201.148884][T12833] veth0_macvtap: left promiscuous mode [ 201.154431][T12833] veth1_vlan: left promiscuous mode [ 201.159651][T12833] veth0_vlan: left promiscuous mode [ 201.205505][T13629] loop8: detected capacity change from 0 to 128 [ 201.212477][T13629] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.257352][T12833] team0 (unregistering): Port device team_slave_1 removed [ 201.269061][T12833] team0 (unregistering): Port device team_slave_0 removed [ 201.305526][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3439'. [ 201.314600][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3439'. [ 201.325900][T13633] bond_slave_0: entered promiscuous mode [ 201.332317][T13633] bond_slave_0: left promiscuous mode [ 201.341201][T13616] chnl_net:caif_netlink_parms(): no params data found [ 201.384135][T13616] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.391192][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.398396][T13616] bridge_slave_0: entered allmulticast mode [ 201.405676][T13616] bridge_slave_0: entered promiscuous mode [ 201.413042][T13616] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.420162][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.450231][T13616] bridge_slave_1: entered allmulticast mode [ 201.458848][T13644] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3442'. [ 201.460333][T13616] bridge_slave_1: entered promiscuous mode [ 201.487811][T13616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.506706][T13648] 9pnet: Could not find request transport: fd0x0000000000000003 [ 201.510652][T13616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.537497][T13616] team0: Port device team_slave_0 added [ 201.544980][T13616] team0: Port device team_slave_1 added [ 201.550803][T13653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3444'. [ 201.573971][T13616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.580922][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.606996][T13616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.618950][T13616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.625926][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.651891][T13616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.687894][T13616] hsr_slave_0: entered promiscuous mode [ 201.695750][T13616] hsr_slave_1: entered promiscuous mode [ 201.700162][T13657] loop8: detected capacity change from 0 to 512 [ 201.713614][T13657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.722338][T13616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.732420][T13616] Cannot create hsr debugfs directory [ 201.738033][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'. [ 201.764441][T13660] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 201.768401][T13657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.780310][T13660] rdma_rxe: rxe_newlink: failed to add vcan0 [ 201.786373][T13657] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.809589][T13657] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3448: corrupted xattr block 32: bad e_name length [ 201.831390][T13657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 201.840512][T13657] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3448: corrupted xattr block 32: bad e_name length [ 201.856612][T13657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 201.865649][T13657] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3448: corrupted xattr block 32: bad e_name length [ 201.879387][T13657] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 201.899626][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.932061][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3456'. [ 202.006402][T13616] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.015164][T13616] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.023562][T13616] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.031952][T13616] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.066474][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.083378][T13616] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.094038][T12827] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.101155][T12827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.112036][T12873] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.119175][T12873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.178105][T13616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.274820][T13616] veth0_vlan: entered promiscuous mode [ 202.282860][T13616] veth1_vlan: entered promiscuous mode [ 202.298073][T13616] veth0_macvtap: entered promiscuous mode [ 202.305759][T13616] veth1_macvtap: entered promiscuous mode [ 202.316020][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.326629][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.336425][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.346837][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.356724][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.367123][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.377018][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.387496][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.397286][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.407780][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.417624][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.428038][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.437842][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.448242][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.458039][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.468468][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.480452][T13616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.488847][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.499337][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.509258][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.519699][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.529514][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.539930][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.549788][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.560282][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.570088][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.580507][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.590340][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.600765][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.610618][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.621036][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.630894][T13616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.641324][T13616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.652894][T13616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.669160][T13616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.677935][T13616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.686667][T13616] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.695473][T13616] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.710165][T13707] loop3: detected capacity change from 0 to 512 [ 202.711394][T13706] netlink: 'syz.8.3458': attribute type 10 has an invalid length. [ 202.728869][T13706] batman_adv: batadv0: Adding interface: team0 [ 202.735163][T13706] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.760305][T13706] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 202.875747][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.911322][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.970819][T13707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.980745][T13707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.011098][T13718] loop8: detected capacity change from 0 to 512 [ 203.018814][T13718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.035126][T13718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.048053][T13718] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.059242][T13718] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3461: corrupted xattr block 32: bad e_name length [ 203.074341][T13718] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 203.083373][T13718] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3461: corrupted xattr block 32: bad e_name length [ 203.098705][T13718] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 203.107770][T13718] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.3461: corrupted xattr block 32: bad e_name length [ 203.121546][T13718] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 203.145193][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.176665][T13723] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 203.186422][T13723] rdma_rxe: rxe_newlink: failed to add vcan0 [ 203.215445][T13726] loop8: detected capacity change from 0 to 1024 [ 203.222017][T13726] EXT4-fs: Ignoring removed orlov option [ 203.245399][T13726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.300784][T13730] xt_TCPMSS: Only works on TCP SYN packets [ 203.436913][T13209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.451135][T12857] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.486773][T12857] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.556867][T12857] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.605663][T13739] vcan0 speed is unknown, defaulting to 1000 [ 203.627682][T12857] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.638757][T13739] lo speed is unknown, defaulting to 1000 [ 203.673653][ T29] kauditd_printk_skb: 923 callbacks suppressed [ 203.673666][ T29] audit: type=1326 audit(1729962945.898:28940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac0c6256e7 code=0x7ffc0000 [ 203.703677][ T29] audit: type=1326 audit(1729962945.898:28941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac0c5ca099 code=0x7ffc0000 [ 203.716174][T13739] chnl_net:caif_netlink_parms(): no params data found [ 203.727126][ T29] audit: type=1326 audit(1729962945.898:28942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac0c62e719 code=0x7ffc0000 [ 203.727149][ T29] audit: type=1326 audit(1729962945.898:28943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac0c6256e7 code=0x7ffc0000 [ 203.780948][ T29] audit: type=1326 audit(1729962945.898:28944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac0c5ca099 code=0x7ffc0000 [ 203.804423][ T29] audit: type=1326 audit(1729962945.898:28945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac0c62e719 code=0x7ffc0000 [ 203.827983][ T29] audit: type=1326 audit(1729962945.898:28946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac0c6256e7 code=0x7ffc0000 [ 203.851480][ T29] audit: type=1326 audit(1729962945.898:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac0c5ca099 code=0x7ffc0000 [ 203.875046][ T29] audit: type=1326 audit(1729962945.898:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac0c62e719 code=0x7ffc0000 [ 203.898953][ T29] audit: type=1326 audit(1729962945.958:28949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13740 comm="syz.5.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac0c6256e7 code=0x7ffc0000 [ 203.971203][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.978463][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.985810][T13739] bridge_slave_0: entered allmulticast mode [ 203.992212][T13739] bridge_slave_0: entered promiscuous mode [ 203.999301][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.006485][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.014038][T13739] bridge_slave_1: entered allmulticast mode [ 204.020478][T13739] bridge_slave_1: entered promiscuous mode [ 204.027135][T12857] bridge_slave_1: left allmulticast mode [ 204.032786][T12857] bridge_slave_1: left promiscuous mode [ 204.038602][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.046465][T12857] bridge_slave_0: left allmulticast mode [ 204.052101][T12857] bridge_slave_0: left promiscuous mode [ 204.057740][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.157107][T12857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.167645][T12857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.177714][T12857] bond0 (unregistering): Released all slaves [ 204.205819][T13739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.218596][T13739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.247098][T13739] team0: Port device team_slave_0 added [ 204.265812][T13739] team0: Port device team_slave_1 added [ 204.274906][T12857] hsr_slave_0: left promiscuous mode [ 204.280775][T12857] hsr_slave_1: left promiscuous mode [ 204.289711][T12857] batman_adv: batadv0: Removing interface: team0 [ 204.296608][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.304068][T12857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.311715][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.319105][T12857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.328031][T12857] veth1_macvtap: left promiscuous mode [ 204.333608][T12857] veth0_macvtap: left promiscuous mode [ 204.339213][T12857] veth1_vlan: left promiscuous mode [ 204.344475][T12857] veth0_vlan: left promiscuous mode [ 204.446124][T12857] team0 (unregistering): Port device team_slave_1 removed [ 204.456125][T12857] team0 (unregistering): Port device team_slave_0 removed [ 204.475216][T12873] ================================================================== [ 204.483319][T12873] BUG: KCSAN: data-race in batadv_hard_if_event / batadv_mcast_mla_update [ 204.491832][T12873] [ 204.494150][T12873] write to 0xffff888113375a10 of 1 bytes by task 12857 on cpu 0: [ 204.501862][T12873] batadv_hard_if_event+0x8d4/0x1010 [ 204.507132][T12873] raw_notifier_call_chain+0x6f/0x1d0 [ 204.512484][T12873] call_netdevice_notifiers_info+0xae/0x100 [ 204.518358][T12873] unregister_netdevice_many_notify+0x8b7/0x11b0 [ 204.524672][T12873] default_device_exit_batch+0x5f6/0x650 [ 204.530289][T12873] cleanup_net+0x4c9/0x810 [ 204.534705][T12873] process_scheduled_works+0x483/0x9a0 [ 204.540150][T12873] worker_thread+0x51d/0x6f0 [ 204.544718][T12873] kthread+0x1d1/0x210 [ 204.548771][T12873] ret_from_fork+0x4b/0x60 [ 204.553181][T12873] ret_from_fork_asm+0x1a/0x30 [ 204.557926][T12873] [ 204.560231][T12873] read to 0xffff888113375a10 of 1 bytes by task 12873 on cpu 1: [ 204.567836][T12873] batadv_mcast_mla_update+0x21b/0x1700 [ 204.573363][T12873] process_scheduled_works+0x483/0x9a0 [ 204.578806][T12873] worker_thread+0x51d/0x6f0 [ 204.583384][T12873] kthread+0x1d1/0x210 [ 204.587449][T12873] ret_from_fork+0x4b/0x60 [ 204.591844][T12873] ret_from_fork_asm+0x1a/0x30 [ 204.596590][T12873] [ 204.598894][T12873] value changed: 0x00 -> 0x01 [ 204.603554][T12873] [ 204.605857][T12873] Reported by Kernel Concurrency Sanitizer on: [ 204.611985][T12873] CPU: 1 UID: 0 PID: 12873 Comm: kworker/u8:44 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 204.622999][T12873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.633033][T12873] Workqueue: bat_events batadv_mcast_mla_update [ 204.639282][T12873] ================================================================== [ 204.660349][T13739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.667352][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.693272][T13739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.705911][T13739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.712880][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.738893][T13739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.766647][T13739] hsr_slave_0: entered promiscuous mode [ 204.772701][T13739] hsr_slave_1: entered promiscuous mode [ 204.778848][T13739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.786447][T13739] Cannot create hsr debugfs directory [ 205.066975][T13739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.075253][T13739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.084004][T13739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.092349][T13739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.125357][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.138559][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.148693][T12841] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.155790][T12841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.165901][T12857] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.172968][T12857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.234096][T13739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.298221][T13739] veth0_vlan: entered promiscuous mode [ 205.306442][T13739] veth1_vlan: entered promiscuous mode [ 205.323266][T13739] veth0_macvtap: entered promiscuous mode [ 205.330680][T13739] veth1_macvtap: entered promiscuous mode [ 205.342683][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.353311][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.363152][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.373578][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.383423][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.393899][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.403741][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.414190][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.424028][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.434558][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.444477][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.454900][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.464718][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.475118][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.484934][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.495354][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.506212][T13739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.514508][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.525047][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.534863][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.545293][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.555148][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.565565][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.575371][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.585871][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.595680][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.606117][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.615969][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.626381][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.636237][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.646732][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.656536][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.666963][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.677777][T13739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.690071][T13739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.698865][T13739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.707547][T13739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.716330][T13739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0