last executing test programs: 17.219320235s ago: executing program 2 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000f00000001000100090000000100002052a4999735f3e0c4b5eadd28edb8da0baa3a48383ea9b9c1ce3ffe8a54bbb3b4", @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket(0x40000000015, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() r7 = getpid() rt_tgsigqueueinfo(r6, r7, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffff8}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) dup2(r8, r9) 17.173802728s ago: executing program 2 (id=262): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000a40)={{r1}, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.062374306s ago: executing program 2 (id=265): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x4}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="82a334b43abb675db9bd6da884b1531b67bc7755c5901de3c6671552dbc3aa01170f52d5d5524ed5f36a823c8a6bbfd14b70f85d06bf73846aa4363fb7a5b702acbbd792503d156bbf9bc77d2fa7ae50ef3f80d60acbc1580809fa3a465ea396981080830cadcb6ae258bb9cabf6a66c8e584970442de0b8547ed72dc98140d78572166fa9695caf2b3222c24b431a4e29c960a27cd02eb1756fc6e2818a877e5e46c942c9219e3a546f8bf3bfd7236bec8b26ccc1ec09f83912f7b8179490add985fcd26ab72d7bf16c2503cc0479ac78715ae1144b652f461e", @ANYRESOCT=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='objagg_obj_create\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380005"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 16.541741381s ago: executing program 2 (id=273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 12.227092543s ago: executing program 2 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001", @ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x7f, 0x0, 0x7, 0xd34}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000004c0), &(0x7f00000003c0)}, 0x20) 4.149515559s ago: executing program 4 (id=421): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '['}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfdffffff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000bc6c35e100000000002445469f0000", @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 3.765693716s ago: executing program 4 (id=424): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) rt_sigsuspend(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.586392158s ago: executing program 4 (id=425): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18fc, 0x0, 0xeb64, 0x5, 0x0, 0x10, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x0, 0x7ffffffff000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/105, 0x69, 0x0, 0x0, 0x3d}, &(0x7f0000000280)=0x40) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}]}, 0x1, 0xb80, &(0x7f00000017c0)="$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") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) (async) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x109022, 0x0) ioctl$PTP_EXTTS_REQUEST2(r10, 0x43403d0e, 0x0) 3.458739376s ago: executing program 4 (id=428): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x5d) close(0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff0200"/52], 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvmsg$can_bcm(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r10}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0300000047fe"], 0x80}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13], 0x6c}, 0x1, 0xba01}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x700, 0x7, 0x8, 0x6, {{0xe, 0x4, 0x2, 0x1d, 0x38, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1b, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x1, 0x32a, 0x56, {{0x30, 0x4, 0x0, 0x8, 0xc0, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x44, 0xf5, 0x3, 0x9, [{@private=0xa010102, 0x80000001}, {@local, 0x3}, {@remote, 0x7fff}, {@multicast2, 0x40}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x40}, {@multicast2, 0x26}, {@remote}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x3, [{@rand_addr=0x64010100, 0xc}, {@remote}, {@loopback, 0x3203}, {@remote, 0x4}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x4}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x5}, {@remote, 0x40}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000780)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x10c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000010) 2.736681385s ago: executing program 3 (id=445): connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x4, @multicast, 'batadv_slave_1\x00'}}, 0x1e) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f00002ab91c691e277fffffeb000200"}) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x4, 0x80, 0x0, 0x21a, 0x3, '`\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000, 0x2000000}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7f) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008000000000000000000000001811000031b69580d440ab00040000e5752e444b11e977476362493d0b00ce5bbf5bd90719aab76baaed07d7f61bb9a14448bb4b6119eed4f3d7fed598dd37f7aac2b458706506bfc6f3bf5a641df65f4b7fb5ec82212c606d610dd3afefc358cce312e4cd61d2b12f8ea60797a3000000000000ae0e32a800000000000000000077e535b2ff909b6f7ab17ac7e1ff0f93ec270c", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000400085000020830000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000000000000000000000000000000000000085385e75e01600ed98fb73bf40262f6e8e89d49e2ee03e44cf172abda70496812c9e02d4e2900e1e8650"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) sendfile(r6, r10, 0x0, 0x1000000000004) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r11, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.66418698s ago: executing program 0 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002200), 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) gettid() pause() close(r4) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(0x3) 2.555212398s ago: executing program 4 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)="a6", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x7, 0xd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x20, 0xc26a, 0xe294}}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa1000000000042d9f3da3b8b3ddcc000070100669b6826a940a1db6e5519b300f8ffffffb702000008000000b70300"], &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0xf2, &(0x7f0000000d80)=""/242, 0x41000, 0x10, '\x00', r5, 0x19, r6, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x16318, r3, 0x5, &(0x7f0000000e80)=[r2], &(0x7f0000000ec0)=[{0x4, 0x2, 0x1, 0xa}, {0x2, 0x2, 0x5, 0xb}, {0x2, 0x4, 0x3, 0x5}, {0x0, 0x3, 0x10, 0x9}, {0x5, 0x4, 0x4, 0x9}], 0x10, 0x9, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000000000)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000ac00850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000000007b8af8ff0000000077f105e602fdbfa20000000000f906020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r10}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 2.431730226s ago: executing program 3 (id=454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 2.431101676s ago: executing program 3 (id=455): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x4}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="82a334b43abb675db9bd6da884b1531b67bc7755c5901de3c6671552dbc3aa01170f52d5d5524ed5f36a823c8a6bbfd14b70f85d06bf73846aa4363fb7a5b702acbbd792503d156bbf9bc77d2fa7ae50ef3f80d60acbc1580809fa3a465ea396981080830cadcb6ae258bb9cabf6a66c8e584970442de0b8547ed72dc98140d78572166fa9695caf2b3222c24b431a4e29c960a27cd02eb1756fc6e2818a877e5e46c942c9219e3a546f8bf3bfd7236bec8b26ccc1ec09f83912f7b8179490add985fcd26ab72d7bf16c2503cc0479ac78715ae1144b652f461e", @ANYRESOCT=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='objagg_obj_create\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380005"], 0x78) 2.356047351s ago: executing program 3 (id=456): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() fchmodat(0xffffffffffffffff, 0x0, 0x2d0) gettid() tkill(r1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.307012624s ago: executing program 3 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x80000000000000, 0x0, 0x2}}, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={0xd0c, r7, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x1b, 0x9, 0x3, 0x60, 0x24, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x6c, 0x60, 0x6c, 0x12, 0x18, 0x60, 0x18, 0x5, 0x24, 0x6, 0x60, 0x7, 0x2, 0x24, 0x16, 0x9, 0x1, 0x16, 0x2, 0x18, 0x54, 0x9, 0x2, 0x1b, 0x60, 0xc, 0x12, 0x6c, 0x30, 0x6c, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1c, 0x6, 0x24, 0x18, 0x6, 0x12, 0x30, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6aa0, 0x2, 0x54, 0x2, 0x451, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x1e5, 0x5, 0x2, 0x8, 0xfffb, 0x1]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0xa}, {0x0, 0x1}, {0x7, 0xe}, {0x4, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x4}, {0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x8}, {}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x7, 0x6}, {0x7, 0x6}, {0x4, 0x4}, {0x2, 0xa}, {0x2}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x3}, {0x0, 0x6}, {0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {0x6, 0x3}, {0x2}, {0x6, 0x7}, {0x1}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x13, 0x24, 0x24, 0x1d, 0xc, 0x1b, 0x1, 0x4, 0x4, 0x1b, 0x6, 0x16]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x2, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x8}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x8, 0x5, 0x78, 0x10, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x16, 0x18, 0x24, 0x5, 0x16, 0x48, 0x3, 0xc, 0x3, 0x5, 0x0, 0x5, 0x16, 0x24, 0x1, 0x24, 0x1, 0x5, 0x1, 0x2, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x42, 0xfffd, 0x80, 0x100, 0x9, 0xb5, 0x1ff0, 0x54]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x4}, {0x1}, {0x5, 0x5}, {0x6}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x2, 0x800, 0x1, 0x7, 0xa6b, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x1, 0x7}, {}, {0x1}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x1}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xff, 0x60, 0x8, 0x7f, 0x8, 0x6c]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x0, 0x0, 0x0, 0x629, 0x8426, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xca5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0xe, 0x0, 0x81, 0x1, 0xfff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfd, 0x1, 0x3, 0xe, 0x8, 0x7, 0x811]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x8, 0x1ff8, 0x4, 0xff80, 0x4]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x6}, {0x7, 0x1}, {0x5}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0x1}, {0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0xa}, {0x7}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x5}, {0x2}, {0x5, 0x9}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x808e, 0x5e0, 0x7, 0x727b, 0xab4, 0xb0da, 0x3, 0xf5b4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}]}]}, @NL80211_ATTR_TID_CONFIG={0x308, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0x3b01, 0x5, 0x0, 0x3c7c, 0x0, 0x7efc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x9, 0x9, 0x78, 0x57, 0x1, 0x36, 0xb, 0x30, 0x12, 0x3, 0x48, 0x12, 0x5, 0xc, 0x3, 0x24, 0xb, 0x35, 0x6c, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0x29, 0x7, 0x6, 0x2, 0x851, 0x9]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x3}, {0x1}, {}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6590, 0x0, 0x3, 0x8, 0x1481, 0xfff4, 0x0, 0x2fe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd1, 0x2, 0x9, 0x5, 0x7, 0x401, 0x3, 0x3000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca, 0x401, 0x3d, 0x2, 0xa, 0x630, 0x2, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x3ff, 0x9, 0xe60, 0x6, 0x2, 0xff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xbeb, 0x0, 0x6, 0xd6, 0x2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0xf, 0xe, 0x7, 0x3, 0x1ff, 0x376a]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x24, 0x10, 0xffff, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x12, 0x5, 0x2, 0x2, 0x1, 0xc, 0x12, 0x17, 0xb, 0x4, 0x18, 0x60, 0x1]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x5}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x68, 0x9, 0x0, 0x7, 0x6, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xee7, 0x7, 0x9, 0x0, 0x9, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2e2241de}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x374, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xe, 0x4, 0x9, 0x8, 0x7e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {}, {0x4, 0x2}, {0x1}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x4}, {0x4, 0x6}, {0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x2}, {0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x6}, {0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x36, 0x1b, 0x48, 0x9, 0x60, 0x16, 0x30, 0x30, 0x6, 0x30, 0x18, 0x36, 0x1, 0x9, 0x36, 0x16, 0x48, 0x1, 0x12, 0xa, 0x1b, 0x2, 0x1, 0x1b, 0x6c, 0x2, 0x2, 0x12, 0x9, 0x48, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1fd6cffa3ed26eec, 0x36, 0x12, 0x6, 0xb, 0x32, 0x1, 0x24, 0x36, 0xc, 0x2033a2275a8ed1ca, 0x48, 0x4, 0x4, 0x36, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6c, 0x3, 0x12, 0xb, 0x6, 0x16, 0x5, 0x30, 0x24, 0x60, 0xb, 0x9, 0x18, 0x18, 0x1b, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x6, 0x8000, 0x5, 0xe, 0xaa77, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0x1, 0x1, 0x436, 0x1000, 0x7f]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffd, 0x20, 0x400, 0xcb3, 0x7ff, 0xe, 0xb89]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5b, 0x2, 0x9, 0x5, 0xc, 0x9, 0xd, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x16, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x25, 0xf201, 0xd2, 0x81, 0xc000, 0x1ff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x5, 0x6c, 0x36, 0xc, 0x0, 0x0, 0x3, 0x2, 0x16, 0x36, 0x36, 0x34, 0x4, 0x6c, 0x5, 0x16, 0xc, 0x9, 0x1b, 0x6, 0x30, 0x2, 0x6c, 0xb, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa63}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe2, 0x1, 0x9, 0x7, 0x3, 0x7fff, 0x10, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb01e, 0x6, 0x4, 0x4, 0x5, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x4}, {0x2, 0x6}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x5}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0xa}, {0x2}, {0x1, 0x4}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcbdb}]}]}]}, 0xd0c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r9, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x2da}}, 0x9e4b) 2.273715747s ago: executing program 3 (id=458): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000900000000000000000000109078cbe66f1058cc60df00"/50], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) 1.845041096s ago: executing program 0 (id=459): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1.820114867s ago: executing program 0 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000f00000001000100090000000100002052a4999735f3e0c4b5eadd28edb8da0baa3a48383ea9b9c1ce3ffe8a54bbb3b4", @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket(0x40000000015, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 1.750164522s ago: executing program 0 (id=462): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x5d) close(0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff0200"/52], 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0xfdef) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000200)={@local, @multicast2, 0x0}, &(0x7f0000000280)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) recvmsg$can_bcm(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r10}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0300000047fe"], 0x80}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13], 0x6c}, 0x1, 0xba01}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x700, 0x7, 0x8, 0x6, {{0xe, 0x4, 0x2, 0x1d, 0x38, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1b, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x1, 0x32a, 0x56, {{0x30, 0x4, 0x0, 0x8, 0xc0, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x44, 0xf5, 0x3, 0x9, [{@private=0xa010102, 0x80000001}, {@local, 0x3}, {@remote, 0x7fff}, {@multicast2, 0x40}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x40}, {@multicast2, 0x26}, {@remote}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x3, [{@rand_addr=0x64010100, 0xc}, {@remote}, {@loopback, 0x3203}, {@remote, 0x4}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x4}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x5}, {@remote, 0x40}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000780)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x10c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000010) 1.692269276s ago: executing program 4 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 1.370968017s ago: executing program 1 (id=466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 1.322038721s ago: executing program 1 (id=467): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x4}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="82a334b43abb675db9bd6da884b1531b67bc7755c5901de3c6671552dbc3aa01170f52d5d5524ed5f36a823c8a6bbfd14b70f85d06bf73846aa4363fb7a5b702acbbd792503d156bbf9bc77d2fa7ae50ef3f80d60acbc1580809fa3a465ea396981080830cadcb6ae258bb9cabf6a66c8e584970442de0b8547ed72dc98140d78572166fa9695caf2b3222c24b431a4e29c960a27cd02eb1756fc6e2818a877e5e46c942c9219e3a546f8bf3bfd7236bec8b26ccc1ec09f83912f7b8179490add985fcd26ab72d7bf16c2503cc0479ac78715ae1144b652f461e", @ANYRESOCT=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='objagg_obj_create\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380005"], 0x78) 1.229860607s ago: executing program 1 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x80000000000000, 0x0, 0x2}}, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={0xd0c, r7, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2b0, 0x11d, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x1b, 0x9, 0x3, 0x60, 0x24, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x6c, 0x60, 0x6c, 0x12, 0x18, 0x60, 0x18, 0x5, 0x24, 0x6, 0x60, 0x7, 0x2, 0x24, 0x16, 0x9, 0x1, 0x16, 0x2, 0x18, 0x54, 0x9, 0x2, 0x1b, 0x60, 0xc, 0x12, 0x6c, 0x30, 0x6c, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1c, 0x6, 0x24, 0x18, 0x6, 0x12, 0x30, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6aa0, 0x2, 0x54, 0x2, 0x451, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x1e5, 0x5, 0x2, 0x8, 0xfffb, 0x1]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0xa}, {0x0, 0x1}, {0x7, 0xe}, {0x4, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x4}, {0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x8}, {}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x8}, {0x7, 0x6}, {0x7, 0x6}, {0x4, 0x4}, {0x2, 0xa}, {0x2}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x3}, {0x0, 0x6}, {0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7}, {0x6, 0x3}, {0x2}, {0x6, 0x7}, {0x1}, {0x7, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x13, 0x24, 0x24, 0x1d, 0xc, 0x1b, 0x1, 0x4, 0x4, 0x1b, 0x6, 0x16]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x2, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x8}, {0x4, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x8, 0x5, 0x78, 0x10, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x16, 0x18, 0x24, 0x5, 0x16, 0x48, 0x3, 0xc, 0x3, 0x5, 0x0, 0x5, 0x16, 0x24, 0x1, 0x24, 0x1, 0x5, 0x1, 0x2, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x42, 0xfffd, 0x80, 0x100, 0x9, 0xb5, 0x1ff0, 0x54]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x4}, {0x1}, {0x5, 0x5}, {0x6}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x2, 0x800, 0x1, 0x7, 0xa6b, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x1, 0x7}, {}, {0x1}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x1}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xff, 0x60, 0x8, 0x7f, 0x8, 0x6c]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x0, 0x0, 0x0, 0x629, 0x8426, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xca5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0xe, 0x0, 0x81, 0x1, 0xfff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfd, 0x1, 0x3, 0xe, 0x8, 0x7, 0x811]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x8, 0x1ff8, 0x4, 0xff80, 0x4]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x6}, {0x7, 0x1}, {0x5}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0x1}, {0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0xa}, {0x7}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x7}, {0x5}, {0x2}, {0x5, 0x9}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x808e, 0x5e0, 0x7, 0x727b, 0xab4, 0xb0da, 0x3, 0xf5b4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}]}]}, @NL80211_ATTR_TID_CONFIG={0x308, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0x3b01, 0x5, 0x0, 0x3c7c, 0x0, 0x7efc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x9, 0x9, 0x78, 0x57, 0x1, 0x36, 0xb, 0x30, 0x12, 0x3, 0x48, 0x12, 0x5, 0xc, 0x3, 0x24, 0xb, 0x35, 0x6c, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0x29, 0x7, 0x6, 0x2, 0x851, 0x9]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x3}, {0x1}, {}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6590, 0x0, 0x3, 0x8, 0x1481, 0xfff4, 0x0, 0x2fe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd1, 0x2, 0x9, 0x5, 0x7, 0x401, 0x3, 0x3000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca, 0x401, 0x3d, 0x2, 0xa, 0x630, 0x2, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1000, 0x3ff, 0x9, 0xe60, 0x6, 0x2, 0xff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xbeb, 0x0, 0x6, 0xd6, 0x2, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8000, 0xf, 0xe, 0x7, 0x3, 0x1ff, 0x376a]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x3}, {0x7, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x24, 0x10, 0xffff, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x12, 0x5, 0x2, 0x2, 0x1, 0xc, 0x12, 0x17, 0xb, 0x4, 0x18, 0x60, 0x1]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x5}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x68, 0x9, 0x0, 0x7, 0x6, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xee7, 0x7, 0x9, 0x0, 0x9, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2e2241de}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x374, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xe, 0x4, 0x9, 0x8, 0x7e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {}, {0x4, 0x2}, {0x1}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x7}, {0x4}, {0x4, 0x6}, {0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x2}, {0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x6}, {0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x1}, {0x7, 0xa}, {0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x36, 0x1b, 0x48, 0x9, 0x60, 0x16, 0x30, 0x30, 0x6, 0x30, 0x18, 0x36, 0x1, 0x9, 0x36, 0x16, 0x48, 0x1, 0x12, 0xa, 0x1b, 0x2, 0x1, 0x1b, 0x6c, 0x2, 0x2, 0x12, 0x9, 0x48, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1fd6cffa3ed26eec, 0x36, 0x12, 0x6, 0xb, 0x32, 0x1, 0x24, 0x36, 0xc, 0x2033a2275a8ed1ca, 0x48, 0x4, 0x4, 0x36, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6c, 0x3, 0x12, 0xb, 0x6, 0x16, 0x5, 0x30, 0x24, 0x60, 0xb, 0x9, 0x18, 0x18, 0x1b, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x6, 0x8000, 0x5, 0xe, 0xaa77, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0x1, 0x1, 0x436, 0x1000, 0x7f]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffd, 0x20, 0x400, 0xcb3, 0x7ff, 0xe, 0xb89]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5b, 0x2, 0x9, 0x5, 0xc, 0x9, 0xd, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x16, 0x30, 0x6c]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x25, 0xf201, 0xd2, 0x81, 0xc000, 0x1ff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x5, 0x6c, 0x36, 0xc, 0x0, 0x0, 0x3, 0x2, 0x16, 0x36, 0x36, 0x34, 0x4, 0x6c, 0x5, 0x16, 0xc, 0x9, 0x1b, 0x6, 0x30, 0x2, 0x6c, 0xb, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa63}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe2, 0x1, 0x9, 0x7, 0x3, 0x7fff, 0x10, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb01e, 0x6, 0x4, 0x4, 0x5, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x4}, {0x2, 0x6}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x5}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x1}, {0x0, 0xa}, {0x2}, {0x1, 0x4}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcbdb}]}]}]}, 0xd0c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r9, &(0x7f0000000640)=@shmem={0xc, 0x1, {0x2da}}, 0x9e4b) 1.174787181s ago: executing program 1 (id=469): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', 0x141440, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) write(r1, &(0x7f0000001480)="a5e967b40b74c5ce5210f990551f86f3158a7c3f62532a28d1c7118611957c794140e02bdda16a386f5f6bf6b1470f95b0a3d82d43c417796108b73a8f970a4f8a5130f7982415c8ff43d8f5e5fc72d5535b1d55c3bd8faa87827839e3c3b83ac2674deee48c1418f1fe9d71cb4218847a6846863c0fda67a2eee370b3a77c20eb49fd65e033221cc68b1d4605e2e992d1b8ad449e977b6fd3a47f58388b73fac408de8b28b63d32c24c1c86606e986ec252c792daa0c5248d58c26ee60273a52eab28108e918c1b9d2b67aa2b439a2187bcd76c162656814f4466deced9007a41e16a", 0xe3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00890d00000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x1100000000001}, 0x18) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000100)=ANY=[]) lstat(&(0x7f0000002100)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005", @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r9}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000212, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) 1.03092013s ago: executing program 1 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000002200), 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) gettid() pause() close(r4) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(0x3) 895.27998ms ago: executing program 0 (id=471): pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 872.447161ms ago: executing program 0 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001", @ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f00000004c0), &(0x7f00000003c0)}, 0x20) 74.037385ms ago: executing program 1 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)="a6", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000f4ff00006a0a00fe000000008500000027000000b70000000000000095000000000000009cc6b3fcd62c7d37623802000000505f80fc88943c4f0cf0dd467b597811638883f6f698caf503a22f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f3dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193105000000b100400600e1ffff88208a2f7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ef6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33612320bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed5ab58c81b74ef4e159d4594396864a65422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693c7b1c2ae0a9c27bd1a6f1738f8ba2908139fd653908ca0105e72550fbb1f1543a9bcd48de441c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7100000834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0093968fce3c425729a77ecb090000654680e715f4ce5c1ad2b75aab390700000000000000ed7ebe34db25cbe169138c15a6013220bba55923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be413b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a775bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967aa7bfcf7dba26e279ab9bef181cc917fca8941819445dd6fd171c4065a526c7000000000000ef570531e36dd9cf4da9a269b71e05463dfadff8401bc3202a9c393e9658d15dc20655abad7f9c54fc89176071bf7645d221696fa24e1310598f1f0bbd6ea058fdec63fab905ac925b16bd5cedf4ea2775d897897473dce8a339e340519df5dc3c8ab91b6b96b10cb05637dc6f4f24b2b0ba824028fa0fa29c9cf80443de08b3fc140082c8aa79d6324e9c609b0d9c2eeba3accb49fe851b6f56a425f70b3157443d2b05a883700b554738fd8453ed2ba5af37121ff47dc759000000000000000000000000000000000d78287bf7833841f7d49160b8bf2bd448e49c9ce544f0fafba633b694965606fa98f10c1c9f55eee1aaf03d30e61c9a468758c151ebf809efcda19b880c534bce505e14b65bb4185bf0614f23c38d106f77e407cac3cdff686370d091d453f7b8f8731eb70c3053fbb1a7d1ec764f9436489e84941336e56ccdba860901290a3d27b6330b85d52095c3b28718"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x7, 0xd, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x20, 0xc26a, 0xe294}}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000020646c2500000000002020207b1af8ff00000000bfa1000000000042d9f3da3b8b3ddcc000070100669b6826a940a1db6e5519b300f8ffffffb702000008000000b70300"], &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0xf2, &(0x7f0000000d80)=""/242, 0x41000, 0x10, '\x00', r5, 0x19, r6, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x16318, r3, 0x5, &(0x7f0000000e80)=[r2], &(0x7f0000000ec0)=[{0x4, 0x2, 0x1, 0xa}, {0x2, 0x2, 0x5, 0xb}, {0x2, 0x4, 0x3, 0x5}, {0x0, 0x3, 0x10, 0x9}, {0x5, 0x4, 0x4, 0x9}], 0x10, 0x9, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000000000)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000ac00850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000000000007b8af8ff0000000077f105e602fdbfa20000000000f906020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r10}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 2 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffcc8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 42.274701][ T28] team0 (unregistering): Port device team_slave_1 removed [ 42.286668][ T28] team0 (unregistering): Port device team_slave_0 removed [ 42.544940][ T3990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.611502][ T3934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.621135][ T3934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.631853][ T3934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.644585][ T3934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.694348][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.717433][ T3934] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.736865][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.744033][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.769880][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.776980][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.847372][ T3934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.910597][ T4042] loop4: detected capacity change from 0 to 128 [ 42.937342][ T4042] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 42.947386][ T4042] FAT-fs (loop4): Filesystem has been set read-only [ 42.966229][ T3934] veth0_vlan: entered promiscuous mode [ 42.977744][ T3934] veth1_vlan: entered promiscuous mode [ 42.986859][ T4042] 9pnet_fd: Insufficient options for proto=fd [ 43.009035][ T3934] veth0_macvtap: entered promiscuous mode [ 43.019306][ T3934] veth1_macvtap: entered promiscuous mode [ 43.040195][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.050929][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.060981][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.071447][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.081284][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.091839][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.101903][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.112364][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.124332][ T3934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.134888][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.145544][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.155469][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.165950][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.175842][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.186288][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.196166][ T3934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.206990][ T3934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.218300][ T3934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.229740][ T3934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.238596][ T3934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.247593][ T3934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.256359][ T3934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.316696][ T4065] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.367720][ T4065] hub 6-0:1.0: USB hub found [ 43.372368][ T4065] hub 6-0:1.0: 8 ports detected [ 43.397024][ T4067] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 43.541216][ T4073] loop4: detected capacity change from 0 to 512 [ 43.548583][ T4073] EXT4-fs: Ignoring removed i_version option [ 43.554589][ T4073] EXT4-fs: Ignoring removed nobh option [ 43.560516][ T4073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.572459][ T4073] EXT4-fs (loop4): 1 truncate cleaned up [ 43.578545][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.599370][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.696041][ T4082] loop4: detected capacity change from 0 to 1024 [ 43.702778][ T4082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.710071][ T4082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.719918][ T4082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 43.728125][ T4082] System zones: 0-1, 3-36 [ 43.733436][ T4082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.831468][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.899397][ T4088] loop4: detected capacity change from 0 to 512 [ 43.916514][ T4088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.929112][ T4088] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.952189][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.049021][ T4098] program syz.4.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.097590][ T4098] hub 6-0:1.0: USB hub found [ 44.102366][ T4098] hub 6-0:1.0: 8 ports detected [ 44.173514][ T4101] 9pnet_fd: Insufficient options for proto=fd [ 45.051902][ T4105] loop4: detected capacity change from 0 to 512 [ 45.058480][ T4105] EXT4-fs: Ignoring removed i_version option [ 45.064483][ T4105] EXT4-fs: Ignoring removed nobh option [ 45.070502][ T4105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.081560][ T4105] EXT4-fs (loop4): 1 truncate cleaned up [ 45.088206][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.109273][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.136128][ T4108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.143907][ T4108] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 47.190563][ T4127] pim6reg1: entered promiscuous mode [ 47.196012][ T4127] pim6reg1: entered allmulticast mode [ 48.243958][ T3434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.253082][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 48.253126][ T29] audit: type=1326 audit(1726487630.479:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x0 [ 48.379341][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 48.417789][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.424930][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.432481][ T4131] bridge_slave_0: entered allmulticast mode [ 48.439768][ T4131] bridge_slave_0: entered promiscuous mode [ 48.447386][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.454586][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.462210][ T4131] bridge_slave_1: entered allmulticast mode [ 48.468803][ T4131] bridge_slave_1: entered promiscuous mode [ 48.487782][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.498444][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.499418][ T29] audit: type=1400 audit(1726487630.729:552): avc: denied { read } for pid=4129 comm="syz.4.152" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.530519][ T29] audit: type=1400 audit(1726487630.729:553): avc: denied { open } for pid=4129 comm="syz.4.152" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.554713][ T29] audit: type=1400 audit(1726487630.739:554): avc: denied { ioctl } for pid=4129 comm="syz.4.152" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 48.585828][ T4131] team0: Port device team_slave_0 added [ 48.592271][ T4131] team0: Port device team_slave_1 added [ 48.608397][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.615489][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.641471][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.655038][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.667317][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.673884][ T4148] mmap: syz.3.153 (4148) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.674272][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.712219][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.739677][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.752972][ T4131] hsr_slave_0: entered promiscuous mode [ 48.758990][ T4131] hsr_slave_1: entered promiscuous mode [ 48.779014][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.827931][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.906897][ T28] bridge_slave_1: left allmulticast mode [ 48.912564][ T28] bridge_slave_1: left promiscuous mode [ 48.918334][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.925929][ T28] bridge_slave_0: left allmulticast mode [ 48.931787][ T28] bridge_slave_0: left promiscuous mode [ 48.937533][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.038129][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.048251][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.058487][ T28] bond0 (unregistering): Released all slaves [ 49.178985][ T28] hsr_slave_0: left promiscuous mode [ 49.184843][ T28] hsr_slave_1: left promiscuous mode [ 49.195815][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.196376][ T4175] program syz.4.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.203242][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.223246][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.230731][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.238785][ T3540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.249796][ T28] veth1_macvtap: left promiscuous mode [ 49.255460][ T28] veth0_macvtap: left promiscuous mode [ 49.260977][ T28] veth1_vlan: left promiscuous mode [ 49.266421][ T28] veth0_vlan: left promiscuous mode [ 49.278513][ T4175] hub 6-0:1.0: USB hub found [ 49.291939][ T4175] hub 6-0:1.0: 8 ports detected [ 49.373225][ T4189] FAULT_INJECTION: forcing a failure. [ 49.373225][ T4189] name failslab, interval 1, probability 0, space 0, times 1 [ 49.386074][ T4189] CPU: 0 UID: 0 PID: 4189 Comm: +}[@ Not tainted 6.11.0-syzkaller #0 [ 49.394189][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.404242][ T4189] Call Trace: [ 49.407515][ T4189] [ 49.410502][ T4189] dump_stack_lvl+0xf2/0x150 [ 49.415155][ T4189] dump_stack+0x15/0x20 [ 49.419368][ T4189] should_fail_ex+0x229/0x230 [ 49.424108][ T4189] ? dup_task_struct+0x6c/0x710 [ 49.428944][ T4189] should_failslab+0x8f/0xb0 [ 49.433606][ T4189] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 49.439396][ T4189] dup_task_struct+0x6c/0x710 [ 49.444110][ T4189] ? _parse_integer+0x27/0x30 [ 49.448833][ T4189] copy_process+0x3a9/0x1f90 [ 49.453566][ T4189] ? kstrtouint+0x77/0xc0 [ 49.458094][ T4189] ? kstrtouint_from_user+0xb0/0xe0 [ 49.463292][ T4189] kernel_clone+0x167/0x5e0 [ 49.467787][ T4189] ? vfs_write+0x5a5/0x900 [ 49.472282][ T4189] __x64_sys_clone+0xe8/0x120 [ 49.476963][ T4189] x64_sys_call+0x2d23/0x2d60 [ 49.481744][ T4189] do_syscall_64+0xc9/0x1c0 [ 49.486501][ T4189] ? clear_bhb_loop+0x55/0xb0 [ 49.491349][ T4189] ? clear_bhb_loop+0x55/0xb0 [ 49.496009][ T4189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.501967][ T4189] RIP: 0033:0x7f22f2dedef9 [ 49.506371][ T4189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.526078][ T4189] RSP: 002b:00007f22f1a66fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.534488][ T4189] RAX: ffffffffffffffda RBX: 00007f22f2fa5f80 RCX: 00007f22f2dedef9 [ 49.542481][ T4189] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 49.550661][ T4189] RBP: 00007f22f1a67090 R08: 0000000000000000 R09: 0000000000000000 [ 49.558639][ T4189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 49.566642][ T4189] R13: 0000000000000000 R14: 00007f22f2fa5f80 R15: 00007ffe47216d18 [ 49.574646][ T4189] [ 49.581770][ T28] team0 (unregistering): Port device team_slave_1 removed [ 49.592498][ T28] team0 (unregistering): Port device team_slave_0 removed [ 49.729700][ T4131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.740416][ T4131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.751792][ T4131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.765607][ T4131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.797906][ T4216] loop4: detected capacity change from 0 to 512 [ 49.804531][ T4216] journal_path: Lookup failure for './file0' [ 49.810673][ T4216] EXT4-fs: error: could not find journal device path [ 49.936847][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 49.983728][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.990834][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.998210][ T4177] bridge_slave_0: entered allmulticast mode [ 50.004780][ T4177] bridge_slave_0: entered promiscuous mode [ 50.013728][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.021129][ T4229] FAULT_INJECTION: forcing a failure. [ 50.021129][ T4229] name failslab, interval 1, probability 0, space 0, times 0 [ 50.026191][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.033815][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: syz.4.172 Not tainted 6.11.0-syzkaller #0 [ 50.048919][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.054368][ T4131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.059099][ T4229] Call Trace: [ 50.059107][ T4229] [ 50.059113][ T4229] dump_stack_lvl+0xf2/0x150 [ 50.069607][ T4131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.072854][ T4229] dump_stack+0x15/0x20 [ 50.085221][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.090621][ T4229] should_fail_ex+0x229/0x230 [ 50.094776][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.101747][ T4229] ? sidtab_sid2str_get+0xb8/0x140 [ 50.101819][ T4229] should_failslab+0x8f/0xb0 [ 50.118273][ T4177] bridge_slave_1: entered allmulticast mode [ 50.118742][ T4229] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 50.123862][ T4177] bridge_slave_1: entered promiscuous mode [ 50.129195][ T4229] kmemdup_noprof+0x2a/0x60 [ 50.140633][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.141292][ T4229] sidtab_sid2str_get+0xb8/0x140 [ 50.146003][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.152944][ T4229] security_sid_to_context_core+0x1eb/0x2f0 [ 50.159929][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.165121][ T4229] security_sid_to_context+0x27/0x30 [ 50.171036][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.178036][ T4229] avc_audit_post_callback+0x9d/0x530 [ 50.196239][ T4229] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 50.202295][ T4229] common_lsm_audit+0x7d3/0xfc0 [ 50.207170][ T4229] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 50.213179][ T4229] slow_avc_audit+0xf9/0x140 [ 50.217933][ T4229] audit_inode_permission+0x111/0x150 [ 50.223416][ T4229] selinux_inode_permission+0x3cf/0x400 [ 50.229020][ T4229] security_inode_permission+0x6e/0xb0 [ 50.234575][ T4229] inode_permission+0xbf/0x300 [ 50.239382][ T4229] ? may_open+0x240/0x350 [ 50.243794][ T4229] may_open+0x252/0x350 [ 50.248002][ T4229] path_openat+0x1915/0x1f10 [ 50.252614][ T4229] do_filp_open+0xf7/0x200 [ 50.257119][ T4229] alloc_bprm+0xd5/0x760 [ 50.261406][ T4229] ? __check_object_size+0x35b/0x510 [ 50.266701][ T4229] do_execveat_common+0x134/0x800 [ 50.271746][ T4229] __x64_sys_execve+0x5a/0x70 [ 50.276437][ T4229] x64_sys_call+0x1277/0x2d60 [ 50.281281][ T4229] do_syscall_64+0xc9/0x1c0 [ 50.285801][ T4229] ? clear_bhb_loop+0x55/0xb0 [ 50.290542][ T4229] ? clear_bhb_loop+0x55/0xb0 [ 50.295205][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.301176][ T4229] RIP: 0033:0x7f22f2dedef9 [ 50.305582][ T4229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.325435][ T4229] RSP: 002b:00007f22f1a46038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 50.334004][ T4229] RAX: ffffffffffffffda RBX: 00007f22f2fa6058 RCX: 00007f22f2dedef9 [ 50.341960][ T4229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 50.350084][ T4229] RBP: 00007f22f1a46090 R08: 0000000000000000 R09: 0000000000000000 [ 50.358130][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.366260][ T4229] R13: 0000000000000000 R14: 00007f22f2fa6058 R15: 00007ffe47216d18 [ 50.374361][ T4229] [ 50.377737][ T29] audit: type=1400 audit(1726487632.249:555): avc: denied { execute } for pid=4214 comm="syz.4.172" name="file0" dev="tmpfs" ino=403 ssid=135 tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.398697][ T29] audit: type=1400 audit(1726487632.609:556): avc: denied { execute_no_trans } for pid=4214 comm="syz.4.172" path="/72/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.431091][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.448887][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.489738][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.501261][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.512807][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.567973][ T4177] team0: Port device team_slave_0 added [ 50.577417][ T4177] team0: Port device team_slave_1 added [ 50.604776][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.622323][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.625783][ T4261] Zero length message leads to an empty skb [ 50.629324][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.661175][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.678111][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.685175][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.711245][ T29] audit: type=1400 audit(1726487632.919:557): avc: denied { create } for pid=4260 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 50.731359][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.769525][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.812276][ T4269] loop3: detected capacity change from 0 to 512 [ 50.820135][ T4131] veth0_vlan: entered promiscuous mode [ 50.849309][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.849682][ T4177] hsr_slave_0: entered promiscuous mode [ 50.862250][ T4269] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.879946][ T4177] hsr_slave_1: entered promiscuous mode [ 50.888906][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.896726][ T4177] Cannot create hsr debugfs directory [ 50.897751][ T3934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.926330][ T4131] veth1_vlan: entered promiscuous mode [ 50.957339][ T4277] loop3: detected capacity change from 0 to 512 [ 50.964751][ T4131] veth0_macvtap: entered promiscuous mode [ 50.976760][ T4131] veth1_macvtap: entered promiscuous mode [ 50.983530][ T4277] EXT4-fs: Ignoring removed i_version option [ 51.005185][ T4277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.038782][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.049458][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.059348][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.069864][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.079685][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.090112][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.099942][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.110363][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.122952][ T4277] EXT4-fs (loop3): 1 truncate cleaned up [ 51.129520][ T4277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.204479][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.237547][ T4238] chnl_net:caif_netlink_parms(): no params data found [ 51.261683][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.272171][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.282061][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.292595][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.302434][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.312971][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.322900][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.333347][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.344341][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.353781][ T28] bridge_slave_1: left allmulticast mode [ 51.359993][ T28] bridge_slave_1: left promiscuous mode [ 51.365822][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.374048][ T28] bridge_slave_0: left allmulticast mode [ 51.379807][ T28] bridge_slave_0: left promiscuous mode [ 51.385578][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.449397][ T29] audit: type=1400 audit(1726487633.679:558): avc: denied { validate_trans } for pid=4293 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.493630][ T29] audit: type=1400 audit(1726487633.719:559): avc: denied { shutdown } for pid=4295 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.528091][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.538856][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.549423][ T28] bond0 (unregistering): Released all slaves [ 51.569066][ T4131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.577866][ T4131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.586591][ T4131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.595287][ T4131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.647133][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.654311][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.661690][ T4238] bridge_slave_0: entered allmulticast mode [ 51.668657][ T4238] bridge_slave_0: entered promiscuous mode [ 51.681544][ T28] hsr_slave_0: left promiscuous mode [ 51.696332][ T28] hsr_slave_1: left promiscuous mode [ 51.712947][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.720418][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.740299][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.747966][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.778826][ T28] veth1_macvtap: left promiscuous mode [ 51.784366][ T28] veth0_macvtap: left promiscuous mode [ 51.789925][ T28] veth1_vlan: left promiscuous mode [ 51.795256][ T28] veth0_vlan: left promiscuous mode [ 51.801766][ T3934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.909581][ T28] team0 (unregistering): Port device team_slave_1 removed [ 51.919753][ T28] team0 (unregistering): Port device team_slave_0 removed [ 51.954828][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.961953][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.969198][ T4238] bridge_slave_1: entered allmulticast mode [ 51.975699][ T4238] bridge_slave_1: entered promiscuous mode [ 52.008112][ T4238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.020703][ T4238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.062659][ T4238] team0: Port device team_slave_0 added [ 52.074386][ T4238] team0: Port device team_slave_1 added [ 52.084194][ T4333] loop1: detected capacity change from 0 to 512 [ 52.087421][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 52.137049][ T4333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.156411][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.163448][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.171948][ T4333] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.189935][ T4238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.216307][ T4238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.223362][ T4238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.249476][ T4238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.283526][ T29] audit: type=1326 audit(1726487634.489:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 52.317995][ T4238] hsr_slave_0: entered promiscuous mode [ 52.318473][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.333351][ T4238] hsr_slave_1: entered promiscuous mode [ 52.339469][ T4328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.192'. [ 52.351988][ T4238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.366493][ T4238] Cannot create hsr debugfs directory [ 52.403889][ T4177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.421679][ T4359] loop4: detected capacity change from 0 to 512 [ 52.436848][ T4359] EXT4-fs: Ignoring removed i_version option [ 52.442858][ T4359] EXT4-fs: Ignoring removed nobh option [ 52.449576][ T4359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.468135][ T4177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.478173][ T4359] EXT4-fs (loop4): 1 truncate cleaned up [ 52.486597][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.496209][ T4177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.524668][ T4177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.603470][ T4364] netlink: 168 bytes leftover after parsing attributes in process `syz.4.197'. [ 52.637838][ T4238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.720253][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.741825][ T4238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.772657][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.803699][ T4238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.828390][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.835693][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.858006][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.865757][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.874146][ T4397] loop1: detected capacity change from 0 to 512 [ 52.892405][ T4238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.915251][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.924933][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.929572][ T4397] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.938269][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.003272][ T4238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.010611][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.022545][ T4238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.030424][ T4407] loop3: detected capacity change from 0 to 512 [ 53.043818][ T4410] Driver unsupported XDP return value 0 on prog (id 165) dev N/A, expect packet loss! [ 53.059971][ T4238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.072197][ T4238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.083327][ T4407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.091328][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.096040][ T4407] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.166403][ T4238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.183337][ T4238] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.186891][ T3934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.196510][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.206147][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.218847][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.226008][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.262671][ T4238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.273130][ T4238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.286973][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.298532][ T4177] veth0_vlan: entered promiscuous mode [ 53.321001][ T4177] veth1_vlan: entered promiscuous mode [ 53.364609][ T4177] veth0_macvtap: entered promiscuous mode [ 53.381221][ T4177] veth1_macvtap: entered promiscuous mode [ 53.392788][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.403293][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.413444][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.423965][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.427271][ T4438] syz.1.211[4438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.433835][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.433876][ T4438] syz.1.211[4438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.445172][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.445187][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.445200][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.450124][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.512270][ T983] IPVS: starting estimator thread 0... [ 53.519758][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.530847][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.540719][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.551253][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.561070][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.571513][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.581504][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.591948][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.603034][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.624963][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.634024][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.642963][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.651731][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.666809][ T4442] IPVS: using max 2832 ests per chain, 141600 per kthread [ 53.668244][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.708102][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 53.708116][ T29] audit: type=1400 audit(1726487635.939:605): avc: denied { ioctl } for pid=4445 comm="syz.1.213" path="socket:[8558]" dev="sockfs" ino=8558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.790406][ T4238] veth0_vlan: entered promiscuous mode [ 53.799819][ T4238] veth1_vlan: entered promiscuous mode [ 53.821922][ T4238] veth0_macvtap: entered promiscuous mode [ 53.832012][ T29] audit: type=1326 audit(1726487636.059:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.841236][ T4238] veth1_macvtap: entered promiscuous mode [ 53.855505][ T29] audit: type=1326 audit(1726487636.059:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.877437][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.884293][ T29] audit: type=1326 audit(1726487636.059:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.894676][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.917881][ T29] audit: type=1326 audit(1726487636.059:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.927751][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.951280][ T29] audit: type=1326 audit(1726487636.059:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.961900][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.961916][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.985005][ T29] audit: type=1326 audit(1726487636.059:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.985029][ T29] audit: type=1326 audit(1726487636.059:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 53.994810][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.005228][ T29] audit: type=1326 audit(1726487636.059:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 54.005251][ T29] audit: type=1326 audit(1726487636.059:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4457 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 54.108074][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.118664][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.128624][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.139098][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.154703][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.166250][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.176751][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.186602][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.197108][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.206918][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.217432][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.227417][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.238039][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.247914][ T4238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.258421][ T4238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.269671][ T4238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.318030][ T4467] loop0: detected capacity change from 0 to 512 [ 54.330054][ T4238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.338933][ T4238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.347743][ T4238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.356640][ T4238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.377014][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.416179][ T4467] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.455544][ T4478] pim6reg1: entered promiscuous mode [ 54.460886][ T4478] pim6reg1: entered allmulticast mode [ 54.522410][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 54.561582][ T4487] loop3: detected capacity change from 0 to 2048 [ 54.633538][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.723503][ T4512] vlan2: entered promiscuous mode [ 54.728979][ T4512] xfrm0: entered promiscuous mode [ 54.734146][ T4512] vlan2: entered allmulticast mode [ 54.739297][ T4512] xfrm0: entered allmulticast mode [ 54.751620][ T4512] syzkaller0: entered allmulticast mode [ 54.774141][ T4512] syzkaller0 (unregistering): left allmulticast mode [ 54.834974][ T4516] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.844313][ T4516] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.853436][ T4516] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.862239][ T4516] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 54.871376][ T4516] geneve2: entered promiscuous mode [ 54.876762][ T4516] geneve2: entered allmulticast mode [ 54.885195][ T4519] pim6reg1: entered promiscuous mode [ 54.891091][ T4519] pim6reg1: entered allmulticast mode [ 54.937891][ T4527] syzkaller0: entered allmulticast mode [ 54.949325][ T4527] FAULT_INJECTION: forcing a failure. [ 54.949325][ T4527] name failslab, interval 1, probability 0, space 0, times 0 [ 54.962100][ T4527] CPU: 1 UID: 0 PID: 4527 Comm: syz.3.239 Not tainted 6.11.0-syzkaller #0 [ 54.970605][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 54.980641][ T4527] Call Trace: [ 54.983955][ T4527] [ 54.986924][ T4527] dump_stack_lvl+0xf2/0x150 [ 54.991791][ T4527] dump_stack+0x15/0x20 [ 54.995935][ T4527] should_fail_ex+0x229/0x230 [ 55.000964][ T4527] ? __alloc_skb+0x10b/0x310 [ 55.005535][ T4527] should_failslab+0x8f/0xb0 [ 55.010164][ T4527] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 55.015967][ T4527] __alloc_skb+0x10b/0x310 [ 55.020476][ T4527] fdb_notify+0x70/0x120 [ 55.024794][ T4527] fdb_delete+0x6b4/0x860 [ 55.029165][ T4527] fdb_delete_local+0x225/0x2e0 [ 55.034000][ T4527] br_fdb_delete_by_port+0x16c/0x240 [ 55.039376][ T4527] br_dev_delete+0x86/0xe0 [ 55.043817][ T4527] br_del_bridge+0x99/0xc0 [ 55.048271][ T4527] br_ioctl_stub+0x2fe/0x5d0 [ 55.052852][ T4527] ? do_vfs_ioctl+0x99e/0x1560 [ 55.057683][ T4527] ? __pfx_br_ioctl_stub+0x10/0x10 [ 55.062967][ T4527] sock_ioctl+0x439/0x640 [ 55.067450][ T4527] ? __pfx_sock_ioctl+0x10/0x10 [ 55.072364][ T4527] __se_sys_ioctl+0xd3/0x150 [ 55.077021][ T4527] __x64_sys_ioctl+0x43/0x50 [ 55.081630][ T4527] x64_sys_call+0x15cc/0x2d60 [ 55.086351][ T4527] do_syscall_64+0xc9/0x1c0 [ 55.090842][ T4527] ? clear_bhb_loop+0x55/0xb0 [ 55.095561][ T4527] ? clear_bhb_loop+0x55/0xb0 [ 55.100217][ T4527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.106099][ T4527] RIP: 0033:0x7f02d7a7def9 [ 55.110493][ T4527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.130273][ T4527] RSP: 002b:00007f02d66f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.139169][ T4527] RAX: ffffffffffffffda RBX: 00007f02d7c35f80 RCX: 00007f02d7a7def9 [ 55.147155][ T4527] RDX: 0000000020000040 RSI: 00000000000089a1 RDI: 0000000000000007 [ 55.155117][ T4527] RBP: 00007f02d66f7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.163151][ T4527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.171460][ T4527] R13: 0000000000000000 R14: 00007f02d7c35f80 R15: 00007fffc200ccc8 [ 55.179431][ T4527] [ 55.187410][ T4527] syzkaller0 (unregistering): left allmulticast mode [ 55.309580][ T4550] loop1: detected capacity change from 0 to 512 [ 55.319624][ T4550] EXT4-fs: Ignoring removed i_version option [ 55.326252][ T4550] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.355471][ T4550] EXT4-fs (loop1): 1 truncate cleaned up [ 55.359221][ T4552] loop3: detected capacity change from 0 to 2048 [ 55.372451][ T4552] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.380732][ T4550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.394165][ T4555] FAULT_INJECTION: forcing a failure. [ 55.394165][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 55.407118][ T4555] CPU: 1 UID: 0 PID: 4555 Comm: syz.4.249 Not tainted 6.11.0-syzkaller #0 [ 55.415726][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.425839][ T4555] Call Trace: [ 55.429121][ T4555] [ 55.432083][ T4555] dump_stack_lvl+0xf2/0x150 [ 55.436729][ T4555] dump_stack+0x15/0x20 [ 55.440889][ T4555] should_fail_ex+0x229/0x230 [ 55.445606][ T4555] ? sk_prot_alloc+0x41/0x190 [ 55.450393][ T4555] should_failslab+0x8f/0xb0 [ 55.455018][ T4555] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.460399][ T4555] ? avc_has_perm+0xd4/0x160 [ 55.465120][ T4555] sk_prot_alloc+0x41/0x190 [ 55.469661][ T4555] sk_alloc+0x33/0x360 [ 55.473755][ T4555] unix_create1+0xa6/0x400 [ 55.478199][ T4555] ? release_sock+0x117/0x150 [ 55.482877][ T4555] unix_stream_connect+0x181/0x9b0 [ 55.488076][ T4555] ? selinux_socket_connect+0x57/0x70 [ 55.493631][ T4555] ? __pfx_unix_stream_connect+0x10/0x10 [ 55.499351][ T4555] __sys_connect+0x1a9/0x1c0 [ 55.503957][ T4555] __x64_sys_connect+0x41/0x50 [ 55.508885][ T4555] x64_sys_call+0x2220/0x2d60 [ 55.513585][ T4555] do_syscall_64+0xc9/0x1c0 [ 55.518165][ T4555] ? clear_bhb_loop+0x55/0xb0 [ 55.522887][ T4555] ? clear_bhb_loop+0x55/0xb0 [ 55.527571][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.533487][ T4555] RIP: 0033:0x7f22f2dedef9 [ 55.537931][ T4555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.557810][ T4555] RSP: 002b:00007f22f1a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 55.566238][ T4555] RAX: ffffffffffffffda RBX: 00007f22f2fa5f80 RCX: 00007f22f2dedef9 [ 55.574213][ T4555] RDX: 000000000000006e RSI: 0000000020000280 RDI: 0000000000000006 [ 55.582389][ T4555] RBP: 00007f22f1a67090 R08: 0000000000000000 R09: 0000000000000000 [ 55.590378][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.598357][ T4555] R13: 0000000000000000 R14: 00007f22f2fa5f80 R15: 00007ffe47216d18 [ 55.606389][ T4555] [ 55.641822][ T4552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.659839][ T4552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.679883][ T4567] loop4: detected capacity change from 0 to 512 [ 55.683131][ T4571] program syz.0.254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.712268][ T4567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.738307][ T4567] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.752175][ T4571] hub 6-0:1.0: USB hub found [ 55.757279][ T4571] hub 6-0:1.0: 8 ports detected [ 55.858996][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.887207][ T4585] loop3: detected capacity change from 0 to 512 [ 55.956270][ T4585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.976199][ T4585] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.980956][ T4597] loop2: detected capacity change from 0 to 512 [ 55.999080][ T4585] FAULT_INJECTION: forcing a failure. [ 55.999080][ T4585] name failslab, interval 1, probability 0, space 0, times 0 [ 56.011803][ T4585] CPU: 1 UID: 0 PID: 4585 Comm: syz.3.261 Not tainted 6.11.0-syzkaller #0 [ 56.020492][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.030555][ T4585] Call Trace: [ 56.033846][ T4585] [ 56.036783][ T4585] dump_stack_lvl+0xf2/0x150 [ 56.041474][ T4585] dump_stack+0x15/0x20 [ 56.045724][ T4585] should_fail_ex+0x229/0x230 [ 56.050465][ T4585] ? qtree_write_dquot+0x6f/0x320 [ 56.055490][ T4585] should_failslab+0x8f/0xb0 [ 56.060080][ T4585] __kmalloc_noprof+0xa5/0x370 [ 56.064921][ T4585] qtree_write_dquot+0x6f/0x320 [ 56.069769][ T4585] ? __pfx_ext4_quota_write+0x10/0x10 [ 56.075143][ T4585] ? probe_sched_wakeup+0x81/0xa0 [ 56.080254][ T4585] v2_write_dquot+0xd3/0x130 [ 56.085016][ T4585] dquot_commit+0x219/0x260 [ 56.089544][ T4585] ext4_write_dquot+0x129/0x1d0 [ 56.094425][ T4585] ext4_mark_dquot_dirty+0x94/0xd0 [ 56.099531][ T4585] __dquot_alloc_space+0x7d7/0x8a0 [ 56.104635][ T4585] ? __percpu_counter_sum+0x10c/0x130 [ 56.110012][ T4585] ext4_mb_new_blocks+0x918/0x2020 [ 56.115131][ T4585] ? ext4_find_extent+0x834/0x860 [ 56.120162][ T4585] ? ext4_ext_search_right+0x22d/0x4c0 [ 56.125624][ T4585] ? ext4_ext_check_overlap+0x27b/0x300 [ 56.131220][ T4585] ext4_ext_map_blocks+0x10a1/0x33b0 [ 56.136569][ T4585] ? mod_objcg_state+0x2ea/0x4f0 [ 56.141544][ T4585] ? __memcg_slab_post_alloc_hook+0x508/0x650 [ 56.147612][ T4585] ext4_map_blocks+0x72a/0xf50 [ 56.152464][ T4585] _ext4_get_block+0x104/0x370 [ 56.157361][ T4585] ext4_get_block_unwritten+0x2c/0xb0 [ 56.162787][ T4585] __block_write_begin_int+0x417/0xfa0 [ 56.168334][ T4585] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 56.174415][ T4585] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 56.180499][ T4585] __block_write_begin+0x5e/0x110 [ 56.185516][ T4585] ext4_write_begin+0x41e/0xbb0 [ 56.190519][ T4585] ext4_da_write_begin+0x1ba/0x550 [ 56.195715][ T4585] generic_perform_write+0x1b4/0x580 [ 56.200996][ T4585] ext4_buffered_write_iter+0x1f6/0x380 [ 56.206648][ T4585] ext4_file_write_iter+0x29f/0xe30 [ 56.211913][ T4585] ? path_openat+0x19bc/0x1f10 [ 56.216854][ T4585] ? _parse_integer_limit+0x167/0x180 [ 56.222239][ T4585] ? _parse_integer+0x27/0x30 [ 56.226947][ T4585] ? kstrtoull+0x110/0x140 [ 56.231377][ T4585] do_iter_readv_writev+0x3b0/0x470 [ 56.236603][ T4585] vfs_writev+0x2e0/0x880 [ 56.240994][ T4585] __se_sys_pwritev2+0x10c/0x1d0 [ 56.245986][ T4585] __x64_sys_pwritev2+0x78/0x90 [ 56.250868][ T4585] x64_sys_call+0x271f/0x2d60 [ 56.255629][ T4585] do_syscall_64+0xc9/0x1c0 [ 56.260131][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 56.264895][ T4585] ? clear_bhb_loop+0x55/0xb0 [ 56.269697][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.275792][ T4585] RIP: 0033:0x7f02d7a7def9 [ 56.280232][ T4585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.300251][ T4585] RSP: 002b:00007f02d66f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 56.308674][ T4585] RAX: ffffffffffffffda RBX: 00007f02d7c35f80 RCX: 00007f02d7a7def9 [ 56.316699][ T4585] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000008 [ 56.324747][ T4585] RBP: 00007f02d66f7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.332794][ T4585] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001 [ 56.340752][ T4585] R13: 0000000000000000 R14: 00007f02d7c35f80 R15: 00007fffc200ccc8 [ 56.348805][ T4585] [ 56.352624][ T4585] EXT4-fs error (device loop3): ext4_write_dquot:6828: comm syz.3.261: Failed to commit dquot type 1 [ 56.380704][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.394215][ T4597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.418926][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.420095][ T3934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.429748][ T4608] program syz.0.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.439406][ T4597] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.485574][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.521313][ T4238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.522853][ T4608] hub 6-0:1.0: USB hub found [ 56.537602][ T4612] netlink: 'syz.3.270': attribute type 3 has an invalid length. [ 56.537825][ T4608] hub 6-0:1.0: 8 ports detected [ 56.547049][ T4612] loop3: detected capacity change from 0 to 128 [ 56.558628][ T4612] ext4: Unknown parameter 'fowner' [ 56.629350][ T4621] pim6reg1: entered promiscuous mode [ 56.634689][ T4621] pim6reg1: entered allmulticast mode [ 56.658379][ T4625] FAULT_INJECTION: forcing a failure. [ 56.658379][ T4625] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.671851][ T4625] CPU: 0 UID: 0 PID: 4625 Comm: syz.0.276 Not tainted 6.11.0-syzkaller #0 [ 56.680405][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.690563][ T4625] Call Trace: [ 56.693831][ T4625] [ 56.696747][ T4625] dump_stack_lvl+0xf2/0x150 [ 56.701405][ T4625] dump_stack+0x15/0x20 [ 56.705641][ T4625] should_fail_ex+0x229/0x230 [ 56.710320][ T4625] should_fail+0xb/0x10 [ 56.714529][ T4625] should_fail_usercopy+0x1a/0x20 [ 56.719638][ T4625] _copy_from_user+0x1e/0xd0 [ 56.724231][ T4625] bpf_test_init+0x105/0x170 [ 56.728943][ T4625] bpf_prog_test_run_skb+0x151/0xba0 [ 56.734397][ T4625] ? __rcu_read_unlock+0x4e/0x70 [ 56.739441][ T4625] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 56.745253][ T4625] bpf_prog_test_run+0x26d/0x3e0 [ 56.750220][ T4625] __sys_bpf+0x400/0x7a0 [ 56.754483][ T4625] __x64_sys_bpf+0x43/0x50 [ 56.759247][ T4625] x64_sys_call+0x2625/0x2d60 [ 56.763934][ T4625] do_syscall_64+0xc9/0x1c0 [ 56.768537][ T4625] ? clear_bhb_loop+0x55/0xb0 [ 56.773207][ T4625] ? clear_bhb_loop+0x55/0xb0 [ 56.777915][ T4625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.783990][ T4625] RIP: 0033:0x7f79d274def9 [ 56.788462][ T4625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.808137][ T4625] RSP: 002b:00007f79d13c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.816589][ T4625] RAX: ffffffffffffffda RBX: 00007f79d2905f80 RCX: 00007f79d274def9 [ 56.824542][ T4625] RDX: 0000000000000028 RSI: 0000000020000440 RDI: 000000000000000a [ 56.832946][ T4625] RBP: 00007f79d13c7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.840951][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.849246][ T4625] R13: 0000000000000000 R14: 00007f79d2905f80 R15: 00007fff91e73c08 [ 56.857308][ T4625] [ 56.947944][ T4642] loop4: detected capacity change from 0 to 512 [ 56.955589][ T4642] EXT4-fs: Ignoring removed i_version option [ 56.962159][ T4642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.978015][ T4646] program syz.0.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.992520][ T4642] EXT4-fs (loop4): 1 truncate cleaned up [ 56.998718][ T4642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.029778][ T4646] hub 6-0:1.0: USB hub found [ 57.034597][ T4646] hub 6-0:1.0: 8 ports detected [ 57.539913][ T4672] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 57.562752][ T4672] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.570969][ T4672] bond0: (slave team0): Enslaving as an active interface with an up link [ 57.750476][ T4679] bridge0: port 3(vlan2) entered blocking state [ 57.756865][ T4679] bridge0: port 3(vlan2) entered disabled state [ 57.769894][ T4679] vlan2: entered allmulticast mode [ 57.780349][ T4679] vlan2: left allmulticast mode [ 57.798821][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.872387][ T4683] wireguard0: entered promiscuous mode [ 57.877997][ T4683] wireguard0: entered allmulticast mode [ 57.923874][ T4685] loop4: detected capacity change from 0 to 512 [ 57.936722][ T4685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.949424][ T4685] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.975527][ T4690] program syz.0.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.028819][ T4690] hub 6-0:1.0: USB hub found [ 58.033497][ T4690] hub 6-0:1.0: 8 ports detected [ 58.082161][ T4696] netlink: 'syz.0.300': attribute type 29 has an invalid length. [ 58.496186][ T4706] loop1: detected capacity change from 0 to 512 [ 58.506889][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.519771][ T4706] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.541873][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.581799][ T4715] loop1: detected capacity change from 0 to 512 [ 58.588456][ T4715] EXT4-fs: Ignoring removed i_version option [ 58.595301][ T4715] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.606685][ T4715] EXT4-fs (loop1): 1 truncate cleaned up [ 58.612894][ T4715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.659129][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.706147][ T4722] loop4: detected capacity change from 0 to 128 [ 58.715169][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 58.715181][ T29] audit: type=1400 audit(1726487640.939:812): avc: denied { read } for pid=4720 comm="+}[@" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.746876][ T4721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.757486][ T29] audit: type=1400 audit(1726487640.949:813): avc: denied { open } for pid=4720 comm="+}[@" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.781252][ T29] audit: type=1400 audit(1726487640.949:814): avc: denied { ioctl } for pid=4720 comm="syz.4.308" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.807457][ T29] audit: type=1400 audit(1726487640.979:815): avc: denied { ioctl } for pid=4720 comm="+}[@" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.836946][ T4721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.889307][ T29] audit: type=1326 audit(1726487641.119:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 58.912753][ T29] audit: type=1326 audit(1726487641.119:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 58.936117][ T29] audit: type=1326 audit(1726487641.119:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 58.959623][ T29] audit: type=1326 audit(1726487641.119:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 58.983887][ T29] audit: type=1326 audit(1726487641.119:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 59.007680][ T29] audit: type=1326 audit(1726487641.119:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5ee0def9 code=0x7ffc0000 [ 59.036933][ T4727] netlink: 'syz.0.309': attribute type 3 has an invalid length. [ 59.135649][ T4735] loop0: detected capacity change from 0 to 164 [ 59.142895][ T4735] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 59.171743][ T4737] program syz.0.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.228559][ T4737] hub 6-0:1.0: USB hub found [ 59.233407][ T4737] hub 6-0:1.0: 8 ports detected [ 59.365935][ T4747] loop0: detected capacity change from 0 to 512 [ 59.387252][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.401220][ T4747] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.437562][ T4752] loop4: detected capacity change from 0 to 512 [ 59.448121][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.472668][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.473278][ T4752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.494754][ T4752] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.502114][ T4758] netlink: 'syz.1.322': attribute type 3 has an invalid length. [ 59.548240][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 59.565896][ T4767] loop1: detected capacity change from 0 to 164 [ 59.572170][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 59.597408][ T4767] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 59.602350][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 59.607611][ T4767] FAULT_INJECTION: forcing a failure. [ 59.607611][ T4767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.641190][ T4767] CPU: 0 UID: 0 PID: 4767 Comm: syz.1.325 Not tainted 6.11.0-syzkaller #0 [ 59.643430][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 59.650332][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.650345][ T4767] Call Trace: [ 59.650376][ T4767] [ 59.650383][ T4767] dump_stack_lvl+0xf2/0x150 [ 59.673582][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.682381][ T4767] dump_stack+0x15/0x20 [ 59.682406][ T4767] should_fail_ex+0x229/0x230 [ 59.687186][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 59.688602][ T4767] should_fail+0xb/0x10 [ 59.693425][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 59.713561][ T4767] should_fail_usercopy+0x1a/0x20 [ 59.713640][ T4767] strncpy_from_user+0x25/0x270 [ 59.713659][ T4767] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 59.713684][ T4767] getname_flags+0xb0/0x3b0 [ 59.719368][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.722467][ T4767] user_path_at+0x26/0x110 [ 59.722491][ T4767] __x64_sys_fchmodat+0x75/0x120 [ 59.744198][ T3259] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 59.747018][ T4767] x64_sys_call+0x2a3f/0x2d60 [ 59.747046][ T4767] do_syscall_64+0xc9/0x1c0 [ 59.747067][ T4767] ? clear_bhb_loop+0x55/0xb0 [ 59.747088][ T4767] ? clear_bhb_loop+0x55/0xb0 [ 59.747104][ T4767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.771029][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 59.773360][ T4767] RIP: 0033:0x7f5f5ee0def9 [ 59.773387][ T4767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.778708][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz-executor: path /103/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 59.784011][ T4767] RSP: 002b:00007f5f5da87038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 59.784032][ T4767] RAX: ffffffffffffffda RBX: 00007f5f5efc5f80 RCX: 00007f5f5ee0def9 [ 59.938804][ T4767] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffffff [ 59.946778][ T4767] RBP: 00007f5f5da87090 R08: 0000000000000000 R09: 0000000000000000 [ 59.954833][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.962846][ T4767] R13: 0000000000000000 R14: 00007f5f5efc5f80 R15: 00007ffe42540058 [ 59.971097][ T4767] [ 60.068464][ T4777] loop3: detected capacity change from 0 to 512 [ 60.088434][ T4777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.101068][ T4777] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.361386][ T4789] loop0: detected capacity change from 0 to 512 [ 60.378113][ T4789] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.443950][ T4795] loop0: detected capacity change from 0 to 2048 [ 60.451763][ T4795] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.571163][ T4799] syz.0.337[4799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.571960][ T4799] syz.0.337[4799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.600327][ T4799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.337: bg 0: block 234: padding at end of block bitmap is not set [ 60.627432][ T4799] EXT4-fs (loop0): Remounting filesystem read-only [ 60.812909][ T4803] rdma_op ffff888114aa2d80 conn xmit_rdma 0000000000000000 [ 61.353681][ T4783] delete_channel: no stack [ 61.402517][ T4813] loop3: detected capacity change from 0 to 512 [ 61.420579][ T4813] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.522137][ T4825] loop3: detected capacity change from 0 to 512 [ 61.537789][ T4825] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.608770][ T4831] pim6reg1: entered promiscuous mode [ 61.614100][ T4831] pim6reg1: entered allmulticast mode [ 61.729302][ T4833] loop3: detected capacity change from 0 to 512 [ 61.736853][ T4833] EXT4-fs: Ignoring removed i_version option [ 61.746315][ T4833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.778367][ T4833] EXT4-fs (loop3): 1 truncate cleaned up [ 62.587388][ T3934] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /53/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 62.610876][ T3934] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 62.631858][ T3934] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /53/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 62.655643][ T4835] delete_channel: no stack [ 62.676248][ T3934] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 62.697763][ T3934] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /53/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 62.722326][ T4843] loop1: detected capacity change from 0 to 512 [ 62.737017][ T3934] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 62.757410][ T3934] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /53/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 62.780843][ T4843] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.786922][ T3934] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 62.831970][ T3934] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /53/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 62.854176][ T3934] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 62.929378][ T4851] FAULT_INJECTION: forcing a failure. [ 62.929378][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 62.942038][ T4851] CPU: 0 UID: 0 PID: 4851 Comm: syz.1.356 Not tainted 6.11.0-syzkaller #0 [ 62.950564][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.960616][ T4851] Call Trace: [ 62.963885][ T4851] [ 62.966811][ T4851] dump_stack_lvl+0xf2/0x150 [ 62.971406][ T4851] dump_stack+0x15/0x20 [ 62.975585][ T4851] should_fail_ex+0x229/0x230 [ 62.980297][ T4851] ? vm_area_dup+0x98/0x130 [ 62.984791][ T4851] should_failslab+0x8f/0xb0 [ 62.989389][ T4851] kmem_cache_alloc_noprof+0x4c/0x290 [ 62.994879][ T4851] vm_area_dup+0x98/0x130 [ 62.999256][ T4851] __split_vma+0xf7/0x690 [ 63.003670][ T4851] do_vmi_align_munmap+0x1a5/0xa60 [ 63.008805][ T4851] do_vmi_munmap+0x1fb/0x250 [ 63.013476][ T4851] do_munmap+0x7a/0xb0 [ 63.017627][ T4851] __se_sys_mremap+0xabc/0xf20 [ 63.022441][ T4851] __x64_sys_mremap+0x67/0x80 [ 63.027274][ T4851] x64_sys_call+0x2747/0x2d60 [ 63.031999][ T4851] do_syscall_64+0xc9/0x1c0 [ 63.036516][ T4851] ? clear_bhb_loop+0x55/0xb0 [ 63.041189][ T4851] ? clear_bhb_loop+0x55/0xb0 [ 63.045857][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.051799][ T4851] RIP: 0033:0x7f5f5ee0def9 [ 63.056212][ T4851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.075818][ T4851] RSP: 002b:00007f5f5da87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 63.084429][ T4851] RAX: ffffffffffffffda RBX: 00007f5f5efc5f80 RCX: 00007f5f5ee0def9 [ 63.092561][ T4851] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000000020a96000 [ 63.100528][ T4851] RBP: 00007f5f5da87090 R08: 0000000020130000 R09: 0000000000000000 [ 63.108506][ T4851] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 63.116590][ T4851] R13: 0000000000000000 R14: 00007f5f5efc5f80 R15: 00007ffe42540058 [ 63.124567][ T4851] [ 63.188713][ T4855] loop1: detected capacity change from 0 to 512 [ 63.216811][ T4855] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.279593][ T4861] pim6reg1: entered promiscuous mode [ 63.285010][ T4861] pim6reg1: entered allmulticast mode [ 63.320676][ T4297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.340539][ T4863] program syz.4.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.388406][ T4863] hub 6-0:1.0: USB hub found [ 63.393108][ T4863] hub 6-0:1.0: 8 ports detected [ 63.393966][ T4297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.452481][ T4297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.457311][ T4878] loop4: detected capacity change from 0 to 512 [ 63.472812][ T4878] EXT4-fs: Ignoring removed i_version option [ 63.481687][ T4878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.493967][ T4878] EXT4-fs (loop4): 1 truncate cleaned up [ 63.533724][ T4297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.561799][ T4867] chnl_net:caif_netlink_parms(): no params data found [ 63.636954][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.644060][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.677567][ T4867] bridge_slave_0: entered allmulticast mode [ 63.686242][ T4867] bridge_slave_0: entered promiscuous mode [ 63.696362][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.703578][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.737372][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 63.737386][ T29] audit: type=1326 audit(1726487645.969:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.742220][ T4867] bridge_slave_1: entered allmulticast mode [ 63.743618][ T29] audit: type=1326 audit(1726487645.969:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.743642][ T29] audit: type=1326 audit(1726487645.969:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.743666][ T29] audit: type=1326 audit(1726487645.969:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.743685][ T29] audit: type=1326 audit(1726487645.969:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.820839][ T4867] bridge_slave_1: entered promiscuous mode [ 63.842518][ T29] audit: type=1326 audit(1726487645.969:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.896243][ T29] audit: type=1326 audit(1726487645.969:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.919790][ T29] audit: type=1326 audit(1726487645.969:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.943174][ T29] audit: type=1326 audit(1726487645.969:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 63.966666][ T29] audit: type=1326 audit(1726487645.969:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4877 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22f2dedef9 code=0x7ffc0000 [ 64.020356][ T4297] bridge_slave_1: left allmulticast mode [ 64.026204][ T4297] bridge_slave_1: left promiscuous mode [ 64.032022][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.084361][ T4297] bridge_slave_0: left allmulticast mode [ 64.090132][ T4297] bridge_slave_0: left promiscuous mode [ 64.095862][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.124816][ T4297] xfrm0: left allmulticast mode [ 64.129745][ T4297] xfrm0: left promiscuous mode [ 64.189022][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.201467][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.216000][ T4865] delete_channel: no stack [ 64.216631][ T4297] bond0 (unregistering): Released all slaves [ 64.266595][ T4914] loop1: detected capacity change from 0 to 512 [ 64.268127][ T4867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.286712][ T4867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.313093][ T4914] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.326402][ T3340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 64.345758][ T4297] hsr_slave_0: left promiscuous mode [ 64.351715][ T4297] hsr_slave_1: left promiscuous mode [ 64.358281][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /106/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.380326][ T3259] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 64.401326][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /106/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.401304][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.401405][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.440137][ T3259] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 64.460398][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.460415][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /106/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.467977][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.490242][ T3259] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 64.501759][ T4924] loop0: detected capacity change from 0 to 512 [ 64.533322][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /106/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.533617][ T4297] veth1_macvtap: left promiscuous mode [ 64.556772][ T3259] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 64.560683][ T4297] veth0_macvtap: left promiscuous mode [ 64.581039][ T3259] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /106/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.585607][ T4297] veth1_vlan: left promiscuous mode [ 64.608577][ T3259] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 64.611995][ T4297] veth0_vlan: left promiscuous mode [ 64.640273][ T4924] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.714575][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 64.725588][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 64.761010][ T4867] team0: Port device team_slave_0 added [ 64.769358][ T4921] wireguard0: entered promiscuous mode [ 64.774814][ T4921] wireguard0: entered allmulticast mode [ 64.797011][ T4867] team0: Port device team_slave_1 added [ 64.814438][ T4867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.821621][ T4867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.848021][ T4867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.864222][ T4867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.871239][ T4867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.897713][ T4867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.935836][ T4867] hsr_slave_0: entered promiscuous mode [ 64.942153][ T4867] hsr_slave_1: entered promiscuous mode [ 64.949443][ T4867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.957277][ T4867] Cannot create hsr debugfs directory [ 65.203997][ T4297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.298373][ T4297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.343734][ T4967] chnl_net:caif_netlink_parms(): no params data found [ 65.371538][ T4297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.416262][ T4867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.427997][ T4297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.439071][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.446189][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.453970][ T4967] bridge_slave_0: entered allmulticast mode [ 65.460714][ T4967] bridge_slave_0: entered promiscuous mode [ 65.468337][ T4867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.478415][ T4867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.487390][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.494516][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.502004][ T4967] bridge_slave_1: entered allmulticast mode [ 65.508522][ T4967] bridge_slave_1: entered promiscuous mode [ 65.521217][ T4867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.542064][ T4967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.559386][ T4967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.589161][ T4967] team0: Port device team_slave_0 added [ 65.597874][ T4967] team0: Port device team_slave_1 added [ 65.604024][ T4297] bridge_slave_1: left allmulticast mode [ 65.610649][ T4297] bridge_slave_1: left promiscuous mode [ 65.615822][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.616405][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.628192][ T983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 65.644933][ T4297] bridge_slave_0: left allmulticast mode [ 65.650660][ T4297] bridge_slave_0: left promiscuous mode [ 65.656398][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.758885][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.769445][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.780004][ T4297] bond0 (unregistering): Released all slaves [ 65.801659][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.808688][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.834612][ T4967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.845784][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.852764][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.878752][ T4967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.913159][ T4967] hsr_slave_0: entered promiscuous mode [ 65.919383][ T4967] hsr_slave_1: entered promiscuous mode [ 65.925555][ T4967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.933098][ T4967] Cannot create hsr debugfs directory [ 65.942738][ T4297] hsr_slave_0: left promiscuous mode [ 65.948914][ T4297] hsr_slave_1: left promiscuous mode [ 65.954661][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.962255][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.971262][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.978826][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.989065][ T4297] veth1_macvtap: left promiscuous mode [ 65.994556][ T4297] veth0_macvtap: left promiscuous mode [ 66.000185][ T4297] veth1_vlan: left promiscuous mode [ 66.005544][ T4297] veth0_vlan: left promiscuous mode [ 66.078485][ T4982] delete_channel: no stack [ 66.088491][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 66.106812][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 66.112268][ T5070] loop0: detected capacity change from 0 to 2048 [ 66.121322][ T5070] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.137584][ T5070] EXT4-fs mount: 22 callbacks suppressed [ 66.137599][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.159099][ T5070] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.381: bg 0: block 234: padding at end of block bitmap is not set [ 66.174307][ T5070] EXT4-fs (loop0): Remounting filesystem read-only [ 66.188371][ T4867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.198474][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.221344][ T5076] loop0: detected capacity change from 0 to 512 [ 66.243505][ T4867] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.252269][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.267130][ T5076] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.280049][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.290102][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.299321][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.306458][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.326199][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.439626][ T4867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.470869][ T5102] loop0: detected capacity change from 0 to 512 [ 66.517890][ T5102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.538655][ T5102] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.562406][ T4867] veth0_vlan: entered promiscuous mode [ 66.573437][ T4867] veth1_vlan: entered promiscuous mode [ 66.583315][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.607674][ T4867] veth0_macvtap: entered promiscuous mode [ 66.610418][ T5124] program syz.0.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.625568][ T4867] veth1_macvtap: entered promiscuous mode [ 66.637328][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.647814][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.657742][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.668262][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671891][ T5124] hub 6-0:1.0: USB hub found [ 66.678067][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.678084][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.678096][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.684289][ T5124] hub 6-0:1.0: 8 ports detected [ 66.693093][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.694803][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.739636][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.750216][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.760566][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.771189][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.781129][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.791711][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.801599][ T4867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.812033][ T4867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.823659][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.833870][ T4867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.842916][ T4867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.851904][ T4867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.860718][ T4867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905175][ T4967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.917733][ T4967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.933029][ T4967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.956613][ T4967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.031481][ T4967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.048490][ T4967] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.059441][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.066731][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.087262][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.094409][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.149584][ T5156] bridge0: port 3(vlan2) entered blocking state [ 67.156019][ T5156] bridge0: port 3(vlan2) entered disabled state [ 67.182675][ T5156] vlan2: entered allmulticast mode [ 67.193184][ T5156] vlan2: left allmulticast mode [ 67.259466][ T4967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.306414][ T5187] loop3: detected capacity change from 0 to 512 [ 67.322250][ T5187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.356221][ T5187] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.382434][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.418008][ T5206] netlink: 'syz.3.393': attribute type 3 has an invalid length. [ 67.418610][ T4967] veth0_vlan: entered promiscuous mode [ 67.433936][ T4967] veth1_vlan: entered promiscuous mode [ 67.453250][ T4967] veth0_macvtap: entered promiscuous mode [ 67.457635][ T5208] program syz.3.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.461411][ T4967] veth1_macvtap: entered promiscuous mode [ 67.478676][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.489374][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.499456][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.509140][ T5208] hub 6-0:1.0: USB hub found [ 67.510136][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.514893][ T5208] hub 6-0:1.0: 8 ports detected [ 67.524671][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.541037][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.541314][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.551642][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.572073][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.582219][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.592787][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.605701][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.616707][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.627601][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.637762][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.648885][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.658975][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.669588][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.679514][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.690128][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.699987][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.710406][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.721385][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.722288][ T5216] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 67.734994][ T4967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.746801][ T4967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.755587][ T4967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.764266][ T4967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.779303][ T5216] loop3: detected capacity change from 0 to 1024 [ 67.786352][ T5216] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 67.807729][ T5216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.820505][ T5216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.904963][ T5230] loop3: detected capacity change from 0 to 512 [ 67.914853][ T5228] loop0: detected capacity change from 0 to 2048 [ 67.928645][ T5228] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.940386][ T5235] program syz.1.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.941643][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.962144][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.963627][ T5230] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.978695][ T5228] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.401: bg 0: block 234: padding at end of block bitmap is not set [ 68.008098][ T5228] EXT4-fs (loop0): Remounting filesystem read-only [ 68.014739][ T5239] wireguard0: entered promiscuous mode [ 68.020266][ T5239] wireguard0: entered allmulticast mode [ 68.032473][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.044264][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.074427][ T5243] loop1: detected capacity change from 0 to 2048 [ 68.084651][ T5243] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.099759][ T5243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.104919][ T5246] loop3: detected capacity change from 0 to 512 [ 68.147121][ T5246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.160145][ T5246] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.179843][ T5255] wireguard0: entered promiscuous mode [ 68.185380][ T5255] wireguard0: entered allmulticast mode [ 68.210475][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.230976][ T5259] syz.1.405[5259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.231068][ T5259] syz.1.405[5259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.246667][ T5258] loop0: detected capacity change from 0 to 512 [ 68.290566][ T5243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.405: bg 0: block 234: padding at end of block bitmap is not set [ 68.308228][ T5243] EXT4-fs (loop1): Remounting filesystem read-only [ 68.310350][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.318071][ T5261] syz.3.409[5261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.328226][ T5258] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.349395][ T5265] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 68.364518][ T5257] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 68.374775][ T5265] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 68.378610][ T5265] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 68.477371][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.622527][ T5278] program syz.3.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.667896][ T5278] hub 6-0:1.0: USB hub found [ 68.672593][ T5278] hub 6-0:1.0: 8 ports detected [ 68.709257][ T5285] loop3: detected capacity change from 0 to 1024 [ 68.718201][ T5285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.732392][ T5285] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.418: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 68.744123][ T5281] rdma_op ffff888100e25d80 conn xmit_rdma 0000000000000000 [ 68.791684][ T5291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.420'. [ 68.800991][ T5291] unsupported nlmsg_type 40 [ 68.812293][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 68.812306][ T29] audit: type=1400 audit(1726487651.019:1026): avc: denied { write } for pid=5290 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.838549][ T29] audit: type=1400 audit(1726487651.019:1027): avc: denied { nlmsg_write } for pid=5290 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.879266][ T5295] loop4: detected capacity change from 0 to 2048 [ 68.886348][ T5295] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.897509][ T5295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.964749][ T29] audit: type=1400 audit(1726487651.189:1028): avc: denied { read } for pid=5284 comm="syz.3.418" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 68.991329][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.015252][ T5301] syz.4.421[5301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.015361][ T5301] syz.4.421[5301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.074429][ T5303] syz.0.422 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.116727][ T29] audit: type=1400 audit(1726487651.349:1029): avc: denied { write } for pid=5302 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.172985][ T29] audit: type=1400 audit(1726487651.369:1030): avc: denied { read } for pid=5302 comm="syz.0.422" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.196371][ T29] audit: type=1400 audit(1726487651.369:1031): avc: denied { open } for pid=5302 comm="syz.0.422" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.226482][ T5295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.421: bg 0: block 234: padding at end of block bitmap is not set [ 69.241502][ T5295] EXT4-fs (loop4): Remounting filesystem read-only [ 69.257812][ T5300] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 69.331317][ T29] audit: type=1326 audit(1726487651.559:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 69.349863][ T4967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.354832][ T29] audit: type=1326 audit(1726487651.559:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 69.389423][ T29] audit: type=1326 audit(1726487651.559:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 69.412874][ T29] audit: type=1326 audit(1726487651.559:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d274def9 code=0x7ffc0000 [ 69.523720][ T5317] loop4: detected capacity change from 0 to 4096 [ 69.546055][ T5317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.583808][ T5321] netlink: 244 bytes leftover after parsing attributes in process `syz.1.427'. [ 69.611520][ T4967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.663342][ T5326] wireguard0: entered promiscuous mode [ 69.669064][ T5326] wireguard0: entered allmulticast mode [ 69.699459][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.723243][ T5331] loop3: detected capacity change from 0 to 512 [ 69.737000][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.749821][ T5331] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.752411][ T5328] bridge0: port 3(vlan2) entered blocking state [ 69.766597][ T5328] bridge0: port 3(vlan2) entered disabled state [ 69.773155][ T5328] vlan2: entered allmulticast mode [ 69.779020][ T5328] vlan2: left allmulticast mode [ 69.788156][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.808000][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 69.819007][ T5337] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.827887][ T5337] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.836681][ T5337] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.845600][ T5337] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.855598][ T5337] vxlan0: entered promiscuous mode [ 69.860901][ T5337] vxlan0: entered allmulticast mode [ 69.901244][ T5342] loop3: detected capacity change from 0 to 512 [ 69.916710][ T5342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.929291][ T5342] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.954116][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.973807][ T5346] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 69.985943][ T5346] bridge0: port 3(vlan2) entered blocking state [ 69.992297][ T5346] bridge0: port 3(vlan2) entered disabled state [ 69.998933][ T5346] vlan2: entered allmulticast mode [ 70.004542][ T5346] vlan2: left allmulticast mode [ 70.055845][ T5306] delete_channel: no stack [ 70.124026][ T5356] loop3: detected capacity change from 0 to 512 [ 70.134099][ T5358] program syz.0.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.156440][ T5356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.169251][ T5356] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.189683][ T5358] hub 6-0:1.0: USB hub found [ 70.194419][ T5358] hub 6-0:1.0: 8 ports detected [ 70.195337][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.233029][ T5364] netlink: 244 bytes leftover after parsing attributes in process `syz.3.440'. [ 70.240833][ T5366] loop0: detected capacity change from 0 to 512 [ 70.257748][ T5366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.270739][ T5366] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.291632][ T4177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.475001][ T5390] loop1: detected capacity change from 0 to 512 [ 70.491603][ T5390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.505972][ T5390] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.509581][ T5395] loop4: detected capacity change from 0 to 512 [ 70.523035][ T5395] EXT4-fs: Ignoring removed i_version option [ 70.530219][ T5395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.541061][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.541362][ T5395] EXT4-fs (loop4): 1 truncate cleaned up [ 70.556459][ T5395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.610970][ T5400] netlink: 212 bytes leftover after parsing attributes in process `syz.3.454'. [ 70.636659][ T5403] loop3: detected capacity change from 0 to 512 [ 70.657478][ T5403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.670383][ T5403] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.704285][ T4867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.729654][ T5408] netlink: 'syz.3.456': attribute type 3 has an invalid length. [ 70.811508][ T5413] loop3: detected capacity change from 0 to 1024 [ 70.819331][ T5413] EXT4-fs: Ignoring removed oldalloc option [ 70.836861][ T5413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.368090][ T4967] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.392152][ T4967] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 71.413415][ T4967] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.436193][ T4967] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 71.468656][ T5437] loop1: detected capacity change from 0 to 512 [ 71.481037][ T5432] bridge0: port 3(vlan2) entered blocking state [ 71.486000][ T4967] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.487392][ T5432] bridge0: port 3(vlan2) entered disabled state [ 71.509561][ T4967] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 71.519169][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.540060][ T5432] vlan2: entered allmulticast mode [ 71.550735][ T5437] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.552499][ T4967] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.584136][ T5432] vlan2: left allmulticast mode [ 71.584903][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.589915][ T4967] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 71.618061][ T4967] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /9/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 71.641288][ T4967] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 71.661954][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 71.701466][ T5447] netlink: 212 bytes leftover after parsing attributes in process `syz.1.466'. [ 71.722392][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.729874][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.737585][ T5423] bridge_slave_0: entered allmulticast mode [ 71.745708][ T5423] bridge_slave_0: entered promiscuous mode [ 71.748786][ T5450] loop1: detected capacity change from 0 to 512 [ 71.759173][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.766697][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.774053][ T5423] bridge_slave_1: entered allmulticast mode [ 71.778040][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.781028][ T5423] bridge_slave_1: entered promiscuous mode [ 71.793119][ T5450] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.829406][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.844479][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.856205][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.878020][ T5423] team0: Port device team_slave_0 added [ 71.886735][ T5423] team0: Port device team_slave_1 added [ 71.896755][ T5456] program syz.1.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.911795][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.918812][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.944989][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.956474][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.959221][ T5456] hub 6-0:1.0: USB hub found [ 71.963436][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.968084][ T5456] hub 6-0:1.0: 8 ports detected [ 71.993916][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.015931][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.033481][ T5423] hsr_slave_0: entered promiscuous mode [ 72.040103][ T5423] hsr_slave_1: entered promiscuous mode [ 72.046478][ T5423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.054049][ T5423] Cannot create hsr debugfs directory [ 72.109012][ T5423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.176420][ T5423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.238449][ T5423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.288650][ T5423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.340824][ T5423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.349613][ T5423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.358261][ T5423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.368312][ T5423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.383837][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.390933][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.398266][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.405405][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.438943][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.451144][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.459464][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.472825][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.483772][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.491028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.501822][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.508891][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.577584][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.649755][ T5423] veth0_vlan: entered promiscuous mode [ 72.658960][ T5423] veth1_vlan: entered promiscuous mode [ 72.676517][ T5423] veth0_macvtap: entered promiscuous mode [ 72.684160][ T5423] veth1_macvtap: entered promiscuous mode [ 72.694989][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.705703][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.715563][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.726272][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.736125][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.746548][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.756403][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.767064][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.776874][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.787379][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.797189][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.807937][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.819067][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.830717][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.841423][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.851579][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.862185][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.872316][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.882748][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.892639][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.903148][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.912961][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.923407][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.933259][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.943762][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954804][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.970843][ T5423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.979736][ T5423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.985685][ T5476] loop1: detected capacity change from 0 to 512 [ 72.988784][ T5423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.995238][ T5476] EXT4-fs: Ignoring removed i_version option [ 73.003557][ T5423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.010889][ T5476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.037058][ T5476] EXT4-fs (loop1): 1 truncate cleaned up [ 73.043510][ T5476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.128134][ T5482] wireguard0: entered promiscuous mode [ 73.133986][ T5482] wireguard0: entered allmulticast mode [ 73.286022][ T3284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.515879][ T5476] ================================================================== [ 73.523994][ T5476] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 73.531947][ T5476] [ 73.534268][ T5476] write to 0xffff888106936170 of 8 bytes by task 5481 on cpu 0: [ 73.541898][ T5476] __mark_inode_dirty+0x256/0x7e0 [ 73.546939][ T5476] file_modified_flags+0x309/0x340 [ 73.552066][ T5476] file_modified+0x17/0x20 [ 73.556586][ T5476] ext4_buffered_write_iter+0x1d8/0x380 [ 73.562137][ T5476] ext4_file_write_iter+0x29f/0xe30 [ 73.567334][ T5476] iter_file_splice_write+0x5e6/0x970 [ 73.572730][ T5476] direct_splice_actor+0x16c/0x2c0 [ 73.577842][ T5476] splice_direct_to_actor+0x305/0x670 [ 73.583273][ T5476] do_splice_direct+0xd7/0x150 [ 73.588054][ T5476] do_sendfile+0x3ab/0x950 [ 73.592477][ T5476] __x64_sys_sendfile64+0x110/0x150 [ 73.597699][ T5476] x64_sys_call+0xed5/0x2d60 [ 73.602304][ T5476] do_syscall_64+0xc9/0x1c0 [ 73.606809][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.612712][ T5476] [ 73.615064][ T5476] read to 0xffff888106936170 of 8 bytes by task 5476 on cpu 1: [ 73.622605][ T5476] __mark_inode_dirty+0x19f/0x7e0 [ 73.627645][ T5476] touch_atime+0x230/0x350 [ 73.632076][ T5476] filemap_splice_read+0x8b0/0x920 [ 73.637203][ T5476] ext4_file_splice_read+0x95/0xc0 [ 73.642314][ T5476] splice_direct_to_actor+0x26c/0x670 [ 73.647793][ T5476] do_splice_direct+0xd7/0x150 [ 73.652571][ T5476] do_sendfile+0x3ab/0x950 [ 73.656991][ T5476] __x64_sys_sendfile64+0x110/0x150 [ 73.662207][ T5476] x64_sys_call+0xed5/0x2d60 [ 73.666803][ T5476] do_syscall_64+0xc9/0x1c0 [ 73.671317][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.677314][ T5476] [ 73.679634][ T5476] value changed: 0x0000000000000000 -> 0x0000000000000005 [ 73.686739][ T5476] [ 73.689068][ T5476] Reported by Kernel Concurrency Sanitizer on: [ 73.695213][ T5476] CPU: 1 UID: 0 PID: 5476 Comm: syz.1.473 Not tainted 6.11.0-syzkaller #0 [ 73.703798][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 73.713942][ T5476] ================================================================== [ 73.756563][ T4967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.787108][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.855348][ T4131] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.878385][ T4131] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 73.899224][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.900029][ T4131] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.933369][ T4131] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 73.957949][ T4131] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.980836][ T4131] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 74.001937][ T4131] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 74.029225][ T4131] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 74.049427][ T4131] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /79/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 74.051240][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.081348][ T4131] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 74.138329][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.218675][ T50] bridge_slave_1: left allmulticast mode [ 74.224395][ T50] bridge_slave_1: left promiscuous mode [ 74.230097][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240123][ T50] bridge_slave_0: left allmulticast mode [ 74.245935][ T50] bridge_slave_0: left promiscuous mode [ 74.251607][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.348390][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.358914][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.369930][ T50] bond0 (unregistering): Released all slaves [ 74.428627][ T4131] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.518492][ T50] hsr_slave_0: left promiscuous mode [ 74.525496][ T50] hsr_slave_1: left promiscuous mode [ 74.534262][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.541728][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.550433][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.557985][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.568903][ T50] veth1_macvtap: left promiscuous mode [ 74.574533][ T50] veth0_macvtap: left promiscuous mode [ 74.580070][ T50] veth1_vlan: left promiscuous mode [ 74.585348][ T50] veth0_vlan: left promiscuous mode [ 74.674532][ T50] team0 (unregistering): Port device team_slave_1 removed [ 74.687195][ T50] team0 (unregistering): Port device team_slave_0 removed [ 77.125348][ T3270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.045763][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.606749][ T3340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.246162][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration