last executing test programs: 7m29.054358005s ago: executing program 32 (id=437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}}, 0x0) 6m53.342503019s ago: executing program 2 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6m53.27743882s ago: executing program 2 (id=998): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x8, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x20000000010000, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x80000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x20400) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_tid_address(0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/107) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd000000000000000000000000000200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2086b74d221226c2817f79000000", @ANYRES16=r6, @ANYBLOB="20002abd7000fddbdf255a0000000c009900c80000005e000000"], 0x20}}, 0x20000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d0000009500000037b818e481f84379b7c954a35c1f31e359a1ba99413551a7d0b357e7facc01efdfddbfcdb3b1102226294fec064a32400073889404cb8ce63e4b3d920203bd16551a1074dbca8ebae4c72db341b71025711247218bb00d0fb400d691c553b0ec968684ed51b24ca6974c475ee4d64b472abef26569c8b12f832c2e722fdda2c988700940e0593616ff66eff86035a7576a0f28cdc95e5297d268409221a1a96ac54d697ac44b6606d24c58"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="f12e0000", @ANYRES16=r9, @ANYBLOB="000328bd7000fedbdf25080000000800020001000000300006800800030000000000060001000200000014000400fe8000000000000000000000000000bb060001000a000000080002000800000008000200040000000500050006000000"], 0x64}, 0x1, 0x0, 0x0, 0x4c051}, 0x20000880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8001}, 0x28) creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x804}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r10, &(0x7f0000000000)={0x3, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) 6m53.22789057s ago: executing program 2 (id=1001): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6m53.094262583s ago: executing program 2 (id=1002): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"/4166], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xe93}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000ac0)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) close(r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x5, 0x201, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x10000, 0x80, 0x7, 0x4224}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="85d18200020000ef6d5a9201b51618aec39b16f70862103eb55622384144fd94b229efd43ce2ce70c5628bffa72114a194e52c49ca3f2f097ca6631cf0986c24ad61e76583f53cb489aa9b083eb6cf9f9f913f1900000000000000002dc128fc1896e4ea211ec1359db2506620e18c8c6a0778160d2acfd737b619101b7e8f3dc3e6454090b94e66402cfc9fca4809b68a75890cefbdafe5f02b5697e67053ef3151aa5e8816ce4062bdaf765ffe235645a5b584764667df977ce9723ace76b84b1529d89cbae2538a54aef019a9a446418f7d83e933f80fba9bee4c829693b83f4f8e591a000000000000000000000000000000001ce0"]) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)=ANY=[@ANYBLOB="200200ac", @ANYRES16, @ANYBLOB="000129bd7000fddbdf25020000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24005) statx(r7, &(0x7f0000000080)='./file1\x00', 0x800, 0x80, &(0x7f00000005c0)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r8, 0x4b45, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280), 0xfc, 0x574, &(0x7f0000000e40)="$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") tkill(0x0, 0x27) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/116, 0x74) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 6m51.856795881s ago: executing program 2 (id=1014): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14127f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) 6m49.773529073s ago: executing program 2 (id=1041): r0 = io_uring_setup(0x416e, &(0x7f0000000000)={0x0, 0x63b2, 0x2, 0x1, 0x188}) io_uring_setup(0x93e, &(0x7f0000000080)={0x0, 0x383b, 0x2, 0x1, 0x34f, 0x0, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x3, 0x1}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000012c0)={0x2, 0x1, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/4096, 0x1000}], &(0x7f0000001280)=[0x4, 0x4, 0x5, 0x8, 0x7f]}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unlinkat(r2, &(0x7f0000001300)='./file0\x00', 0x200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x7) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={r2, 0x20, &(0x7f00000017c0)={&(0x7f0000001680)=""/209, 0xd1, 0x0, &(0x7f0000001780)=""/24, 0x18}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x9, 0x23, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x2, 0x6, 0x6, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x5, 0xb, 0x0, 0xd54}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xb, 0x6, 0x1, 0x1, 0x18}, @call={0x85, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x8001, 0x8e, &(0x7f00000014c0)=""/142, 0x41100, 0x3a, '\x00', r3, @fallback=0x3, r2, 0x8, &(0x7f0000001600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x0, 0x4, 0x3, 0x30d}, 0x10, r4, r2, 0x3, &(0x7f00000018c0)=[r2, r2, r2, r2, r5, r2], &(0x7f0000001900)=[{0x4, 0x4, 0x5, 0xa}, {0x4, 0x4, 0xc, 0x5}, {0x2, 0x4, 0x3, 0x9}], 0x10, 0x9, @void, @value}, 0x94) unlink(&(0x7f0000001a00)='./file0\x00') setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000001a40), 0x4) listen(r1, 0x53) socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001a80)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001ac0)={0x0, 0xb, 0x20}, &(0x7f0000001b00)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001c00)={r6, 0xa4, &(0x7f0000001b40)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x6, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000001c40)=0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c80), 0x2c2840, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000005a80)=[{0x0, 0x0, 0x0, &(0x7f0000001cc0), &(0x7f0000001d00)=[0x0, 0x2, 0x692, 0xc5da, 0xefb8, 0xa]}, {0xa, 0x1, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001d40)=""/231, 0xe7}, {&(0x7f0000001e40)=""/58, 0x3a}, {&(0x7f0000001e80)=""/110, 0x6e}, {&(0x7f0000001f00)=""/248, 0xf8}, {&(0x7f0000002000)=""/102, 0x66}, {&(0x7f0000002080)=""/82, 0x52}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002140)=""/134, 0x86}, {&(0x7f0000002200)=""/127, 0x7f}, {&(0x7f0000002280)=""/32, 0x20}], &(0x7f0000002380)=[0x5]}, {0x3, 0x1, 0x0, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/24, 0x18}, {&(0x7f0000002400)=""/24, 0x18}, {&(0x7f0000002440)=""/124, 0x7c}], &(0x7f0000002500)=[0x7f7, 0xfffffffffffffffc, 0x80000000, 0xe, 0x8, 0x1000, 0x5]}, {0x1, 0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002540)=""/200, 0xc8}], &(0x7f0000002680)=[0x7, 0x4, 0xfffffffffffffff0, 0x8, 0x9, 0x5, 0xff]}, {0x1, 0x1, 0x0, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}], &(0x7f0000003700)=[0xfffffffffffffffa, 0x0, 0x7, 0x7, 0x9, 0x3, 0x6, 0x1, 0x3]}, {0x7, 0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000003780)=""/108, 0x6c}, {&(0x7f0000003800)=""/97, 0x61}, {&(0x7f0000003880)=""/135, 0x87}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/23, 0x17}, {&(0x7f0000004980)}, {&(0x7f00000049c0)=""/4096, 0x1000}], &(0x7f0000005a40)=[0x1ff, 0x2]}], 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005bc0)={{r2}, &(0x7f0000005b40), &(0x7f0000005b80)=r2}, 0x20) move_mount(r7, &(0x7f0000005c00)='./file0\x00', r7, &(0x7f0000005c40)='./file0\x00', 0x20) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005f00)={r7, 0x0, 0x34, 0xf1, &(0x7f0000005c80)="d093b2c48f70d0222e1b344a4401ca9c59e09ba76a2ca432bd994b2e626c627147f8f948dd54708ab4f090e2e11424f6fae79aac", &(0x7f0000005cc0)=""/241, 0x9, 0x0, 0xcd, 0x35, &(0x7f0000005dc0)="884a49f6916cebd89001fc6dbe2f4d816cc2ccb8ee487329b44862a43440988d6cf6feec41bbaed574a09aac924aac330495057dfd710fe19feaef67b89baae6066e9f3b827f6c414ab6c99ac4ceb392fa7740fc328bb0a23c62da7a26a01d254643145747c3dd8e6a4511568592c3ff7a3b1a2a3b95475b1efc0b1a21d37b5435a58905469dd549fd3f4911447022fe5cbccbdd5a94a02242861cb61b5af5dac8ae441e891b421604e465ecb2f834542d778a5e8d4a367d4b55e4561678f5363fdc8976da6f0c3915814119a2", &(0x7f0000005ec0)="4c597aa2aff0f01b5230ae0cbf95fdafa9542c0b44909e87141d72f7835d9dfb4a5b06985f69e2301abeacd33a1737bc949f741b3f", 0x4, 0x0, 0x10001}, 0x50) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000005f80), 0xffffffffffffffff) chdir(&(0x7f0000005fc0)='./file0\x00') getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000006000), &(0x7f0000006040)=0x30) 6m49.755546313s ago: executing program 33 (id=1041): r0 = io_uring_setup(0x416e, &(0x7f0000000000)={0x0, 0x63b2, 0x2, 0x1, 0x188}) io_uring_setup(0x93e, &(0x7f0000000080)={0x0, 0x383b, 0x2, 0x1, 0x34f, 0x0, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0x3, 0x1}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000012c0)={0x2, 0x1, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/4096, 0x1000}], &(0x7f0000001280)=[0x4, 0x4, 0x5, 0x8, 0x7f]}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unlinkat(r2, &(0x7f0000001300)='./file0\x00', 0x200) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x7) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={r2, 0x20, &(0x7f00000017c0)={&(0x7f0000001680)=""/209, 0xd1, 0x0, &(0x7f0000001780)=""/24, 0x18}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x9, 0x23, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x2, 0x6, 0x6, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x0, 0x5, 0xb, 0x0, 0xd54}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xb, 0x6, 0x1, 0x1, 0x18}, @call={0x85, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x8001, 0x8e, &(0x7f00000014c0)=""/142, 0x41100, 0x3a, '\x00', r3, @fallback=0x3, r2, 0x8, &(0x7f0000001600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x0, 0x4, 0x3, 0x30d}, 0x10, r4, r2, 0x3, &(0x7f00000018c0)=[r2, r2, r2, r2, r5, r2], &(0x7f0000001900)=[{0x4, 0x4, 0x5, 0xa}, {0x4, 0x4, 0xc, 0x5}, {0x2, 0x4, 0x3, 0x9}], 0x10, 0x9, @void, @value}, 0x94) unlink(&(0x7f0000001a00)='./file0\x00') setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000001a40), 0x4) listen(r1, 0x53) socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001a80)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001ac0)={0x0, 0xb, 0x20}, &(0x7f0000001b00)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001c00)={r6, 0xa4, &(0x7f0000001b40)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x6, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000001c40)=0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c80), 0x2c2840, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000005a80)=[{0x0, 0x0, 0x0, &(0x7f0000001cc0), &(0x7f0000001d00)=[0x0, 0x2, 0x692, 0xc5da, 0xefb8, 0xa]}, {0xa, 0x1, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001d40)=""/231, 0xe7}, {&(0x7f0000001e40)=""/58, 0x3a}, {&(0x7f0000001e80)=""/110, 0x6e}, {&(0x7f0000001f00)=""/248, 0xf8}, {&(0x7f0000002000)=""/102, 0x66}, {&(0x7f0000002080)=""/82, 0x52}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002140)=""/134, 0x86}, {&(0x7f0000002200)=""/127, 0x7f}, {&(0x7f0000002280)=""/32, 0x20}], &(0x7f0000002380)=[0x5]}, {0x3, 0x1, 0x0, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/24, 0x18}, {&(0x7f0000002400)=""/24, 0x18}, {&(0x7f0000002440)=""/124, 0x7c}], &(0x7f0000002500)=[0x7f7, 0xfffffffffffffffc, 0x80000000, 0xe, 0x8, 0x1000, 0x5]}, {0x1, 0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002540)=""/200, 0xc8}], &(0x7f0000002680)=[0x7, 0x4, 0xfffffffffffffff0, 0x8, 0x9, 0x5, 0xff]}, {0x1, 0x1, 0x0, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}], &(0x7f0000003700)=[0xfffffffffffffffa, 0x0, 0x7, 0x7, 0x9, 0x3, 0x6, 0x1, 0x3]}, {0x7, 0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000003780)=""/108, 0x6c}, {&(0x7f0000003800)=""/97, 0x61}, {&(0x7f0000003880)=""/135, 0x87}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/23, 0x17}, {&(0x7f0000004980)}, {&(0x7f00000049c0)=""/4096, 0x1000}], &(0x7f0000005a40)=[0x1ff, 0x2]}], 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005bc0)={{r2}, &(0x7f0000005b40), &(0x7f0000005b80)=r2}, 0x20) move_mount(r7, &(0x7f0000005c00)='./file0\x00', r7, &(0x7f0000005c40)='./file0\x00', 0x20) socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005f00)={r7, 0x0, 0x34, 0xf1, &(0x7f0000005c80)="d093b2c48f70d0222e1b344a4401ca9c59e09ba76a2ca432bd994b2e626c627147f8f948dd54708ab4f090e2e11424f6fae79aac", &(0x7f0000005cc0)=""/241, 0x9, 0x0, 0xcd, 0x35, &(0x7f0000005dc0)="884a49f6916cebd89001fc6dbe2f4d816cc2ccb8ee487329b44862a43440988d6cf6feec41bbaed574a09aac924aac330495057dfd710fe19feaef67b89baae6066e9f3b827f6c414ab6c99ac4ceb392fa7740fc328bb0a23c62da7a26a01d254643145747c3dd8e6a4511568592c3ff7a3b1a2a3b95475b1efc0b1a21d37b5435a58905469dd549fd3f4911447022fe5cbccbdd5a94a02242861cb61b5af5dac8ae441e891b421604e465ecb2f834542d778a5e8d4a367d4b55e4561678f5363fdc8976da6f0c3915814119a2", &(0x7f0000005ec0)="4c597aa2aff0f01b5230ae0cbf95fdafa9542c0b44909e87141d72f7835d9dfb4a5b06985f69e2301abeacd33a1737bc949f741b3f", 0x4, 0x0, 0x10001}, 0x50) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000005f80), 0xffffffffffffffff) chdir(&(0x7f0000005fc0)='./file0\x00') getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000006000), &(0x7f0000006040)=0x30) 6m44.213732277s ago: executing program 6 (id=1140): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="f100000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) r8 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000140)=@req3={0xf9c0, 0xfffffffb, 0x7, 0xc0000, 0xd, 0x5, 0x6}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 6m43.969645031s ago: executing program 6 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (fail_nth: 14) 6m43.893318042s ago: executing program 6 (id=1145): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x8, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x20000000010000, 0x0, 0x1, 0x4, 0x20005, 0xb, 0x0, 0x80000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x20400) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_tid_address(0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/107) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2086b74d221226c2817f79000000", @ANYRES16=r6, @ANYBLOB="20002abd7000fddbdf255a0000000c009900c80000005e000000"], 0x20}}, 0x20000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="f12e0000", @ANYRES16=r9, @ANYBLOB="000328bd7000fedbdf25080000000800020001000000300006800800030000000000060001000200000014000400fe8000000000000000000000000000bb060001000a000000080002000800000008000200040000000500050006000000"], 0x64}, 0x1, 0x0, 0x0, 0x4c051}, 0x20000880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8001}, 0x28) creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x804}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r10, &(0x7f0000000000)={0x3, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) 6m43.654396986s ago: executing program 6 (id=1147): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(r1, 0x7) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x88, 0x66, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x400000, @remote}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x8, 0xb, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0x33, [@loopback]}, @end, @lsrr={0x83, 0x23, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @rand_addr=0x64010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x1f}]}, @cipso={0x86, 0x28, 0x2, [{0x7, 0x2}, {0x5, 0xe, "3a634ca7116350e3f47dfbe1"}, {0x5, 0x8, "bd87f3e5131b"}, {0x6, 0xa, "368f5a654cb33996"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xb0, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1884}, 0x90) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r11}, 0x10) sendto$inet6(r10, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x80000001, &(0x7f00000003c0)) ptrace$getregset(0x4205, r9, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 6m43.061526785s ago: executing program 6 (id=1154): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04005b221cb88e000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$inet(0x2, 0x4, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x32000000}, {0xffffffff}], ['\x00']}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6m41.575620778s ago: executing program 6 (id=1194): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 6m41.568731928s ago: executing program 34 (id=1194): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 3m10.965099913s ago: executing program 7 (id=4805): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x50a, 0xae0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) r1 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0x8, 0x7f}, 0x100, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x20000400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) rmdir(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}, {&(0x7f0000000500)="905783db451f", 0x6}], 0x2}, 0x2008854) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x3, 0x4, 0xc1, @private2, @remote, 0x10, 0x40, 0x5, 0x6}}) sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000440)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="ccce625b0480d68735edce4c3194b7295bbb221451c06955361319821f3895ca6237c3003a25d684149c396c", 0x2c}, {&(0x7f00000005c0)="92c2f2fd55f955b02668ce82a4a54178c08570bf2efc360bf26e738e24c42f58dc926a22ab0c025f6514c6353427b04a5c7634cc30d613c561003db6fdc273d835124e40af49c77314033eb8b79e39c9c6037367e17df6cf29b3a4790a824303ef7211bb7c6d846e785387501f889227e7f397abfa76b3e356825ce4569b5dbce5", 0x81}, {&(0x7f0000000880)="773a1abbd112fad5b8e5577887b4241833cb7fd57eb418aca65ca837bd0818d866fa5aa5b3306b57ae47ae743fc29f5f27107f920e4ace035f1123a4d2bdf250e74dce17860ff0de154587b2fc189b57871c2c207696ca7810014c70c555d673d9758cae87e4aa8580eff5cba34e379756053729e6768592eb5f5dad4275c664a93a8627a2e17a826edc035dd51604e11b483a77beff9d21976791cc055ae10fe64029996070810ce513219dd489c7a3116c3f2e767e23feb38809f21590281251892486d9f973b9fed973d4c7a28b782b03a22901fd3e36334b833adaca7d30", 0xe0}, {&(0x7f0000000680)="ca3430a4d076b8665b6fb1174c89124f7c9ceca577a17b0cdf892f76b3afdbca69c4a58a74edc7c72431d35189ff1e3e64544d6906d93a25e3df6dba5c8354a2f0125c8e5e36df5a251fa0f0b4fd354f61", 0x51}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1100000000000000000000000100000081000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="e0000001ac1e00010000000010005636f47cd341ef54abdcf5d1d695284c7660a99a7632df83a35a0697ba9fe07281b4c992d080e3db74c344bf4a8aab2d3c444339a7bec994a61143eedad4c3588b72b4916322da9f51c56855befba689c2a02c6a015b8836609ffd37801401d3c6925268920621a41204ebe653d49bda7a23cba4b7d598e079e24a98305c6c2182a3c7b4406f94cfd0af3b0a13d3c0240909ce6412049ede14be2ae536b74eedc3cbe1fe26214a256b9e67f517e295c28392d12424e1e065127c2acf74"], 0x48}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10) socket(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 3m10.096570007s ago: executing program 7 (id=4812): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0, 0x28}}, 0x0) 3m9.812949911s ago: executing program 7 (id=4817): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x1, 0x5, 0x0, 0xffff8000, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x4, 0x4, 0x8000, 0x0, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x3ff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r5, 0x0, 0xeffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x20) sendfile(r3, r1, &(0x7f0000002700)=0x1, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) 3m8.933515174s ago: executing program 7 (id=4832): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf80a, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff88813ba16fa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4e23, 0xfffffffa, @remote, 0xe}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='x'], 0x2000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0x10, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xffe0}}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) setresuid(0xee00, 0xee01, 0xee01) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 3m8.585135999s ago: executing program 7 (id=4841): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_getres(0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) connect$netlink(r2, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_devices(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad001406"], 0xffdd) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000180)=0x20000a2, 0x12) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x0, {{0xa, 0x4e21, 0x6, @private2, 0x4}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m7.802721081s ago: executing program 7 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m7.770141182s ago: executing program 35 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m1.032939514s ago: executing program 8 (id=4998): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x3}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x31, 0x20055, 0xfcffffff, 0xe33, 0x4000000, 0x32, 0x5, 0x0, 0x5}) eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r10 = fsmount(r6, 0x0, 0x1) fchdir(r10) r11 = inotify_init() inotify_add_watch(r11, &(0x7f00000002c0)='./bus\x00', 0x24000137) openat(r10, &(0x7f00000004c0)='./bus\x00', 0x40000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) 2m58.914974727s ago: executing program 8 (id=5021): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r5, 0x0, 0x0, 0x20040, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="74a2dbda00"/15, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 2m58.794627569s ago: executing program 8 (id=5025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x200) 2m58.793938879s ago: executing program 8 (id=5026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2m58.555197252s ago: executing program 8 (id=5032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f00000004c0)=[{}], 0x1, 0xffffffffffbffff8) 2m58.328881726s ago: executing program 8 (id=5037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/99, 0x63}], 0x1, 0xfffffff7, 0x7c4c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c4040000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff01000037000000f0002a00379306023e057ffdd97add39b90e962a05354cba216c7971340f07a9f6b5c908c0223914184c84a0d9296db6c543c7e9f746c53f05c9b9afcdf88c8cf61d4a116012e8f782a314df5eda51a595ed7be34f9053bf03172e9fde6a9bcedb2ddb37eac7135cdf386fc2d099f08c39b83928fddd55529090ceb70326f1d5ca375b8e894e27985e6a60fd64d0eeaa1381d1965df3a2414a3ff1"], 0x4c4}, 0x1, 0x0, 0x0, 0x20000044}, 0x40810) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r6, 0x8800004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x40, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x3c, 0x1, 0x8) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2m58.315942716s ago: executing program 36 (id=5037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/99, 0x63}], 0x1, 0xfffffff7, 0x7c4c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c4040000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff01000037000000f0002a00379306023e057ffdd97add39b90e962a05354cba216c7971340f07a9f6b5c908c0223914184c84a0d9296db6c543c7e9f746c53f05c9b9afcdf88c8cf61d4a116012e8f782a314df5eda51a595ed7be34f9053bf03172e9fde6a9bcedb2ddb37eac7135cdf386fc2d099f08c39b83928fddd55529090ceb70326f1d5ca375b8e894e27985e6a60fd64d0eeaa1381d1965df3a2414a3ff1"], 0x4c4}, 0x1, 0x0, 0x0, 0x20000044}, 0x40810) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r6, 0x8800004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x40, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x3c, 0x1, 0x8) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2m18.015572689s ago: executing program 9 (id=5774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m17.95635586s ago: executing program 9 (id=5776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000009500000000000000a1392f53bbed6c21947f30763dba73aeb04aea1282e04106af1522c548d6f921d7aeb00c99ed6c7f00d539eb7ec38c1b588ed9a821779fdaf3b039157000a927596f51968036f2ea77da01dfab3d709d91ed4e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$inet6(0xa, 0x3, 0xff) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000017c0)=[{&(0x7f0000000440)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000033c0)="ec8cf3709aab30d76f4720a43c48709f6b50da5f87fdfc48e7000f7f", 0x1c}], 0x2) 2m17.899809641s ago: executing program 9 (id=5779): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2m17.604417095s ago: executing program 9 (id=5780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1, @multicast}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x569, &(0x7f0000000800)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000007e00004d0b8d22edd96d05478de1dcdd55b68cd47ee37739c05030ffa7178545a085db74a103a0dfa4536b9819916bd44f4c8033a6fa9bb59fea0411d248803912cf84194b617f0afffac6a04fd2bbf1c39a754f0f84c418e0f1cc1a17b751a7fa27b17aad83f0ec6261de662ee004f4de5bdee20b404a30f3970c470012cbaaff6371bb09ae87aa01ecb801457a644172039fae91fc8b3bc637d3bd037305ffd92ab20a27d06344031cae8c56d6b03fef50c610da5d725250"], 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x10001, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="5c7f58137dc2ae0063a500a8d1021db1a65f1b8e80a69011a56d1990196f689c19df5cc43f5449cb02000cbe37f611435195158092c8181c4a8f726cc014bbefdd31690bdd72c7102caad895b376fabe35fb13bdf849ce5c4b5e1d697666224bd0d806"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f0000000300)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002200e500000000000000000000000010800000000000000055482cb76a40c65243ebf98a0deefb7df9cb0e54bb3c6a71449f"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='rcu_utilization\x00', r11, 0x0, 0x40000}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r12, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.887911847s ago: executing program 9 (id=5788): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2m14.969358326s ago: executing program 9 (id=5814): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x20044c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x30a, &(0x7f0000001200)="$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") 2m14.967124155s ago: executing program 37 (id=5814): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x20044c0, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x0, 0x30a, &(0x7f0000001200)="$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") 3.113392672s ago: executing program 1 (id=8243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5e663c4a9724ecd0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x109, 0x0) 3.088408183s ago: executing program 1 (id=8244): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 3.087483933s ago: executing program 1 (id=8246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x5, 0xc, 0x7}, &(0x7f0000000500)=0x20) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x70}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r8, 0xc0185879, &(0x7f0000000680)={0x4, 0x966a, 0xffc, 0x4, 0x0, 0xfffc, 0x2401}) 2.306255385s ago: executing program 5 (id=8252): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x80010000}, 0x18) msync(&(0x7f0000b25000/0x3000)=nil, 0x3000, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0xb04, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x642a, 0xf, 0xc5, 0x9, 0x4, 0xfff, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x5}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x7, 0x9}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x6}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0x8, 0x5, 0x1, 0x2e, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x6}, {0x2, 0x4}, {0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x1}, {0x7}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x3, 0x3, 0x5, 0x1, 0x90cc, 0x4]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x0, 0x5}, {0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7ea, 0xe57, 0xa, 0x1, 0x101, 0xf1a0, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0xe101, 0x101, 0x4, 0xf, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x3, 0x7, 0x6, 0x4, 0x87]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x3ff, 0x0, 0x7da, 0x9, 0x1, 0x81]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x1}, {0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x64eb, 0xb91, 0x21, 0x5, 0x0, 0xfffa, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x12, 0x1, 0x3, 0x2, 0x30, 0x4, 0x5, 0x16, 0xc, 0x48, 0x60, 0x60, 0xb, 0x16, 0x1, 0x16, 0x12, 0x2, 0x12, 0x16, 0x1b, 0xc, 0x18, 0x4e, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0xfffa, 0x8, 0x4, 0x8]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xdf, 0x3a, 0x8, 0x401, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x2}, {0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x4, 0x4, 0x5, 0x400, 0x10, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x8, 0x3ff, 0x2, 0x4, 0x8, 0xc206]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xffff, 0xff, 0x4, 0xfff, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x1, 0x18, 0x12, 0x24, 0x36, 0x5, 0x6c, 0x24, 0x60, 0x24, 0x9, 0x36, 0xb, 0x18, 0x0, 0x12, 0x1, 0xc, 0x1, 0x6, 0x1b, 0x3, 0x24, 0x9, 0xc, 0x2, 0x30, 0x2, 0x36]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x30, 0x6, 0x360af1c8e71430f2, 0x1, 0x36, 0xb, 0x36, 0x0, 0x48, 0x1b, 0xb, 0x5, 0x12, 0x36, 0x2, 0x6, 0x5, 0x16, 0x1b, 0x3, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xa9b, 0xfff7, 0x1, 0x7, 0x80, 0x101, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xce, 0x9, 0x2d39, 0x40, 0x28d, 0x40, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0xb, 0x6, 0x4, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf3, 0x8, 0x6, 0x7, 0xfc01, 0x1fed, 0x5, 0xbf7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x100, 0x3, 0x9, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0xa2, 0x6, 0x10, 0x7, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0xb, 0x5f, 0x4, 0x60, 0xc, 0x16, 0x12, 0x18, 0x0, 0x60, 0x3, 0x3, 0xb, 0x16, 0x6, 0x24, 0x1e, 0xb, 0x30, 0x1, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x7}, {0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x6, 0x3ff, 0x2, 0x8, 0x100, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x30, 0x1, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x2}, {0x5, 0x8}, {0x1}, {0x2, 0x3}, {0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {}, {0x3, 0x8}, {0x5, 0x8}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x17}, {0x3, 0x5}, {0x7, 0x4}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x48, 0x18, 0x6, 0x48, 0x1b, 0x16, 0x7, 0x6, 0x2, 0x4, 0xb, 0x6c, 0xc, 0x48, 0x16]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0xe234, 0xf7, 0x3, 0xe09e, 0x8000, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x24, 0x18, 0x24, 0x5, 0x1, 0x24, 0x4, 0x24, 0xb, 0xb, 0x6c, 0x4, 0x48, 0x60, 0x1b, 0x16, 0xb, 0x9, 0x36, 0x9, 0x16, 0xb, 0x3, 0x24, 0x18, 0x21, 0x1, 0x9, 0x6, 0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x6}, {0x1, 0x9}, {0x2, 0xa}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0xb, 0xb, 0x36, 0x9, 0xc, 0x36, 0xb, 0x51, 0x48, 0x5, 0x48, 0x18, 0x6c, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x30, 0x3, 0x12, 0x18, 0x36, 0x60, 0xc, 0x3, 0x24, 0x3, 0x36, 0x2d, 0x0, 0x60, 0x9, 0x24, 0x3, 0x10]}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf4, 0x1000, 0x4, 0x3, 0x9, 0x40, 0x2219]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x3}, {0x4, 0x9}, {0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x3}, {0x2, 0x6}, {0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0xa}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x20, 0x48, 0x48, 0x2, 0x9, 0x6c, 0x10, 0x5, 0x5, 0x24, 0x24, 0x2, 0x36, 0x24, 0x0, 0x6, 0x48, 0x30, 0x60, 0x7a, 0x2, 0x1b, 0x3, 0x60, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x5}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x2}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x7, 0x3}, {0x5}, {0x2, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x6}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {}, {0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x7, 0x0, 0x5, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x48, 0x58, 0x6c, 0x16, 0x60, 0x5, 0x6, 0x24, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x2, 0x24, 0x60, 0x16, 0xb, 0x9]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x4, 0x7, 0x80, 0x9, 0x8000, 0x6]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x5}, {0x7, 0x3}, {0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2d, 0x4, 0x36, 0x9, 0x2, 0x35, 0x2, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x3, 0xe805, 0x778, 0x0, 0x81, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x16, 0x5, 0x18, 0x3, 0x60, 0x36, 0x1b, 0x48, 0xc, 0x2, 0x30, 0x60, 0x48, 0x5, 0x24]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x3, 0x48, 0x4, 0x36, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x6c, 0x4, 0x36, 0x12, 0x30, 0x48, 0x10, 0x1b, 0xc, 0x5, 0x5, 0x24, 0x9]}]}, @NL80211_BAND_60GHZ={0x144, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x8}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x1}, {0x7, 0x5}, {0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x2, 0x8}, {0x7}, {0x2, 0x7}, {0x1}, {0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x5}, {0x6, 0x4}, {0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x4}, {0x5, 0x4}, {0x3, 0x1}, {0x6, 0x6}, {0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0xffff, 0x3, 0x5, 0xa, 0xb, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {}, {0x1, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x37f6, 0x3, 0x1, 0x4, 0xffff, 0x7ff, 0x10, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d3, 0x500, 0x7, 0xb4c, 0xd, 0x200, 0x40, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4, 0x8000, 0x1, 0x5, 0x9, 0x8924]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0xa}, {0x3, 0xa}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x2}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x101, 0xff, 0x1ff, 0x3, 0xff4d, 0xf, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x800, 0x5, 0x4, 0x3ff, 0xffff, 0x6, 0x798]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x6}, {0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x3}, {0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0xa}, {0x1, 0x6}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1c, 0x36, 0x36, 0x30, 0x48, 0x48, 0x1b, 0x0]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x7, 0x9, 0x8, 0x8, 0x9, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x2}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x4}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x2}]}]}]}]}, 0xb04}, 0x1, 0x0, 0x0, 0x20000894}, 0xd4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1.726560923s ago: executing program 4 (id=8253): r0 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x8, 0x3, 0x3, 0x0, 0x81, 0x30c28, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0x8}, 0x10000, 0xb, 0x5, 0x9, 0x1, 0x4, 0x6, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x81, 0x7ff}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="8fcc2ee06d", 0x5}], 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x11) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000080)=ANY=[], 0x27) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000fcffe1d1c7c765634ced02515fe0210000000000007b8af8ff00000000bf9c00000000000007020000f8ffffffb70010000084acecbd44d900be3c231f71aacb00"/85], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x110250, 0x9, 0x1, 0x3, 0x5, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r7) 1.710883214s ago: executing program 5 (id=8254): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) clock_settime(0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)=@qipcrtr={0x2a, 0x1}, 0x80) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000001f) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000003d) 1.710451644s ago: executing program 1 (id=8255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5e663c4a9724ecd0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x109, 0x0) 1.641407005s ago: executing program 1 (id=8256): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x1, 0x5, 0x0, 0xffff8000, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x4, 0x4, 0x8000, 0x0, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rmdir(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x20) sendfile(r2, r1, &(0x7f0000002700)=0x1, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) 1.471424617s ago: executing program 3 (id=8260): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 1.470937157s ago: executing program 4 (id=8261): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{0x0, 0x100000}, {&(0x7f00000012c0)=""/73, 0x49}], 0x2) 1.457691198s ago: executing program 3 (id=8262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) 1.400887118s ago: executing program 3 (id=8263): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304040000000000000000000003", @ANYRES32=0x0], 0x3c}, 0x1, 0xba01}, 0x810) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000009020835b013daee6000000850000007b0000009500000000004000e82cca9d5675c634133f0fa48f8bd4c45a51af89beb358b12577"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r2}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.390673689s ago: executing program 0 (id=8264): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x1, 0x5, 0x0, 0xffff8000, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x4, 0x4, 0x8000, 0x0, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rmdir(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r4, 0x0, 0xeffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x20) sendfile(r2, r1, 0x0, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) 1.382332339s ago: executing program 3 (id=8265): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f00000001c0)=0x8) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x0, 0x200000, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20048840}, 0x4001000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 879.550086ms ago: executing program 5 (id=8266): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x80010000}, 0x18) msync(&(0x7f0000b25000/0x3000)=nil, 0x3000, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0xb08, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x642a, 0xf, 0xc5, 0x9, 0x4, 0xfff, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x5}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x7, 0x9}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x6}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0x8, 0x5, 0x1, 0x2e, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x6}, {0x2, 0x4}, {0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x1}, {0x7}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x3, 0x3, 0x5, 0x1, 0x90cc, 0x4]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x0, 0x5}, {0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7ea, 0xe57, 0xa, 0x1, 0x101, 0xf1a0, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x7}, {0x3, 0x3}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0xe101, 0x101, 0x4, 0xf, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x3, 0x7, 0x6, 0x4, 0x87]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x3ff, 0x0, 0x7da, 0x9, 0x1, 0x81]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x1}, {0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x5}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x64eb, 0xb91, 0x21, 0x5, 0x0, 0xfffa, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x12, 0x1, 0x3, 0x2, 0x30, 0x4, 0x5, 0x16, 0xc, 0x48, 0x60, 0x60, 0xb, 0x16, 0x1, 0x16, 0x12, 0x2, 0x12, 0x16, 0x1b, 0xc, 0x18, 0x4e, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0xfffa, 0x8, 0x4, 0x8]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xdf, 0x3a, 0x8, 0x401, 0x9, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x2}, {0x4}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x4, 0x4, 0x5, 0x400, 0x10, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x8, 0x3ff, 0x2, 0x4, 0x8, 0xc206]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0xffff, 0xff, 0x4, 0xfff, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x1, 0x18, 0x12, 0x24, 0x36, 0x5, 0x6c, 0x24, 0x60, 0x24, 0x9, 0x36, 0xb, 0x18, 0x0, 0x12, 0x1, 0xc, 0x1, 0x6, 0x1b, 0x3, 0x24, 0x9, 0xc, 0x2, 0x30, 0x2, 0x36]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x30, 0x6, 0x360af1c8e71430f2, 0x1, 0x36, 0xb, 0x36, 0x0, 0x48, 0x1b, 0xb, 0x5, 0x12, 0x36, 0x2, 0x6, 0x5, 0x16, 0x1b, 0x3, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xa9b, 0xfff7, 0x1, 0x7, 0x80, 0x101, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xce, 0x9, 0x2d39, 0x40, 0x28d, 0x40, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0xb, 0x6, 0x4, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf3, 0x8, 0x6, 0x7, 0xfc01, 0x1fed, 0x5, 0xbf7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x100, 0x3, 0x9, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x7, 0xa2, 0x6, 0x10, 0x7, 0x8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0xb, 0x5f, 0x4, 0x60, 0xc, 0x16, 0x12, 0x18, 0x0, 0x60, 0x3, 0x3, 0xb, 0x16, 0x6, 0x24, 0x1e, 0xb, 0x30, 0x1, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x7}, {0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x328, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x6, 0x3ff, 0x2, 0x8, 0x100, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x30, 0x1, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x2}, {0x5, 0x8}, {0x1}, {0x2, 0x3}, {0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {}, {0x3, 0x8}, {0x5, 0x8}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x17}, {0x3, 0x5}, {0x7, 0x4}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x48, 0x18, 0x6, 0x48, 0x1b, 0x16, 0x7, 0x6, 0x2, 0x4, 0xb, 0x6c, 0xc, 0x48, 0x16]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0xe234, 0xf7, 0x3, 0xe09e, 0x8000, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x24, 0x18, 0x24, 0x5, 0x1, 0x24, 0x4, 0x24, 0xb, 0xb, 0x6c, 0x4, 0x48, 0x60, 0x1b, 0x16, 0xb, 0x9, 0x36, 0x9, 0x16, 0xb, 0x3, 0x24, 0x18, 0x21, 0x1, 0x9, 0x6, 0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x6}, {0x1, 0x9}, {0x2, 0xa}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0xb, 0xb, 0x36, 0x9, 0xc, 0x36, 0xb, 0x51, 0x48, 0x5, 0x48, 0x18, 0x6c, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x30, 0x3, 0x12, 0x18, 0x36, 0x60, 0xc, 0x3, 0x24, 0x3, 0x36, 0x2d, 0x0, 0x60, 0x9, 0x24, 0x3, 0x10]}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf4, 0x1000, 0x4, 0x3, 0x9, 0x40, 0x2219]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x3}, {0x4, 0x9}, {0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x3}, {0x2, 0x6}, {0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0xa}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x20, 0x48, 0x48, 0x2, 0x9, 0x6c, 0x10, 0x5, 0x5, 0x24, 0x24, 0x2, 0x36, 0x24, 0x0, 0x6, 0x48, 0x30, 0x60, 0x7a, 0x2, 0x1b, 0x3, 0x60, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x5}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x2}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x7, 0x3}, {0x5}, {0x2, 0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x6}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {}, {0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x7, 0x0, 0x5, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x48, 0x58, 0x6c, 0x16, 0x60, 0x5, 0x6, 0x24, 0x36, 0x18]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x2, 0x24, 0x60, 0x16, 0xb, 0x9]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x4, 0x7, 0x80, 0x9, 0x8000, 0x6]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x7}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x5}, {0x7, 0x3}, {0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2d, 0x4, 0x36, 0x9, 0x2, 0x35, 0x2, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x3, 0xe805, 0x778, 0x0, 0x81, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x16, 0x5, 0x18, 0x3, 0x60, 0x36, 0x1b, 0x48, 0xc, 0x2, 0x30, 0x60, 0x48, 0x5, 0x24]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x3, 0x48, 0x4, 0x36, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x6c, 0x4, 0x36, 0x12, 0x30, 0x48, 0x10, 0x1b, 0xc, 0x5, 0x5, 0x24, 0x9]}]}, @NL80211_BAND_60GHZ={0x144, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x8}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x1}, {0x7, 0x5}, {0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x2, 0x8}, {0x7}, {0x2, 0x7}, {0x1}, {0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x5}, {0x6, 0x4}, {0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x4}, {0x5, 0x4}, {0x3, 0x1}, {0x6, 0x6}, {0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0xffff, 0x3, 0x5, 0xa, 0xb, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {}, {0x1, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x37f6, 0x3, 0x1, 0x4, 0xffff, 0x7ff, 0x10, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d3, 0x500, 0x7, 0xb4c, 0xd, 0x200, 0x40, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4, 0x8000, 0x1, 0x5, 0x9, 0x8924]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x2, 0xa}, {0x3, 0xa}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x2}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x101, 0xff, 0x1ff, 0x3, 0xff4d, 0xf, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x800, 0x5, 0x4, 0x3ff, 0xffff, 0x6, 0x798]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x6}, {0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x3}, {0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0xa}, {0x1, 0x6}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1c, 0x36, 0x36, 0x30, 0x48, 0x48, 0x1b, 0x0]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x7, 0x9, 0x8, 0x8, 0x9, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x9}, {0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x2}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x4}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x2}]}]}]}]}, 0xb08}, 0x1, 0x0, 0x0, 0x20000894}, 0xd4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 852.599237ms ago: executing program 5 (id=8267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5e663c4a9724ecd0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x109, 0x0) 793.259568ms ago: executing program 5 (id=8268): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x5, 0xc, 0x7}, &(0x7f0000000500)=0x20) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x70}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r8, 0xc0185879, &(0x7f0000000680)={0x4, 0x966a, 0xffc, 0x4, 0x0, 0xfffc, 0x2401}) 768.300408ms ago: executing program 0 (id=8269): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 767.617928ms ago: executing program 1 (id=8270): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f00000001c0)=0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 747.049128ms ago: executing program 0 (id=8271): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 693.316749ms ago: executing program 0 (id=8272): r0 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x8, 0x3, 0x3, 0x0, 0x81, 0x30c28, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0x8}, 0x10000, 0xb, 0x5, 0x9, 0x1, 0x4, 0x6, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x81, 0x7ff}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="8fcc2ee06d", 0x5}], 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x11) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000080)=ANY=[], 0x27) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000fcffe1d1c7c765634ced02515fe0210000000000007b8af8ff00000000bf9c00000000000007020000f8ffffffb70010000084acecbd44d900be3c231f71aacb00"/85], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x110250, 0x9, 0x1, 0x3, 0x5, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x805, 0x0) connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r7, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r7) 654.55906ms ago: executing program 0 (id=8273): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052fe00"/78]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 651.67543ms ago: executing program 4 (id=8274): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052fe00"/78]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 559.048672ms ago: executing program 3 (id=8275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x6000000}}]}, 0x2c}}, 0x0) 421.278623ms ago: executing program 3 (id=8276): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xa6, 0xff, 0x8}, {0x7fff, 0x9, 0x5, 0x4}, {0x81, 0x2, 0x0, 0x2}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) clock_settime(0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x200, 0x0, 0x3, 0x3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)=@qipcrtr={0x2a, 0x1}, 0x80) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000001f) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000003d) 132.408408ms ago: executing program 0 (id=8277): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf]}, &(0x7f0000000200)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0xa, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = memfd_secret(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x9) 99.193988ms ago: executing program 4 (id=8278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5e663c4a9724ecd0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x109, 0x0) 62.699409ms ago: executing program 4 (id=8279): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) lseek(r0, 0x10001, 0x0) 62.247479ms ago: executing program 4 (id=8280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x4fe3, 0x63, 0x0, 0x0) 0s ago: executing program 5 (id=8281): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x1, 0x5, 0x0, 0xffff8000, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x4, 0x4, 0x8000, 0x0, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rmdir(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x20) sendfile(0xffffffffffffffff, r1, &(0x7f0000002700)=0x1, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) kernel console output (not intermixed with test programs): 9][T25619] x_tables: duplicate underflow at hook 3 [ 458.382620][T25623] FAULT_INJECTION: forcing a failure. [ 458.382620][T25623] name failslab, interval 1, probability 0, space 0, times 0 [ 458.395409][T25623] CPU: 1 UID: 0 PID: 25623 Comm: syz.3.7461 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 458.395505][T25623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.395518][T25623] Call Trace: [ 458.395525][T25623] [ 458.395533][T25623] __dump_stack+0x1d/0x30 [ 458.395561][T25623] dump_stack_lvl+0xe8/0x140 [ 458.395582][T25623] dump_stack+0x15/0x1b [ 458.395623][T25623] should_fail_ex+0x265/0x280 [ 458.395697][T25623] should_failslab+0x8c/0xb0 [ 458.395723][T25623] kmem_cache_alloc_noprof+0x50/0x310 [ 458.395751][T25623] ? security_file_alloc+0x32/0x100 [ 458.395772][T25623] security_file_alloc+0x32/0x100 [ 458.395828][T25623] init_file+0x5c/0x1d0 [ 458.395854][T25623] alloc_empty_file+0x8b/0x200 [ 458.395875][T25623] alloc_file_pseudo+0xc6/0x160 [ 458.395949][T25623] sock_alloc_file+0x9c/0x1e0 [ 458.395982][T25623] __sys_socketpair+0x2b8/0x430 [ 458.396011][T25623] __x64_sys_socketpair+0x52/0x60 [ 458.396039][T25623] x64_sys_call+0x23f2/0x2fb0 [ 458.396087][T25623] do_syscall_64+0xd2/0x200 [ 458.396102][T25623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 458.396179][T25623] ? clear_bhb_loop+0x40/0x90 [ 458.396201][T25623] ? clear_bhb_loop+0x40/0x90 [ 458.396225][T25623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.396303][T25623] RIP: 0033:0x7f68a0aae929 [ 458.396320][T25623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.396419][T25623] RSP: 002b:00007f689f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 458.396436][T25623] RAX: ffffffffffffffda RBX: 00007f68a0cd5fa0 RCX: 00007f68a0aae929 [ 458.396447][T25623] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 458.396497][T25623] RBP: 00007f689f117090 R08: 0000000000000000 R09: 0000000000000000 [ 458.396511][T25623] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 458.396524][T25623] R13: 0000000000000000 R14: 00007f68a0cd5fa0 R15: 00007ffc1138e1a8 [ 458.396620][T25623] [ 458.706224][T25644] warn_alloc: 11 callbacks suppressed [ 458.706238][T25644] syz.3.7469: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 458.726403][T25644] CPU: 1 UID: 0 PID: 25644 Comm: syz.3.7469 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 458.726430][T25644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.726441][T25644] Call Trace: [ 458.726448][T25644] [ 458.726457][T25644] __dump_stack+0x1d/0x30 [ 458.726545][T25644] dump_stack_lvl+0xe8/0x140 [ 458.726556][T25644] dump_stack+0x15/0x1b [ 458.726566][T25644] warn_alloc+0x12b/0x1a0 [ 458.726741][T25644] __vmalloc_node_range_noprof+0x9c/0xe00 [ 458.726773][T25644] ? __futex_wait+0x1ff/0x260 [ 458.726839][T25644] ? __pfx_futex_wake_mark+0x10/0x10 [ 458.726855][T25644] ? __rcu_read_unlock+0x4f/0x70 [ 458.726937][T25644] ? avc_has_perm_noaudit+0x1b1/0x200 [ 458.726953][T25644] ? should_fail_ex+0x30/0x280 [ 458.726970][T25644] ? xskq_create+0x36/0xe0 [ 458.726983][T25644] vmalloc_user_noprof+0x7d/0xb0 [ 458.727011][T25644] ? xskq_create+0x80/0xe0 [ 458.727023][T25644] xskq_create+0x80/0xe0 [ 458.727035][T25644] xsk_init_queue+0x95/0xf0 [ 458.727048][T25644] xsk_setsockopt+0x35c/0x510 [ 458.727083][T25644] ? __pfx_xsk_setsockopt+0x10/0x10 [ 458.727156][T25644] __sys_setsockopt+0x181/0x200 [ 458.727241][T25644] __x64_sys_setsockopt+0x64/0x80 [ 458.727275][T25644] x64_sys_call+0x2bd5/0x2fb0 [ 458.727287][T25644] do_syscall_64+0xd2/0x200 [ 458.727329][T25644] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 458.727343][T25644] ? clear_bhb_loop+0x40/0x90 [ 458.727355][T25644] ? clear_bhb_loop+0x40/0x90 [ 458.727388][T25644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.727400][T25644] RIP: 0033:0x7f68a0aae929 [ 458.727410][T25644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.727420][T25644] RSP: 002b:00007f689f117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.727432][T25644] RAX: ffffffffffffffda RBX: 00007f68a0cd5fa0 RCX: 00007f68a0aae929 [ 458.727439][T25644] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 458.727447][T25644] RBP: 00007f68a0b30b39 R08: 0000000000000004 R09: 0000000000000000 [ 458.727497][T25644] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.727507][T25644] R13: 0000000000000000 R14: 00007f68a0cd5fa0 R15: 00007ffc1138e1a8 [ 458.727519][T25644] [ 458.727523][T25644] Mem-Info: [ 458.956619][T25644] active_anon:6662 inactive_anon:10 isolated_anon:0 [ 458.956619][T25644] active_file:7868 inactive_file:13446 isolated_file:0 [ 458.956619][T25644] unevictable:0 dirty:197 writeback:0 [ 458.956619][T25644] slab_reclaimable:3429 slab_unreclaimable:56864 [ 458.956619][T25644] mapped:32284 shmem:3492 pagetables:1168 [ 458.956619][T25644] sec_pagetables:0 bounce:0 [ 458.956619][T25644] kernel_misc_reclaimable:0 [ 458.956619][T25644] free:1819189 free_pcp:22382 free_cma:0 [ 459.001688][T25644] Node 0 active_anon:26648kB inactive_anon:40kB active_file:31472kB inactive_file:53784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129136kB dirty:788kB writeback:0kB shmem:13968kB writeback_tmp:0kB kernel_stack:3936kB pagetables:4672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.030946][T25644] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.059641][T25644] lowmem_reserve[]: 0 2882 7860 7860 [ 459.064999][T25644] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 459.095078][T25644] lowmem_reserve[]: 0 0 4978 4978 [ 459.095105][T25644] Node 0 Normal free:4313560kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26648kB inactive_anon:40kB active_file:31472kB inactive_file:53784kB unevictable:0kB writepending:788kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:85992kB local_pcp:85476kB free_cma:0kB [ 459.095170][T25644] lowmem_reserve[]: 0 0 0 0 [ 459.095216][T25644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.149450][T25644] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 459.149782][T25644] Node 0 Normal: 5856*4kB (UME) 2823*8kB (UME) 1514*16kB (UME) 2400*32kB (UME) 1767*64kB (UME) 1104*128kB (UME) 824*256kB (UME) 587*512kB (UME) 465*1024kB (UME) 166*2048kB (UM) 631*4096kB (UM) = 4313624kB [ 459.149945][T25644] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 459.149960][T25644] 24795 total pagecache pages [ 459.149966][T25644] 4 pages in swap cache [ 459.149971][T25644] Free swap = 124792kB [ 459.149977][T25644] Total swap = 124996kB [ 459.149983][T25644] 2097051 pages RAM [ 459.149988][T25644] 0 pages HighMem/MovableOnly [ 459.149994][T25644] 80812 pages reserved [ 459.299026][T25659] lo speed is unknown, defaulting to 1000 [ 459.507231][T25688] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 459.540571][T25695] netlink: 'syz.4.7487': attribute type 1 has an invalid length. [ 459.647846][T25712] cgroup: Invalid name [ 459.688059][T25718] FAULT_INJECTION: forcing a failure. [ 459.688059][T25718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.701290][T25718] CPU: 1 UID: 0 PID: 25718 Comm: syz.1.7495 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 459.701323][T25718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.701338][T25718] Call Trace: [ 459.701345][T25718] [ 459.701363][T25718] __dump_stack+0x1d/0x30 [ 459.701386][T25718] dump_stack_lvl+0xe8/0x140 [ 459.701408][T25718] dump_stack+0x15/0x1b [ 459.701426][T25718] should_fail_ex+0x265/0x280 [ 459.701457][T25718] should_fail+0xb/0x20 [ 459.701543][T25718] should_fail_usercopy+0x1a/0x20 [ 459.701577][T25718] _copy_from_user+0x1c/0xb0 [ 459.701601][T25718] ___sys_sendmsg+0xc1/0x1d0 [ 459.701719][T25718] __x64_sys_sendmsg+0xd4/0x160 [ 459.701759][T25718] x64_sys_call+0x2999/0x2fb0 [ 459.701852][T25718] do_syscall_64+0xd2/0x200 [ 459.701872][T25718] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 459.701901][T25718] ? clear_bhb_loop+0x40/0x90 [ 459.701923][T25718] ? clear_bhb_loop+0x40/0x90 [ 459.701965][T25718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.701987][T25718] RIP: 0033:0x7fac2919e929 [ 459.702130][T25718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.702147][T25718] RSP: 002b:00007fac27807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.702166][T25718] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919e929 [ 459.702178][T25718] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000007 [ 459.702189][T25718] RBP: 00007fac27807090 R08: 0000000000000000 R09: 0000000000000000 [ 459.702208][T25718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.702219][T25718] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 459.702247][T25718] [ 459.877462][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 459.877476][ T29] audit: type=1400 audit(475.337:31915): avc: denied { create } for pid=25658 comm="syz.3.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.905934][ T29] audit: type=1400 audit(475.547:31916): avc: denied { setopt } for pid=25658 comm="syz.3.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.925166][ T29] audit: type=1400 audit(475.547:31917): avc: denied { override_creds } for pid=25711 comm="syz.4.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 459.955154][ T29] audit: type=1400 audit(475.547:31918): avc: denied { create } for pid=25711 comm="syz.4.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.974186][ T29] audit: type=1400 audit(475.547:31919): avc: denied { setopt } for pid=25711 comm="syz.4.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.993296][ T29] audit: type=1400 audit(475.547:31920): avc: denied { connect } for pid=25711 comm="syz.4.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 460.074098][ T29] audit: type=1400 audit(475.662:31921): avc: denied { create } for pid=25719 comm="syz.5.7496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.093392][ T29] audit: type=1400 audit(475.662:31922): avc: denied { connect } for pid=25719 comm="syz.5.7496" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.113613][ T29] audit: type=1400 audit(475.673:31923): avc: denied { create } for pid=25727 comm="syz.0.7498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.133107][ T29] audit: type=1400 audit(475.673:31924): avc: denied { ioctl } for pid=25727 comm="syz.0.7498" path="socket:[84877]" dev="sockfs" ino=84877 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.246499][T25752] tipc: Can't bind to reserved service type 2 [ 460.255477][T25757] team4: entered promiscuous mode [ 460.260690][T25757] team4: entered allmulticast mode [ 460.289779][T25759] team1: entered promiscuous mode [ 460.294904][T25759] team1: entered allmulticast mode [ 460.453728][T25783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.472944][T25783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.518731][T25795] team7: entered promiscuous mode [ 460.524011][T25795] team7: entered allmulticast mode [ 460.532209][T25797] FAULT_INJECTION: forcing a failure. [ 460.532209][T25797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.545331][T25797] CPU: 1 UID: 0 PID: 25797 Comm: syz.3.7526 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 460.545355][T25797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.545368][T25797] Call Trace: [ 460.545381][T25797] [ 460.545389][T25797] __dump_stack+0x1d/0x30 [ 460.545411][T25797] dump_stack_lvl+0xe8/0x140 [ 460.545444][T25797] dump_stack+0x15/0x1b [ 460.545460][T25797] should_fail_ex+0x265/0x280 [ 460.545527][T25797] should_fail+0xb/0x20 [ 460.545592][T25797] should_fail_usercopy+0x1a/0x20 [ 460.545610][T25797] _copy_to_user+0x20/0xa0 [ 460.545621][T25797] simple_read_from_buffer+0xb5/0x130 [ 460.545640][T25797] proc_fail_nth_read+0x100/0x140 [ 460.545724][T25797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.545764][T25797] vfs_read+0x1a0/0x6f0 [ 460.545781][T25797] ? __rcu_read_unlock+0x4f/0x70 [ 460.545793][T25797] ? __fget_files+0x184/0x1c0 [ 460.545806][T25797] ksys_read+0xda/0x1a0 [ 460.545875][T25797] __x64_sys_read+0x40/0x50 [ 460.545892][T25797] x64_sys_call+0x2d77/0x2fb0 [ 460.545903][T25797] do_syscall_64+0xd2/0x200 [ 460.545916][T25797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 460.545931][T25797] ? clear_bhb_loop+0x40/0x90 [ 460.545943][T25797] ? clear_bhb_loop+0x40/0x90 [ 460.545971][T25797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.545982][T25797] RIP: 0033:0x7f68a0aad33c [ 460.545992][T25797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.546002][T25797] RSP: 002b:00007f689f117030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.546043][T25797] RAX: ffffffffffffffda RBX: 00007f68a0cd5fa0 RCX: 00007f68a0aad33c [ 460.546051][T25797] RDX: 000000000000000f RSI: 00007f689f1170a0 RDI: 0000000000000006 [ 460.546057][T25797] RBP: 00007f689f117090 R08: 0000000000000000 R09: 0000000000000002 [ 460.546064][T25797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.546071][T25797] R13: 0000000000000000 R14: 00007f68a0cd5fa0 R15: 00007ffc1138e1a8 [ 460.546082][T25797] [ 461.093458][T25827] team0: entered promiscuous mode [ 461.098690][T25827] team0: entered allmulticast mode [ 461.202690][T25834] Cannot find add_set index 0 as target [ 461.369532][T25859] team0: entered promiscuous mode [ 461.374752][T25859] team0: entered allmulticast mode [ 461.386980][T25863] __vm_enough_memory: pid: 25863, comm: syz.0.7555, bytes: 21200019591168 not enough memory for the allocation [ 461.827070][T25892] netlink: 'syz.5.7566': attribute type 2 has an invalid length. [ 461.834935][T25892] netlink: 'syz.5.7566': attribute type 1 has an invalid length. [ 462.418656][T25923] __nla_validate_parse: 48 callbacks suppressed [ 462.418703][T25923] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7574'. [ 462.454634][T25927] Invalid logical block size (2) [ 462.608976][T25935] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 462.709614][T25939] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7579'. [ 463.013486][T25964] lo speed is unknown, defaulting to 1000 [ 463.790319][T26089] FAULT_INJECTION: forcing a failure. [ 463.790319][T26089] name failslab, interval 1, probability 0, space 0, times 0 [ 463.803020][T26089] CPU: 1 UID: 0 PID: 26089 Comm: syz.3.7594 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 463.803049][T26089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.803060][T26089] Call Trace: [ 463.803066][T26089] [ 463.803151][T26089] __dump_stack+0x1d/0x30 [ 463.803173][T26089] dump_stack_lvl+0xe8/0x140 [ 463.803192][T26089] dump_stack+0x15/0x1b [ 463.803209][T26089] should_fail_ex+0x265/0x280 [ 463.803280][T26089] should_failslab+0x8c/0xb0 [ 463.803304][T26089] kmem_cache_alloc_node_noprof+0x57/0x320 [ 463.803377][T26089] ? __alloc_skb+0x101/0x320 [ 463.803440][T26089] __alloc_skb+0x101/0x320 [ 463.803464][T26089] netlink_alloc_large_skb+0xba/0xf0 [ 463.803515][T26089] netlink_sendmsg+0x3cf/0x6b0 [ 463.803538][T26089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.803560][T26089] __sock_sendmsg+0x145/0x180 [ 463.803586][T26089] ____sys_sendmsg+0x31e/0x4e0 [ 463.803703][T26089] ___sys_sendmsg+0x17b/0x1d0 [ 463.803749][T26089] __x64_sys_sendmsg+0xd4/0x160 [ 463.803785][T26089] x64_sys_call+0x2999/0x2fb0 [ 463.803846][T26089] do_syscall_64+0xd2/0x200 [ 463.803923][T26089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 463.804022][T26089] ? clear_bhb_loop+0x40/0x90 [ 463.804045][T26089] ? clear_bhb_loop+0x40/0x90 [ 463.804067][T26089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.804090][T26089] RIP: 0033:0x7f68a0aae929 [ 463.804178][T26089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.804197][T26089] RSP: 002b:00007f689f117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.804263][T26089] RAX: ffffffffffffffda RBX: 00007f68a0cd5fa0 RCX: 00007f68a0aae929 [ 463.804277][T26089] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000006 [ 463.804291][T26089] RBP: 00007f689f117090 R08: 0000000000000000 R09: 0000000000000000 [ 463.804304][T26089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.804318][T26089] R13: 0000000000000000 R14: 00007f68a0cd5fa0 R15: 00007ffc1138e1a8 [ 463.804387][T26089] [ 464.069006][T26105] program syz.1.7598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.083763][T26111] __vm_enough_memory: pid: 26111, comm: syz.0.7600, bytes: 21200019591168 not enough memory for the allocation [ 464.100663][T26107] net_ratelimit: 416 callbacks suppressed [ 464.100677][T26107] openvswitch: netlink: Message has 6 unknown bytes. [ 464.299305][T26139] netlink: 'syz.5.7610': attribute type 39 has an invalid length. [ 464.399319][T26147] lo speed is unknown, defaulting to 1000 [ 464.464716][T26158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7614'. [ 464.565308][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7616'. [ 464.583850][T26166] team5: entered promiscuous mode [ 464.601399][T26166] team5: entered allmulticast mode [ 464.662691][ T29] kauditd_printk_skb: 767 callbacks suppressed [ 464.662706][ T29] audit: type=1404 audit(3826.530:32692): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 464.684565][ T29] audit: type=1400 audit(3826.551:32693): avc: denied { module_request } for pid=26176 comm="syz.5.7621" kmod="net-pf-2-proto-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 464.706499][ T29] audit: type=1400 audit(3826.551:32694): avc: denied { prog_load } for pid=26176 comm="syz.5.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 464.725235][ T29] audit: type=1400 audit(3826.551:32695): avc: denied { prog_load } for pid=26176 comm="syz.5.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 464.744092][ T29] audit: type=1400 audit(3826.551:32696): avc: denied { create } for pid=26176 comm="syz.5.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 464.763597][ T29] audit: type=1400 audit(3826.551:32697): avc: denied { create } for pid=26176 comm="syz.5.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 464.783988][ T29] audit: type=1400 audit(3826.551:32698): avc: denied { read write } for pid=26176 comm="syz.5.7621" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 464.807594][ T29] audit: type=1400 audit(3826.572:32699): avc: denied { recv } for pid=26155 comm="syz.1.7613" saddr=10.128.0.163 src=30036 daddr=10.128.0.185 dest=42722 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 464.832668][ T29] audit: type=1400 audit(3826.614:32700): avc: denied { create } for pid=26181 comm="syz.5.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 464.851838][ T29] audit: type=1400 audit(3826.614:32701): avc: denied { create } for pid=26181 comm="syz.5.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 464.952426][T26190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7626'. [ 465.034530][T26199] FAULT_INJECTION: forcing a failure. [ 465.034530][T26199] name failslab, interval 1, probability 0, space 0, times 0 [ 465.047746][T26199] CPU: 0 UID: 0 PID: 26199 Comm: syz.1.7628 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 465.047777][T26199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.047791][T26199] Call Trace: [ 465.047796][T26199] [ 465.047802][T26199] __dump_stack+0x1d/0x30 [ 465.047847][T26199] dump_stack_lvl+0xe8/0x140 [ 465.047926][T26199] dump_stack+0x15/0x1b [ 465.047940][T26199] should_fail_ex+0x265/0x280 [ 465.047968][T26199] should_failslab+0x8c/0xb0 [ 465.048051][T26199] kmem_cache_alloc_noprof+0x50/0x310 [ 465.048078][T26199] ? alloc_empty_file+0x76/0x200 [ 465.048103][T26199] ? mntput+0x4b/0x80 [ 465.048167][T26199] alloc_empty_file+0x76/0x200 [ 465.048247][T26199] path_openat+0x68/0x2170 [ 465.048276][T26199] ? _parse_integer_limit+0x170/0x190 [ 465.048309][T26199] ? kstrtoull+0x111/0x140 [ 465.048341][T26199] ? kstrtouint+0x76/0xc0 [ 465.048363][T26199] do_filp_open+0x109/0x230 [ 465.048393][T26199] do_sys_openat2+0xa6/0x110 [ 465.048421][T26199] __x64_sys_openat+0xf2/0x120 [ 465.048610][T26199] x64_sys_call+0x1af/0x2fb0 [ 465.048632][T26199] do_syscall_64+0xd2/0x200 [ 465.048727][T26199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.048754][T26199] ? clear_bhb_loop+0x40/0x90 [ 465.048827][T26199] ? clear_bhb_loop+0x40/0x90 [ 465.048851][T26199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.048872][T26199] RIP: 0033:0x7fac2919e929 [ 465.048888][T26199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.048908][T26199] RSP: 002b:00007fac27807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.048966][T26199] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919e929 [ 465.048977][T26199] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 465.048988][T26199] RBP: 00007fac27807090 R08: 0000000000000000 R09: 0000000000000000 [ 465.048999][T26199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.049009][T26199] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 465.049026][T26199] [ 465.292178][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7629'. [ 465.305113][T26201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.312772][T26201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.323926][T26201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.331575][T26201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.559241][T26223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7639'. [ 465.580144][T26224] tmpfs: Bad value for 'defcontext' [ 465.626335][T26231] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7640'. [ 465.665963][T26233] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7641'. [ 465.750539][T26241] 9pnet_fd: p9_fd_create_tcp (26241): problem connecting socket to 127.0.0.1 [ 465.820097][T26256] tmpfs: Bad value for 'defcontext' [ 465.828132][T26256] FAULT_INJECTION: forcing a failure. [ 465.828132][T26256] name failslab, interval 1, probability 0, space 0, times 0 [ 465.840810][T26256] CPU: 0 UID: 0 PID: 26256 Comm: syz.1.7652 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 465.840838][T26256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.840852][T26256] Call Trace: [ 465.840857][T26256] [ 465.840975][T26256] __dump_stack+0x1d/0x30 [ 465.841005][T26256] dump_stack_lvl+0xe8/0x140 [ 465.841027][T26256] dump_stack+0x15/0x1b [ 465.841044][T26256] should_fail_ex+0x265/0x280 [ 465.841075][T26256] ? __hw_addr_add_ex+0x162/0x440 [ 465.841172][T26256] should_failslab+0x8c/0xb0 [ 465.841195][T26256] __kmalloc_cache_noprof+0x4c/0x320 [ 465.841225][T26256] __hw_addr_add_ex+0x162/0x440 [ 465.841323][T26256] dev_addr_init+0xb1/0x120 [ 465.841351][T26256] alloc_netdev_mqs+0x212/0xab0 [ 465.841382][T26256] ? __pfx_sl_setup+0x10/0x10 [ 465.841438][T26256] slip_open+0x2d1/0x920 [ 465.841460][T26256] ? vfree+0x295/0x3a0 [ 465.841485][T26256] ? up_write+0x18/0x60 [ 465.841508][T26256] tty_ldisc_open+0x5a/0xb0 [ 465.841535][T26256] tty_set_ldisc+0x1db/0x380 [ 465.841576][T26256] tiocsetd+0x51/0x60 [ 465.841603][T26256] tty_ioctl+0xa7f/0xb80 [ 465.841708][T26256] ? __pfx_tty_ioctl+0x10/0x10 [ 465.841737][T26256] __se_sys_ioctl+0xce/0x140 [ 465.841766][T26256] __x64_sys_ioctl+0x43/0x50 [ 465.841834][T26256] x64_sys_call+0x19a8/0x2fb0 [ 465.841852][T26256] do_syscall_64+0xd2/0x200 [ 465.841868][T26256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.841902][T26256] ? clear_bhb_loop+0x40/0x90 [ 465.841924][T26256] ? clear_bhb_loop+0x40/0x90 [ 465.841945][T26256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.841965][T26256] RIP: 0033:0x7fac2919e929 [ 465.841986][T26256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.842011][T26256] RSP: 002b:00007fac27807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.842034][T26256] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919e929 [ 465.842046][T26256] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000005 [ 465.842059][T26256] RBP: 00007fac27807090 R08: 0000000000000000 R09: 0000000000000000 [ 465.842070][T26256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.842116][T26256] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 465.842166][T26256] [ 465.843600][T26260] FAULT_INJECTION: forcing a failure. [ 465.843600][T26260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.844740][T26261] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7654'. [ 465.856170][T26260] CPU: 1 UID: 0 PID: 26260 Comm: syz.4.7651 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 465.856198][T26260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.856225][T26260] Call Trace: [ 465.856232][T26260] [ 465.856240][T26260] __dump_stack+0x1d/0x30 [ 465.856262][T26260] dump_stack_lvl+0xe8/0x140 [ 465.856281][T26260] dump_stack+0x15/0x1b [ 465.856297][T26260] should_fail_ex+0x265/0x280 [ 465.856332][T26260] should_fail+0xb/0x20 [ 465.856418][T26260] should_fail_usercopy+0x1a/0x20 [ 465.856449][T26260] _copy_to_iter+0xcf/0xe30 [ 465.856480][T26260] ? chacha_block_generic+0x218/0x240 [ 465.856513][T26260] get_random_bytes_user+0x12d/0x290 [ 465.856589][T26260] ? import_ubuf+0xe8/0x120 [ 465.856611][T26260] __x64_sys_getrandom+0xcf/0x1a0 [ 465.856634][T26260] x64_sys_call+0x2bb4/0x2fb0 [ 465.856654][T26260] do_syscall_64+0xd2/0x200 [ 465.856695][T26260] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.856798][T26260] ? clear_bhb_loop+0x40/0x90 [ 465.856870][T26260] ? clear_bhb_loop+0x40/0x90 [ 465.856892][T26260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.856913][T26260] RIP: 0033:0x7fbe5fe0e929 [ 465.856928][T26260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.857003][T26260] RSP: 002b:00007fbe5e456038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 465.857022][T26260] RAX: ffffffffffffffda RBX: 00007fbe60036080 RCX: 00007fbe5fe0e929 [ 465.857035][T26260] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040 [ 465.857047][T26260] RBP: 00007fbe5e456090 R08: 0000000000000000 R09: 0000000000000000 [ 465.857059][T26260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.857072][T26260] R13: 0000000000000000 R14: 00007fbe60036080 R15: 00007fff12083258 [ 465.857090][T26260] [ 466.870170][T26288] ip6t_srh: unknown srh invflags 4449 [ 466.971668][T26302] team2: entered promiscuous mode [ 466.976743][T26302] team2: entered allmulticast mode [ 467.177247][T26323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.186977][T26323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.196569][T26323] netlink: 'syz.0.7676': attribute type 13 has an invalid length. [ 467.324772][T26326] bond0: entered promiscuous mode [ 467.329852][T26326] bond0: entered allmulticast mode [ 467.336198][T26326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.346696][T26326] bond0 (unregistering): Released all slaves [ 467.424436][T26336] __nla_validate_parse: 3 callbacks suppressed [ 467.424452][T26336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7681'. [ 467.446819][T26338] FAULT_INJECTION: forcing a failure. [ 467.446819][T26338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.459948][T26338] CPU: 1 UID: 0 PID: 26338 Comm: syz.5.7682 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 467.460033][T26338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.460046][T26338] Call Trace: [ 467.460053][T26338] [ 467.460061][T26338] __dump_stack+0x1d/0x30 [ 467.460083][T26338] dump_stack_lvl+0xe8/0x140 [ 467.460103][T26338] dump_stack+0x15/0x1b [ 467.460120][T26338] should_fail_ex+0x265/0x280 [ 467.460266][T26338] should_fail+0xb/0x20 [ 467.460358][T26338] should_fail_usercopy+0x1a/0x20 [ 467.460392][T26338] copy_folio_from_iter_atomic+0x278/0x1170 [ 467.460421][T26338] ? shmem_write_begin+0xa8/0x190 [ 467.460506][T26338] ? shmem_write_begin+0xe1/0x190 [ 467.460540][T26338] generic_perform_write+0x2c2/0x490 [ 467.460568][T26338] shmem_file_write_iter+0xc5/0xf0 [ 467.460590][T26338] do_iter_readv_writev+0x421/0x4c0 [ 467.460674][T26338] vfs_writev+0x2df/0x8b0 [ 467.460706][T26338] __se_sys_pwritev2+0xfc/0x1c0 [ 467.460749][T26338] __x64_sys_pwritev2+0x67/0x80 [ 467.460777][T26338] x64_sys_call+0x1cea/0x2fb0 [ 467.460800][T26338] do_syscall_64+0xd2/0x200 [ 467.460835][T26338] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.460864][T26338] ? clear_bhb_loop+0x40/0x90 [ 467.460955][T26338] ? clear_bhb_loop+0x40/0x90 [ 467.460979][T26338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.461002][T26338] RIP: 0033:0x7f27e883e929 [ 467.461015][T26338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.461107][T26338] RSP: 002b:00007f27e6ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 467.461127][T26338] RAX: ffffffffffffffda RBX: 00007f27e8a65fa0 RCX: 00007f27e883e929 [ 467.461141][T26338] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 467.461155][T26338] RBP: 00007f27e6ea7090 R08: 0000000000003000 R09: 0000000000000003 [ 467.461169][T26338] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000002 [ 467.461181][T26338] R13: 0000000000000000 R14: 00007f27e8a65fa0 R15: 00007fff13e76408 [ 467.461198][T26338] [ 467.737411][T26342] FAULT_INJECTION: forcing a failure. [ 467.737411][T26342] name failslab, interval 1, probability 0, space 0, times 0 [ 467.750135][T26342] CPU: 0 UID: 0 PID: 26342 Comm: syz.1.7685 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 467.750165][T26342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.750178][T26342] Call Trace: [ 467.750184][T26342] [ 467.750192][T26342] __dump_stack+0x1d/0x30 [ 467.750212][T26342] dump_stack_lvl+0xe8/0x140 [ 467.750255][T26342] dump_stack+0x15/0x1b [ 467.750272][T26342] should_fail_ex+0x265/0x280 [ 467.750302][T26342] ? v9fs_mount+0x51/0x590 [ 467.750403][T26342] should_failslab+0x8c/0xb0 [ 467.750428][T26342] __kmalloc_cache_noprof+0x4c/0x320 [ 467.750459][T26342] v9fs_mount+0x51/0x590 [ 467.750561][T26342] ? __pfx_v9fs_mount+0x10/0x10 [ 467.750654][T26342] legacy_get_tree+0x75/0xd0 [ 467.750698][T26342] vfs_get_tree+0x57/0x1d0 [ 467.750793][T26342] do_new_mount+0x207/0x680 [ 467.750821][T26342] path_mount+0x4a4/0xb20 [ 467.750926][T26342] ? user_path_at+0x109/0x130 [ 467.750949][T26342] __se_sys_mount+0x28f/0x2e0 [ 467.750970][T26342] __x64_sys_mount+0x67/0x80 [ 467.750986][T26342] x64_sys_call+0xd36/0x2fb0 [ 467.751030][T26342] do_syscall_64+0xd2/0x200 [ 467.751049][T26342] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.751076][T26342] ? clear_bhb_loop+0x40/0x90 [ 467.751171][T26342] ? clear_bhb_loop+0x40/0x90 [ 467.751193][T26342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.751213][T26342] RIP: 0033:0x7fac2919e929 [ 467.751229][T26342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.751247][T26342] RSP: 002b:00007fac27807038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 467.751270][T26342] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919e929 [ 467.751326][T26342] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 467.751337][T26342] RBP: 00007fac27807090 R08: 0000200000000400 R09: 0000000000000000 [ 467.751350][T26342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.751429][T26342] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 467.751464][T26342] [ 468.059955][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7691'. [ 468.091698][T26369] FAULT_INJECTION: forcing a failure. [ 468.091698][T26369] name failslab, interval 1, probability 0, space 0, times 0 [ 468.104351][T26369] CPU: 1 UID: 0 PID: 26369 Comm: syz.0.7695 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 468.104376][T26369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.104417][T26369] Call Trace: [ 468.104424][T26369] [ 468.104432][T26369] __dump_stack+0x1d/0x30 [ 468.104454][T26369] dump_stack_lvl+0xe8/0x140 [ 468.104475][T26369] dump_stack+0x15/0x1b [ 468.104493][T26369] should_fail_ex+0x265/0x280 [ 468.104527][T26369] ? legacy_init_fs_context+0x31/0x80 [ 468.104560][T26369] should_failslab+0x8c/0xb0 [ 468.104580][T26369] __kmalloc_cache_noprof+0x4c/0x320 [ 468.104686][T26369] legacy_init_fs_context+0x31/0x80 [ 468.104714][T26369] alloc_fs_context+0x3ec/0x4e0 [ 468.104747][T26369] fs_context_for_mount+0x22/0x30 [ 468.104805][T26369] do_new_mount+0xe9/0x680 [ 468.104903][T26369] path_mount+0x4a4/0xb20 [ 468.104935][T26369] ? user_path_at+0x109/0x130 [ 468.104961][T26369] __se_sys_mount+0x28f/0x2e0 [ 468.104976][T26369] ? fput+0x8f/0xc0 [ 468.105039][T26369] __x64_sys_mount+0x67/0x80 [ 468.105055][T26369] x64_sys_call+0xd36/0x2fb0 [ 468.105075][T26369] do_syscall_64+0xd2/0x200 [ 468.105094][T26369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 468.105123][T26369] ? clear_bhb_loop+0x40/0x90 [ 468.105146][T26369] ? clear_bhb_loop+0x40/0x90 [ 468.105196][T26369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.105271][T26369] RIP: 0033:0x7f7289a6e929 [ 468.105287][T26369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.105307][T26369] RSP: 002b:00007f72880d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 468.105323][T26369] RAX: ffffffffffffffda RBX: 00007f7289c95fa0 RCX: 00007f7289a6e929 [ 468.105333][T26369] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 468.105344][T26369] RBP: 00007f72880d7090 R08: 0000200000000080 R09: 0000000000000000 [ 468.105382][T26369] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000002 [ 468.105395][T26369] R13: 0000000000000000 R14: 00007f7289c95fa0 R15: 00007ffc8c659e48 [ 468.105412][T26369] [ 468.322488][T26359] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7691'. [ 468.332688][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7691'. [ 468.342770][T26359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7691'. [ 468.372725][T26359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7691'. [ 468.390851][T26380] usb usb1: usbfs: process 26380 (syz.3.7699) did not claim interface 63 before use [ 468.450901][T26387] warn_alloc: 6 callbacks suppressed [ 468.450916][T26387] syz.4.7701: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 468.457579][T26376] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7697'. [ 468.470877][T26387] CPU: 0 UID: 0 PID: 26387 Comm: syz.4.7701 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 468.470937][T26387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.470950][T26387] Call Trace: [ 468.471013][T26387] [ 468.471020][T26387] __dump_stack+0x1d/0x30 [ 468.471043][T26387] dump_stack_lvl+0xe8/0x140 [ 468.471062][T26387] dump_stack+0x15/0x1b [ 468.471079][T26387] warn_alloc+0x12b/0x1a0 [ 468.471170][T26387] ? audit_log_end+0x1d7/0x1f0 [ 468.471190][T26387] ? audit_log_end+0x1d7/0x1f0 [ 468.471209][T26387] __vmalloc_node_range_noprof+0x9c/0xe00 [ 468.471292][T26387] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 468.471321][T26387] ? __rcu_read_unlock+0x4f/0x70 [ 468.471343][T26387] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 468.471376][T26387] ? perf_cgroup_switch+0x132/0x460 [ 468.471464][T26387] ? update_load_avg+0x1da/0x820 [ 468.471498][T26387] ? __list_add_valid_or_report+0x38/0xe0 [ 468.471519][T26387] ? should_fail_ex+0x30/0x280 [ 468.471578][T26387] ? xskq_create+0x36/0xe0 [ 468.471602][T26387] vmalloc_user_noprof+0x7d/0xb0 [ 468.471633][T26387] ? xskq_create+0x80/0xe0 [ 468.471654][T26387] xskq_create+0x80/0xe0 [ 468.471746][T26387] xsk_init_queue+0x95/0xf0 [ 468.471768][T26387] xsk_setsockopt+0x35c/0x510 [ 468.471831][T26387] ? __pfx_xsk_setsockopt+0x10/0x10 [ 468.471852][T26387] __sys_setsockopt+0x181/0x200 [ 468.471951][T26387] __x64_sys_setsockopt+0x64/0x80 [ 468.471982][T26387] x64_sys_call+0x2bd5/0x2fb0 [ 468.472003][T26387] do_syscall_64+0xd2/0x200 [ 468.472021][T26387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 468.472148][T26387] ? clear_bhb_loop+0x40/0x90 [ 468.472170][T26387] ? clear_bhb_loop+0x40/0x90 [ 468.472191][T26387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.472212][T26387] RIP: 0033:0x7fbe5fe0e929 [ 468.472228][T26387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.472313][T26387] RSP: 002b:00007fbe5e477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.472406][T26387] RAX: ffffffffffffffda RBX: 00007fbe60035fa0 RCX: 00007fbe5fe0e929 [ 468.472419][T26387] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 468.472432][T26387] RBP: 00007fbe5fe90b39 R08: 0000000000000004 R09: 0000000000000000 [ 468.472444][T26387] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.472457][T26387] R13: 0000000000000000 R14: 00007fbe60035fa0 R15: 00007fff12083258 [ 468.472476][T26387] [ 468.472482][T26387] Mem-Info: [ 468.479951][T26376] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7697'. [ 468.570491][T26381] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7698'. [ 468.575337][T26387] active_anon:7044 inactive_anon:12 isolated_anon:0 [ 468.575337][T26387] active_file:7914 inactive_file:13450 isolated_file:0 [ 468.575337][T26387] unevictable:0 dirty:360 writeback:0 [ 468.575337][T26387] slab_reclaimable:3433 slab_unreclaimable:56869 [ 468.575337][T26387] mapped:29485 shmem:627 pagetables:1057 [ 468.575337][T26387] sec_pagetables:0 bounce:0 [ 468.575337][T26387] kernel_misc_reclaimable:0 [ 468.575337][T26387] free:1826072 free_pcp:15115 free_cma:0 [ 468.580156][T26381] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7698'. [ 468.584535][T26387] Node 0 active_anon:28176kB inactive_anon:48kB active_file:31656kB inactive_file:53800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117940kB dirty:1440kB writeback:0kB shmem:2508kB writeback_tmp:0kB kernel_stack:3920kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.660222][T26396] netlink: 'syz.0.7703': attribute type 1 has an invalid length. [ 468.677372][T26387] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.869792][T26387] lowmem_reserve[]: 0 2882 7860 7860 [ 468.875110][T26387] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 468.905486][T26387] lowmem_reserve[]: 0 0 4978 4978 [ 468.910582][T26387] Node 0 Normal free:4340836kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28060kB inactive_anon:48kB active_file:31656kB inactive_file:53800kB unevictable:0kB writepending:1440kB present:5242880kB managed:5098232kB mlocked:104kB bounce:0kB free_pcp:56576kB local_pcp:15936kB free_cma:0kB [ 468.943090][T26387] lowmem_reserve[]: 0 0 0 0 [ 468.947703][T26387] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.960434][T26387] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 468.976752][T26387] Node 0 Normal: 3850*4kB (UME) 2347*8kB (UME) 1395*16kB (UME) 2079*32kB (UME) 1771*64kB (UME) 1102*128kB (UME) 822*256kB (UME) 586*512kB (UME) 464*1024kB (UME) 168*2048kB (UM) 643*4096kB (UM) = 4340816kB [ 468.996926][T26387] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 469.006298][T26387] 21958 total pagecache pages [ 469.011007][T26387] 11 pages in swap cache [ 469.015225][T26387] Free swap = 124784kB [ 469.019433][T26387] Total swap = 124996kB [ 469.023627][T26387] 2097051 pages RAM [ 469.027484][T26387] 0 pages HighMem/MovableOnly [ 469.032139][T26387] 80812 pages reserved [ 469.055044][T26402] team8: entered promiscuous mode [ 469.060138][T26402] team8: entered allmulticast mode [ 469.125523][T26405] team12: entered promiscuous mode [ 469.132937][T26405] team12: entered allmulticast mode [ 469.301357][T26422] SELinux: syz.4.7714 (26422) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 469.427118][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 469.427194][ T29] audit: type=1400 audit(3831.548:33118): avc: denied { execmem } for pid=26429 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 469.487882][ T29] audit: type=1400 audit(3831.601:33119): avc: denied { read } for pid=26433 comm="syz.1.7718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 469.550614][ T29] audit: type=1326 audit(3831.674:33120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26440 comm="syz.0.7720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7289a6e929 code=0x0 [ 469.681199][ T29] audit: type=1400 audit(3831.706:33121): avc: denied { map } for pid=26433 comm="syz.1.7718" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.705129][ T29] audit: type=1400 audit(3831.706:33122): avc: denied { read write } for pid=26433 comm="syz.1.7718" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.729617][ T29] audit: type=1400 audit(3831.748:33123): avc: denied { create } for pid=26429 comm="syz.4.7716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 469.748669][ T29] audit: type=1400 audit(3831.758:33124): avc: denied { read } for pid=26429 comm="syz.4.7716" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 469.772590][ T29] audit: type=1400 audit(3831.758:33125): avc: denied { open } for pid=26429 comm="syz.4.7716" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 469.796908][ T29] audit: type=1400 audit(3831.758:33126): avc: denied { ioctl } for pid=26429 comm="syz.4.7716" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 469.830850][ T29] audit: type=1326 audit(3831.968:33127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26424 comm="syz.3.7715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a0aae929 code=0x7ffc0000 [ 470.059370][T26452] team9: entered promiscuous mode [ 470.064518][T26452] team9: entered allmulticast mode [ 470.197438][T26473] FAULT_INJECTION: forcing a failure. [ 470.197438][T26473] name failslab, interval 1, probability 0, space 0, times 0 [ 470.210307][T26473] CPU: 1 UID: 0 PID: 26473 Comm: syz.1.7730 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 470.210383][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.210393][T26473] Call Trace: [ 470.210399][T26473] [ 470.210406][T26473] __dump_stack+0x1d/0x30 [ 470.210499][T26473] dump_stack_lvl+0xe8/0x140 [ 470.210563][T26473] dump_stack+0x15/0x1b [ 470.210577][T26473] should_fail_ex+0x265/0x280 [ 470.210602][T26473] should_failslab+0x8c/0xb0 [ 470.210643][T26473] kmem_cache_alloc_noprof+0x50/0x310 [ 470.210666][T26473] ? audit_log_start+0x365/0x6c0 [ 470.210720][T26473] audit_log_start+0x365/0x6c0 [ 470.210793][T26473] ? avc_has_perm+0xd3/0x150 [ 470.210818][T26473] audit_seccomp+0x48/0x100 [ 470.210847][T26473] ? __seccomp_filter+0x68c/0x10d0 [ 470.210865][T26473] __seccomp_filter+0x69d/0x10d0 [ 470.210884][T26473] ? msgctl_down+0xa4/0x240 [ 470.210904][T26473] ? __se_sys_msgctl+0x25c/0x290 [ 470.210924][T26473] __secure_computing+0x82/0x150 [ 470.211021][T26473] syscall_trace_enter+0xcf/0x1e0 [ 470.211060][T26473] do_syscall_64+0xac/0x200 [ 470.211075][T26473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 470.211095][T26473] ? clear_bhb_loop+0x40/0x90 [ 470.211112][T26473] ? clear_bhb_loop+0x40/0x90 [ 470.211203][T26473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.211220][T26473] RIP: 0033:0x7fac2919d33c [ 470.211234][T26473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 470.211247][T26473] RSP: 002b:00007fac27807030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.211262][T26473] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919d33c [ 470.211272][T26473] RDX: 000000000000000f RSI: 00007fac278070a0 RDI: 0000000000000005 [ 470.211346][T26473] RBP: 00007fac27807090 R08: 0000000000000000 R09: 0000000000000000 [ 470.211355][T26473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.211364][T26473] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 470.211378][T26473] [ 470.956534][T26497] team13: entered promiscuous mode [ 470.961731][T26497] team13: entered allmulticast mode [ 471.175104][T26509] Cannot find set identified by id 0 to match [ 471.679807][T26518] syzkaller1: entered promiscuous mode [ 471.685448][T26518] syzkaller1: entered allmulticast mode [ 472.000080][T26533] team1: entered promiscuous mode [ 472.005329][T26533] team1: entered allmulticast mode [ 472.081410][T26538] team2: entered promiscuous mode [ 472.087533][T26538] team2: entered allmulticast mode [ 472.680838][T26553] __nla_validate_parse: 15 callbacks suppressed [ 472.680848][T26553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7760'. [ 472.728051][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 472.846297][T26566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7763'. [ 473.223601][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7768'. [ 473.251135][T26579] team3: entered promiscuous mode [ 473.260857][T26579] team3: entered allmulticast mode [ 473.370743][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7772'. [ 473.377148][T26599] FAULT_INJECTION: forcing a failure. [ 473.377148][T26599] name failslab, interval 1, probability 0, space 0, times 0 [ 473.392315][T26599] CPU: 0 UID: 0 PID: 26599 Comm: syz.5.7773 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 473.392358][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.392369][T26599] Call Trace: [ 473.392375][T26599] [ 473.392382][T26599] __dump_stack+0x1d/0x30 [ 473.392404][T26599] dump_stack_lvl+0xe8/0x140 [ 473.392424][T26599] dump_stack+0x15/0x1b [ 473.392519][T26599] should_fail_ex+0x265/0x280 [ 473.392552][T26599] should_failslab+0x8c/0xb0 [ 473.392576][T26599] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 473.392666][T26599] ? sidtab_sid2str_get+0xa0/0x130 [ 473.392693][T26599] kmemdup_noprof+0x2b/0x70 [ 473.392716][T26599] sidtab_sid2str_get+0xa0/0x130 [ 473.392792][T26599] security_sid_to_context_core+0x1eb/0x2e0 [ 473.392888][T26599] security_sid_to_context+0x27/0x40 [ 473.392911][T26599] selinux_lsmprop_to_secctx+0x67/0xf0 [ 473.393019][T26599] security_lsmprop_to_secctx+0x43/0x80 [ 473.393112][T26599] audit_log_task_context+0x77/0x190 [ 473.393161][T26599] audit_log_task+0xf4/0x250 [ 473.393186][T26599] audit_seccomp+0x61/0x100 [ 473.393211][T26599] ? __seccomp_filter+0x68c/0x10d0 [ 473.393335][T26599] __seccomp_filter+0x69d/0x10d0 [ 473.393380][T26599] ? mas_walk+0xf2/0x120 [ 473.393473][T26599] __secure_computing+0x82/0x150 [ 473.393493][T26599] syscall_trace_enter+0xcf/0x1e0 [ 473.393535][T26599] do_syscall_64+0xac/0x200 [ 473.393554][T26599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 473.393641][T26599] ? clear_bhb_loop+0x40/0x90 [ 473.393659][T26599] ? clear_bhb_loop+0x40/0x90 [ 473.393694][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.393715][T26599] RIP: 0033:0x7f27e883d33c [ 473.393728][T26599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 473.393745][T26599] RSP: 002b:00007f27e6ea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.393809][T26599] RAX: ffffffffffffffda RBX: 00007f27e8a65fa0 RCX: 00007f27e883d33c [ 473.393820][T26599] RDX: 000000000000000f RSI: 00007f27e6ea70a0 RDI: 0000000000000005 [ 473.393833][T26599] RBP: 00007f27e6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.393846][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.393859][T26599] R13: 0000000000000000 R14: 00007f27e8a65fa0 R15: 00007fff13e76408 [ 473.393879][T26599] [ 473.691905][T26606] FAULT_INJECTION: forcing a failure. [ 473.691905][T26606] name failslab, interval 1, probability 0, space 0, times 0 [ 473.704558][T26606] CPU: 0 UID: 0 PID: 26606 Comm: syz.4.7776 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 473.704584][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.704594][T26606] Call Trace: [ 473.704600][T26606] [ 473.704607][T26606] __dump_stack+0x1d/0x30 [ 473.704655][T26606] dump_stack_lvl+0xe8/0x140 [ 473.704676][T26606] dump_stack+0x15/0x1b [ 473.704694][T26606] should_fail_ex+0x265/0x280 [ 473.704736][T26606] should_failslab+0x8c/0xb0 [ 473.704756][T26606] __kmalloc_noprof+0xa5/0x3e0 [ 473.704779][T26606] ? sctp_make_abort_user+0x17b/0x3a0 [ 473.704828][T26606] sctp_make_abort_user+0x17b/0x3a0 [ 473.704852][T26606] ? sctp_epaddr_lookup_transport+0x9e/0x130 [ 473.704893][T26606] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 473.704921][T26606] sctp_sendmsg+0x75f/0x18d0 [ 473.704988][T26606] ? __pfx_sctp_sendmsg+0x10/0x10 [ 473.705020][T26606] inet_sendmsg+0xc2/0xd0 [ 473.705036][T26606] __sock_sendmsg+0x102/0x180 [ 473.705058][T26606] ____sys_sendmsg+0x345/0x4e0 [ 473.705107][T26606] ___sys_sendmsg+0x17b/0x1d0 [ 473.705154][T26606] __sys_sendmmsg+0x178/0x300 [ 473.705179][T26606] __x64_sys_sendmmsg+0x57/0x70 [ 473.705195][T26606] x64_sys_call+0x2f2f/0x2fb0 [ 473.705252][T26606] do_syscall_64+0xd2/0x200 [ 473.705270][T26606] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 473.705368][T26606] ? clear_bhb_loop+0x40/0x90 [ 473.705386][T26606] ? clear_bhb_loop+0x40/0x90 [ 473.705405][T26606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.705495][T26606] RIP: 0033:0x7fbe5fe0e929 [ 473.705567][T26606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.705582][T26606] RSP: 002b:00007fbe5e477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 473.705597][T26606] RAX: ffffffffffffffda RBX: 00007fbe60035fa0 RCX: 00007fbe5fe0e929 [ 473.705608][T26606] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000005 [ 473.705618][T26606] RBP: 00007fbe5e477090 R08: 0000000000000000 R09: 0000000000000000 [ 473.705627][T26606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.705702][T26606] R13: 0000000000000000 R14: 00007fbe60035fa0 R15: 00007fff12083258 [ 473.705718][T26606] [ 473.706844][T26604] FAULT_INJECTION: forcing a failure. [ 473.706844][T26604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.759263][T26610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7775'. [ 473.762983][T26604] CPU: 0 UID: 0 PID: 26604 Comm: syz.5.7774 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 473.763055][T26604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.763067][T26604] Call Trace: [ 473.763073][T26604] [ 473.763082][T26604] __dump_stack+0x1d/0x30 [ 473.763104][T26604] dump_stack_lvl+0xe8/0x140 [ 473.763171][T26604] dump_stack+0x15/0x1b [ 473.763210][T26604] should_fail_ex+0x265/0x280 [ 473.763317][T26604] should_fail+0xb/0x20 [ 473.763378][T26604] should_fail_usercopy+0x1a/0x20 [ 473.763451][T26604] _copy_to_user+0x20/0xa0 [ 473.763477][T26604] simple_read_from_buffer+0xb5/0x130 [ 473.763588][T26604] proc_fail_nth_read+0x100/0x140 [ 473.763609][T26604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.763646][T26604] vfs_read+0x1a0/0x6f0 [ 473.763741][T26604] ? __rcu_read_unlock+0x4f/0x70 [ 473.763763][T26604] ? __rcu_read_unlock+0x4f/0x70 [ 473.763785][T26604] ? __fget_files+0x184/0x1c0 [ 473.763807][T26604] ksys_read+0xda/0x1a0 [ 473.763838][T26604] __x64_sys_read+0x40/0x50 [ 473.763939][T26604] x64_sys_call+0x2d77/0x2fb0 [ 473.763961][T26604] do_syscall_64+0xd2/0x200 [ 473.763978][T26604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 473.764004][T26604] ? clear_bhb_loop+0x40/0x90 [ 473.764025][T26604] ? clear_bhb_loop+0x40/0x90 [ 473.764124][T26604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.764145][T26604] RIP: 0033:0x7f27e883d33c [ 473.764161][T26604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 473.764179][T26604] RSP: 002b:00007f27e6ea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.764201][T26604] RAX: ffffffffffffffda RBX: 00007f27e8a65fa0 RCX: 00007f27e883d33c [ 473.764214][T26604] RDX: 000000000000000f RSI: 00007f27e6ea70a0 RDI: 0000000000000006 [ 473.764226][T26604] RBP: 00007f27e6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.764238][T26604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.764249][T26604] R13: 0000000000000000 R14: 00007f27e8a65fa0 R15: 00007fff13e76408 [ 473.764268][T26604] [ 473.808132][T26601] hub 6-0:1.0: USB hub found [ 474.000932][T26622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.002478][T26601] hub 6-0:1.0: 8 ports detected [ 474.008236][T26622] bridge0: port 3(bond1) entered blocking state [ 474.184283][T26622] bridge0: port 3(bond1) entered disabled state [ 474.190855][T26622] bond1: entered allmulticast mode [ 474.197197][T26622] bond1: entered promiscuous mode [ 474.204140][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 474.204160][ T29] audit: type=1404 audit(3836.556:33739): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 474.226944][ T29] audit: type=1400 audit(3836.588:33740): avc: denied { recv } for pid=26614 comm="syz.4.7778" saddr=10.128.0.163 src=30036 daddr=10.128.0.185 dest=42722 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 474.267352][ T29] audit: type=1400 audit(3836.619:33741): avc: denied { prog_load } for pid=26630 comm="syz.0.7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 474.293588][ T29] audit: type=1400 audit(3836.619:33742): avc: denied { bpf } for pid=26630 comm="syz.0.7782" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.319699][ T29] audit: type=1400 audit(3836.672:33743): avc: denied { perfmon } for pid=26632 comm="syz.5.7783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.349861][ T29] audit: type=1400 audit(3836.703:33744): avc: denied { prog_run } for pid=26634 comm="syz.1.7784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 474.408995][T26637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7785'. [ 474.615620][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7786'. [ 475.326197][ T29] audit: type=1400 audit(3836.703:33745): avc: denied { watch watch_reads } for pid=26635 comm="syz.3.7785" path="/548" dev="tmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 475.348890][ T29] audit: type=1400 audit(3836.703:33746): avc: denied { map_create } for pid=26635 comm="syz.3.7785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 475.367747][ T29] audit: type=1400 audit(3836.703:33747): avc: denied { map_read map_write } for pid=26635 comm="syz.3.7785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 475.387408][ T29] audit: type=1400 audit(3836.735:33748): avc: denied { create } for pid=26635 comm="syz.3.7785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.366240][T26660] lo speed is unknown, defaulting to 1000 [ 477.385988][T26662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7790'. [ 477.463137][T26667] Cannot find add_set index 0 as target [ 477.510463][T26662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=26662 comm=syz.4.7790 [ 477.623331][T26660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7788'. [ 477.904775][T26683] ipip0: entered promiscuous mode [ 478.111173][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7802'. [ 478.145420][T26698] team14: entered promiscuous mode [ 478.160887][T26698] team14: entered allmulticast mode [ 479.329134][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 479.329203][ T29] audit: type=1400 audit(5377.933:33844): avc: denied { mounton } for pid=26716 comm="syz.1.7808" path="/395" dev="tmpfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 479.420376][ T29] audit: type=1400 audit(5378.038:33845): avc: denied { setopt } for pid=26720 comm="syz.5.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 479.439552][ T29] audit: type=1400 audit(5378.038:33846): avc: denied { create } for pid=26720 comm="syz.5.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.580119][ T29] audit: type=1400 audit(5378.080:33847): avc: denied { setopt } for pid=26720 comm="syz.5.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.599330][ T29] audit: type=1400 audit(5378.090:33848): avc: denied { bind } for pid=26720 comm="syz.5.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.618215][ T29] audit: type=1400 audit(5378.153:33849): avc: denied { bind } for pid=26720 comm="syz.5.7809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 479.819263][ T29] audit: type=1326 audit(6146.455:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26733 comm="syz.0.7814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7289a6e929 code=0x0 [ 479.989578][T26735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7813'. [ 480.111312][ T29] audit: type=1400 audit(6146.759:33851): avc: denied { connect } for pid=26750 comm="syz.3.7817" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.154081][T26754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7818'. [ 480.198513][ T29] audit: type=1400 audit(6146.843:33852): avc: denied { wake_alarm } for pid=26757 comm="syz.3.7819" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.219421][ T29] audit: type=1400 audit(6146.854:33853): avc: denied { read } for pid=26757 comm="syz.3.7819" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 480.423688][T26772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.462474][T26772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.510763][T26772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.582457][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7825'. [ 480.592466][T26772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.645739][T26772] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.658752][T26772] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.670462][T26772] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.683172][T26772] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.921176][T26802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7834'. [ 481.159342][T26825] IPVS: Error connecting to the multicast addr [ 481.172245][T26825] netlink: 'syz.3.7837': attribute type 1 has an invalid length. [ 481.222558][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7842'. [ 481.231538][T26827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.239064][T26827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.246803][T26827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.254322][T26827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.317182][T26836] warn_alloc: 1 callbacks suppressed [ 481.317195][T26836] syz.1.7845: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 481.337176][T26836] CPU: 1 UID: 0 PID: 26836 Comm: syz.1.7845 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 481.337206][T26836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.337258][T26836] Call Trace: [ 481.337262][T26836] [ 481.337267][T26836] __dump_stack+0x1d/0x30 [ 481.337281][T26836] dump_stack_lvl+0xe8/0x140 [ 481.337292][T26836] dump_stack+0x15/0x1b [ 481.337301][T26836] warn_alloc+0x12b/0x1a0 [ 481.337318][T26836] ? audit_log_end+0x1d7/0x1f0 [ 481.337402][T26836] ? audit_log_end+0x1d7/0x1f0 [ 481.337412][T26836] __vmalloc_node_range_noprof+0x9c/0xe00 [ 481.337488][T26836] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 481.337540][T26836] ? slow_avc_audit+0x104/0x140 [ 481.337555][T26836] ? should_fail_ex+0x30/0x280 [ 481.337601][T26836] ? xskq_create+0x36/0xe0 [ 481.337614][T26836] vmalloc_user_noprof+0x7d/0xb0 [ 481.337631][T26836] ? xskq_create+0x80/0xe0 [ 481.337697][T26836] xskq_create+0x80/0xe0 [ 481.337710][T26836] xsk_init_queue+0x95/0xf0 [ 481.337763][T26836] xsk_setsockopt+0x35c/0x510 [ 481.337774][T26836] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.337786][T26836] __sys_setsockopt+0x181/0x200 [ 481.337889][T26836] __x64_sys_setsockopt+0x64/0x80 [ 481.337927][T26836] x64_sys_call+0x2bd5/0x2fb0 [ 481.337939][T26836] do_syscall_64+0xd2/0x200 [ 481.337951][T26836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 481.337984][T26836] ? clear_bhb_loop+0x40/0x90 [ 481.338102][T26836] ? clear_bhb_loop+0x40/0x90 [ 481.338114][T26836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.338168][T26836] RIP: 0033:0x7fac2919e929 [ 481.338177][T26836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.338187][T26836] RSP: 002b:00007fac27807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.338198][T26836] RAX: ffffffffffffffda RBX: 00007fac293c5fa0 RCX: 00007fac2919e929 [ 481.338206][T26836] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 481.338237][T26836] RBP: 00007fac29220b39 R08: 0000000000000004 R09: 0000000000000000 [ 481.338244][T26836] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.338251][T26836] R13: 0000000000000000 R14: 00007fac293c5fa0 R15: 00007ffedc5327b8 [ 481.338261][T26836] [ 481.338265][T26836] Mem-Info: [ 481.566360][T26836] active_anon:7096 inactive_anon:14 isolated_anon:0 [ 481.566360][T26836] active_file:7914 inactive_file:13454 isolated_file:0 [ 481.566360][T26836] unevictable:0 dirty:349 writeback:0 [ 481.566360][T26836] slab_reclaimable:3437 slab_unreclaimable:56934 [ 481.566360][T26836] mapped:29512 shmem:596 pagetables:1033 [ 481.566360][T26836] sec_pagetables:0 bounce:0 [ 481.566360][T26836] kernel_misc_reclaimable:0 [ 481.566360][T26836] free:1826929 free_pcp:14200 free_cma:0 [ 481.611411][T26836] Node 0 active_anon:28384kB inactive_anon:56kB active_file:31656kB inactive_file:53816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118048kB dirty:1396kB writeback:0kB shmem:2384kB writeback_tmp:0kB kernel_stack:3968kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 481.640436][T26836] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.669010][T26836] lowmem_reserve[]: 0 2882 7860 7860 [ 481.674375][T26836] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 481.704418][T26836] lowmem_reserve[]: 0 0 4978 4978 [ 481.709514][T26836] Node 0 Normal free:4344520kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28384kB inactive_anon:56kB active_file:31656kB inactive_file:53816kB unevictable:0kB writepending:1396kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:53272kB local_pcp:40744kB free_cma:0kB [ 481.741640][T26836] lowmem_reserve[]: 0 0 0 0 [ 481.746141][T26836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.758771][T26836] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 481.774838][T26836] Node 0 Normal: 4908*4kB (UME) 2545*8kB (UME) 1205*16kB (UME) 2362*32kB (UME) 1848*64kB (UM) 1158*128kB (UME) 873*256kB (UME) 639*512kB (UME) 513*1024kB (UME) 178*2048kB (UM) 611*4096kB (UM) = 4344520kB [ 481.795075][T26836] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 481.804427][T26836] 21959 total pagecache pages [ 481.809102][T26836] 10 pages in swap cache [ 481.813317][T26836] Free swap = 124776kB [ 481.817492][T26836] Total swap = 124996kB [ 481.821719][T26836] 2097051 pages RAM [ 481.825557][T26836] 0 pages HighMem/MovableOnly [ 481.830246][T26836] 80812 pages reserved [ 481.873185][T26843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7847'. [ 481.937964][T26852] netlink: 'syz.5.7852': attribute type 13 has an invalid length. [ 481.973452][T26852] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 481.981792][T26852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.999526][T26860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7852'. [ 482.008563][T26860] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7852'. [ 482.214086][T26882] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 482.214143][T26881] IPVS: stopping master sync thread 26882 ... [ 482.242581][T26881] netlink: 'syz.0.7861': attribute type 1 has an invalid length. [ 483.115892][T26901] __nla_validate_parse: 1 callbacks suppressed [ 483.115908][T26901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7869'. [ 483.273843][T26920] netlink: 'syz.3.7874': attribute type 6 has an invalid length. [ 483.333305][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7874'. [ 483.415413][T26927] netlink: 'syz.0.7878': attribute type 6 has an invalid length. [ 483.489955][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7878'. [ 483.773853][T26934] IPVS: stopping master sync thread 26935 ... [ 483.783127][T26935] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 483.822503][T26940] netlink: 'syz.5.7881': attribute type 1 has an invalid length. [ 483.859077][T26943] netlink: 'syz.4.7882': attribute type 6 has an invalid length. [ 483.898983][T26943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7882'. [ 483.911637][T26948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7886'. [ 484.096319][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 484.096333][ T29] audit: type=1326 audit(9222.940:34101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.4.7897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe5fe0e929 code=0x0 [ 484.126683][ T29] audit: type=1400 audit(9222.940:34102): avc: denied { prog_run } for pid=26972 comm="syz.3.7898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 484.226566][ T29] audit: type=1400 audit(9223.045:34103): avc: denied { create } for pid=26968 comm="syz.0.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.246731][ T29] audit: type=1400 audit(9223.045:34104): avc: denied { write } for pid=26968 comm="syz.0.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.266769][ T29] audit: type=1400 audit(9223.045:34105): avc: denied { read } for pid=26968 comm="syz.0.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.286722][ T29] audit: type=1400 audit(9223.077:34106): avc: denied { create } for pid=26968 comm="syz.0.7896" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 484.307761][ T29] audit: type=1400 audit(9223.077:34107): avc: denied { create } for pid=26968 comm="syz.0.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 484.403119][ T29] audit: type=1326 audit(9223.192:34108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5fe0e929 code=0x7ffc0000 [ 484.426299][ T29] audit: type=1326 audit(9223.192:34109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5fe0e929 code=0x7ffc0000 [ 484.449434][ T29] audit: type=1326 audit(9223.192:34110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.4.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbe5fe0e929 code=0x7ffc0000 [ 484.678888][T26986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7903'. [ 484.795466][T26994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7904'. [ 485.580965][T27013] lo speed is unknown, defaulting to 1000 [ 485.922611][T27030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7919'. [ 486.714298][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7935'. [ 486.984645][T27116] lo speed is unknown, defaulting to 1000 [ 487.100426][T27132] netlink: 'syz.4.7952': attribute type 6 has an invalid length. [ 487.141423][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7952'. [ 487.469430][T27175] netlink: 'syz.0.7955': attribute type 6 has an invalid length. [ 487.630329][T27197] netlink: 'syz.4.7957': attribute type 6 has an invalid length. [ 487.780520][T27225] FAULT_INJECTION: forcing a failure. [ 487.780520][T27225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.793660][T27225] CPU: 1 UID: 0 PID: 27225 Comm: syz.0.7959 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 487.793684][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.793695][T27225] Call Trace: [ 487.793701][T27225] [ 487.793761][T27225] __dump_stack+0x1d/0x30 [ 487.793782][T27225] dump_stack_lvl+0xe8/0x140 [ 487.793799][T27225] dump_stack+0x15/0x1b [ 487.793813][T27225] should_fail_ex+0x265/0x280 [ 487.793844][T27225] should_fail+0xb/0x20 [ 487.793937][T27225] should_fail_usercopy+0x1a/0x20 [ 487.794027][T27225] _copy_to_user+0x20/0xa0 [ 487.794047][T27225] simple_read_from_buffer+0xb5/0x130 [ 487.794081][T27225] proc_fail_nth_read+0x100/0x140 [ 487.794100][T27225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.794156][T27225] vfs_read+0x1a0/0x6f0 [ 487.794182][T27225] ? __rcu_read_unlock+0x4f/0x70 [ 487.794206][T27225] ? __fget_files+0x184/0x1c0 [ 487.794231][T27225] ? __sys_setsockopt+0x18e/0x200 [ 487.794325][T27225] ksys_read+0xda/0x1a0 [ 487.794354][T27225] __x64_sys_read+0x40/0x50 [ 487.794380][T27225] x64_sys_call+0x2d77/0x2fb0 [ 487.794478][T27225] do_syscall_64+0xd2/0x200 [ 487.794496][T27225] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 487.794596][T27225] ? clear_bhb_loop+0x40/0x90 [ 487.794619][T27225] ? clear_bhb_loop+0x40/0x90 [ 487.794641][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.794661][T27225] RIP: 0033:0x7f7289a6d33c [ 487.794712][T27225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 487.794728][T27225] RSP: 002b:00007f72880d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.794812][T27225] RAX: ffffffffffffffda RBX: 00007f7289c95fa0 RCX: 00007f7289a6d33c [ 487.794826][T27225] RDX: 000000000000000f RSI: 00007f72880d70a0 RDI: 0000000000000007 [ 487.794900][T27225] RBP: 00007f72880d7090 R08: 0000000000000000 R09: 0000000000000000 [ 487.794912][T27225] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 487.794924][T27225] R13: 0000000000000000 R14: 00007f7289c95fa0 R15: 00007ffc8c659e48 [ 487.794940][T27225] [ 488.010614][T27228] __nla_validate_parse: 2 callbacks suppressed [ 488.010627][T27228] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7960'. [ 488.114339][T27244] netlink: 'syz.5.7964': attribute type 6 has an invalid length. [ 488.164551][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7964'. [ 488.215937][T27251] lo speed is unknown, defaulting to 1000 [ 488.267588][T27253] binfmt_misc: register: failed to install interpreter file ./file2 [ 488.457663][T27251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.472201][T27251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.553973][T27270] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7974'. [ 488.674564][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7980'. [ 488.692488][T27282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7979'. [ 488.808988][T27298] netlink: 'syz.3.7983': attribute type 6 has an invalid length. [ 488.833417][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7983'. [ 489.031269][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 489.031283][ T29] audit: type=1400 audit(13342.120:34705): avc: denied { create } for pid=27311 comm="syz.1.7988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.066523][ T29] audit: type=1400 audit(13342.152:34706): avc: denied { ioctl } for pid=27311 comm="syz.1.7988" path="socket:[90034]" dev="sockfs" ino=90034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 489.071632][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7988'. [ 489.104868][T27312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.112297][T27312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.120467][T27312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.127893][T27312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.226001][ T29] audit: type=1400 audit(13342.320:34707): avc: denied { create } for pid=27319 comm="syz.3.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 489.251431][T27323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7992'. [ 489.265490][ T29] audit: type=1400 audit(13342.341:34708): avc: denied { setopt } for pid=27319 comm="syz.3.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 489.356922][T27329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27329 comm=syz.1.7994 [ 489.399249][ T29] audit: type=1400 audit(13342.509:34709): avc: denied { audit_write } for pid=27327 comm="syz.1.7994" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 489.431093][ T29] audit: type=1107 audit(13342.519:34710): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 489.654750][ T29] audit: type=1400 audit(13342.771:34711): avc: denied { create } for pid=27337 comm="syz.5.7997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.674589][ T29] audit: type=1400 audit(13342.771:34712): avc: denied { ioctl } for pid=27337 comm="syz.5.7997" path="socket:[89058]" dev="sockfs" ino=89058 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.873396][ T29] audit: type=1400 audit(13342.939:34713): avc: denied { read } for pid=27335 comm="syz.1.7996" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 489.897688][ T29] audit: type=1400 audit(13342.939:34714): avc: denied { open } for pid=27335 comm="syz.1.7996" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 490.086248][T27352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8003'. [ 490.167170][T27353] lo speed is unknown, defaulting to 1000 [ 490.237688][T27353] chnl_net:caif_netlink_parms(): no params data found [ 490.270244][T27353] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.277404][T27353] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.284514][T27353] bridge_slave_0: entered allmulticast mode [ 490.291203][T27353] bridge_slave_0: entered promiscuous mode [ 490.298168][T27353] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.305256][T27353] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.312605][T27353] bridge_slave_1: entered allmulticast mode [ 490.319064][T27353] bridge_slave_1: entered promiscuous mode [ 490.343102][T27353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.355027][T27353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.378971][T27353] team0: Port device team_slave_0 added [ 490.389590][T27353] team0: Port device team_slave_1 added [ 490.411156][ T12] bond1: left allmulticast mode [ 490.416121][ T12] bond1: left promiscuous mode [ 490.421110][ T12] bridge0: port 3(bond1) entered disabled state [ 490.428476][ T12] bridge_slave_1: left allmulticast mode [ 490.434158][ T12] bridge_slave_1: left promiscuous mode [ 490.439903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.448993][ T12] bridge_slave_0: left allmulticast mode [ 490.454685][ T12] bridge_slave_0: left promiscuous mode [ 490.460436][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.554127][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.564347][ T12] bond_slave_0: left promiscuous mode [ 490.571126][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.580105][ T12] bond_slave_1: left promiscuous mode [ 490.586370][ T12] $Hÿ (unregistering): Released all slaves [ 490.595145][ T12] bond0 (unregistering): left allmulticast mode [ 490.605509][ T12] bond0 (unregistering): Released all slaves [ 490.613944][ T12] bond1 (unregistering): Released all slaves [ 490.622956][T27353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.630026][T27353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.656073][T27353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.667832][T27353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.674773][T27353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.700932][T27353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.752465][ T12] hsr_slave_0: left promiscuous mode [ 490.758732][ T12] hsr_slave_1: left promiscuous mode [ 490.764410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.772833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.881316][T27353] hsr_slave_0: entered promiscuous mode [ 490.888368][T27353] hsr_slave_1: entered promiscuous mode [ 490.894268][T27353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.901913][T27353] Cannot create hsr debugfs directory [ 490.975116][T27384] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8010'. [ 491.045360][T27376] syz.1.8008 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 491.056371][T27376] CPU: 0 UID: 0 PID: 27376 Comm: syz.1.8008 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 491.056399][T27376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.056409][T27376] Call Trace: [ 491.056478][T27376] [ 491.056505][T27376] __dump_stack+0x1d/0x30 [ 491.056526][T27376] dump_stack_lvl+0xe8/0x140 [ 491.056545][T27376] dump_stack+0x15/0x1b [ 491.056569][T27376] dump_header+0x81/0x220 [ 491.056628][T27376] oom_kill_process+0x334/0x3f0 [ 491.056659][T27376] out_of_memory+0x979/0xb80 [ 491.056725][T27376] try_charge_memcg+0x5e6/0x9e0 [ 491.056753][T27376] charge_memcg+0x51/0xc0 [ 491.056784][T27376] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 491.056818][T27376] __read_swap_cache_async+0x1df/0x350 [ 491.056863][T27376] swap_cluster_readahead+0x277/0x3e0 [ 491.056897][T27376] swapin_readahead+0xde/0x6f0 [ 491.056946][T27376] ? __filemap_get_folio+0x4f7/0x6b0 [ 491.056977][T27376] ? __rcu_read_unlock+0x34/0x70 [ 491.057005][T27376] ? swap_cache_get_folio+0x77/0x200 [ 491.057033][T27376] do_swap_page+0x301/0x2430 [ 491.057052][T27376] ? css_rstat_updated+0xcd/0x5b0 [ 491.057157][T27376] ? __pfx_default_wake_function+0x10/0x10 [ 491.057184][T27376] handle_mm_fault+0x9a5/0x2be0 [ 491.057275][T27376] ? mas_walk+0xf2/0x120 [ 491.057309][T27376] do_user_addr_fault+0x636/0x1090 [ 491.057388][T27376] exc_page_fault+0x62/0xa0 [ 491.057416][T27376] asm_exc_page_fault+0x26/0x30 [ 491.057500][T27376] RIP: 0033:0x7fac2907538c [ 491.057510][T27376] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 491.057521][T27376] RSP: 002b:00007ffedc532920 EFLAGS: 00010283 [ 491.057530][T27376] RAX: 0000000000000000 RBX: 00007fac293c6080 RCX: 0000000000000000 [ 491.057538][T27376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557fea4808 [ 491.057545][T27376] RBP: 00007fac293c7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 491.057552][T27376] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000007c201 [ 491.057565][T27376] R13: 00007ffedc532a10 R14: ffffffffffffffff R15: 00007ffedc532a30 [ 491.057575][T27376] [ 491.270786][T27376] memory: usage 307200kB, limit 307200kB, failcnt 1069 [ 491.277840][T27376] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 491.285770][T27376] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 491.293056][T27376] Memory cgroup stats for /syz1: [ 491.293447][T27376] cache 0 [ 491.301361][T27376] rss 0 [ 491.304122][T27376] shmem 0 [ 491.307062][T27376] mapped_file 0 [ 491.310499][T27376] dirty 0 [ 491.313410][T27376] writeback 8192 [ 491.316954][T27376] workingset_refault_anon 239 [ 491.321656][T27376] workingset_refault_file 0 [ 491.326169][T27376] swap 184320 [ 491.329508][T27376] swapcached 12288 [ 491.333237][T27376] pgpgin 161823 [ 491.336671][T27376] pgpgout 161820 [ 491.340269][T27376] pgfault 189263 [ 491.343803][T27376] pgmajfault 125 [ 491.347351][T27376] inactive_anon 12288 [ 491.351390][T27376] active_anon 0 [ 491.354878][T27376] inactive_file 0 [ 491.358500][T27376] active_file 0 [ 491.361973][T27376] unevictable 0 [ 491.365577][T27376] hierarchical_memory_limit 314572800 [ 491.371059][T27376] hierarchical_memsw_limit 9223372036854771712 [ 491.377285][T27376] total_cache 0 [ 491.380770][T27376] total_rss 0 [ 491.384110][T27376] total_shmem 0 [ 491.387567][T27376] total_mapped_file 0 [ 491.391608][T27376] total_dirty 0 [ 491.395164][T27376] total_writeback 8192 [ 491.399232][T27376] total_workingset_refault_anon 239 [ 491.404474][T27376] total_workingset_refault_file 0 [ 491.409532][T27376] total_swap 184320 [ 491.413338][T27376] total_swapcached 12288 [ 491.417567][T27376] total_pgpgin 161823 [ 491.421595][T27376] total_pgpgout 161820 [ 491.425653][T27376] total_pgfault 189263 [ 491.429715][T27376] total_pgmajfault 125 [ 491.433761][T27376] total_inactive_anon 12288 [ 491.438259][T27376] total_active_anon 0 [ 491.442362][T27376] total_inactive_file 0 [ 491.446586][T27376] total_active_file 0 [ 491.450691][T27376] total_unevictable 0 [ 491.454650][T27376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8008,pid=27376,uid=0 [ 491.469392][T27376] Memory cgroup out of memory: Killed process 27376 (syz.1.8008) total-vm:93620kB, anon-rss:1064kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 492.074176][T27353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.083618][T27353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.092377][T27353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.101042][T27353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.130865][T27353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.142661][T27353] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.151541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.158610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.169456][ T2193] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.176522][ T2193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.237544][T27353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.296753][T27353] veth0_vlan: entered promiscuous mode [ 492.305303][T27353] veth1_vlan: entered promiscuous mode [ 492.321980][T27353] veth0_macvtap: entered promiscuous mode [ 492.330679][T27353] veth1_macvtap: entered promiscuous mode [ 492.348325][T27353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.370105][T27353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.400757][T27353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.409606][T27353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.418296][T27353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.427177][T27353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.059027][T27495] __nla_validate_parse: 1 callbacks suppressed [ 493.059100][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8041'. [ 493.392524][T27518] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.430029][T27518] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.487358][T27518] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.497370][T27530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27530 comm=syz.5.8053 [ 493.510002][T27530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27530 comm=syz.5.8053 [ 493.553766][T27518] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.600685][T27518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.628752][T27518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.639669][T27536] netlink: 'syz.5.8054': attribute type 6 has an invalid length. [ 493.671985][T27518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.715653][T27518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.745859][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8054'. [ 493.839374][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 493.839387][ T29] audit: type=1400 audit(13347.170:34874): avc: denied { create } for pid=27534 comm="syz.3.8055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 493.928545][ T29] audit: type=1400 audit(13347.202:34875): avc: denied { write } for pid=27534 comm="syz.3.8055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 493.948937][ T29] audit: type=1400 audit(13347.202:34876): avc: denied { read } for pid=27534 comm="syz.3.8055" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 493.972866][ T29] audit: type=1400 audit(13347.202:34877): avc: denied { open } for pid=27534 comm="syz.3.8055" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 493.997217][ T29] audit: type=1400 audit(13347.202:34878): avc: denied { ioctl } for pid=27534 comm="syz.3.8055" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 494.210858][ T29] audit: type=1400 audit(13347.569:34879): avc: denied { read } for pid=27551 comm="syz.0.8058" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 494.234169][ T29] audit: type=1400 audit(13347.569:34880): avc: denied { open } for pid=27551 comm="syz.0.8058" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 494.264982][ T29] audit: type=1400 audit(13347.611:34881): avc: denied { ioctl } for pid=27551 comm="syz.0.8058" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 494.309024][T27557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8059'. [ 494.318439][ T29] audit: type=1400 audit(13347.664:34882): avc: denied { name_bind } for pid=27556 comm="syz.0.8059" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 494.339938][ T29] audit: type=1400 audit(13347.664:34883): avc: denied { node_bind } for pid=27556 comm="syz.0.8059" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 494.372875][T27561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.374082][T27561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8060'. [ 494.522611][T27575] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8065'. [ 495.638817][T27610] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8077'. [ 496.038056][T27617] FAULT_INJECTION: forcing a failure. [ 496.038056][T27617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.051402][T27617] CPU: 0 UID: 0 PID: 27617 Comm: syz.5.8080 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 496.051427][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.051509][T27617] Call Trace: [ 496.051516][T27617] [ 496.051524][T27617] __dump_stack+0x1d/0x30 [ 496.051546][T27617] dump_stack_lvl+0xe8/0x140 [ 496.051566][T27617] dump_stack+0x15/0x1b [ 496.051650][T27617] should_fail_ex+0x265/0x280 [ 496.051682][T27617] should_fail_alloc_page+0xf2/0x100 [ 496.051704][T27617] __alloc_frozen_pages_noprof+0xff/0x360 [ 496.051804][T27617] alloc_pages_mpol+0xb3/0x250 [ 496.051836][T27617] vma_alloc_folio_noprof+0x1aa/0x300 [ 496.051952][T27617] do_wp_page+0x673/0x2400 [ 496.052020][T27617] ? __rcu_read_lock+0x37/0x50 [ 496.052046][T27617] handle_mm_fault+0x77d/0x2be0 [ 496.052111][T27617] ? mas_walk+0xf2/0x120 [ 496.052147][T27617] do_user_addr_fault+0x636/0x1090 [ 496.052181][T27617] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 496.052209][T27617] exc_page_fault+0x62/0xa0 [ 496.052274][T27617] asm_exc_page_fault+0x26/0x30 [ 496.052292][T27617] RIP: 0033:0x7f27e8700ca3 [ 496.052305][T27617] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 496.052322][T27617] RSP: 002b:00007f27e6ea64a0 EFLAGS: 00010202 [ 496.052394][T27617] RAX: 0000000000000400 RBX: 00007f27e6ea6540 RCX: 00007f27dea87000 [ 496.052405][T27617] RDX: 00007f27e6ea66e0 RSI: 0000000000000001 RDI: 00007f27e6ea65e0 [ 496.052470][T27617] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001b1 [ 496.052481][T27617] R10: 00000000000001d0 R11: 00007f27e6ea6540 R12: 0000000000000001 [ 496.052493][T27617] R13: 00007f27e88dc120 R14: 0000000000000020 R15: 00007f27e6ea65e0 [ 496.052510][T27617] [ 496.052518][T27617] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 496.258902][T27619] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8079'. [ 496.365112][T27624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8082'. [ 496.377214][T27624] xt_hashlimit: max too large, truncated to 1048576 [ 496.434433][T27630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8084'. [ 496.444225][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8085'. [ 497.183475][T27659] netlink: 'syz.5.8091': attribute type 6 has an invalid length. [ 497.641673][T27669] netlink: 'syz.0.8095': attribute type 10 has an invalid length. [ 497.654974][T27669] team0 (unregistering): Port device team_slave_0 removed [ 497.664834][T27669] team0 (unregistering): Port device team_slave_1 removed [ 497.671942][T27671] warn_alloc: 3 callbacks suppressed [ 497.671954][T27671] syz.3.8096: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 497.691973][T27671] CPU: 0 UID: 0 PID: 27671 Comm: syz.3.8096 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 497.692033][T27671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.692047][T27671] Call Trace: [ 497.692053][T27671] [ 497.692060][T27671] __dump_stack+0x1d/0x30 [ 497.692081][T27671] dump_stack_lvl+0xe8/0x140 [ 497.692107][T27671] dump_stack+0x15/0x1b [ 497.692119][T27671] warn_alloc+0x12b/0x1a0 [ 497.692136][T27671] ? audit_log_end+0x1d7/0x1f0 [ 497.692148][T27671] ? audit_log_end+0x1d7/0x1f0 [ 497.692158][T27671] __vmalloc_node_range_noprof+0x9c/0xe00 [ 497.692258][T27671] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 497.692274][T27671] ? __rcu_read_unlock+0x4f/0x70 [ 497.692286][T27671] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 497.692304][T27671] ? __rcu_read_unlock+0x4f/0x70 [ 497.692361][T27671] ? perf_cgroup_switch+0x132/0x460 [ 497.692378][T27671] ? bpf_trace_run4+0x134/0x1d0 [ 497.692393][T27671] ? should_fail_ex+0x30/0x280 [ 497.692410][T27671] ? xskq_create+0x36/0xe0 [ 497.692435][T27671] vmalloc_user_noprof+0x7d/0xb0 [ 497.692510][T27671] ? xskq_create+0x80/0xe0 [ 497.692598][T27671] xskq_create+0x80/0xe0 [ 497.692651][T27671] xsk_init_queue+0x95/0xf0 [ 497.692707][T27671] xsk_setsockopt+0x35c/0x510 [ 497.692719][T27671] ? __pfx_xsk_setsockopt+0x10/0x10 [ 497.692731][T27671] __sys_setsockopt+0x181/0x200 [ 497.692749][T27671] __x64_sys_setsockopt+0x64/0x80 [ 497.692771][T27671] x64_sys_call+0x2bd5/0x2fb0 [ 497.692783][T27671] do_syscall_64+0xd2/0x200 [ 497.692793][T27671] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.692888][T27671] ? clear_bhb_loop+0x40/0x90 [ 497.692899][T27671] ? clear_bhb_loop+0x40/0x90 [ 497.692961][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.693026][T27671] RIP: 0033:0x7f534025e929 [ 497.693036][T27671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.693046][T27671] RSP: 002b:00007f533e8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.693057][T27671] RAX: ffffffffffffffda RBX: 00007f5340485fa0 RCX: 00007f534025e929 [ 497.693075][T27671] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 497.693082][T27671] RBP: 00007f53402e0b39 R08: 0000000000000004 R09: 0000000000000000 [ 497.693089][T27671] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.693100][T27671] R13: 0000000000000000 R14: 00007f5340485fa0 R15: 00007ffe59fb1f58 [ 497.693120][T27671] [ 497.693127][T27671] Mem-Info: [ 497.943276][T27671] active_anon:9946 inactive_anon:4 isolated_anon:0 [ 497.943276][T27671] active_file:7953 inactive_file:13462 isolated_file:0 [ 497.943276][T27671] unevictable:0 dirty:319 writeback:0 [ 497.943276][T27671] slab_reclaimable:3428 slab_unreclaimable:65922 [ 497.943276][T27671] mapped:35476 shmem:3496 pagetables:1002 [ 497.943276][T27671] sec_pagetables:0 bounce:0 [ 497.943276][T27671] kernel_misc_reclaimable:0 [ 497.943276][T27671] free:1794890 free_pcp:33306 free_cma:0 [ 497.988915][T27671] Node 0 active_anon:39784kB inactive_anon:16kB active_file:31812kB inactive_file:53848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141904kB dirty:1276kB writeback:0kB shmem:13984kB writeback_tmp:0kB kernel_stack:4032kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 498.018500][T27671] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.047509][T27671] lowmem_reserve[]: 0 2882 7860 7860 [ 498.052840][T27671] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 498.083187][T27671] lowmem_reserve[]: 0 0 4978 4978 [ 498.088295][T27671] Node 0 Normal free:4081508kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39660kB inactive_anon:16kB active_file:31812kB inactive_file:53856kB unevictable:0kB writepending:1300kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:128268kB local_pcp:92660kB free_cma:0kB [ 498.120658][T27671] lowmem_reserve[]: 0 0 0 0 [ 498.125230][T27671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.137950][T27671] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 498.154175][T27671] Node 0 Normal: 1231*4kB (UME) 2595*8kB (UME) 2609*16kB (UME) 2186*32kB (UME) 1881*64kB (UME) 1209*128kB (UME) 918*256kB (UME) 685*512kB (UME) 553*1024kB (UME) 12*2048kB (M) 544*4096kB (UM) = 3817316kB [ 498.174399][T27671] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 498.183808][T27671] 25307 total pagecache pages [ 498.188523][T27671] 6 pages in swap cache [ 498.192849][T27671] Free swap = 124900kB [ 498.197010][T27671] Total swap = 124996kB [ 498.201202][T27671] 2097051 pages RAM [ 498.205050][T27671] 0 pages HighMem/MovableOnly [ 498.209751][T27671] 80812 pages reserved [ 498.220438][T27669] team0 (unregistering): Port device geneve1 removed [ 498.315214][T27683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.315683][T27683] __nla_validate_parse: 2 callbacks suppressed [ 498.315697][T27683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8098'. [ 498.408878][T27699] IPVS: stopping master sync thread 27700 ... [ 498.415111][T27700] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 498.428163][T27699] netlink: 'syz.0.8099': attribute type 1 has an invalid length. [ 498.455713][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8104'. [ 498.459303][T27698] SELinux: syz.1.8103 (27698) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 498.636258][T27715] netlink: 'syz.1.8107': attribute type 6 has an invalid length. [ 498.649368][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8107'. [ 499.338060][T27725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.340311][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8111'. [ 499.420454][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 499.420558][ T29] audit: type=1326 audit(14121.032:34995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27734 comm="syz.4.8114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe5fe0e929 code=0x0 [ 499.452673][T27733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.453197][T27733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8115'. [ 499.470981][T27733] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.480039][T27733] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.489048][T27733] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.498038][T27733] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.639137][T27751] IPVS: stopping master sync thread 27752 ... [ 499.639149][T27752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 499.665485][T27747] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8121'. [ 499.666899][ T29] audit: type=1326 audit(14121.284:34996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.677862][T27747] xt_hashlimit: max too large, truncated to 1048576 [ 499.697617][ T29] audit: type=1326 audit(14121.284:34997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.727437][ T29] audit: type=1326 audit(14121.284:34998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.750589][ T29] audit: type=1326 audit(14121.284:34999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.773843][ T29] audit: type=1326 audit(14121.284:35000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.796989][ T29] audit: type=1326 audit(14121.284:35001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.802710][T27757] netlink: 'syz.0.8120': attribute type 1 has an invalid length. [ 499.820120][ T29] audit: type=1326 audit(14121.284:35002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.820149][ T29] audit: type=1326 audit(14121.284:35003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 499.874328][ T29] audit: type=1326 audit(14121.284:35004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz.5.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 500.116581][T27764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8123'. [ 500.560359][T27785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.562708][T27785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8130'. [ 500.816399][T27793] atomic_op ffff88811bb18d28 conn xmit_atomic 0000000000000000 [ 500.976886][T27812] SELinux: syz.0.8139 (27812) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 501.109952][T27829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 501.109991][T27828] IPVS: stopping master sync thread 27829 ... [ 501.154389][T27828] netlink: 'syz.4.8141': attribute type 1 has an invalid length. [ 501.165118][T27834] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8142'. [ 501.372524][T27848] atomic_op ffff888105817d28 conn xmit_atomic 0000000000000000 [ 502.112430][T27869] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8155'. [ 502.185837][T27874] SELinux: syz.4.8156 (27874) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 502.581288][T27908] netlink: 'syz.4.8166': attribute type 6 has an invalid length. [ 503.003774][T27918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.064297][T27923] netlink: 'syz.4.8174': attribute type 3 has an invalid length. [ 503.182117][T27923] program syz.4.8174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.303183][T27927] lo speed is unknown, defaulting to 1000 [ 503.591851][T27942] __nla_validate_parse: 4 callbacks suppressed [ 503.591866][T27942] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8179'. [ 503.903405][T27950] netlink: 'syz.0.8180': attribute type 6 has an invalid length. [ 503.959740][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8180'. [ 504.993123][T27986] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8194'. [ 505.280008][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 505.280038][ T29] audit: type=1400 audit(14127.185:35189): avc: denied { setopt } for pid=28004 comm="syz.5.8199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.353232][ T29] audit: type=1326 audit(14127.216:35190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.376432][ T29] audit: type=1326 audit(14127.216:35191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.399685][ T29] audit: type=1326 audit(14127.216:35192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.422966][ T29] audit: type=1326 audit(14127.216:35193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.446210][ T29] audit: type=1326 audit(14127.216:35194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.469356][ T29] audit: type=1326 audit(14127.216:35195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.492493][ T29] audit: type=1326 audit(14127.216:35196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.515815][ T29] audit: type=1326 audit(14127.216:35197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.539067][ T29] audit: type=1326 audit(14127.216:35198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28004 comm="syz.5.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27e883e929 code=0x7ffc0000 [ 505.672664][T28008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8200'. [ 506.109139][T28027] IPVS: stopping master sync thread 28028 ... [ 506.116595][T28028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 506.149601][T28027] netlink: 'syz.5.8206': attribute type 1 has an invalid length. [ 506.169770][T28030] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8207'. [ 506.328869][T28042] SELinux: syz.5.8211 (28042) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 506.421894][T28048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8213'. [ 506.551784][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8216'. [ 506.772223][T28067] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 506.772440][T28066] IPVS: stopping master sync thread 28067 ... [ 506.793098][T28066] netlink: 'syz.1.8218': attribute type 1 has an invalid length. [ 506.825415][T28069] SELinux: syz.1.8219 (28069) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 506.839641][T28069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8219'. [ 506.933369][T28081] FAT-fs (loop9): bogus number of reserved sectors [ 506.939953][T28081] FAT-fs (loop9): Can't find a valid FAT filesystem [ 506.989254][T28090] SELinux: syz.4.8226 (28090) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 507.150866][T28098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.151316][T28098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8228'. [ 507.198051][T28104] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 507.209276][T28103] IPVS: stopping master sync thread 28104 ... [ 507.216769][T28103] netlink: 'syz.0.8229': attribute type 1 has an invalid length. [ 507.296432][T28113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.297206][T28113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8234'. [ 507.327318][T28116] netlink: 'syz.1.8235': attribute type 1 has an invalid length. [ 507.395451][T28123] SELinux: syz.5.8238 (28123) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 507.428092][T28126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.453502][T28131] IPVS: stopping master sync thread 28132 ... [ 507.454812][T28132] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 507.479907][T28131] netlink: 'syz.1.8241': attribute type 1 has an invalid length. [ 508.320698][T28164] warn_alloc: 1 callbacks suppressed [ 508.320713][T28164] syz.5.8252: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 508.340545][T28164] CPU: 1 UID: 0 PID: 28164 Comm: syz.5.8252 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 508.340571][T28164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.340583][T28164] Call Trace: [ 508.340588][T28164] [ 508.340595][T28164] __dump_stack+0x1d/0x30 [ 508.340644][T28164] dump_stack_lvl+0xe8/0x140 [ 508.340661][T28164] dump_stack+0x15/0x1b [ 508.340675][T28164] warn_alloc+0x12b/0x1a0 [ 508.340705][T28164] __vmalloc_node_range_noprof+0x9c/0xe00 [ 508.340806][T28164] ? __futex_wait+0x1ff/0x260 [ 508.340833][T28164] ? __pfx_futex_wake_mark+0x10/0x10 [ 508.340888][T28164] ? __rcu_read_unlock+0x4f/0x70 [ 508.340906][T28164] ? avc_has_perm_noaudit+0x1b1/0x200 [ 508.340983][T28164] ? should_fail_ex+0x30/0x280 [ 508.341013][T28164] ? xskq_create+0x36/0xe0 [ 508.341033][T28164] vmalloc_user_noprof+0x7d/0xb0 [ 508.341108][T28164] ? xskq_create+0x80/0xe0 [ 508.341127][T28164] xskq_create+0x80/0xe0 [ 508.341145][T28164] xsk_init_queue+0x95/0xf0 [ 508.341163][T28164] xsk_setsockopt+0x35c/0x510 [ 508.341213][T28164] ? __pfx_xsk_setsockopt+0x10/0x10 [ 508.341231][T28164] __sys_setsockopt+0x181/0x200 [ 508.341288][T28164] __x64_sys_setsockopt+0x64/0x80 [ 508.341442][T28164] x64_sys_call+0x2bd5/0x2fb0 [ 508.341459][T28164] do_syscall_64+0xd2/0x200 [ 508.341474][T28164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 508.341496][T28164] ? clear_bhb_loop+0x40/0x90 [ 508.341537][T28164] ? clear_bhb_loop+0x40/0x90 [ 508.341555][T28164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.341577][T28164] RIP: 0033:0x7f27e883e929 [ 508.341590][T28164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.341605][T28164] RSP: 002b:00007f27e6ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 508.341621][T28164] RAX: ffffffffffffffda RBX: 00007f27e8a65fa0 RCX: 00007f27e883e929 [ 508.341631][T28164] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 508.341642][T28164] RBP: 00007f27e88c0b39 R08: 0000000000000004 R09: 0000000000000000 [ 508.341652][T28164] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.341697][T28164] R13: 0000000000000000 R14: 00007f27e8a65fa0 R15: 00007fff13e76408 [ 508.341743][T28164] [ 508.341750][T28164] Mem-Info: [ 508.571936][T28164] active_anon:13990 inactive_anon:13 isolated_anon:0 [ 508.571936][T28164] active_file:7804 inactive_file:13462 isolated_file:0 [ 508.571936][T28164] unevictable:0 dirty:2 writeback:0 [ 508.571936][T28164] slab_reclaimable:3439 slab_unreclaimable:65905 [ 508.571936][T28164] mapped:33281 shmem:7605 pagetables:1041 [ 508.571936][T28164] sec_pagetables:0 bounce:0 [ 508.571936][T28164] kernel_misc_reclaimable:0 [ 508.571936][T28164] free:1716679 free_pcp:31293 free_cma:0 [ 508.617018][T28164] Node 0 active_anon:55960kB inactive_anon:52kB active_file:31216kB inactive_file:53848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133124kB dirty:8kB writeback:0kB shmem:30420kB writeback_tmp:0kB kernel_stack:4016kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.645859][T28164] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.674467][T28164] lowmem_reserve[]: 0 2882 7860 7860 [ 508.679819][T28164] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 508.709894][T28164] lowmem_reserve[]: 0 0 4978 4978 [ 508.715012][T28164] Node 0 Normal free:4111628kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55960kB inactive_anon:52kB active_file:31216kB inactive_file:53848kB unevictable:0kB writepending:0kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:117080kB local_pcp:50040kB free_cma:0kB [ 508.746972][T28164] lowmem_reserve[]: 0 0 0 0 [ 508.751539][T28164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.764274][T28164] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 508.780468][T28164] Node 0 Normal: 824*4kB (UME) 2892*8kB (UME) 2508*16kB (UME) 1597*32kB (UM) 1545*64kB (UME) 989*128kB (UME) 798*256kB (UME) 694*512kB (UME) 559*1024kB (UME) 129*2048kB (UM) 589*4096kB (UM) = 4151904kB [ 508.800606][T28164] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 508.809890][T28164] 28871 total pagecache pages [ 508.814594][T28164] 15 pages in swap cache [ 508.818831][T28164] Free swap = 124712kB [ 508.823020][T28164] Total swap = 124996kB [ 508.827164][T28164] 2097051 pages RAM [ 508.830982][T28164] 0 pages HighMem/MovableOnly [ 508.835701][T28164] 80812 pages reserved [ 509.002716][T28184] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 509.002774][T28183] IPVS: stopping master sync thread 28184 ... [ 509.022766][T28180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.023434][T28180] __nla_validate_parse: 3 callbacks suppressed [ 509.023449][T28180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8257'. [ 509.049065][T28183] netlink: 'syz.5.8254': attribute type 1 has an invalid length. [ 509.068571][T28178] SELinux: syz.4.8253 (28178) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 509.178705][T28199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8263'. [ 509.891600][T28223] SELinux: syz.0.8272 (28223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 510.207546][T28241] IPVS: stopping master sync thread 28242 ... [ 510.213739][T28242] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 510.230776][T28241] netlink: 'syz.3.8276': attribute type 1 has an invalid length. [ 510.487995][T28246] xt_hashlimit: max too large, truncated to 1048576 [ 510.619551][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 510.619608][ T29] audit: type=1400 audit(14132.781:35294): avc: denied { write } for pid=28252 comm="syz.4.8280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 510.644804][ T29] audit: type=1400 audit(14132.781:35295): avc: denied { read } for pid=28252 comm="syz.4.8280" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 510.671799][ T29] audit: type=1400 audit(14132.781:35296): avc: denied { open } for pid=28252 comm="syz.4.8280" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 510.731913][T28251] ================================================================== [ 510.740014][T28251] BUG: KCSAN: data-race in try_to_unmap_one / try_to_unmap_one [ 510.747551][T28251] [ 510.749865][T28251] write to 0xffff888104324630 of 8 bytes by task 28246 on cpu 1: [ 510.757566][T28251] try_to_unmap_one+0xf63/0x21d0 [ 510.762491][T28251] rmap_walk_anon+0x27d/0x430 [ 510.767158][T28251] try_to_unmap+0x13d/0x1e0 [ 510.771654][T28251] shrink_folio_list+0x11b9/0x2560 [ 510.776794][T28251] evict_folios+0x2890/0x33d0 [ 510.781464][T28251] try_to_shrink_lruvec+0x45a/0x7e0 [ 510.786658][T28251] shrink_lruvec+0x22e/0x1b40 [ 510.791323][T28251] shrink_node+0x686/0x2120 [ 510.795821][T28251] do_try_to_free_pages+0x3f6/0xcd0 [ 510.801011][T28251] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 510.806893][T28251] try_charge_memcg+0x358/0x9e0 [ 510.811732][T28251] obj_cgroup_charge_pages+0xa6/0x150 [ 510.817102][T28251] __memcg_kmem_charge_page+0x9f/0x170 [ 510.822556][T28251] __alloc_frozen_pages_noprof+0x188/0x360 [ 510.828359][T28251] alloc_pages_mpol+0xb3/0x250 [ 510.833122][T28251] alloc_pages_noprof+0x90/0x130 [ 510.838056][T28251] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 510.843865][T28251] bpf_map_area_alloc+0xfa/0x150 [ 510.848790][T28251] htab_map_alloc+0x2a8/0x6d0 [ 510.853461][T28251] map_create+0x843/0xb90 [ 510.857786][T28251] __sys_bpf+0x5ab/0x790 [ 510.862027][T28251] __x64_sys_bpf+0x41/0x50 [ 510.866438][T28251] x64_sys_call+0x2478/0x2fb0 [ 510.871106][T28251] do_syscall_64+0xd2/0x200 [ 510.875595][T28251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.881480][T28251] [ 510.883791][T28251] write to 0xffff888104324630 of 8 bytes by task 28251 on cpu 0: [ 510.891494][T28251] try_to_unmap_one+0xf63/0x21d0 [ 510.896421][T28251] rmap_walk_anon+0x27d/0x430 [ 510.901086][T28251] try_to_unmap+0x13d/0x1e0 [ 510.905589][T28251] shrink_folio_list+0x11b9/0x2560 [ 510.910707][T28251] evict_folios+0x2890/0x33d0 [ 510.915377][T28251] try_to_shrink_lruvec+0x45a/0x7e0 [ 510.920569][T28251] shrink_lruvec+0x22e/0x1b40 [ 510.925235][T28251] shrink_node+0x686/0x2120 [ 510.929729][T28251] do_try_to_free_pages+0x3f6/0xcd0 [ 510.934913][T28251] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 510.940795][T28251] try_charge_memcg+0x358/0x9e0 [ 510.945632][T28251] obj_cgroup_charge_pages+0xa6/0x150 [ 510.951004][T28251] __memcg_kmem_charge_page+0x9f/0x170 [ 510.956459][T28251] __alloc_frozen_pages_noprof+0x188/0x360 [ 510.962262][T28251] alloc_pages_mpol+0xb3/0x250 [ 510.967023][T28251] alloc_pages_noprof+0x90/0x130 [ 510.971959][T28251] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 510.977763][T28251] bpf_map_area_alloc+0xfa/0x150 [ 510.982691][T28251] dev_map_alloc+0x139/0x330 [ 510.987274][T28251] map_create+0x843/0xb90 [ 510.991603][T28251] __sys_bpf+0x5ab/0x790 [ 510.995847][T28251] __x64_sys_bpf+0x41/0x50 [ 511.000255][T28251] x64_sys_call+0x2478/0x2fb0 [ 511.004924][T28251] do_syscall_64+0xd2/0x200 [ 511.009415][T28251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.015298][T28251] [ 511.017606][T28251] value changed: 0x00000000000014e9 -> 0x00000000000016b3 [ 511.024697][T28251] [ 511.027004][T28251] Reported by Kernel Concurrency Sanitizer on: [ 511.033142][T28251] CPU: 0 UID: 0 PID: 28251 Comm: syz.0.8277 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 511.045628][T28251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.055671][T28251] ================================================================== [ 511.113296][T21298] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 511.124284][T21298] CPU: 0 UID: 0 PID: 21298 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) [ 511.124313][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.124381][T21298] Call Trace: [ 511.124387][T21298] [ 511.124393][T21298] __dump_stack+0x1d/0x30 [ 511.124412][T21298] dump_stack_lvl+0xe8/0x140 [ 511.124428][T21298] dump_stack+0x15/0x1b [ 511.124443][T21298] dump_header+0x81/0x220 [ 511.124543][T21298] oom_kill_process+0x334/0x3f0 [ 511.124573][T21298] out_of_memory+0x979/0xb80 [ 511.124602][T21298] try_charge_memcg+0x5e6/0x9e0 [ 511.124695][T21298] charge_memcg+0x51/0xc0 [ 511.124726][T21298] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 511.124823][T21298] __read_swap_cache_async+0x1df/0x350 [ 511.124964][T21298] swap_cluster_readahead+0x277/0x3e0 [ 511.125078][T21298] swapin_readahead+0xde/0x6f0 [ 511.125163][T21298] ? __filemap_get_folio+0x4f7/0x6b0 [ 511.125197][T21298] ? swap_cache_get_folio+0x77/0x200 [ 511.125230][T21298] do_swap_page+0x301/0x2430 [ 511.125248][T21298] ? finish_task_switch+0xad/0x2b0 [ 511.125268][T21298] ? __pfx_default_wake_function+0x10/0x10 [ 511.125389][T21298] handle_mm_fault+0x9a5/0x2be0 [ 511.125414][T21298] ? mas_walk+0xf2/0x120 [ 511.125445][T21298] do_user_addr_fault+0x636/0x1090 [ 511.125507][T21298] ? fpregs_restore_userregs+0xe2/0x1d0 [ 511.125536][T21298] ? switch_fpu_return+0xe/0x20 [ 511.125563][T21298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.125585][T21298] exc_page_fault+0x62/0xa0 [ 511.125669][T21298] asm_exc_page_fault+0x26/0x30 [ 511.125687][T21298] RIP: 0033:0x7f7289aa11a5 [ 511.125700][T21298] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 511.125716][T21298] RSP: 002b:00007ffc8c65a188 EFLAGS: 00010246 [ 511.125733][T21298] RAX: 0000000000000000 RBX: 000000000000044b RCX: 00007f7289aa11a3 [ 511.125746][T21298] RDX: 00007ffc8c65a1a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.125786][T21298] RBP: 00007ffc8c65a20c R08: 0000000035f12ce4 R09: 0000000000000000 [ 511.125800][T21298] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 511.125812][T21298] R13: 00000000000927c0 R14: 0000000000081183 R15: 00007ffc8c65a260 [ 511.125827][T21298] [ 511.350847][T21298] memory: usage 307200kB, limit 307200kB, failcnt 1956 [ 511.357746][T21298] memory+swap: usage 306896kB, limit 9007199254740988kB, failcnt 0 [ 511.365674][T21298] kmem: usage 281504kB, limit 9007199254740988kB, failcnt 0 [ 511.372975][T21298] Memory cgroup stats for /syz0: [ 511.410205][T21298] cache 0 [ 511.418081][T21298] rss 0 [ 511.420874][T21298] shmem 0 [ 511.423845][T21298] mapped_file 0 [ 511.427289][T21298] dirty 0 [ 511.430252][T21298] writeback 0 [ 511.433538][T21298] workingset_refault_anon 897 [ 511.438205][T21298] workingset_refault_file 3198 [ 511.442997][T21298] swap 221184 [ 511.446274][T21298] swapcached 4096 [ 511.449921][T21298] pgpgin 662678 [ 511.453370][T21298] pgpgout 662675 [ 511.456909][T21298] pgfault 524104 [ 511.460512][T21298] pgmajfault 419 [ 511.464049][T21298] inactive_anon 0 [ 511.467724][T21298] active_anon 4096 [ 511.471524][T21298] inactive_file 0 [ 511.475204][T21298] active_file 8192 [ 511.478973][T21298] unevictable 0 [ 511.482425][T21298] hierarchical_memory_limit 314572800 [ 511.487817][T21298] hierarchical_memsw_limit 9223372036854771712 [ 511.493956][T21298] total_cache 0 [ 511.497425][T21298] total_rss 0 [ 511.500709][T21298] total_shmem 0 [ 511.504157][T21298] total_mapped_file 0 [ 511.508227][T21298] total_dirty 0 [ 511.511681][T21298] total_writeback 0 [ 511.515503][T21298] total_workingset_refault_anon 897 [ 511.520689][T21298] total_workingset_refault_file 3198 [ 511.525992][T21298] total_swap 221184 [ 511.529786][T21298] total_swapcached 4096 [ 511.533989][T21298] total_pgpgin 662678 [ 511.537986][T21298] total_pgpgout 662675 [ 511.542051][T21298] total_pgfault 524104 [ 511.546145][T21298] total_pgmajfault 419 [ 511.550197][T21298] total_inactive_anon 0 [ 511.554363][T21298] total_active_anon 4096 [ 511.558596][T21298] total_inactive_file 0 [ 511.562770][T21298] total_active_file 8192 [ 511.567047][T21298] total_unevictable 0 [ 511.571019][T21298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8277,pid=28245,uid=0 [ 511.585840][T21298] Memory cgroup out of memory: Killed process 28245 (syz.0.8277) total-vm:93884kB, anon-rss:932kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000