last executing test programs: 2m23.017208528s ago: executing program 3 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xfffb}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (fail_nth: 9) 2m22.590040108s ago: executing program 3 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 2m22.380481883s ago: executing program 3 (id=66): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8000, 0x5, 0x5}}]}, 0x40}}, 0xc800) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x342}]}, 0x34}}, 0x8080) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) signalfd4(r6, &(0x7f0000000080)={[0xeb9]}, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r7, &(0x7f0000000040)=0x36e9e613, r7, 0x0, 0xffffffffffffff56, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="414601"], 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) r13 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x17) 2m21.432403286s ago: executing program 3 (id=76): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x10000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/169) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m21.313957019s ago: executing program 3 (id=79): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x2010, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x28, 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x63a, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000007000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a79333b4110d7bf7e3f904808"], 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="020120070a0000000000000000000000030006000000000002004e2064010101000000000000000000000500000000000a004e24fffffff9fc02000000000000000000000000000136020000000000004d4b161bba7f5a4881cdf2981b440f51bf3d7d738ad616628006a8a6b55cd4cfcf265199d0b8618025189db6790681656f3e839256ef9bd62a37d35395733a053a6a6303c127145cc2d363a55abfd9f6725c7560a90f602abd7090b22b4c6af6ab58c514384d5305712920bc6a490db0621eca765740b020d0ae8956fa9e5eebc1615447897794729222947814ba2ebbef2bd1"], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x400c891}, 0x24000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4003, 0x0) r10 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r10, 0xffffffffffffffff, 0x5d) write(r9, &(0x7f0000000040)="9b8094966de6cc00000000000000000000871b0c972e97d6abe412597d048a1f", 0x20) sendfile(r9, r8, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, &(0x7f0000000140)={0xd, 0x5}) 2m21.060102505s ago: executing program 3 (id=85): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x701040) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x60, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000140)={r0, 0x0, 0x662b, 0x1, 0x8, 0x1, [0x101, 0x1, 0x100, 0x87, 0x3, 0x4]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002b80)=""/4076, 0x104e}], 0x1}, 0x9}, {{0x0, 0x0, 0x0}, 0x20e9c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x6, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000240)={0x23, 0x42, 0x1d, 0x5d}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001740)=0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) syz_clone3(&(0x7f00000017c0)={0x2008800, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), {0x3e}, &(0x7f0000000240)=""/88, 0x58, &(0x7f0000000740)=""/4096, &(0x7f0000001780)=[r4, r5], 0x2, {r1}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x816) 2m21.048784035s ago: executing program 32 (id=85): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x701040) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x60, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000140)={r0, 0x0, 0x662b, 0x1, 0x8, 0x1, [0x101, 0x1, 0x100, 0x87, 0x3, 0x4]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002b80)=""/4076, 0x104e}], 0x1}, 0x9}, {{0x0, 0x0, 0x0}, 0x20e9c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x6, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000000240)={0x23, 0x42, 0x1d, 0x5d}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001740)=0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) syz_clone3(&(0x7f00000017c0)={0x2008800, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), {0x3e}, &(0x7f0000000240)=""/88, 0x58, &(0x7f0000000740)=""/4096, &(0x7f0000001780)=[r4, r5], 0x2, {r1}}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x816) 2m10.005945311s ago: executing program 5 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x4c}}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b) setpriority(0x3, 0x0, 0x4004) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x5, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x8000963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xfe, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xfeffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)={0x40, r4, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffff7fd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x15, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @random_vendor={0xdd, 0x9, "f9b4597add28936ffa"}]}]}, 0x40}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9}, 0x0, 0x3, 0xc, 0x3, 0x1002, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) write(r7, &(0x7f00000001c0)='functionf', 0x9) read(r6, &(0x7f0000000100), 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r9, 0x301, 0x70bd29, 0x25dfdbfb, {0x21, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x4004814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x68, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m9.773001496s ago: executing program 5 (id=170): socket(0x10, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000940)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x976}, 0xeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r1, &(0x7f00000004c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m2.443291753s ago: executing program 33 (id=199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r0 = mq_open(&(0x7f0000000340)='ethtool\x00', 0x800, 0x2, &(0x7f0000000440)={0x4, 0xcfc, 0x3, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r1, &(0x7f00000004c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 17.140445487s ago: executing program 2 (id=1048): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000011c0)={[{@barrier_val={'barrier', 0x3d, 0xad}}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = inotify_init() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f0000000300)=0x4c) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 16.21325298s ago: executing program 2 (id=1057): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000100000000000008030000000000000000000002000000"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa}, 0x28) 16.152041061s ago: executing program 2 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000280)={0x0, 0x1bf5c, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r2, &(0x7f0000000300)=""/251, 0xfb, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5e21ff965f9c03000000000000000008000000000900020073582246f3dcf316283b797a3100000000"], 0x20}}, 0x0) 16.057491243s ago: executing program 2 (id=1062): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$sock(r0, &(0x7f00000024c0)={&(0x7f0000000200)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000300)="d9c34a335fca216001faf7a5d014e35d6b2fd9ed97b640", 0x17}, {&(0x7f0000000400)="5589cf9f49b597053c1419f9ad69d09956f7a1d11038a8802c0b137886c1e86d21872079d2a2e83cdf2eae208de81e281bb32a0c33fb8af23587e911a60a414bf599185e5e9b93ecfa5a821635d45eff02ab37a9d4dc3a592b950b39ba38a6677cb9cc89ba65821ab867e5cae9f0679021c14b6d126b57053b249ad34440a14120cf368a19077095ffd40254fccbf926c4aa2753e4dd75946a0c72d8689bfdf68992bb9b457d732768d23a48831884a0a68269d402", 0xb5}, {&(0x7f0000001440)="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", 0x1000}], 0x3, &(0x7f0000002480)=[@mark={{0x14, 0x1, 0x24, 0xa}}], 0x18}, 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2982, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000340)={[{@nodioread_nolock}, {@noblock_validity}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@data_err_ignore}, {@resgid}, {@nombcache}, {@resgid}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0x0, 0xe, 0x0, &(0x7f0000000880)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xe}, {0xffff}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) ioctl$FS_IOC_GETVERSION(r3, 0xff02, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x20000023896) 15.186220414s ago: executing program 2 (id=1075): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) r0 = socket$inet(0x2, 0x2, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0xc8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x1) read(r3, &(0x7f0000000400), 0x120) read(r3, &(0x7f0000000500), 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xfff3, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) 13.410637937s ago: executing program 2 (id=1088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') r4 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f00000007c0)={0x1794, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x694, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x428, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x400, 0x0, 0x9, 0x82, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x6, 0x4, 0x9, 0x0, 0x6, 0x800]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7}, {0x7, 0xa}, {0x2, 0x8}, {}, {0x2, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x7}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0xc, 0x30, 0x4, 0x43, 0xb, 0x6, 0x3, 0xc, 0x12, 0x73, 0x16, 0x60, 0x0, 0x3, 0xb, 0x6, 0x12, 0x6c, 0x1, 0x36, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x3, 0x2, 0x1, 0xb, 0xf, 0x401, 0xbac]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0xc, 0x1b, 0x4, 0x16, 0x6c, 0x36, 0xc, 0x6c, 0x4e, 0x5]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x1b, 0x2, 0x97cc133bd68d7e65, 0x18, 0xb, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x101, 0x9, 0x5, 0x7ff, 0x7ff, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x0, 0xc, 0xf7, 0x2d6e, 0xc1, 0xb]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0xa}, {0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {}, {0x4, 0x6}, {0x4, 0x7}, {0x3, 0x4}, {0x1}, {0x7, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {}, {0x7, 0x9}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x4, 0x1ff, 0x1, 0xfffa, 0x8, 0x772]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc2c, 0xea, 0xf800, 0x200, 0x6, 0x0, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff4, 0x3, 0x6, 0x401, 0x4, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x24, 0x5, 0x12, 0xdfb42653e6a05a44, 0x6c, 0x4, 0x9, 0x2, 0x9, 0x3, 0x5, 0x36, 0x1b, 0x9]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6b, 0x6, 0x6c, 0x48, 0x1b, 0x1, 0x60, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x0, 0x18, 0x1, 0x60, 0xc, 0x24, 0x3, 0x12, 0x5, 0x3, 0x6c, 0x6c, 0x6c, 0x48, 0x2, 0x60, 0x5]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x4, 0x9, 0x6, 0x36, 0x6, 0xc, 0x2, 0x5, 0xb, 0x1, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x3ff, 0x2, 0x7, 0x2, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x5, 0x4, 0x12, 0x48, 0x3, 0x4, 0x36, 0x4, 0x60, 0x3, 0x6, 0x1, 0x36, 0x30, 0x6c, 0xb, 0xb, 0x9, 0x4, 0xc, 0x6c, 0x4, 0xb, 0x2, 0x30, 0x6c, 0x2, 0x3, 0x6, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x30, 0x0, 0x12, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff01, 0x9, 0x7, 0x1, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x1ff, 0x3ff, 0xfffa, 0xff, 0xca, 0x6]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x78, 0x7, 0x2, 0xfe01, 0x3, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x7}, {0x4}, {0x7, 0x3}, {0x3, 0x8}, {0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2988, 0xc262, 0x7fc1, 0xff, 0x4, 0x80, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x30e2, 0x5, 0x400, 0x7f, 0x9, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfd9d, 0x7, 0x3, 0x2, 0x8, 0x2, 0x1, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x9, 0x18, 0x6, 0x24, 0x6f, 0xb, 0x36, 0x60, 0x30, 0x3, 0x2, 0x30, 0x2, 0x24, 0x30, 0x12, 0x5, 0x60, 0x1b, 0x30, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0xa, 0x40, 0xca, 0x5, 0x4c, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0xfffe, 0x9, 0x7, 0x2, 0x8, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0xffff, 0x0, 0x6, 0xd, 0xf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0xd, 0x4, 0x3, 0x3, 0x1400, 0x2]}}]}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xbac, 0x3, 0x632b, 0xa7c, 0x2, 0xb]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x5, 0x36, 0x0, 0x48, 0x6, 0x9, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1ff, 0x9, 0xe27, 0x0, 0x5, 0xc53]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7800, 0x60, 0xb, 0x6, 0x0, 0x965, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7db, 0x1e, 0x0, 0x3, 0xc000, 0x10, 0xffff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x16, 0x2, 0x5, 0x36, 0x4, 0x12, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b8, 0x6, 0xb, 0xc1, 0x4, 0x5, 0x40, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x3, 0x2, 0x1000, 0x0, 0xf3, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0xa}, {0x5, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0xf}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0xa}, {0x3}, {0x5, 0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x1, 0x3, 0x36, 0x18, 0x48, 0x0, 0x1, 0x1b, 0x9, 0x60, 0x30, 0x48, 0x12, 0xb, 0x60, 0x6, 0x16, 0x6c, 0x12, 0x48, 0x1, 0x24, 0xb, 0x24, 0x0, 0x3, 0x12, 0x4, 0x19, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x9, 0x16, 0x1, 0x9, 0x12, 0x5, 0x2, 0x6c, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x5}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0xc, 0x6c, 0x36, 0x18, 0x24, 0x48, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x9, 0x9, 0x4, 0x8, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x28e2, 0x8, 0x6, 0x90, 0x1, 0x0, 0xff4f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x5, 0x4ea8, 0x8, 0x3, 0xffff, 0xa]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xdc, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x46c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x8cc, 0x11d, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0xa}, {}, {0x4}, {}, {0x3, 0x2}, {0x5, 0x4}, {}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x3}, {0x1, 0x7}, {0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6d, 0x18, 0x6c, 0x4, 0x1b, 0x6c, 0x18, 0x16, 0x2, 0xc, 0x18, 0x6c, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0xd, 0x1d6, 0x74]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x9a9f, 0x7, 0x2, 0x8000, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2dbf, 0x1, 0x5, 0x5, 0x5, 0x0, 0xa, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xfffc, 0x5, 0x3, 0x9, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xc, 0x4515dfa66f3c7015, 0x1b, 0x2, 0x3, 0x5, 0x6, 0x18, 0x6c, 0x0, 0x12, 0x3c, 0x1, 0x60, 0x24, 0x7cb7b50401defb71, 0xc, 0x1, 0x36, 0xc, 0x2, 0x6, 0x18]}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x4}, {0x4, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x1}, {}, {0x2, 0x7}, {0x7, 0x9}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x6, 0x30, 0x1, 0x12, 0x24, 0x5, 0x16, 0x30, 0x12, 0x1, 0x16, 0x1b, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x2}, {}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x80, 0xfae, 0x8, 0x8, 0xf, 0x8, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xaf33, 0x400, 0x9, 0x9, 0x8001, 0x1, 0xf800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x7, 0x6, 0x9, 0x5, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0xc, 0xc, 0x6c, 0x3, 0xc, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x4f, 0x0, 0xfff9, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x4, 0x1000, 0x1, 0x2, 0x5, 0xb]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x2c, 0x36, 0x9, 0xc, 0x48, 0xc, 0x18, 0x2, 0x6, 0x6, 0x1b, 0x9, 0xb, 0x6, 0xb, 0x67, 0x48, 0x6, 0x6, 0x18, 0x1b, 0x1b, 0x0, 0x24, 0xb, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x54, 0x1ff, 0x8, 0x5, 0x5, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x2, 0x18, 0x9, 0x12, 0x48, 0x16, 0x60, 0x30, 0x48, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0xd, 0xfffa, 0x9, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xb52f, 0x1, 0x1, 0x9, 0x9, 0x5, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x8, 0x3, 0x9, 0x200, 0x401, 0x852]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x3, 0xbe, 0x3, 0xbe, 0x2f, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x7, 0x2, 0xd, 0x6, 0x40, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x400, 0xabf7, 0x0, 0x7, 0x100, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x4, 0x8, 0x9, 0x4, 0x3, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x9}, {0x7, 0x9}, {0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {}, {0x7, 0x1}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x6, 0x9}, {0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x86e5, 0x80, 0xdbf0, 0x4, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x1}, {0x1, 0x2}, {0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x3, 0x6}, {0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x1}, {}, {0x0, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x30, 0xc, 0x1b, 0xb, 0x4, 0x1, 0x3, 0x60, 0xc, 0x48, 0x1b, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x60, 0x1b, 0x16, 0x2, 0x6, 0x6c, 0x18, 0x1]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x9, 0x3, 0x1, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x3, 0x60, 0xf, 0x30, 0x60, 0x6, 0x12, 0x4, 0x9, 0x4, 0xb, 0x3, 0x5, 0x1b, 0x1, 0x18, 0x48, 0x16, 0xc, 0x33, 0xa, 0x18, 0x6c, 0xc, 0xb, 0x52, 0x2, 0x1b, 0x30]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x0, 0x3, 0x8, 0x3, 0xc, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x2}, {0x0, 0x4}, {0x1}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {}, {}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x7}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x9}, {0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x3, 0x3}, {0x4}, {0x4, 0x2}, {0x7, 0x2}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x9}, {0x5, 0x2}, {0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x6}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x7}, {0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x9}, {0x7}, {0x0, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x5, 0x3, 0xff12, 0x18, 0x227f, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xb, 0x1, 0x3, 0xf3, 0x1, 0x30]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x79, 0x3, 0x8, 0x8, 0x80, 0x80, 0x100, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xe, 0x6, 0xab3, 0x101, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x7}, {0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x4, 0x3}, {0x4}, {0x1, 0x4}, {0x7, 0x4}, {0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x87}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x60, 0xb, 0x2, 0x6c, 0x6, 0x1, 0x9, 0x24, 0x24, 0x1f, 0x60, 0x2, 0x18, 0x30, 0x4, 0x16, 0x29, 0x48, 0xc, 0x16, 0x6e, 0x60, 0x12, 0x3, 0x6c, 0x4, 0xb, 0xc, 0x24, 0x6, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7}, {0x7}, {0x1, 0xa}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x4}, {0x7, 0x4}, {0x3, 0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x4}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x1}, {0x4, 0x2}, {0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x2, 0x3}, {0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcf7, 0x5d9e, 0x3, 0x0, 0x5, 0x8, 0x200, 0xa29]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc49, 0x0, 0xffd6, 0x1235, 0x7f, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x1b, 0x30, 0x5, 0x2, 0x6c, 0x12, 0x6c, 0x48, 0x9, 0x6c, 0x16, 0x6c, 0x30, 0x18, 0x12, 0xc, 0x6, 0x12, 0x6c, 0x1, 0x518b9a25bf8c0d94, 0xb, 0x6, 0x6, 0x4, 0x12, 0x16]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x18e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6a0, 0x11d, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x308, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x2, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e, 0xa, 0x7f, 0x81, 0x2, 0x9, 0x40, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff01, 0x1, 0x1, 0x1, 0x1000, 0x81, 0x2, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x5e, 0x9, 0x1, 0x60]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x200, 0xfff6, 0x8fa5, 0x7, 0x5, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1d6, 0x16b, 0xc7, 0x8, 0x4, 0x99a7]}}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x5, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffd, 0xfe00, 0x9, 0x5, 0x6, 0x43c, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x6}, {0x0, 0x3}, {}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x5, 0x6}, {0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0xd4, 0x1000, 0xff, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x2, 0x4, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xff, 0x400, 0x4, 0x8, 0x400, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x5, 0x16, 0x36, 0x12, 0x9, 0x1, 0x9, 0x2, 0x1b, 0x6, 0x18, 0x24, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x2}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x3}, {0x6}, {0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x7}, {0x6}, {}, {0x2, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x4}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x4}, {0x7, 0x8}, {0x3, 0x4}, {0x7}, {0x6, 0x2}, {}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x1}, {0x0, 0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa60, 0xfff, 0xb, 0x4, 0x800, 0x8, 0x80, 0x9]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x46a, 0x1, 0x9, 0x2, 0xfe3, 0x9, 0x77da]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x5, 0x18, 0x18, 0xb, 0x16, 0x3, 0xb, 0x9, 0x12, 0x24, 0xc, 0x30, 0xe]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x9, 0x8, 0x9, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1ff, 0x1, 0x8, 0x0, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0xb, 0x6c, 0x1, 0xc, 0x3, 0x6, 0x1b, 0x4, 0xc, 0x48, 0x24, 0x63, 0x24, 0x30, 0xb, 0x4]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0xc, 0xc, 0x4, 0x36, 0x9, 0x30, 0x36, 0x9, 0x48, 0x7a, 0x48, 0x98d827143b98511c, 0x36, 0x1b, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x1}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x7fff, 0x7fe0, 0xb, 0xffff, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x2, 0x5, 0x2400, 0x24c, 0xf, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18, 0xf, 0x1, 0x935c, 0x9, 0x8, 0x1ff, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0x0, 0x9a1, 0x3, 0x7653, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x7, 0x5, 0x3, 0x293, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x101, 0xf, 0x6, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x1, 0x1000, 0xedd3, 0x8, 0x0, 0x7ff]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x1, 0xa000, 0x0, 0x7, 0xfffb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x18, 0x1b, 0x8, 0x0, 0x48, 0x48, 0x12, 0x36, 0x1, 0x1, 0x18, 0x12, 0x4, 0x30, 0x6, 0x6c, 0x3, 0x6c, 0x36, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0x6}, {}, {0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {}, {0x0, 0x1}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0xa}, {0x0, 0x2}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x8}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x4}, {0x4, 0x3}, {0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0xfffe, 0x81, 0xa25d, 0x6ece, 0x7, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x5}, {0x0, 0x1}, {0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x2}, {0x5, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1, 0x1, 0x8980, 0x7ff, 0x2, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x0, 0x1d, 0xb, 0x12, 0x6, 0x30, 0x9, 0x1, 0x0, 0x2a, 0x30, 0x30, 0x3, 0x2, 0xc, 0xc, 0x2, 0x18, 0x4, 0x60, 0x1]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x6c, 0x24, 0x1, 0x48, 0x1, 0x60, 0x18, 0x1b, 0x60, 0xc, 0x0, 0xb, 0x60, 0x18, 0xc]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x3a0f, 0xf, 0x6, 0xfff8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x1794}, 0x1, 0x0, 0x0, 0x22000800}, 0x0) 13.409011607s ago: executing program 34 (id=1088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') r4 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f00000007c0)={0x1794, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x694, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x428, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x400, 0x0, 0x9, 0x82, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x6, 0x4, 0x9, 0x0, 0x6, 0x800]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7}, {0x7, 0xa}, {0x2, 0x8}, {}, {0x2, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x7}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0xc, 0x30, 0x4, 0x43, 0xb, 0x6, 0x3, 0xc, 0x12, 0x73, 0x16, 0x60, 0x0, 0x3, 0xb, 0x6, 0x12, 0x6c, 0x1, 0x36, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x3, 0x2, 0x1, 0xb, 0xf, 0x401, 0xbac]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0xc, 0x1b, 0x4, 0x16, 0x6c, 0x36, 0xc, 0x6c, 0x4e, 0x5]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x1b, 0x2, 0x97cc133bd68d7e65, 0x18, 0xb, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x101, 0x9, 0x5, 0x7ff, 0x7ff, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x6, 0x0, 0xc, 0xf7, 0x2d6e, 0xc1, 0xb]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0xa}, {0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {}, {0x4, 0x6}, {0x4, 0x7}, {0x3, 0x4}, {0x1}, {0x7, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {}, {0x7, 0x9}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x4, 0x1ff, 0x1, 0xfffa, 0x8, 0x772]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc2c, 0xea, 0xf800, 0x200, 0x6, 0x0, 0x3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff4, 0x3, 0x6, 0x401, 0x4, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x24, 0x5, 0x12, 0xdfb42653e6a05a44, 0x6c, 0x4, 0x9, 0x2, 0x9, 0x3, 0x5, 0x36, 0x1b, 0x9]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6b, 0x6, 0x6c, 0x48, 0x1b, 0x1, 0x60, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x0, 0x18, 0x1, 0x60, 0xc, 0x24, 0x3, 0x12, 0x5, 0x3, 0x6c, 0x6c, 0x6c, 0x48, 0x2, 0x60, 0x5]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x4, 0x9, 0x6, 0x36, 0x6, 0xc, 0x2, 0x5, 0xb, 0x1, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xb, 0x3ff, 0x2, 0x7, 0x2, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x5, 0x4, 0x12, 0x48, 0x3, 0x4, 0x36, 0x4, 0x60, 0x3, 0x6, 0x1, 0x36, 0x30, 0x6c, 0xb, 0xb, 0x9, 0x4, 0xc, 0x6c, 0x4, 0xb, 0x2, 0x30, 0x6c, 0x2, 0x3, 0x6, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x30, 0x0, 0x12, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff01, 0x9, 0x7, 0x1, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x1ff, 0x3ff, 0xfffa, 0xff, 0xca, 0x6]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x78, 0x7, 0x2, 0xfe01, 0x3, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x7}, {0x4}, {0x7, 0x3}, {0x3, 0x8}, {0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2988, 0xc262, 0x7fc1, 0xff, 0x4, 0x80, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x30e2, 0x5, 0x400, 0x7f, 0x9, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfd9d, 0x7, 0x3, 0x2, 0x8, 0x2, 0x1, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x9, 0x18, 0x6, 0x24, 0x6f, 0xb, 0x36, 0x60, 0x30, 0x3, 0x2, 0x30, 0x2, 0x24, 0x30, 0x12, 0x5, 0x60, 0x1b, 0x30, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0xa, 0x40, 0xca, 0x5, 0x4c, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0xfffe, 0x9, 0x7, 0x2, 0x8, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0xffff, 0x0, 0x6, 0xd, 0xf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0xd, 0x4, 0x3, 0x3, 0x1400, 0x2]}}]}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xbac, 0x3, 0x632b, 0xa7c, 0x2, 0xb]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x5, 0x36, 0x0, 0x48, 0x6, 0x9, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1ff, 0x9, 0xe27, 0x0, 0x5, 0xc53]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7800, 0x60, 0xb, 0x6, 0x0, 0x965, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7db, 0x1e, 0x0, 0x3, 0xc000, 0x10, 0xffff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x16, 0x2, 0x5, 0x36, 0x4, 0x12, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b8, 0x6, 0xb, 0xc1, 0x4, 0x5, 0x40, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x3, 0x2, 0x1000, 0x0, 0xf3, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0xa}, {0x5, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0xf}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0xa}, {0x3}, {0x5, 0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x6}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x1, 0x3, 0x36, 0x18, 0x48, 0x0, 0x1, 0x1b, 0x9, 0x60, 0x30, 0x48, 0x12, 0xb, 0x60, 0x6, 0x16, 0x6c, 0x12, 0x48, 0x1, 0x24, 0xb, 0x24, 0x0, 0x3, 0x12, 0x4, 0x19, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x9, 0x16, 0x1, 0x9, 0x12, 0x5, 0x2, 0x6c, 0x5, 0x16]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x5}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0xc, 0x6c, 0x36, 0x18, 0x24, 0x48, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x9, 0x9, 0x4, 0x8, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x28e2, 0x8, 0x6, 0x90, 0x1, 0x0, 0xff4f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x5, 0x4ea8, 0x8, 0x3, 0xffff, 0xa]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xdc, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x46c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x8cc, 0x11d, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0xa}, {}, {0x4}, {}, {0x3, 0x2}, {0x5, 0x4}, {}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x3}, {0x1, 0x7}, {0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6d, 0x18, 0x6c, 0x4, 0x1b, 0x6c, 0x18, 0x16, 0x2, 0xc, 0x18, 0x6c, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x1, 0xd, 0x1d6, 0x74]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x9a9f, 0x7, 0x2, 0x8000, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2dbf, 0x1, 0x5, 0x5, 0x5, 0x0, 0xa, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xfffc, 0x5, 0x3, 0x9, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xc, 0x4515dfa66f3c7015, 0x1b, 0x2, 0x3, 0x5, 0x6, 0x18, 0x6c, 0x0, 0x12, 0x3c, 0x1, 0x60, 0x24, 0x7cb7b50401defb71, 0xc, 0x1, 0x36, 0xc, 0x2, 0x6, 0x18]}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x4}, {0x4, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x1}, {}, {0x2, 0x7}, {0x7, 0x9}, {0x3, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x6, 0x30, 0x1, 0x12, 0x24, 0x5, 0x16, 0x30, 0x12, 0x1, 0x16, 0x1b, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x2}, {}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x80, 0xfae, 0x8, 0x8, 0xf, 0x8, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xaf33, 0x400, 0x9, 0x9, 0x8001, 0x1, 0xf800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x7, 0x6, 0x9, 0x5, 0x9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0xc, 0xc, 0x6c, 0x3, 0xc, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x4f, 0x0, 0xfff9, 0x3, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x4, 0x1000, 0x1, 0x2, 0x5, 0xb]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x2c, 0x36, 0x9, 0xc, 0x48, 0xc, 0x18, 0x2, 0x6, 0x6, 0x1b, 0x9, 0xb, 0x6, 0xb, 0x67, 0x48, 0x6, 0x6, 0x18, 0x1b, 0x1b, 0x0, 0x24, 0xb, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x54, 0x1ff, 0x8, 0x5, 0x5, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x2, 0x18, 0x9, 0x12, 0x48, 0x16, 0x60, 0x30, 0x48, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffd, 0xd, 0xfffa, 0x9, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x8}, {0x1, 0x6}, {}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xb52f, 0x1, 0x1, 0x9, 0x9, 0x5, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x8, 0x3, 0x9, 0x200, 0x401, 0x852]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x3, 0xbe, 0x3, 0xbe, 0x2f, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x7, 0x2, 0xd, 0x6, 0x40, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x400, 0xabf7, 0x0, 0x7, 0x100, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x4, 0x8, 0x9, 0x4, 0x3, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x9}, {0x7, 0x9}, {0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x3}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0xa}, {}, {0x7, 0x1}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x6, 0x9}, {0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x9}, {}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x86e5, 0x80, 0xdbf0, 0x4, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x1}, {0x1, 0x2}, {0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x3, 0x6}, {0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x1}, {}, {0x0, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x30, 0xc, 0x1b, 0xb, 0x4, 0x1, 0x3, 0x60, 0xc, 0x48, 0x1b, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x60, 0x1b, 0x16, 0x2, 0x6, 0x6c, 0x18, 0x1]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x9, 0x3, 0x1, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x3, 0x60, 0xf, 0x30, 0x60, 0x6, 0x12, 0x4, 0x9, 0x4, 0xb, 0x3, 0x5, 0x1b, 0x1, 0x18, 0x48, 0x16, 0xc, 0x33, 0xa, 0x18, 0x6c, 0xc, 0xb, 0x52, 0x2, 0x1b, 0x30]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x2, 0x0, 0x3, 0x8, 0x3, 0xc, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x2}, {0x0, 0x4}, {0x1}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {}, {}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x7}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0x9}, {0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x3, 0x3}, {0x4}, {0x4, 0x2}, {0x7, 0x2}, {}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x9}, {0x5, 0x2}, {0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x6}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x4, 0x7}, {0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x5, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x9}, {0x7}, {0x0, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x5, 0x3, 0xff12, 0x18, 0x227f, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xb, 0x1, 0x3, 0xf3, 0x1, 0x30]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x79, 0x3, 0x8, 0x8, 0x80, 0x80, 0x100, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xe, 0x6, 0xab3, 0x101, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x7}, {0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x2}, {0x3, 0x3}, {0x4, 0x3}, {0x4}, {0x1, 0x4}, {0x7, 0x4}, {0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x87}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x60, 0xb, 0x2, 0x6c, 0x6, 0x1, 0x9, 0x24, 0x24, 0x1f, 0x60, 0x2, 0x18, 0x30, 0x4, 0x16, 0x29, 0x48, 0xc, 0x16, 0x6e, 0x60, 0x12, 0x3, 0x6c, 0x4, 0xb, 0xc, 0x24, 0x6, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7}, {0x7}, {0x1, 0xa}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x4}, {0x7, 0x4}, {0x3, 0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x4}, {}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x1}, {0x4, 0x2}, {0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x2, 0x3}, {0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcf7, 0x5d9e, 0x3, 0x0, 0x5, 0x8, 0x200, 0xa29]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc49, 0x0, 0xffd6, 0x1235, 0x7f, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x1b, 0x30, 0x5, 0x2, 0x6c, 0x12, 0x6c, 0x48, 0x9, 0x6c, 0x16, 0x6c, 0x30, 0x18, 0x12, 0xc, 0x6, 0x12, 0x6c, 0x1, 0x518b9a25bf8c0d94, 0xb, 0x6, 0x6, 0x4, 0x12, 0x16]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x18e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6a0, 0x11d, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x308, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x2, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e, 0xa, 0x7f, 0x81, 0x2, 0x9, 0x40, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff01, 0x1, 0x1, 0x1, 0x1000, 0x81, 0x2, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x5e, 0x9, 0x1, 0x60]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x200, 0xfff6, 0x8fa5, 0x7, 0x5, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1d6, 0x16b, 0xc7, 0x8, 0x4, 0x99a7]}}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x5, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffd, 0xfe00, 0x9, 0x5, 0x6, 0x43c, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x6}, {0x0, 0x3}, {}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x5, 0x6}, {0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0xd4, 0x1000, 0xff, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x2, 0x4, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0xff, 0x400, 0x4, 0x8, 0x400, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x5, 0x16, 0x36, 0x12, 0x9, 0x1, 0x9, 0x2, 0x1b, 0x6, 0x18, 0x24, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x2}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x3}, {0x6}, {0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x7}, {0x6}, {}, {0x2, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x7, 0x9}, {0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x4}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x4}, {0x7, 0x8}, {0x3, 0x4}, {0x7}, {0x6, 0x2}, {}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x1}, {0x0, 0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa60, 0xfff, 0xb, 0x4, 0x800, 0x8, 0x80, 0x9]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x46a, 0x1, 0x9, 0x2, 0xfe3, 0x9, 0x77da]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x5, 0x18, 0x18, 0xb, 0x16, 0x3, 0xb, 0x9, 0x12, 0x24, 0xc, 0x30, 0xe]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x9, 0x8, 0x9, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1ff, 0x1, 0x8, 0x0, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0xb, 0x6c, 0x1, 0xc, 0x3, 0x6, 0x1b, 0x4, 0xc, 0x48, 0x24, 0x63, 0x24, 0x30, 0xb, 0x4]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0xc, 0xc, 0x4, 0x36, 0x9, 0x30, 0x36, 0x9, 0x48, 0x7a, 0x48, 0x98d827143b98511c, 0x36, 0x1b, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x6}, {0x1}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x7fff, 0x7fe0, 0xb, 0xffff, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x2, 0x5, 0x2400, 0x24c, 0xf, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18, 0xf, 0x1, 0x935c, 0x9, 0x8, 0x1ff, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0x0, 0x9a1, 0x3, 0x7653, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x7, 0x5, 0x3, 0x293, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x101, 0xf, 0x6, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x1, 0x1000, 0xedd3, 0x8, 0x0, 0x7ff]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x1, 0xa000, 0x0, 0x7, 0xfffb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x18, 0x1b, 0x8, 0x0, 0x48, 0x48, 0x12, 0x36, 0x1, 0x1, 0x18, 0x12, 0x4, 0x30, 0x6, 0x6c, 0x3, 0x6c, 0x36, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0x6}, {}, {0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x2}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {}, {0x0, 0x1}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0xa}, {0x0, 0x2}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x8}, {0x2}, {0x5, 0x5}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x4}, {0x4, 0x3}, {0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0xfffe, 0x81, 0xa25d, 0x6ece, 0x7, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x5}, {0x0, 0x1}, {0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x8}, {0x2}, {0x5, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1, 0x1, 0x8980, 0x7ff, 0x2, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x0, 0x1d, 0xb, 0x12, 0x6, 0x30, 0x9, 0x1, 0x0, 0x2a, 0x30, 0x30, 0x3, 0x2, 0xc, 0xc, 0x2, 0x18, 0x4, 0x60, 0x1]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x6c, 0x24, 0x1, 0x48, 0x1, 0x60, 0x18, 0x1b, 0x60, 0xc, 0x0, 0xb, 0x60, 0x18, 0xc]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4, 0x3a0f, 0xf, 0x6, 0xfff8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x1794}, 0x1, 0x0, 0x0, 0x22000800}, 0x0) 7.731265234s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 5.598126565s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 4.245439378s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3.042054146s ago: executing program 0 (id=1189): mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2512, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0x3, 0x800000, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x800, @private0, 0x8}}, 0x0, 0x2000, 0x40000002, 0x8, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0xd, 0x3, 0x5}]}]}, {0x0, [0x4f, 0x30, 0x30]}}, &(0x7f00000006c0)=""/247, 0x35, 0xf7, 0x1}, 0x28) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x12, 0xffffffffffffffff, 0xffffc000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x2040400) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb0b9, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) preadv2(r5, &(0x7f0000002680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xf87, 0x8, 0x1e) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10008099) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) link(0x0, &(0x7f0000000300)='./bus\x00') sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='^', 0x1}], 0x1}, 0x20040010) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) 3.026017727s ago: executing program 4 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x4500, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write(r7, &(0x7f0000000040)="a0746a29b8aa0002a15b6389848dbd2a7efe8c42ab465dc360c14f99a2eac1", 0x1f) 2.92153744s ago: executing program 0 (id=1194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000011c0)={[{@barrier_val={'barrier', 0x3d, 0xad}}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = inotify_init() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2.90478222s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.830760506s ago: executing program 0 (id=1195): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) exit(0xc) getdents(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_open_dev$mouse(&(0x7f0000000000), 0x7ffffffffffbfffb, 0x200000) 1.830473256s ago: executing program 1 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x40, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async) listen(r0, 0x1ff) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x10, 0x0, 0x0, 0x1, 0x0, 0xdcc0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200008, 0x0, 0xc, 0x8, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) 1.826209566s ago: executing program 6 (id=1197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) ftruncate(r1, 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x2bf6, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}, 0xb3}], 0x1, 0x45833af92e4b39fc, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000040)=""/50) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) close(0x3) 1.821806016s ago: executing program 4 (id=1198): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={0x0, 0x2}, 0x104101, 0x5, 0x0, 0x1, 0x6, 0x4, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x3, 0xfffffffffffffffd}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.707149179s ago: executing program 6 (id=1199): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000240)={[0x1]}, 0x8) 1.706456889s ago: executing program 1 (id=1200): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa}, 0x28) 1.705962199s ago: executing program 1 (id=1201): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'unlock', ' ', 'io+mem'}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000100)={0x0, 0x4, 0x9032}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0x3, 0xa, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) file_getattr(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x50, r5, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000200)={{r6}, {@val={r7}, @max}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000900)={0x8, 0x2, {0x2, @usage=0xb, r3, 0x3, 0x8, 0x1000, 0x3, 0x3ff, 0x8, @usage=0x8, 0x6, 0x10001, [0x2, 0x9, 0xa1, 0x7, 0x80000000000, 0x4]}, {0x4, @usage=0x3540, r4, 0x9, 0x6, 0x5, 0x5, 0x8, 0xe1, @usage=0x6, 0x9f, 0xda4, [0x0, 0x8, 0x9, 0x4, 0x7, 0x80000000]}, {0x2, @struct={0x6, 0x4}, r7, 0x100000000, 0x4, 0x8, 0x4, 0x5, 0x40, @struct={0x0, 0xc}, 0x8, 0x8, [0x95, 0x8, 0x1, 0x4, 0x8, 0x1f]}, {0xffffffffffffff5c, 0x6, 0x8}}) 1.65660973s ago: executing program 6 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x4c}}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b) setpriority(0x3, 0x0, 0x4004) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)={0x40, r2, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffff7fd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x15, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @random_vendor={0xdd, 0x9, "f9b4597add28936ffa"}]}]}, 0x40}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffffd, 0x4006011, 0xffffffffffffffff, 0x20f00000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r5, 0x301, 0x70bd29, 0x25dfdbfb, {0x21, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x4004814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x68, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.65617517s ago: executing program 1 (id=1203): r0 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events', [], 0xa, "de"}, 0x1d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r2 = dup(r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0xfffc, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x8000000, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x4000000000000000, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}}, 0xb8}}, 0x0) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x7fffffff) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0xfffd, 0x8, 0x8010, 0x7, 0x3, 0x1000, 0x80000000, 0xffffbba2}}], 0x30}, 0x8050) r5 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000100)=0x10) recvmsg(r5, &(0x7f0000000680)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/11, 0xb}], 0x7, &(0x7f0000000580)=""/228, 0xe4}, 0x2) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18, 0x48d5}, 0x8050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x3e8, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TID_CONFIG={0x370, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x2, 0x1, 0x30, 0x3, 0x24, 0x1b, 0xb, 0xb, 0x18, 0x0, 0x60, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x48, 0x6f, 0x16, 0x60, 0x16, 0x1b, 0x36, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8148, 0xb, 0x7, 0x7, 0x8, 0xe67, 0x2]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x5}, {0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x6c, 0x60, 0x18, 0x60, 0x1b, 0x24, 0x12, 0x12, 0x36, 0x12, 0x1b]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0xff80, 0x80, 0x1, 0x8, 0x7ff, 0x4ab9]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7, 0x1, 0x8001, 0x9, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x4}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x6, 0x48, 0x1, 0x3, 0x3, 0x24, 0x9, 0x4, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x16, 0x36, 0x18, 0x30, 0x1b, 0x5, 0x48, 0x18, 0x48, 0x6, 0x5, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x24, 0x24, 0x12, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x2, 0x100, 0xb925, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x9, 0xc, 0x4, 0x4, 0x9, 0x1b, 0x1, 0x0, 0x48, 0x6, 0x9, 0x30, 0x6c, 0x48, 0x13, 0x1, 0x2, 0x3e, 0x16, 0xb, 0x16]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x4}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x4, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x6}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x6, 0x6}, {0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x1}, {0x1, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffa, 0x0, 0x80, 0x4, 0x40, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x1}, {0x0, 0x3}, {0x3, 0x5}, {}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x5}, {0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x18}, {0x6, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x5}, {0x3, 0x1}, {}, {0x6, 0xa}, {0x2, 0x5}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x85}, 0x24048040) 1.614135351s ago: executing program 6 (id=1204): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) r0 = socket$inet(0x2, 0x2, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0xc8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x1) read(r3, &(0x7f0000000400), 0x120) read(r3, &(0x7f0000000500), 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xfff3, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000"], 0xa4}}, 0x0) 1.579240662s ago: executing program 1 (id=1205): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f0000008440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111d900000000009500000000000000951f4169a25cbbf1b88540eab545d6487d2686a08a3f22172f8de762dcf4"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @rand_addr=' \x01\x00', 0x7}, 0x1c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="c5e7d63798b2f58700d7bcbd262ba710e9dafdebf0d357d3e2eff31f3aea38b42ba5e360f831de80d04ad106", 0x2c}, {&(0x7f00000008c0)="f25766ba8a374a4784c49b155e21aaced0e323f3a99bbebddb197052bd31ed9b000000d1cd8a44d306f7b1506a6484d7a18e275c70d64180a4731678d24dc3344b0de7a0283c8a00f900eeedac8470cd728b9185358e25d8fc565f759605b88ae040266de30a776a4d27cc4e45c7389aa75a5a7661a28e5077bd69de908191c07c2a2ae6d546da61e0c144b96a128ef5d19bbd247d7d97082641e1ee704836cdd4b860469ed5d61bcd74db06fa6b6ca75bf0d72bc02f60d03d2399f3c4c2bb0d152b97034ebcfbf5cdb445c6204a3ba798281faa54d234ca0b125b45b9da08f0090e8a3ee47273ba06ecb8b2ea", 0xed}, {&(0x7f00000007c0)="41f94b5cc88422cef640a9a5798fe9f9acfd84592072ec42365a9fce39a94a960a6e10f3a97f8ace9475ce5d7a33a42d1b71aa743d0d57e9f23461ab3d4a83a39589585db33e4ed7df2208c2a57450543e343247473979b04bca456214173484d2a3f8e106f30fbb69beba07a7a3df3d8814e035e1b3d346084f8b3b004f2af74606be38f3b405394c802e66", 0x8a}], 0x3}}], 0x1, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xbe5d, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="00004700fe3e2372f57c75dc48f609996e6b982675734141a3c02cf051c248808528b3a947fe8c09102f74eacefd48bacae5d77e08f9629a8e43079f2c4ccde5fb17199400000000000000fba49d74a81a97cb8018cde1fa01a0"], 0x4f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7ffffffe, 0x30}, 0xc) r7 = dup(r0) write$cgroup_subtree(r7, &(0x7f00000009c0)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="37ac1cc357003d87e21f2adbb98cbe93675adafe7d422620663a44d29adad81be76bc38dc875d2f5f76b404b4cd0b21f3004758ed030738e3402d4ce656dabd700aeddb181d283bf7c6bbf0c1ce32ce4157fd444bd8785f8b5872343f13f5c1407bdb9d69862088872c55d86edcfea398f4b16a7966e5ca24d"], 0x32600) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, r8, 0x0, 0x0, 0x1000, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 1.540181053s ago: executing program 6 (id=1206): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000011c0)={[{@barrier_val={'barrier', 0x3d, 0xad}}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = inotify_init() socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.440281805s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 327.507072ms ago: executing program 0 (id=1207): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000976000/0xe000)=nil, 0xe000, 0xd) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000100000a00060008021100000000000a0006000802110000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044004) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x4, 0x40480c0) close(0x3) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x38, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) 326.743022ms ago: executing program 1 (id=1208): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x18002, 0x0) sendto$inet(r0, &(0x7f0000000180)="e5bfae877b4411c2b3addf52493c2da7edd69dffbc6c073aeace697170537f73cf71910db89c214a30c0d671fe5dd30d90399b365ffafc38ee3cf47c7e525234b9f7f000f2d1258fe3de3a07376816ce", 0x50, 0x8810, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 324.824832ms ago: executing program 6 (id=1209): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x120) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, r0, 0xec776000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_emit_ethernet(0xf7f, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf49, 0x0, 0x0, @empty, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='GPL\x00'}, 0x80) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x64) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) close(r3) socket$inet(0x2, 0x3, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) syz_usb_connect(0x4, 0xed3, &(0x7f0000002140)={{0x12, 0x1, 0x250, 0xcf, 0x94, 0x9f, 0x40, 0x9c0, 0x206, 0xcc6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec1, 0x4, 0x70, 0x3, 0x80, 0x6, "", [{{0x9, 0x4, 0x28, 0xd, 0xd, 0x41, 0xb2, 0xc, 0x5, [@generic={0xf5, 0x23, "51e88055f8c86b4dceb0a443b6479ddb4020d1d86cd67821b5946370aa44800eafb32a7db9e7b263411e74605d6b42cffed0c4d85a64c401b054ea8cbba4ce0111b8cc1ee67d364f1e2bcbebfb63e769d7721e39c4c71b8188dc950de842491412058a4f9d5001581204a1ec0609bdf6a2e66a17cd657f7c5c9a9072e8934713f6f77752420ce1a086ef4f0455a8ba8c8b371041ebd10db6a510c80dfc1e4c250642162aaa9c439fb9445171d6944e4ee01713746b6ef57090eb3a1c54ccc7c549e481a63a8bf86bbf85f23746cf1bc04e82290316d043073be41eeea051ca4c39fcc5d536304fe0f005dedadb50fea3e4f7b6"}, @hid_hid={0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0x255}}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0xa, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x600, 0x8, 0x68, 0x21, [@generic={0x45, 0x10, "cc916f97629b51983108189d5350bb13c6eee7e371397993a47ffee3382114f92be64f93e0730ed925b50b358d6bd414989a54533bd4bd609c88bd3f6a75e2c038ba37"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x289}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0x9, 0x68, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x6, 0x2, 0x80, [@generic={0xd6, 0xa, "1eb8c2905b061abc755d941f6faf9ad0884e422c90d72669b0b7f7b9b845255efdb946303ad50a265b6972f79bf93befc113d0519a79b5c374c9a899377420db625b36c54112df5c6796837bbee89da338555b7f0358aff22494fdbc651340954f78a5f4dd7422937f9d670899059dea3de9ff0d93ec4b92b31299b3d5fee86e3690f7da335d30ad6efd5f55038fbe491b4157bf50234200a6b6f087a9c5bbd301fc9ba5128157a91fb96ee134e43461e68a83880c16b749a4c67856d1c264fa0e58ed943c6f4aa198f268ad7c70d88814c69936"}, @generic={0x52, 0x22, "ef5971cd807d7949acd27e2b84eb67614b68bc8dbfd2b2ea8f3b3550a3d552129fc640032fd080411927685200c49907c69a71b56beb8088da4088c0f6005600dff4a1d2175869027a1200298080fafe"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0xbe, 0x32, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x2}, @generic={0xfd, 0x1d, "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"}]}}, {{0x9, 0x5, 0x7, 0x32ccae32e074e12e, 0x10, 0xc0, 0x76, 0x0, [@generic={0x45, 0x21, "aa28a2befdb0085651ff787880b985147f6285918d0adc6de80dbbb3f963e1ac9327f71f9de074a390d2b2666290ae64800e7863196113bbfe0f37e6b998b5c2e0f201"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0xd, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1e, 0x8, 0x0, [@generic={0xbf, 0x11, "6ba0c659b4210943707649581993769ff30a1e27d6f08f2f05ea8d70baae041fea2bae67b9e5e0d3a841e31100827e29e4c7fe664a3166254a5871929504adcdc3e5c4b708ae2ce8e8effd0f4526411e499ce2cbccc427db0a7a47c1269cec7d4d6a00fc3d534a067284b865d155b817c73e1e5e33ed17849ea1ad5fc4332d33d2809eb3ba04c972ec4fbce2f21bdd0005d680ffe9f8653186738485d3678eb81030646dfaee7b539951817594dad2728ccb253aee3b835c2837cd080e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x17, 0xfe0}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xf9, 0x3, 0xa}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x22, 0x8, 0x3, [@generic={0x86, 0x21, "76ac71a472ee8ae2841e75db3330789df75bac91a14402610e149c598e0f20b3cc53b8eec5f0fb91a9753d51b8bfce11b1f74ed01f0a3c27a3572fc7c06f5ba8b45d6b835d00a8a4d73752af1fb8649cd2f2c3a0533078dfaa062fcc3a3786b4654125e7b18c6d2539d7e4bffadfcb6a00d41361e7725973d6ee6a9c4057260b926faf48"}, @generic={0x82, 0x7, "4151f90b10df569144fd4482e47952fcbd5e52657426a2371dd7a3d548b81682ff17e08fff1cb56de3379f44daad28b04689c8018118d2e3b72f792b740991991a986dbf444fbba34e1d25eca0b8657725e73b37f70589196e70fab1b45d63ffb39b1281d2c124fdaf5cafada7ce84fbf2749640ddffea36759374ed2f1ebc78"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x1, 0x18}}, {{0x9, 0x5, 0x80, 0x1, 0x1ef, 0x10, 0x0, 0xa}}, {{0x9, 0x5, 0xf3e17c4d32b6c251, 0x1, 0x3ff, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb2, 0x5567}]}}]}}, {{0x9, 0x4, 0xb5, 0xff, 0x5, 0x7c, 0x20, 0xa4, 0x0, [@generic={0x80, 0x2, "cfb2df279f747021aa47cd707b5354cff8573d3a13a1d14f23e27c5a877479b6fbd401b7869dbcf8eb18c3c6748b35766dc51bcfba8c47825772133ceb4a8c76f447286af7135dec4d4a05dfd8938d6d850e9ee65eecebe00bd6de9c8c0a6de02faf3c258ca6c49b96710d855b825b3ad82f000fbc0c435fad9b1faf05cf"}, @uac_control={{0xa, 0x24, 0x1, 0x1000, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x3], 0x5}]}], [{{0x9, 0x5, 0xa, 0x4, 0x20, 0x8, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0xc, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x0, 0x8c, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x0, 0xf0, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0xff, 0x3, [@generic={0xfa, 0x2, "5e8e850be929c705547d58f6faa7b1c33cd0d23f5eeb9744cb77a483d193c08ca5e4511f3108f1fdb60f3848f0dc2b204dc6f838cabb7e8bae2f8cb61bf53a1db5092d3bc832c997ea9ce6be12dd2109ea4747417f2b0124b1f1651e3a87e24592e17cd4b04fc40b7e9b0842c4020f74ff330f71e52a6f4cd4ca3f134e95421903c35a117ecc64bb5cb1e4874fad41ff646770992165d73d224de7b9120d97a0e54a3b5e790254714b4ae1e48e54c19eeb9aedf0de80acc7614970599c95340f3d0b1cdcf057c692d93254946ca4ca4188d3f8f1627a0176dcdb32bf6c74aaddd7ae9be5af12371485025dccce4364fe08bd99b40b07d367"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xdb}]}}]}}, {{0x9, 0x4, 0xdf, 0xdb, 0xd, 0x49, 0xaa, 0xd8, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "0845982228bb"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x27, 0x2, 0x3, 0x9b}, [@mdlm={0x15, 0x24, 0x12, 0xd}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xa595, 0x0, 0x0, 0x100, 0xb2}, @ncm={0x6, 0x24, 0x1a, 0xfffc, 0x10}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x1, ':M'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa7, 0x4, 0x5f, 0x0, "4ff0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x200, 0x51, 0x1}, @as_header={0x7, 0x24, 0x1, 0x40, 0x9, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x4, 0x59, 0x5}, @as_header={0x7, 0x24, 0x1, 0x40, 0x0, 0x4}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x8c, 0x83, [@generic={0x7f, 0x23, "16e7a854e7fa03eec2d56b98fb56a4bd164e2985f2480a7f98b58c3a574c6671027d8a865a7c4e99e8b6d22ccb6c70dc10acc40f625f75581252b85678a184c7fcf82254ad9e689a36545e565e9aef4465dbf2e16bbac8d5cf02ebc02c7d7a63c78c66278673cc88bbf86d0532a9d238efc4ca695eb152ef08fc2384c4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0xe, 0x5, 0x2}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9, 0x4, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0xa2a1}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x0, 0x40, 0x2, [@generic={0xb4, 0x7, "99a7d57291b78dc99ddefba200fe9e64fda518b85b73b377974bf90bac5c8a769fcfbd1bf0ebb988658c3fafaf3d1116dd6aef525363e08995e64d250cd4282c60fa124ec41b733f17a8f89780cd05038a42d4559ce17dd5d57d8481e6e04014f87411487dd04e130048f4a42fd959d12607aa0be187837c97c2cdfe50fd9a136fba3c2606057f781b7af3d16800882dc4bf3750c21830d4f3f3fd467d3764e6d358f5fe19d72a89455ab65d42e7aec368e2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x29, 0x7f, 0x3, [@generic={0xc8, 0xc, "c7950605dc6ab1906e6b80e4145356fb59a8e2c8352ce509da7b7b653154106775aa763672e0e4704035b6a98ba81c027d28fa00a9dea9255df6c81df856c9b05efa73b9b39f99dbdc052c59a900ab3460d44a0cb0add471448e8d88d1b72fa48ed0a5cb36f3ce8bf6b0971c2144a65de3fa5a5035b87407bd9aeb3c453665cfd96c475651783c6a9d312796a756405c0ac88d59bb14b01e8c79ac886c0edef9e65cb6b52329657fe0974dd2ca14e2d890d30523215700ce48873449e46cde735b8e349adb8d"}, @generic={0xb, 0x11, "95430d2f865f2da8db"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x4, 0xf3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xb}, @generic={0x8e, 0x1, "5f1034955d568644c955983487ece4143ef75e59bb0bed626a96fef5dd4a1eee125c6497e457a3018449d4089209117f9a97a743dc43bc35bbcbc2085809915a67248ea1881143d957996456087a860bf0feacd2f098287246a2735e5f85e47f53bcaf48000f8ef662c28d766168424eaaeae2845886fa59ee99b61a2076f65ff0bccdb1c9e418a3e0c7170b"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0xfe, 0xd, 0x7, [@generic={0x4a, 0x0, "2854d32924e242a29d2316c6ba425bf8dc7414dbf08636910b1a2b291fb9de38b15e60b9ffcfe3ebef276a0610456ed35cb66c1c65f66e68935d58f5bf7fcde2966c52b51446a7e7"}]}}, {{0x9, 0x5, 0x80, 0x16, 0x3ff, 0x1, 0x6, 0xf8}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x56, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x25, 0x8}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0xf7, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x7, 0xb7, 0x6, [@generic={0x7f, 0x0, "8c9e2ca0dd8eda694c2c8a1bc73f33c68c185b2468b9a2c1826a7cc4a6c50b1a746a1d5b5c98779379e50a2bca8912d99582e4d705b566286dd8970fa1e8ba8da9b6e28e2e1b4530e3f5df1ebe9630412da2d33e7585a768211e2c63bed31bc517cecda1c03201ae17e4d6e7a17cc842f596169f74ac030d7b353d947d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xf2, 0x1, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xae3}, @generic={0x8, 0x22, "bc96ac659e0a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x6b, 0x20, 0x7}}]}}, {{0x9, 0x4, 0x43, 0x4, 0x7, 0x86, 0x73, 0x98, 0x7, [], [{{0x9, 0x5, 0x512fdfe303925d7e, 0x8, 0x400, 0x0, 0x1, 0x0, [@generic={0x4a, 0x21, "148da42383de8accf2f13d37187f1d9076ed66852b3b29a9e1891daa50373215f02820e27605601dac3299626837f5bbe4b28bf9852c52310cea2550d8fb33aa0b32b3d9654a8fb1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x200}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x22, 0x91, 0xa, [@generic={0xba, 0x24, "a645b2d935ab02b56b7e3248432cc76d32578c31d910d66d1bf9adfb01d617b725bb79175f0fad4c42b2db1e99389d4d43e6212a8085540007f1a41214eb7494ad9053348aa6fe4a42999285550e5afe90799235cd32bf49c3c548271629f9397639787fa7a5ee1f809dd5118826ba8094d9ce53fa216ebd55ef1d141b22bcfee356c935a9c2a2849446898f9eab258f319835d7f055dfee5659daff464607b6319c2fc7a3c8707a23503f3c0ed1939c03a0f29f51decb98"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xe6, 0x9, 0x98, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x3a1}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0xd, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf4e4}, @generic={0xa5, 0xe, "d318be338828bb44029a29c444ccadcec42f251b6c8be289d72f0c619c5baa80e7aa5177c21e4fb9f72ca6d6f316e01cba6996af56bcee30ce4450593683373b433839d36ac47de978d7b05ce11d975a00d17049a517271a891a6c8a537165d05aaf8beaa7860dc71e93879d5d91b69efb736b78a5d5e6e08a8578a59411cd60de07cc37f31f9fbcab0ea5595410f354d558bee25f23e85cbe92641f48329fbf408946"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8459}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xc, 0x2, 0x1}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x80, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xc1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3ff}]}}]}}]}}]}}, &(0x7f0000003200)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x300, 0x8, 0x87, 0x86, 0xd7, 0x2}, 0x23, &(0x7f0000003080)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x38, "8e872ccd550063d07ea48532d01b8ad9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x36, 0x81, 0x3}]}, 0x2, [{0x5a, &(0x7f00000030c0)=@string={0x5a, 0x3, "d2b9737ce7a721cacc99ca4d1b6505c24c55aaf4d621006b642884d856cf21dde45d3f3ca41a481dddc7b41c60f2180b4e09e47e942bf2e5299ff0c27ca21791e4a35a62891b9c1c8d2a47bf70038fe177b26c57466c7c72"}}, {0xa9, &(0x7f0000003140)=@string={0xa9, 0x3, "9e2391127a7dbb8191fc9ce69e8f8bb0ea90bd09b0bc42d16cfb8234fcf2648431b216c02aa1e007153d0ed2eef6a8687a92bfb7df89a686a89a71651ce211c1381d5321660882f9329d0bd97b3108020a51ffd3219bf743fcf22f8d60852a12079b88f10ff9b088df54cf6520e6c4c368110a37cee67f2ce73ec375265b3cb52e05eceae887fe3d9ea57bf7992da09e5b6ffb3f992228187e2bee93ccb9ddae0db71a8ab48054"}}]}) 324.374232ms ago: executing program 4 (id=1210): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xffffffff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffff1}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x10, 0x400000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff, 0x3}, {}, {0x1}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x80, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x1800, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4000}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x2, 0xfffffffc, 0x0, 0x3ff, 0x9}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x8e46, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x40, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0xffffffc, 0x0, 0x0, 0xf, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xffffffff, 0x0, 0x100000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x8}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1}, {0x2}, {}, {}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1, 0x1}}, 0x40) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r4 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, &(0x7f0000000800)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 269.074044ms ago: executing program 0 (id=1211): mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2512, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0x3, 0x800000, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x800, @private0, 0x8}}, 0x0, 0x2000, 0x40000002, 0x8, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0xd, 0x3, 0x5}]}]}, {0x0, [0x4f, 0x30, 0x30]}}, &(0x7f00000006c0)=""/247, 0x35, 0xf7, 0x1}, 0x28) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x12, 0xffffffffffffffff, 0xffffc000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x2040400) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb0b9, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) preadv2(r5, &(0x7f0000002680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xf87, 0x8, 0x1e) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10008099) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) link(0x0, &(0x7f0000000300)='./bus\x00') sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='^', 0x1}], 0x1}, 0x20040010) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) 244.109434ms ago: executing program 4 (id=1212): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa}, 0x28) 136.690587ms ago: executing program 4 (id=1213): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) ppoll(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)={[0x1]}, 0x8) 136.309527ms ago: executing program 4 (id=1214): mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2512, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0x3, 0x800000, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x800, @private0, 0x8}}, 0x0, 0x2000, 0x40000002, 0x8, 0xa17433da3c5d6980, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x40, 0xc, 0xffffffbb, 0x40, 0x1, 0x1}, &(0x7f00000003c0)=0x9c) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0xd, 0x3, 0x5}]}]}, {0x0, [0x4f, 0x30, 0x30]}}, &(0x7f00000006c0)=""/247, 0x35, 0xf7, 0x1}, 0x28) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x12, 0xffffffffffffffff, 0xffffc000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) unshare(0x2040400) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb0b9, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) preadv2(r5, &(0x7f0000002680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xf87, 0x8, 0x1e) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10008099) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) link(0x0, &(0x7f0000000300)='./bus\x00') sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='^', 0x1}], 0x1}, 0x20040010) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) 50.748329ms ago: executing program 0 (id=1215): r0 = socket(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './tracing/dynamic_events', [], 0xa, "de"}, 0x1d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r2 = dup(r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0xfffc, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x8000000, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x4000000000000000, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}}, 0xb8}}, 0x0) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x7fffffff) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0xfffd, 0x8, 0x8010, 0x7, 0x3, 0x1000, 0x80000000, 0xffffbba2}}], 0x30}, 0x8050) r5 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000100)=0x10) recvmsg(r5, &(0x7f0000000680)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/11, 0xb}], 0x7, &(0x7f0000000580)=""/228, 0xe4}, 0x2) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18, 0x48d5}, 0x8050) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x3e8, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TID_CONFIG={0x370, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x2, 0x1, 0x30, 0x3, 0x24, 0x1b, 0xb, 0xb, 0x18, 0x0, 0x60, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x48, 0x6f, 0x16, 0x60, 0x16, 0x1b, 0x36, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8148, 0xb, 0x7, 0x7, 0x8, 0xe67, 0x2]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x5}, {0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x6c, 0x60, 0x18, 0x60, 0x1b, 0x24, 0x12, 0x12, 0x36, 0x12, 0x1b]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0xff80, 0x80, 0x1, 0x8, 0x7ff, 0x4ab9]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7, 0x1, 0x8001, 0x9, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x4}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x6, 0x48, 0x1, 0x3, 0x3, 0x24, 0x9, 0x4, 0x1b, 0x36, 0x12, 0x18, 0x30, 0x16, 0x36, 0x18, 0x30, 0x1b, 0x5, 0x48, 0x18, 0x48, 0x6, 0x5, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x24, 0x24, 0x12, 0x60, 0x9, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x2, 0x100, 0xb925, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x9, 0xc, 0x4, 0x4, 0x9, 0x1b, 0x1, 0x0, 0x48, 0x6, 0x9, 0x30, 0x6c, 0x48, 0x13, 0x1, 0x2, 0x3e, 0x16, 0xb, 0x16]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x4}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x4, 0x5}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x6}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x6, 0x6}, {0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x1}, {0x1, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffa, 0x0, 0x80, 0x4, 0x40, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x1}, {0x0, 0x3}, {0x3, 0x5}, {}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0x7}, {0x5}, {0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x18}, {0x6, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x5}, {0x3, 0x1}, {}, {0x6, 0xa}, {0x2, 0x5}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x85}, 0x24048040) 0s ago: executing program 7 (id=1089): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b1, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet_nvme_of_msg(r0, &(0x7f0000000140)={@data_h2c={{0x6, 0xa, 0x18, 0x0, 0xfffffffc}, 0xfeb, 0x8, 0x2, 0x8, "e943c9fb"}, @void}, 0x80, 0x0, 0x0, 0x0) close(r0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) sendfile(r2, r2, &(0x7f0000000280)=0x8000000000000001, 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): 033:0x7fa8c1cfe84e [ 102.393959][ T5801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.393985][ T5801] RSP: 002b:00007fa8c0796fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.394025][ T5801] RAX: ffffffffffffffda RBX: 00007fa8c07976c0 RCX: 00007fa8c1cfe84e [ 102.394044][ T5801] RDX: 000000000000000f RSI: 00007fa8c07970a0 RDI: 0000000000000003 [ 102.394060][ T5801] RBP: 00007fa8c0797090 R08: 0000000000000000 R09: 0000000000000000 [ 102.394072][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.394088][ T5801] R13: 00007fa8c1fc6038 R14: 00007fa8c1fc5fa0 R15: 00007fff413d70c8 [ 102.394111][ T5801] [ 102.782977][ T5827] Failed to initialize the IGMP autojoin socket (err -2) [ 102.957371][ T5845] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 103.084833][ T5859] __nla_validate_parse: 2 callbacks suppressed [ 103.084852][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.100167][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 103.165142][ T5860] bond1: option lp_interval: invalid value (18446744071562067969) [ 103.176168][ T5860] bond1: option lp_interval: allowed values 1 - 2147483647 [ 103.187483][ T5860] bond1 (unregistering): Released all slaves [ 103.294261][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.406842][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.487224][ T5908] Failed to initialize the IGMP autojoin socket (err -2) [ 103.495187][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.534902][ T5912] loop0: detected capacity change from 0 to 1024 [ 103.538806][ T5914] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 103.559575][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.650098][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.699787][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.749554][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 103.825597][ T5926] syzkaller0: entered promiscuous mode [ 103.831580][ T5926] syzkaller0: entered allmulticast mode [ 103.880839][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.480'. [ 104.042454][ T5943] loop1: detected capacity change from 0 to 4096 [ 104.188590][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.431122][ T5977] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.463176][ T5981] Failed to initialize the IGMP autojoin socket (err -2) [ 104.877874][ T6018] loop2: detected capacity change from 0 to 4096 [ 104.884379][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.956310][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.973971][ T6018] FAULT_INJECTION: forcing a failure. [ 104.973971][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.987170][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.2.511 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 104.987284][ T6018] Tainted: [W]=WARN [ 104.987293][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.987308][ T6018] Call Trace: [ 104.987315][ T6018] [ 104.987323][ T6018] __dump_stack+0x1d/0x30 [ 104.987347][ T6018] dump_stack_lvl+0x95/0xd0 [ 104.987373][ T6018] dump_stack+0x15/0x1b [ 104.987449][ T6018] should_fail_ex+0x25e/0x270 [ 104.987488][ T6018] should_fail+0xb/0x20 [ 104.987594][ T6018] should_fail_usercopy+0x1a/0x20 [ 104.987631][ T6018] _copy_from_user+0x1c/0xb0 [ 104.987667][ T6018] kstrtouint_from_user+0x69/0xf0 [ 104.987703][ T6018] ? 0xffffffff81000000 [ 104.987720][ T6018] ? avc_policy_seqno+0x15/0x30 [ 104.987773][ T6018] proc_fail_nth_write+0x50/0x160 [ 104.987846][ T6018] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.987869][ T6018] vfs_write+0x252/0x990 [ 104.987906][ T6018] ? __fget_files+0x184/0x1c0 [ 104.987941][ T6018] ? mutex_lock+0x57/0x90 [ 104.987975][ T6018] ksys_write+0xdc/0x1a0 [ 104.987996][ T6018] __x64_sys_write+0x40/0x50 [ 104.988020][ T6018] x64_sys_call+0x27e1/0x3020 [ 104.988151][ T6018] do_syscall_64+0x136/0x3c0 [ 104.988184][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.988209][ T6018] RIP: 0033:0x7f5cc275e84e [ 104.988227][ T6018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.988269][ T6018] RSP: 002b:00007f5cc11f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.988294][ T6018] RAX: ffffffffffffffda RBX: 00007f5cc11f76c0 RCX: 00007f5cc275e84e [ 104.988312][ T6018] RDX: 0000000000000001 RSI: 00007f5cc11f70a0 RDI: 0000000000000004 [ 104.988329][ T6018] RBP: 00007f5cc11f7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.988345][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.988360][ T6018] R13: 00007f5cc2a26038 R14: 00007f5cc2a25fa0 R15: 00007fffa05d44b8 [ 104.988384][ T6018] [ 105.024024][ T6028] loop1: detected capacity change from 0 to 1024 [ 105.212913][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.259240][ T6044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6044 comm=syz.2.514 [ 105.317450][ T6046] loop4: detected capacity change from 0 to 1024 [ 105.331499][ T6028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.350715][ T6028] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.512: inode #12: comm syz.1.512: iget: illegal inode # [ 105.369306][ T6028] EXT4-fs (loop1): Remounting filesystem read-only [ 105.438795][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.448431][ T6060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.686644][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 105.686663][ T28] audit: type=1400 audit(1785893411.663:875): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.736012][ T6085] loop6: detected capacity change from 0 to 512 [ 105.883909][ T6088] Failed to initialize the IGMP autojoin socket (err -2) [ 105.916570][ T6090] loop2: detected capacity change from 0 to 1764 [ 106.060337][ T28] audit: type=1400 audit(1785893412.023:876): avc: denied { write } for pid=6086 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.512464][ T28] audit: type=1400 audit(1785893412.463:877): avc: denied { write } for pid=6101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.573944][ T28] audit: type=1400 audit(1785893412.543:878): avc: denied { write } for pid=6115 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.704990][ T28] audit: type=1400 audit(1785893412.683:879): avc: denied { write } for pid=6118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.768547][ T28] audit: type=1400 audit(1785893412.743:880): avc: denied { write } for pid=6129 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.926054][ T28] audit: type=1400 audit(1785893412.903:881): avc: denied { write } for pid=6134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.982230][ T28] audit: type=1400 audit(1785893412.953:882): avc: denied { write } for pid=6145 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.109616][ T28] audit: type=1400 audit(1785893413.093:883): avc: denied { write } for pid=6148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.166261][ T28] audit: type=1400 audit(1785893413.133:884): avc: denied { write } for pid=6159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.684985][ T6213] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 107.780510][ T6228] FAULT_INJECTION: forcing a failure. [ 107.780510][ T6228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.793700][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.0.539 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.793787][ T6228] Tainted: [W]=WARN [ 107.793795][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.793808][ T6228] Call Trace: [ 107.793814][ T6228] [ 107.793823][ T6228] __dump_stack+0x1d/0x30 [ 107.793847][ T6228] dump_stack_lvl+0x95/0xd0 [ 107.793875][ T6228] dump_stack+0x15/0x1b [ 107.793905][ T6228] should_fail_ex+0x25e/0x270 [ 107.794003][ T6228] should_fail+0xb/0x20 [ 107.794037][ T6228] should_fail_usercopy+0x1a/0x20 [ 107.794070][ T6228] _copy_from_user+0x1c/0xb0 [ 107.794092][ T6228] kstrtouint_from_user+0x69/0xf0 [ 107.794125][ T6228] ? 0xffffffff81000000 [ 107.794143][ T6228] ? avc_policy_seqno+0x15/0x30 [ 107.794210][ T6228] proc_fail_nth_write+0x50/0x160 [ 107.794233][ T6228] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.794262][ T6228] vfs_write+0x252/0x990 [ 107.794312][ T6228] ? __fget_files+0x184/0x1c0 [ 107.794340][ T6228] ? mutex_lock+0x57/0x90 [ 107.794383][ T6228] ksys_write+0xdc/0x1a0 [ 107.794410][ T6228] __x64_sys_write+0x40/0x50 [ 107.794435][ T6228] x64_sys_call+0x27e1/0x3020 [ 107.794498][ T6228] do_syscall_64+0x136/0x3c0 [ 107.794604][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.794631][ T6228] RIP: 0033:0x7f05e0bce84e [ 107.794649][ T6228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.794671][ T6228] RSP: 002b:00007f05df666fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.794697][ T6228] RAX: ffffffffffffffda RBX: 00007f05df6676c0 RCX: 00007f05e0bce84e [ 107.794729][ T6228] RDX: 0000000000000001 RSI: 00007f05df6670a0 RDI: 0000000000000004 [ 107.794747][ T6228] RBP: 00007f05df667090 R08: 0000000000000000 R09: 0000000000000000 [ 107.794763][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.794780][ T6228] R13: 00007f05e0e96038 R14: 00007f05e0e95fa0 R15: 00007fff7722f488 [ 107.794806][ T6228] [ 108.030753][ T6232] loop1: detected capacity change from 0 to 512 [ 108.078790][ T6239] Failed to initialize the IGMP autojoin socket (err -2) [ 108.097080][ T6232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.109891][ T6232] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.289276][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.332217][ T6252] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.340398][ T6250] loop0: detected capacity change from 0 to 1024 [ 108.532254][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.539516][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.658237][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.666121][ T6267] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 108.672301][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.785256][ T6267] wireguard: wg2: Could not create IPv4 socket [ 108.825638][ T6273] Failed to initialize the IGMP autojoin socket (err -2) [ 108.880568][ T332] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.936026][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.956541][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.969369][ T6286] loop1: detected capacity change from 0 to 164 [ 108.981492][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.060641][ T6286] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 109.204299][ T6299] Failed to initialize the IGMP autojoin socket (err -2) [ 109.277559][ T6311] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.617821][ T6335] loop6: detected capacity change from 0 to 1024 [ 109.644707][ T6354] loop1: detected capacity change from 0 to 256 [ 109.738528][ T6356] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.974716][ T6367] siw: device registration error -23 [ 110.359620][ T6376] Failed to initialize the IGMP autojoin socket (err -2) [ 110.705085][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 110.705099][ T28] audit: type=1400 audit(1785893416.683:905): avc: denied { write } for pid=6362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.898932][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.968108][ T28] audit: type=1400 audit(1785893416.943:906): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.087988][ T28] audit: type=1400 audit(1785893416.943:907): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.148544][ T28] audit: type=1400 audit(1785893416.943:908): avc: denied { search } for pid=6384 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.170038][ T28] audit: type=1400 audit(1785893416.943:909): avc: denied { search } for pid=6384 comm="rm" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.212075][ T28] audit: type=1400 audit(1785893416.943:910): avc: denied { search } for pid=6384 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.313922][ T28] audit: type=1400 audit(1785893416.943:911): avc: denied { getattr } for pid=6384 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb34.link" dev="tmpfs" ino=4353 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 111.414322][ T28] audit: type=1400 audit(1785893416.943:912): avc: denied { write } for pid=6384 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.436142][ T28] audit: type=1400 audit(1785893416.943:913): avc: denied { remove_name } for pid=6384 comm="rm" name="resolv.conf.lapb34.link" dev="tmpfs" ino=4353 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.459621][ T28] audit: type=1400 audit(1785893416.943:914): avc: denied { unlink } for pid=6384 comm="rm" name="resolv.conf.lapb34.link" dev="tmpfs" ino=4353 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.113188][ T6478] loop0: detected capacity change from 0 to 1024 [ 112.134975][ T6481] Failed to initialize the IGMP autojoin socket (err -2) [ 112.251087][ T6494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6494 comm=syz.1.590 [ 112.286834][ T6494] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 112.350547][ T6505] __nla_validate_parse: 2 callbacks suppressed [ 112.350609][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 112.387259][ T6494] bond2 (unregistering): Released all slaves [ 112.902533][ T3663] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.967314][ T6531] Failed to initialize the IGMP autojoin socket (err -2) [ 113.033460][ T6539] netlink: 388 bytes leftover after parsing attributes in process `syz.0.594'. [ 113.264198][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 113.325099][ T6560] veth1_to_bond: entered allmulticast mode [ 113.355473][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 113.382554][ T6570] loop1: detected capacity change from 0 to 256 [ 113.382813][ T6560] veth1_to_bond (unregistering): left allmulticast mode [ 113.420317][ T6573] loop2: detected capacity change from 0 to 512 [ 113.443155][ T6560] bond0: (slave bond_slave_1): Releasing backup interface [ 113.609149][ T6573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.626110][ T6573] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.610488][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 116.610524][ T28] audit: type=1400 audit(1785893422.333:1006): avc: denied { write } for pid=6581 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.452749][ T28] audit: type=1400 audit(1785893422.653:1007): avc: denied { ioctl } for pid=6559 comm="syz.2.600" path="/130/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.527548][ T28] audit: type=1400 audit(1785893422.653:1008): avc: denied { setopt } for pid=6559 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.658939][ T28] audit: type=1400 audit(1785893423.633:1009): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.705392][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.739567][ T28] audit: type=1400 audit(1785893423.663:1010): avc: denied { write } for pid=6588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.762725][ T28] audit: type=1400 audit(1785893423.663:1011): avc: denied { search } for pid=6605 comm="syz.1.607" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 117.784460][ T28] audit: type=1400 audit(1785893423.663:1012): avc: denied { write } for pid=6605 comm="syz.1.607" name="dynamic_events" dev="tracefs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.807576][ T28] audit: type=1400 audit(1785893423.663:1013): avc: denied { open } for pid=6605 comm="syz.1.607" path="/116/tracing/dynamic_events" dev="tracefs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 117.926119][ T28] audit: type=1400 audit(1785893423.683:1014): avc: denied { create } for pid=6602 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.945640][ T28] audit: type=1400 audit(1785893423.683:1015): avc: denied { mount } for pid=6602 comm="syz.4.606" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.088738][ T6640] Failed to initialize the IGMP autojoin socket (err -2) [ 118.139184][ T6645] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.247486][ T6652] loop0: detected capacity change from 0 to 1024 [ 118.280370][ T6647] loop1: detected capacity change from 0 to 1764 [ 118.650732][ T6676] capability: warning: `syz.4.624' uses deprecated v2 capabilities in a way that may be insecure [ 118.690509][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.725435][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.915716][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.925888][ T6677] wireguard: wg0: Could not create IPv4 socket [ 118.932078][ T6677] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 119.189574][ T6706] loop1: detected capacity change from 0 to 256 [ 119.403620][ T9] kernel read not supported for file 351/net/vlan/config (pid: 9 comm: kworker/0:0) [ 119.586778][ T6722] siw: device registration error -23 [ 120.199604][ T6728] loop2: detected capacity change from 0 to 1024 [ 120.244193][ T6732] netlink: 272 bytes leftover after parsing attributes in process `syz.0.638'. [ 121.258205][ T6808] loop1: detected capacity change from 0 to 512 [ 121.312339][ T6808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.340747][ T6808] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.436885][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.565454][ T6844] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 121.588296][ T6844] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 121.637335][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 121.637353][ T28] audit: type=1400 audit(1785893427.613:1044): avc: denied { write } for pid=6845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.716511][ T28] audit: type=1400 audit(1785893427.673:1045): avc: denied { write } for pid=6863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.006552][ T28] audit: type=1400 audit(1785893427.983:1046): avc: denied { ioctl } for pid=6902 comm="syz.6.658" path="socket:[13296]" dev="sockfs" ino=13296 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.028913][ T6898] Failed to initialize the IGMP autojoin socket (err -2) [ 122.047410][ T6899] loop2: detected capacity change from 0 to 1024 [ 122.262030][ T28] audit: type=1400 audit(1785893428.223:1047): avc: denied { read } for pid=6934 comm="syz.4.661" path="socket:[14351]" dev="sockfs" ino=14351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.303402][ T6937] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.662'. [ 122.327586][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 122.342202][ T6937] netlink: 9 bytes leftover after parsing attributes in process `syz.6.662'. [ 122.356205][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.662'. [ 122.386313][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.6.662'. [ 122.539085][ T28] audit: type=1400 audit(1785893428.513:1048): avc: denied { mount } for pid=6943 comm="syz.0.664" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 122.701017][ T6953] loop0: detected capacity change from 0 to 512 [ 122.769702][ T6953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.784261][ T6953] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.965724][ T28] audit: type=1400 audit(1785893428.943:1049): avc: denied { create } for pid=6952 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.071597][ T28] audit: type=1400 audit(1785893429.053:1050): avc: denied { read } for pid=6963 comm="syz.6.671" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.181508][ T28] audit: type=1400 audit(1785893429.153:1051): avc: denied { ioctl } for pid=6963 comm="syz.6.671" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.263599][ T28] audit: type=1400 audit(1785893429.243:1052): avc: denied { lock } for pid=6970 comm="syz.4.674" path="socket:[14258]" dev="sockfs" ino=14258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.264296][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.674'. [ 123.335057][ T28] audit: type=1400 audit(1785893429.313:1053): avc: denied { write } for pid=6977 comm="syz.6.675" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 123.526229][ T6978] rdma_rxe: Failed to create IPv4 UDP tunnel [ 123.758218][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.929903][ T7008] loop0: detected capacity change from 0 to 2048 [ 124.100993][ T7008] loop0: p2 p3 p7 [ 124.293205][ T7008] loop0: detected capacity change from 0 to 128 [ 124.314794][ T6630] udevd[6630]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 124.326323][ T6599] udevd[6599]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 124.371232][ T6634] udevd[6634]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 124.372570][ T6599] udevd[6599]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 124.391486][ T6630] udevd[6630]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 124.410865][ T7022] loop2: detected capacity change from 0 to 2048 [ 124.776673][ T7033] loop6: detected capacity change from 0 to 8192 [ 124.924262][ T7022] loop2: p2 p3 p7 [ 124.930387][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.694'. [ 124.973457][ T2982] loop2: p2 p3 p7 [ 125.042715][ T7022] loop2: detected capacity change from 0 to 128 [ 125.057592][ T6599] udevd[6599]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 125.068632][ T7024] udevd[7024]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 125.079937][ T6634] udevd[6634]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 125.104743][ T7033] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 125.124748][ T7024] udevd[7024]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 125.130334][ T7033] FAT-fs (loop6): Filesystem has been set read-only [ 125.145664][ T7033] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 125.146751][ T6599] udevd[6599]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 125.180293][ T7033] syz.6.694: attempt to access beyond end of device [ 125.180293][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.194468][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.202763][ T7033] syz.6.694: attempt to access beyond end of device [ 125.202763][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.216751][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.227045][ T7033] syz.6.694: attempt to access beyond end of device [ 125.227045][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.255076][ T7047] loop2: detected capacity change from 0 to 164 [ 125.262054][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.284854][ T7033] syz.6.694: attempt to access beyond end of device [ 125.284854][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.305406][ T7047] rock: directory entry would overflow storage [ 125.316495][ T7047] rock: sig=0x5252, size=5, remaining=3 [ 125.325385][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.350810][ T7033] syz.6.694: attempt to access beyond end of device [ 125.350810][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.364839][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.373046][ T7033] syz.6.694: attempt to access beyond end of device [ 125.373046][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.386931][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.395176][ T7033] syz.6.694: attempt to access beyond end of device [ 125.395176][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.409202][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.417499][ T7033] syz.6.694: attempt to access beyond end of device [ 125.417499][ T7033] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.431379][ T7033] Buffer I/O error on dev loop6, logical block 57847, async page read [ 125.479449][ T127] kernel read not supported for file 402/net/vlan/config (pid: 127 comm: kworker/0:2) [ 125.493907][ T7051] Failed to initialize the IGMP autojoin socket (err -2) [ 125.673643][ T7061] loop6: detected capacity change from 0 to 4096 [ 125.710649][ T7061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.724458][ T7061] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (47044!=55237) [ 125.738710][ T7066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.705'. [ 125.810003][ T7070] Failed to initialize the IGMP autojoin socket (err -2) [ 125.819824][ T7061] EXT4-fs (loop6): group descriptors corrupted! [ 126.040383][ T7078] Failed to initialize the IGMP autojoin socket (err -2) [ 126.209245][ T7075] loop6: detected capacity change from 0 to 4096 [ 126.264267][ T7075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.356185][ T7075] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (47044!=55237) [ 126.555084][ T7075] EXT4-fs (loop6): group descriptors corrupted! [ 126.986178][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 126.986198][ T28] audit: type=1400 audit(1785893432.963:1295): avc: denied { write } for pid=7084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.103126][ T28] audit: type=1400 audit(1785893433.083:1296): avc: denied { write } for pid=7097 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.480786][ T28] audit: type=1400 audit(1785893433.463:1297): avc: denied { write } for pid=7100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.566047][ T28] audit: type=1400 audit(1785893433.543:1298): avc: denied { write } for pid=7111 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.822346][ T28] audit: type=1400 audit(1785893433.803:1299): avc: denied { write } for pid=7122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.892628][ T28] audit: type=1400 audit(1785893433.873:1300): avc: denied { write } for pid=7133 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.968775][ T7142] 9p: Bad value for 'wfdno' [ 128.975305][ T28] audit: type=1400 audit(1785893434.943:1301): avc: denied { mounton } for pid=7141 comm="syz.1.712" path="/126/file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.008827][ T7142] netlink: 388 bytes leftover after parsing attributes in process `syz.1.712'. [ 129.037091][ T7147] loop0: detected capacity change from 0 to 256 [ 129.224689][ T7142] loop1: detected capacity change from 0 to 512 [ 129.260153][ T7142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.280076][ T7142] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.453047][ T7162] siw: device registration error -23 [ 129.465603][ T7142] EXT4-fs (loop1): 1 truncate cleaned up [ 129.490231][ T7142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.611983][ T28] audit: type=1400 audit(1785893435.593:1302): avc: denied { write } for pid=7141 comm="syz.1.712" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.689293][ T28] audit: type=1400 audit(1785893435.663:1303): avc: denied { append } for pid=7141 comm="syz.1.712" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.779869][ T7163] Failed to initialize the IGMP autojoin socket (err -2) [ 130.111608][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.220046][ T7177] 9p: Bad value for 'rfdno' [ 130.428313][ T28] audit: type=1400 audit(1785893436.403:1304): avc: denied { write } for pid=7193 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.070534][ T7223] loop0: detected capacity change from 0 to 128 [ 131.080206][ T7223] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.093785][ T7223] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.150063][ T7223] EXT4-fs (loop0): shut down requested (0) [ 131.248836][ T7223] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.253747][ T7226] loop1: detected capacity change from 0 to 8192 [ 131.373765][ T7226] loop1: p1 < > p2 p4 < p5 > [ 131.378565][ T7226] loop1: partition table partially beyond EOD, truncated [ 131.387252][ T7226] loop1: p1 start 134217728 is beyond EOD, truncated [ 131.402592][ T7226] loop1: p2 size 591360 extends beyond EOD, truncated [ 131.453793][ T7226] loop1: p5 size 591360 extends beyond EOD, truncated [ 131.587768][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'. [ 131.781505][ T7249] loop2: detected capacity change from 0 to 256 [ 132.160476][ T7269] siw: device registration error -23 [ 132.181843][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 132.181952][ T28] audit: type=1400 audit(1785893437.993:1318): avc: denied { write } for pid=7267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.046208][ T9] kernel read not supported for file 405/net/vlan/config (pid: 9 comm: kworker/0:0) [ 133.312982][ T28] audit: type=1400 audit(1785893439.283:1319): avc: denied { mount } for pid=7305 comm="syz.0.745" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.407286][ T28] audit: type=1400 audit(1785893439.313:1320): avc: denied { write } for pid=7287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.635570][ T28] audit: type=1400 audit(1785893439.433:1321): avc: denied { connect } for pid=7305 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.706036][ T28] audit: type=1400 audit(1785893439.433:1322): avc: denied { write } for pid=7305 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.859283][ T28] audit: type=1400 audit(1785893439.473:1323): avc: denied { write } for pid=7314 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.865836][ T7318] Failed to initialize the IGMP autojoin socket (err -2) [ 133.885486][ T7319] Failed to initialize the IGMP autojoin socket (err -2) [ 133.897645][ T28] audit: type=1400 audit(1785893439.703:1324): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 134.009671][ T7322] FAULT_INJECTION: forcing a failure. [ 134.009671][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 134.022954][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.0.748 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 134.022989][ T7322] Tainted: [W]=WARN [ 134.022998][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.023014][ T7322] Call Trace: [ 134.023023][ T7322] [ 134.023094][ T7322] __dump_stack+0x1d/0x30 [ 134.023124][ T7322] dump_stack_lvl+0x95/0xd0 [ 134.023149][ T7322] dump_stack+0x15/0x1b [ 134.023168][ T7322] should_fail_ex+0x25e/0x270 [ 134.023255][ T7322] should_failslab+0x8c/0xb0 [ 134.023286][ T7322] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 134.023352][ T7322] ? do_getname+0x2e/0x1c0 [ 134.023381][ T7322] ? do_getname+0x2e/0x1c0 [ 134.023407][ T7322] do_getname+0x2e/0x1c0 [ 134.023446][ T7322] user_path_at+0x28/0x100 [ 134.023555][ T7322] __se_sys_mount+0x25b/0x2e0 [ 134.023580][ T7322] ? fput+0x8f/0xc0 [ 134.023609][ T7322] __x64_sys_mount+0x67/0x80 [ 134.023633][ T7322] x64_sys_call+0x2d61/0x3020 [ 134.023730][ T7322] do_syscall_64+0x136/0x3c0 [ 134.023759][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.023782][ T7322] RIP: 0033:0x7f05e0c0e019 [ 134.023804][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.023907][ T7322] RSP: 002b:00007f05df667028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.023927][ T7322] RAX: ffffffffffffffda RBX: 00007f05e0e95fa0 RCX: 00007f05e0c0e019 [ 134.023992][ T7322] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 134.024010][ T7322] RBP: 00007f05df667090 R08: 0000200000000880 R09: 0000000000000000 [ 134.024028][ T7322] R10: 0000000002200844 R11: 0000000000000246 R12: 0000000000000001 [ 134.024045][ T7322] R13: 00007f05e0e96038 R14: 00007f05e0e95fa0 R15: 00007fff7722f488 [ 134.024071][ T7322] [ 134.172692][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 134.309852][ T7308] hsr_slave_1 (unregistering): left promiscuous mode [ 134.414945][ T28] audit: type=1400 audit(1785893440.393:1325): avc: denied { write } for pid=7324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.511436][ T28] audit: type=1400 audit(1785893440.493:1326): avc: denied { write } for pid=7346 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.656132][ T9] kernel read not supported for file 441/net/vlan/config (pid: 9 comm: kworker/0:0) [ 134.742236][ T28] audit: type=1400 audit(1785893440.723:1327): avc: denied { write } for pid=7353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.104621][ T280] kernel read not supported for file 230/net/vlan/config (pid: 280 comm: kworker/1:2) [ 135.163544][ T7409] Failed to initialize the IGMP autojoin socket (err -2) [ 135.188890][ T7415] loop0: detected capacity change from 0 to 256 [ 135.552330][ T7434] siw: device registration error -23 [ 135.758095][ T7439] Failed to initialize the IGMP autojoin socket (err -2) [ 136.328119][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 136.736141][ T3384] kernel read not supported for file 457/net/vlan/config (pid: 3384 comm: kworker/0:3) [ 136.858694][ T7478] Failed to initialize the IGMP autojoin socket (err -2) [ 137.203594][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 137.203612][ T28] audit: type=1400 audit(1785893443.183:1336): avc: denied { write } for pid=7465 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.348088][ T7496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.790'. [ 137.433044][ T7504] FAULT_INJECTION: forcing a failure. [ 137.433044][ T7504] name failslab, interval 1, probability 0, space 0, times 0 [ 137.462252][ T7504] CPU: 1 UID: 0 PID: 7504 Comm: syz.0.791 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 137.462294][ T7504] Tainted: [W]=WARN [ 137.462302][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.462315][ T7504] Call Trace: [ 137.462348][ T7504] [ 137.462356][ T7504] __dump_stack+0x1d/0x30 [ 137.462382][ T7504] dump_stack_lvl+0x95/0xd0 [ 137.462516][ T7504] dump_stack+0x15/0x1b [ 137.462538][ T7504] should_fail_ex+0x25e/0x270 [ 137.462569][ T7504] should_failslab+0x8c/0xb0 [ 137.462600][ T7504] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 137.462683][ T7504] ? __alloc_skb+0x2db/0x6f0 [ 137.462721][ T7504] ? __alloc_skb+0x2db/0x6f0 [ 137.462810][ T7504] __alloc_skb+0x2db/0x6f0 [ 137.462839][ T7504] ? __alloc_skb+0x205/0x6f0 [ 137.462869][ T7504] netlink_alloc_large_skb+0xbf/0xf0 [ 137.462961][ T7504] netlink_sendmsg+0x40c/0x6f0 [ 137.463000][ T7504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.463035][ T7504] ____sys_sendmsg+0x532/0x580 [ 137.463062][ T7504] ___sys_sendmsg+0x195/0x1e0 [ 137.463135][ T7504] __x64_sys_sendmsg+0xd4/0x160 [ 137.463159][ T7504] x64_sys_call+0x194c/0x3020 [ 137.463187][ T7504] do_syscall_64+0x136/0x3c0 [ 137.463234][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.463376][ T7504] RIP: 0033:0x7f05e0c0e019 [ 137.463392][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.463417][ T7504] RSP: 002b:00007f05df667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.463448][ T7504] RAX: ffffffffffffffda RBX: 00007f05e0e95fa0 RCX: 00007f05e0c0e019 [ 137.463467][ T7504] RDX: 0000000000000840 RSI: 0000200000000040 RDI: 0000000000000007 [ 137.463483][ T7504] RBP: 00007f05df667090 R08: 0000000000000000 R09: 0000000000000000 [ 137.463550][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.463567][ T7504] R13: 00007f05e0e96038 R14: 00007f05e0e95fa0 R15: 00007fff7722f488 [ 137.463594][ T7504] [ 137.509353][ T28] audit: type=1400 audit(1785893443.463:1337): avc: denied { write } for pid=7491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.752332][ T28] audit: type=1400 audit(1785893443.693:1338): avc: denied { write } for pid=7512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.802050][ T9] kernel read not supported for file 470/net/vlan/config (pid: 9 comm: kworker/0:0) [ 137.859368][ T7527] Failed to initialize the IGMP autojoin socket (err -2) [ 137.897914][ T28] audit: type=1400 audit(1785893443.873:1339): avc: denied { read append } for pid=7530 comm="syz.0.798" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.961971][ T28] audit: type=1400 audit(1785893443.873:1340): avc: denied { open } for pid=7530 comm="syz.0.798" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.061856][ T28] audit: type=1400 audit(1785893443.923:1341): avc: denied { write } for pid=7517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.085205][ T28] audit: type=1400 audit(1785893444.003:1342): avc: denied { write } for pid=7538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.126163][ T7546] loop6: detected capacity change from 0 to 256 [ 138.178245][ T28] audit: type=1400 audit(1785893444.143:1343): avc: denied { ioctl } for pid=7530 comm="syz.0.798" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.481286][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.488535][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.593848][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.699716][ T28] audit: type=1400 audit(1785893445.683:1344): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 139.729640][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.759986][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.817304][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.850812][ T7558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.803'. [ 139.889976][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.149334][ T28] audit: type=1400 audit(1785893446.093:1345): avc: denied { write } for pid=7555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.399999][ T280] kernel read not supported for file 252/net/vlan/config (pid: 280 comm: kworker/1:2) [ 140.566258][ T7599] Failed to initialize the IGMP autojoin socket (err -2) [ 140.762297][ T7619] loop0: detected capacity change from 0 to 256 [ 140.891253][ T7624] Failed to initialize the IGMP autojoin socket (err -2) [ 143.023410][ T7631] siw: device registration error -23 [ 143.730487][ T3391] kernel read not supported for file 265/net/vlan/config (pid: 3391 comm: kworker/1:4) [ 143.991068][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 143.991084][ T28] audit: type=1400 audit(1785893449.933:1351): avc: denied { write } for pid=7636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.329800][ T7670] Failed to initialize the IGMP autojoin socket (err -2) [ 144.368986][ T7676] FAULT_INJECTION: forcing a failure. [ 144.368986][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.414795][ T7676] CPU: 1 UID: 0 PID: 7676 Comm: syz.0.826 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 144.414828][ T7676] Tainted: [W]=WARN [ 144.414838][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.414899][ T7676] Call Trace: [ 144.414907][ T7676] [ 144.414914][ T7676] __dump_stack+0x1d/0x30 [ 144.414940][ T7676] dump_stack_lvl+0x95/0xd0 [ 144.414963][ T7676] dump_stack+0x15/0x1b [ 144.415043][ T7676] should_fail_ex+0x25e/0x270 [ 144.415078][ T7676] should_fail+0xb/0x20 [ 144.415112][ T7676] should_fail_usercopy+0x1a/0x20 [ 144.415192][ T7676] _copy_from_user+0x1c/0xb0 [ 144.415239][ T7676] __sys_connect+0xd0/0x2a0 [ 144.415283][ T7676] __x64_sys_connect+0x3f/0x50 [ 144.415340][ T7676] x64_sys_call+0x2df0/0x3020 [ 144.415502][ T7676] do_syscall_64+0x136/0x3c0 [ 144.415585][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.415608][ T7676] RIP: 0033:0x7f05e0c0e019 [ 144.415624][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.415645][ T7676] RSP: 002b:00007f05df667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 144.415684][ T7676] RAX: ffffffffffffffda RBX: 00007f05e0e95fa0 RCX: 00007f05e0c0e019 [ 144.415703][ T7676] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000006 [ 144.415777][ T7676] RBP: 00007f05df667090 R08: 0000000000000000 R09: 0000000000000000 [ 144.415791][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.415807][ T7676] R13: 00007f05e0e96038 R14: 00007f05e0e95fa0 R15: 00007fff7722f488 [ 144.415833][ T7676] [ 144.662922][ T28] audit: type=1400 audit(1785893450.643:1352): avc: denied { write } for pid=7665 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.816957][ T28] audit: type=1400 audit(1785893450.793:1353): avc: denied { write } for pid=7683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.928636][ T28] audit: type=1400 audit(1785893450.893:1354): avc: denied { write } for pid=7699 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.026262][ T7709] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 145.088079][ T7711] loop1: detected capacity change from 0 to 512 [ 145.113375][ T3377] kernel read not supported for file 460/net/vlan/config (pid: 3377 comm: kworker/1:3) [ 145.124859][ T7711] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.149270][ T7711] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.174851][ T28] audit: type=1400 audit(1785893451.143:1355): avc: denied { write } for pid=7704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.214085][ T7711] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 145.262575][ T7711] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 145.288949][ T7711] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.831: Failed to acquire dquot type 1 [ 145.309961][ T28] audit: type=1400 audit(1785893451.283:1356): avc: denied { write } for pid=7728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.342394][ T7711] loop1: lost filesystem error report for type 5 error -5 [ 145.342557][ T7711] EXT4-fs (loop1): Remounting filesystem read-only [ 145.349761][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 145.349786][ C1] EXT4-fs (loop1): initial error at time 1785893451: ext4_acquire_dquot:7041 [ 145.349811][ C1] EXT4-fs (loop1): last error at time 1785893451: ext4_acquire_dquot:7041 [ 145.432844][ T7711] EXT4-fs (loop1): 1 truncate cleaned up [ 145.653570][ T28] audit: type=1400 audit(1785893451.633:1357): avc: denied { write } for pid=7731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.725354][ T7745] Failed to initialize the IGMP autojoin socket (err -2) [ 145.741936][ T28] audit: type=1400 audit(1785893451.703:1358): avc: denied { write } for pid=7746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.872721][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.987969][ T7711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 146.014016][ T7711] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 146.050544][ T7764] Failed to initialize the IGMP autojoin socket (err -2) [ 146.081348][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.333369][ T127] kernel read not supported for file 398/net/vlan/config (pid: 127 comm: kworker/0:2) [ 146.525251][ T7809] netlink: 9 bytes leftover after parsing attributes in process `syz.0.851'. [ 146.552500][ T7809] netlink: 9 bytes leftover after parsing attributes in process `syz.0.851'. [ 146.649454][ T7823] loop2: detected capacity change from 0 to 512 [ 146.680652][ T7825] loop1: detected capacity change from 0 to 512 [ 146.716451][ T7825] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.724555][ T7825] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.731432][ T7825] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.854: Failed to acquire dquot type 1 [ 146.742596][ T7825] loop1: lost filesystem error report for type 5 error -5 [ 146.747580][ T7825] EXT4-fs (loop1): Remounting filesystem read-only [ 146.781281][ T7825] EXT4-fs (loop1): 1 truncate cleaned up [ 146.782897][ T7823] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.788075][ T7825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.824876][ T7823] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 146.836748][ T7823] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 146.858931][ T7823] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.852: attempt to clear invalid blocks 2 len 1 [ 146.871782][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 146.871808][ C0] EXT4-fs (loop2): initial error at time 1785893452: ext4_mb_generate_buddy:1317 [ 146.871842][ C0] EXT4-fs (loop2): last error at time 1785893452: ext4_mb_generate_buddy:1317 [ 146.896478][ T7823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.896717][ T7823] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.852: invalid indirect mapped block 1819239214 (level 0) [ 146.920736][ T7823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.920921][ T7823] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.852: invalid indirect mapped block 1819239214 (level 1) [ 146.944083][ T7823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.944388][ T7823] EXT4-fs (loop2): 1 truncate cleaned up [ 146.960769][ T7823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.973648][ T7814] EXT4-fs error (device loop2): ext4_lookup:1782: inode #2: comm syz.2.852: 'file1' linked to parent dir [ 146.985704][ T7814] EXT4-fs error (device loop2): ext4_lookup:1782: inode #2: comm syz.2.852: 'file1' linked to parent dir [ 147.041937][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.045712][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.098944][ T3391] kernel read not supported for file 513/net/vlan/config (pid: 3391 comm: kworker/1:4) [ 147.121858][ T7850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.859'. [ 148.663726][ T127] kernel read not supported for file 491/net/vlan/config (pid: 127 comm: kworker/0:2) [ 148.936778][ T127] kernel read not supported for file 493/net/vlan/config (pid: 127 comm: kworker/0:2) [ 148.990099][ T7914] Failed to initialize the IGMP autojoin socket (err -2) [ 149.210985][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.4.876'. [ 149.249053][ T7924] loop0: detected capacity change from 0 to 512 [ 149.261974][ T7924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.372507][ T7924] loop0: detected capacity change from 0 to 8192 [ 149.380969][ T7924] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 149.391056][ T7924] FAT-fs (loop0): Filesystem has been set read-only [ 149.427802][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 149.427819][ T28] audit: type=1400 audit(1785893455.393:1375): avc: denied { write } for pid=7922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.499568][ T28] audit: type=1400 audit(1785893455.483:1376): avc: denied { write } for pid=7945 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.708470][ T28] audit: type=1400 audit(1785893455.653:1377): avc: denied { write } for pid=7954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.803409][ T23] kernel read not supported for file 500/net/vlan/config (pid: 23 comm: kworker/1:0) [ 149.823450][ T28] audit: type=1400 audit(1785893455.783:1378): avc: denied { write } for pid=7973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.911530][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.891'. [ 149.934054][ T7983] loop0: detected capacity change from 0 to 1024 [ 150.008333][ T28] audit: type=1400 audit(1785893455.983:1379): avc: denied { view } for pid=7981 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.092384][ T28] audit: type=1400 audit(1785893456.043:1380): avc: denied { write } for pid=7988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.163152][ T28] audit: type=1400 audit(1785893456.123:1381): avc: denied { write } for pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.322262][ T8027] loop0: detected capacity change from 0 to 164 [ 150.332330][ T8027] rock: directory entry would overflow storage [ 150.338608][ T8027] rock: sig=0x5252, size=5, remaining=3 [ 150.359125][ T28] audit: type=1400 audit(1785893456.283:1382): avc: denied { write } for pid=8015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.366326][ T8027] netlink: 'syz.0.898': attribute type 30 has an invalid length. [ 150.398291][ T280] kernel read not supported for file 280/net/vlan/config (pid: 280 comm: kworker/1:2) [ 150.443311][ T28] audit: type=1400 audit(1785893456.383:1383): avc: denied { write } for pid=8037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.628375][ T28] audit: type=1400 audit(1785893456.563:1384): avc: denied { write } for pid=8046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.655283][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.907'. [ 150.666294][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.905'. [ 150.705938][ T8067] loop2: detected capacity change from 0 to 256 [ 151.131480][ T8085] siw: device registration error -23 [ 151.289696][ T8081] Failed to initialize the IGMP autojoin socket (err -2) [ 152.113948][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 152.286116][ T8120] loop0: detected capacity change from 0 to 512 [ 152.320207][ T8120] EXT4-fs: quotafile must be on filesystem root [ 152.481258][ T23] kernel read not supported for file 526/net/vlan/config (pid: 23 comm: kworker/1:0) [ 152.771287][ T8141] netlink: 'syz.2.918': attribute type 29 has an invalid length. [ 152.885210][ T8143] loop0: detected capacity change from 0 to 512 [ 153.009078][ T8143] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.917: corrupted inode contents [ 153.021720][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.023367][ T8143] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.917: mark_inode_dirty error [ 153.033154][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 153.033299][ C1] EXT4-fs (loop0): initial error at time 1785893459: ext4_do_update_inode:5742: inode 16 [ 153.033420][ C1] EXT4-fs (loop0): last error at time 1785893459: ext4_do_update_inode:5742: inode 16 [ 153.073465][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.075052][ T8143] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.917: corrupted inode contents [ 153.097674][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.099572][ T8143] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.917: mark_inode_dirty error [ 153.121031][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.124091][ T8143] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.917: corrupted inode contents [ 153.147788][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.230962][ T8143] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 153.250488][ T8143] loop0: lost filesystem error report for type 5 error -117 [ 153.252713][ T8143] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.917: corrupted inode contents [ 153.272954][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.274165][ T8143] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.917: mark_inode_dirty error [ 153.295299][ T8143] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 153.296346][ T8143] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 153.315372][ T8143] loop0: lost filesystem error report for type 5 error -117 [ 153.320354][ T8143] EXT4-fs (loop0): 1 truncate cleaned up [ 153.342937][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.357259][ T8143] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.904467][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'. [ 154.065732][ T8157] netlink: 9 bytes leftover after parsing attributes in process `syz.1.921'. [ 154.076617][ T8157] netlink: 9 bytes leftover after parsing attributes in process `syz.1.921'. [ 154.106002][ T8143] syz.0.917 (8143) used greatest stack depth: 8832 bytes left [ 154.113677][ T404] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 154.256494][ T8168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=149 sclass=netlink_route_socket pid=8168 comm=syz.2.924 [ 154.377075][ T280] kernel read not supported for file 545/net/vlan/config (pid: 280 comm: kworker/1:2) [ 154.439926][ T8184] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 154.471832][ T8184] ipvlan0: entered promiscuous mode [ 154.478069][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 154.478084][ T28] audit: type=1400 audit(1785893460.453:1403): avc: denied { write } for pid=8163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.522445][ T8184] ipvlan0: entered allmulticast mode [ 154.544265][ T8184] veth0_vlan: entered allmulticast mode [ 154.569155][ T8184] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.608828][ T28] audit: type=1400 audit(1785893460.583:1404): avc: denied { write } for pid=8191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.643965][ T8184] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 154.684663][ T8184] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 154.905347][ T8201] loop1: detected capacity change from 0 to 512 [ 154.927477][ T8201] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 154.945025][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.020730][ T28] audit: type=1400 audit(1785893461.003:1405): avc: denied { write } for pid=8194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.088973][ T28] audit: type=1400 audit(1785893461.063:1406): avc: denied { write } for pid=8213 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.175953][ T8196] loop1: detected capacity change from 0 to 128 [ 155.210080][ T8196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 155.218188][ T8196] System zones: 1-3, 19-19, 35-36 [ 155.224214][ T8196] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 155.228507][ T8223] loop0: detected capacity change from 0 to 512 [ 155.249905][ T8196] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.297883][ T8224] loop6: detected capacity change from 0 to 128 [ 155.304663][ T8223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.308852][ T28] audit: type=1400 audit(1785893461.283:1407): avc: denied { write } for pid=8195 comm="syz.1.931" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.386906][ T8224] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.399755][ T8224] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.437978][ T28] audit: type=1400 audit(1785893461.363:1408): avc: denied { append } for pid=8195 comm="syz.1.931" path="/163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 155.482862][ T28] audit: type=1400 audit(1785893461.413:1409): avc: denied { write } for pid=8222 comm="syz.6.936" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.524114][ T28] audit: type=1400 audit(1785893461.413:1410): avc: denied { create } for pid=8222 comm="syz.6.936" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.552048][ T8223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.567459][ T8223] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.580835][ T8223] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.935: bg 0: block 217: padding at end of block bitmap is not set [ 155.599230][ T28] audit: type=1400 audit(1785893461.563:1411): avc: denied { setattr } for pid=8218 comm="syz.0.935" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.631647][ T4340] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.642299][ T8223] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.935: iget: bad i_size value: 2533274857506816 [ 155.654878][ T28] audit: type=1400 audit(1785893461.563:1412): avc: denied { write } for pid=8218 comm="syz.0.935" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.801136][ T8243] loop6: detected capacity change from 0 to 512 [ 155.817607][ T8243] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.831435][ T8243] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 155.840879][ T8243] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 155.848956][ T8243] System zones: 0-2, 18-18, 34-35 [ 155.854665][ T8243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.017030][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.025243][ T8243] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.939: bg 0: block 353: padding at end of block bitmap is not set [ 156.040643][ T8243] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 156.100177][ T4340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.235523][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.548806][ T8323] FAULT_INJECTION: forcing a failure. [ 156.548806][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 156.603445][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.6.950 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 156.603495][ T8323] Tainted: [W]=WARN [ 156.603502][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.603578][ T8323] Call Trace: [ 156.603588][ T8323] [ 156.603603][ T8323] __dump_stack+0x1d/0x30 [ 156.603635][ T8323] dump_stack_lvl+0x95/0xd0 [ 156.603663][ T8323] dump_stack+0x15/0x1b [ 156.603686][ T8323] should_fail_ex+0x25e/0x270 [ 156.603717][ T8323] ? __pfx_sock_alloc_inode+0x10/0x10 [ 156.603771][ T8323] should_failslab+0x8c/0xb0 [ 156.603802][ T8323] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 156.603833][ T8323] ? sock_alloc_inode+0x36/0xf0 [ 156.603867][ T8323] ? sock_alloc_inode+0x36/0xf0 [ 156.603943][ T8323] ? selinux_socket_create+0xfd/0x180 [ 156.603976][ T8323] ? __pfx_sock_alloc_inode+0x10/0x10 [ 156.604089][ T8323] sock_alloc_inode+0x36/0xf0 [ 156.604123][ T8323] alloc_inode+0x40/0x170 [ 156.604156][ T8323] __sock_create+0x121/0x580 [ 156.604190][ T8323] ? mutex_lock+0x57/0x90 [ 156.604294][ T8323] ? mutex_unlock+0x4e/0x90 [ 156.604325][ T8323] ? fput+0x8f/0xc0 [ 156.604353][ T8323] __sys_socket+0xaf/0x180 [ 156.604493][ T8323] __x64_sys_socket+0x3f/0x50 [ 156.604529][ T8323] x64_sys_call+0x11fc/0x3020 [ 156.604579][ T8323] do_syscall_64+0x136/0x3c0 [ 156.604606][ T8323] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 156.604720][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.604750][ T8323] RIP: 0033:0x7f23dd37e019 [ 156.604851][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.604933][ T8323] RSP: 002b:00007f23dbdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 156.604954][ T8323] RAX: ffffffffffffffda RBX: 00007f23dd605fa0 RCX: 00007f23dd37e019 [ 156.604968][ T8323] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 156.604981][ T8323] RBP: 00007f23dbdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.604993][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.605086][ T8323] R13: 00007f23dd606038 R14: 00007f23dd605fa0 R15: 00007ffca13bfd38 [ 156.605117][ T8323] [ 156.833908][ T8323] socket: no more sockets [ 157.061236][ T8336] FAULT_INJECTION: forcing a failure. [ 157.061236][ T8336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.099637][ T8336] CPU: 0 UID: 0 PID: 8336 Comm: syz.1.953 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 157.099726][ T8336] Tainted: [W]=WARN [ 157.099735][ T8336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.099750][ T8336] Call Trace: [ 157.099812][ T8336] [ 157.099824][ T8336] __dump_stack+0x1d/0x30 [ 157.099858][ T8336] dump_stack_lvl+0x95/0xd0 [ 157.099890][ T8336] dump_stack+0x15/0x1b [ 157.099919][ T8336] should_fail_ex+0x25e/0x270 [ 157.099964][ T8336] should_fail+0xb/0x20 [ 157.100060][ T8336] should_fail_usercopy+0x1a/0x20 [ 157.100097][ T8336] _copy_from_iter+0xcc/0xe70 [ 157.100139][ T8336] ? __alloc_skb+0x511/0x6f0 [ 157.100260][ T8336] ? __alloc_skb+0x205/0x6f0 [ 157.100301][ T8336] netlink_sendmsg+0x4a4/0x6f0 [ 157.100425][ T8336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.100466][ T8336] ____sys_sendmsg+0x532/0x580 [ 157.100500][ T8336] ___sys_sendmsg+0x195/0x1e0 [ 157.100589][ T8336] __x64_sys_sendmsg+0xd4/0x160 [ 157.100635][ T8336] x64_sys_call+0x194c/0x3020 [ 157.100671][ T8336] do_syscall_64+0x136/0x3c0 [ 157.100718][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.100806][ T8336] RIP: 0033:0x7fa8c1d3e019 [ 157.100830][ T8336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.100949][ T8336] RSP: 002b:00007fa8c0797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.100980][ T8336] RAX: ffffffffffffffda RBX: 00007fa8c1fc5fa0 RCX: 00007fa8c1d3e019 [ 157.101001][ T8336] RDX: 0000000020000000 RSI: 0000200000002400 RDI: 0000000000000004 [ 157.101040][ T8336] RBP: 00007fa8c0797090 R08: 0000000000000000 R09: 0000000000000000 [ 157.101141][ T8336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.101160][ T8336] R13: 00007fa8c1fc6038 R14: 00007fa8c1fc5fa0 R15: 00007fff413d70c8 [ 157.101191][ T8336] [ 157.436491][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 157.555863][ T8378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.961'. [ 157.678307][ T8392] nfs4: Unknown parameter 'yz1' [ 158.428396][ T8463] loop0: detected capacity change from 0 to 512 [ 158.443216][ T8463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.473088][ T8465] Failed to initialize the IGMP autojoin socket (err -2) [ 158.525076][ T8469] FAULT_INJECTION: forcing a failure. [ 158.525076][ T8469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.538703][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.6.966 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 158.538749][ T8469] Tainted: [W]=WARN [ 158.538818][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.538838][ T8469] Call Trace: [ 158.538848][ T8469] [ 158.538860][ T8469] __dump_stack+0x1d/0x30 [ 158.538895][ T8469] dump_stack_lvl+0x95/0xd0 [ 158.538923][ T8469] dump_stack+0x15/0x1b [ 158.538950][ T8469] should_fail_ex+0x25e/0x270 [ 158.539067][ T8469] should_fail+0xb/0x20 [ 158.539115][ T8469] should_fail_usercopy+0x1a/0x20 [ 158.539298][ T8469] _copy_from_user+0x1c/0xb0 [ 158.539328][ T8469] __sys_bpf+0x1e2/0xc30 [ 158.539367][ T8469] ? get_pid_task+0x92/0xc0 [ 158.539392][ T8469] ? vfs_write+0x7b0/0x990 [ 158.539430][ T8469] __x64_sys_bpf+0x69/0x80 [ 158.539551][ T8469] x64_sys_call+0x10cb/0x3020 [ 158.539629][ T8469] do_syscall_64+0x136/0x3c0 [ 158.539746][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.539789][ T8469] RIP: 0033:0x7f23dd37e019 [ 158.539812][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.539839][ T8469] RSP: 002b:00007f23dbdd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.539862][ T8469] RAX: ffffffffffffffda RBX: 00007f23dd605fa0 RCX: 00007f23dd37e019 [ 158.539878][ T8469] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 158.539892][ T8469] RBP: 00007f23dbdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.539947][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.539961][ T8469] R13: 00007f23dd606038 R14: 00007f23dd605fa0 R15: 00007ffca13bfd38 [ 158.539986][ T8469] [ 158.758703][ T8463] EXT4-fs (loop0): 1 truncate cleaned up [ 158.767084][ T8472] loop6: detected capacity change from 0 to 512 [ 158.774040][ T8463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.788709][ T8472] EXT4-fs: Ignoring removed nobh option [ 158.892207][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.922441][ T8472] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.694092][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.704359][ T4340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.864642][ T28] kauditd_printk_skb: 167 callbacks suppressed [ 159.864660][ T28] audit: type=1400 audit(1785893465.843:1580): avc: denied { write } for pid=8529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.926376][ T28] audit: type=1400 audit(1785893465.903:1581): avc: denied { write } for pid=8541 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.091415][ T28] audit: type=1400 audit(1785893466.073:1582): avc: denied { write } for pid=8544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.142652][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'. [ 160.162406][ T28] audit: type=1400 audit(1785893466.113:1583): avc: denied { write } for pid=8561 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.165244][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.971'. [ 160.227784][ T8572] loop6: detected capacity change from 0 to 128 [ 160.319413][ T28] audit: type=1400 audit(1785893466.303:1584): avc: denied { write } for pid=8574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.355246][ T28] audit: type=1400 audit(1785893466.333:1585): avc: denied { write } for pid=8589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.432941][ T28] audit: type=1400 audit(1785893466.413:1586): avc: denied { write } for pid=8598 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.475621][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.981'. [ 160.501666][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 160.506056][ T8599] 9p: Bad value for 'wfdno' [ 160.514789][ T28] audit: type=1400 audit(1785893466.483:1587): avc: denied { read } for pid=8598 comm="syz.0.981" dev="sockfs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.557417][ T28] audit: type=1400 audit(1785893466.483:1588): avc: denied { append } for pid=8598 comm="syz.0.981" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.601924][ T8603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.618381][ T28] audit: type=1400 audit(1785893466.573:1589): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.815644][ T8624] Failed to initialize the IGMP autojoin socket (err -2) [ 161.207125][ T8559] Process accounting resumed [ 163.748833][ T8654] loop1: detected capacity change from 0 to 512 [ 163.755757][ T8654] EXT4-fs: inline encryption not supported [ 163.769386][ T8654] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 163.781275][ T8654] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.992: corrupted inode contents [ 163.796653][ T8654] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.799049][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 163.815440][ C1] EXT4-fs (loop1): initial error at time 1785893469: ext4_do_update_inode:5742: inode 15 [ 163.825357][ C1] EXT4-fs (loop1): last error at time 1785893469: ext4_do_update_inode:5742: inode 15 [ 163.844729][ T8654] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.992: mark_inode_dirty error [ 163.859267][ T8662] loop6: detected capacity change from 0 to 512 [ 163.870262][ T8654] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.870772][ T8662] ext4: Unknown parameter 'measure' [ 163.889430][ T8654] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.992: corrupted inode contents [ 163.901223][ T8654] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.905256][ T8654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.992: mark_inode_dirty error [ 163.928787][ T8654] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.929886][ T8654] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.992: mark inode dirty (error -117) [ 163.951517][ T8654] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.957533][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 163.986186][ T8654] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 164.004638][ T8654] EXT4-fs (loop1): 1 orphan inode deleted [ 164.011282][ T8654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.051346][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.128790][ T8674] loop1: detected capacity change from 0 to 512 [ 164.178151][ T8674] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 164.188082][ T8674] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.207160][ T8674] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.998: Failed to acquire dquot type 1 [ 164.218516][ T8674] loop1: lost filesystem error report for type 5 error -5 [ 164.218946][ T8674] EXT4-fs (loop1): Remounting filesystem read-only [ 164.240156][ T8674] EXT4-fs (loop1): 1 truncate cleaned up [ 164.247254][ T8674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.461617][ T8680] netlink: 'syz.2.999': attribute type 13 has an invalid length. [ 165.006792][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 165.006807][ T28] audit: type=1400 audit(1785893470.983:1598): avc: denied { create } for pid=8678 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.064024][ T28] audit: type=1400 audit(1785893471.043:1599): avc: denied { write } for pid=8678 comm="syz.2.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 165.235802][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.363147][ T8693] FAULT_INJECTION: forcing a failure. [ 165.363147][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 165.445922][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.1.1004 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 165.446135][ T8693] Tainted: [W]=WARN [ 165.446144][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.446161][ T8693] Call Trace: [ 165.446170][ T8693] [ 165.446231][ T8693] __dump_stack+0x1d/0x30 [ 165.446260][ T8693] dump_stack_lvl+0x95/0xd0 [ 165.446287][ T8693] dump_stack+0x15/0x1b [ 165.446313][ T8693] should_fail_ex+0x25e/0x270 [ 165.446350][ T8693] should_failslab+0x8c/0xb0 [ 165.446379][ T8693] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 165.446481][ T8693] ? security_inode_alloc+0x37/0x100 [ 165.446592][ T8693] ? security_inode_alloc+0x37/0x100 [ 165.446671][ T8693] security_inode_alloc+0x37/0x100 [ 165.446724][ T8693] inode_init_always_gfp+0x495/0x4e0 [ 165.446878][ T8693] ? __pfx_proc_alloc_inode+0x10/0x10 [ 165.446910][ T8693] alloc_inode+0x58/0x170 [ 165.446949][ T8693] new_inode+0x1d/0xe0 [ 165.447057][ T8693] proc_pid_make_inode+0x24/0x200 [ 165.447155][ T8693] proc_pident_instantiate+0x44/0x180 [ 165.447204][ T8693] proc_pident_lookup+0x115/0x1a0 [ 165.447295][ T8693] proc_tgid_base_lookup+0x2b/0x40 [ 165.447374][ T8693] __lookup_slow+0x155/0x200 [ 165.447415][ T8693] lookup_slow+0x3c/0x60 [ 165.447451][ T8693] link_path_walk+0x919/0xdd0 [ 165.447519][ T8693] path_openat+0x1ac/0x2000 [ 165.447569][ T8693] do_file_open+0x16c/0x290 [ 165.447618][ T8693] ? __pfx_kfree_link+0x10/0x10 [ 165.447690][ T8693] do_sys_openat2+0xa0/0x130 [ 165.447860][ T8693] __x64_sys_openat+0xf2/0x120 [ 165.447899][ T8693] x64_sys_call+0x1e39/0x3020 [ 165.447926][ T8693] do_syscall_64+0x136/0x3c0 [ 165.447955][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.447999][ T8693] RIP: 0033:0x7fa8c1d3e019 [ 165.448015][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.448094][ T8693] RSP: 002b:00007fa8c0797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.448114][ T8693] RAX: ffffffffffffffda RBX: 00007fa8c1fc5fa0 RCX: 00007fa8c1d3e019 [ 165.448128][ T8693] RDX: 0000000000008264 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 165.448142][ T8693] RBP: 00007fa8c0797090 R08: 0000000000000000 R09: 0000000000000000 [ 165.448157][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.448173][ T8693] R13: 00007fa8c1fc6038 R14: 00007fa8c1fc5fa0 R15: 00007fff413d70c8 [ 165.448231][ T8693] [ 165.777847][ T28] audit: type=1400 audit(1785893471.733:1600): avc: denied { bind } for pid=8699 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.797748][ T28] audit: type=1400 audit(1785893471.733:1601): avc: denied { listen } for pid=8699 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.836957][ T280] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 165.853069][ T28] audit: type=1400 audit(1785893471.733:1602): avc: denied { connect } for pid=8699 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.893481][ T28] audit: type=1400 audit(1785893471.733:1603): avc: denied { write } for pid=8699 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.012209][ T28] audit: type=1400 audit(1785893471.733:1604): avc: denied { read } for pid=8699 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.086836][ T28] audit: type=1400 audit(1785893471.813:1605): avc: denied { read write } for pid=8699 comm="syz.0.1007" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.119056][ T28] audit: type=1400 audit(1785893471.813:1606): avc: denied { open } for pid=8699 comm="syz.0.1007" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.155734][ T280] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.197950][ T8710] loop2: detected capacity change from 0 to 2048 [ 166.207608][ T8705] loop1: detected capacity change from 0 to 512 [ 166.244570][ T8705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.273275][ T8705] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.301069][ T8705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 166.319934][ T8705] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 166.324582][ T8710] loop2: p2 p3 p7 [ 166.374975][ T8705] EXT4-fs (loop1): 1 truncate cleaned up [ 166.381131][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.395976][ T28] audit: type=1400 audit(1785893472.323:1607): avc: denied { read write } for pid=8707 comm="syz.2.1010" name="loop2p7" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.419792][ T8705] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.1009: lblock 0 mapped to illegal pblock 4 (length 1) [ 166.429983][ T2982] loop2: p2 p3 p7 [ 166.446583][ T8711] program syz.2.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.463539][ T8701] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1007'. [ 166.478376][ T8705] EXT4-fs (loop1): Remounting filesystem read-only [ 166.499267][ T8701] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 166.520557][ T8725] Failed to initialize the IGMP autojoin socket (err -2) [ 166.590282][ T6634] udevd[6634]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 166.600671][ T7024] udevd[7024]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 166.612795][ T7251] udevd[7251]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 166.916227][ T8737] bridge0: entered allmulticast mode [ 166.939028][ T8742] Failed to initialize the IGMP autojoin socket (err -2) [ 166.967495][ T8737] bridge_slave_1: left allmulticast mode [ 166.973868][ T8737] bridge_slave_1: left promiscuous mode [ 166.991794][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.826059][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.907626][ T8737] bridge_slave_0: left allmulticast mode [ 168.918585][ T8737] bridge_slave_0: left promiscuous mode [ 168.936118][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.311210][ T8747] Failed to initialize the IGMP autojoin socket (err -2) [ 169.740125][ T8773] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 169.791535][ T8777] loop6: detected capacity change from 0 to 512 [ 169.791630][ T11] kernel read not supported for file 581/net/vlan/config (pid: 11 comm: kworker/0:1) [ 169.812778][ T8777] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 169.831897][ T8777] EXT4-fs (loop6): orphan cleanup on readonly fs [ 169.881954][ T8777] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1033: Failed to acquire dquot type 1 [ 169.922584][ T8777] loop6: lost filesystem error report for type 5 error -5 [ 169.922759][ T8777] EXT4-fs (loop6): Remounting filesystem read-only [ 169.929973][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 169.929996][ C1] EXT4-fs (loop6): initial error at time 1785893475: ext4_acquire_dquot:7041 [ 169.930026][ C1] EXT4-fs (loop6): last error at time 1785893475: ext4_acquire_dquot:7041 [ 169.984890][ T8773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.009396][ T8777] EXT4-fs (loop6): 1 truncate cleaned up [ 170.015653][ T8777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.053041][ T8788] bond2: (slave geneve2): Opening slave failed [ 170.060256][ T8791] tmpfs: Bad value for 'mpol' [ 170.081725][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 170.081823][ T28] audit: type=1400 audit(1785893476.043:1619): avc: denied { mounton } for pid=8790 comm="syz.0.1037" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 170.113777][ T4340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.175819][ T8795] Failed to initialize the IGMP autojoin socket (err -2) [ 170.332740][ T8798] loop0: detected capacity change from 0 to 2048 [ 170.548182][ T8798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.702285][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.793388][ T28] audit: type=1400 audit(1785893476.773:1620): avc: denied { execmod } for pid=8806 comm="syz.1.1043" path="/188/file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.856332][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.871153][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.882216][ T28] audit: type=1400 audit(1785893476.773:1621): avc: denied { execute } for pid=8806 comm="syz.1.1043" path="/188/file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.956114][ T28] audit: type=1400 audit(1785893476.933:1622): avc: denied { append } for pid=8811 comm="syz.2.1045" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.034304][ T3392] kernel read not supported for file 609/net/vlan/config (pid: 3392 comm: kworker/0:4) [ 171.160866][ T28] audit: type=1400 audit(1785893477.143:1623): avc: denied { mounton } for pid=8819 comm="syz.0.1047" path="/230/file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 171.204808][ T8816] FAULT_INJECTION: forcing a failure. [ 171.204808][ T8816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.217937][ T8816] CPU: 0 UID: 0 PID: 8816 Comm: syz.6.1038 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 171.218030][ T8816] Tainted: [W]=WARN [ 171.218037][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.218050][ T8816] Call Trace: [ 171.218058][ T8816] [ 171.218069][ T8816] __dump_stack+0x1d/0x30 [ 171.218099][ T8816] dump_stack_lvl+0x95/0xd0 [ 171.218127][ T8816] dump_stack+0x15/0x1b [ 171.218215][ T8816] should_fail_ex+0x25e/0x270 [ 171.218252][ T8816] should_fail+0xb/0x20 [ 171.218287][ T8816] should_fail_usercopy+0x1a/0x20 [ 171.218332][ T8816] _copy_to_user+0x20/0xa0 [ 171.218395][ T8816] simple_read_from_buffer+0xb5/0x130 [ 171.218429][ T8816] proc_fail_nth_read+0x10e/0x150 [ 171.218460][ T8816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.218498][ T8816] vfs_read+0x18e/0x7c0 [ 171.218516][ T8816] ? __rcu_read_unlock+0x4e/0x70 [ 171.218632][ T8816] ? __fget_files+0x184/0x1c0 [ 171.218659][ T8816] ? mutex_lock+0x57/0x90 [ 171.218749][ T8816] ksys_read+0xdc/0x1a0 [ 171.218847][ T8816] __x64_sys_read+0x40/0x50 [ 171.218867][ T8816] x64_sys_call+0x2886/0x3020 [ 171.218899][ T8816] do_syscall_64+0x136/0x3c0 [ 171.218972][ T8816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.219001][ T8816] RIP: 0033:0x7f23dd33e84e [ 171.219022][ T8816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.219171][ T8816] RSP: 002b:00007f23dbdd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.219198][ T8816] RAX: ffffffffffffffda RBX: 00007f23dbdd76c0 RCX: 00007f23dd33e84e [ 171.219217][ T8816] RDX: 000000000000000f RSI: 00007f23dbdd70a0 RDI: 0000000000000007 [ 171.219232][ T8816] RBP: 00007f23dbdd7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.219245][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.219257][ T8816] R13: 00007f23dd606038 R14: 00007f23dd605fa0 R15: 00007ffca13bfd38 [ 171.219351][ T8816] [ 171.543637][ T8826] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1050'. [ 171.559074][ T28] audit: type=1400 audit(1785893477.533:1624): avc: denied { bind } for pid=8825 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.590840][ T8822] loop2: detected capacity change from 0 to 512 [ 171.615115][ T8822] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.626002][ T8822] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.633653][ T8828] netlink: 'syz.6.1050': attribute type 10 has an invalid length. [ 171.642031][ T28] audit: type=1400 audit(1785893477.613:1625): avc: denied { setopt } for pid=8825 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.663166][ T8822] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 171.683385][ T8822] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 171.735113][ T8822] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1048: Failed to acquire dquot type 1 [ 171.777431][ T8822] loop2: lost filesystem error report for type 5 error -5 [ 171.777590][ T8822] EXT4-fs (loop2): Remounting filesystem read-only [ 171.784818][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 171.784841][ C0] EXT4-fs (loop2): initial error at time 1785893477: ext4_acquire_dquot:7041 [ 171.784872][ C0] EXT4-fs (loop2): last error at time 1785893477: ext4_acquire_dquot:7041 [ 171.839888][ T8832] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1052'. [ 171.889804][ T8822] EXT4-fs (loop2): 1 truncate cleaned up [ 171.896288][ T8822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.909750][ T28] audit: type=1400 audit(1785893477.863:1626): avc: denied { watch } for pid=8834 comm="syz.6.1053" path="/138" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.064107][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.225338][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 172.264016][ T8851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 172.270696][ T8851] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.302203][ T8851] vhci_hcd vhci_hcd.0: Device attached [ 172.311559][ T8853] loop2: detected capacity change from 0 to 1024 [ 172.324324][ T8862] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1064'. [ 172.335845][ T8855] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1063'. [ 172.347067][ T8853] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.351561][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 172.385173][ T8853] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.1062: lblock 2 mapped to illegal pblock 2 (length 1) [ 172.389455][ T8862] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1064'. [ 172.399155][ T8853] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 172.424163][ T8853] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.1062: lblock 0 mapped to illegal pblock 48 (length 1) [ 172.424775][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 172.433794][ T8853] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 172.447391][ C1] EXT4-fs (loop2): initial error at time 1785893478: ext4_map_blocks:791: inode 3: block 2 [ 172.473013][ C1] EXT4-fs (loop2): last error at time 1785893478: ext4_map_blocks:791: inode 3: block 48 [ 172.487582][ T8853] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1062: Failed to acquire dquot type 0 [ 172.498906][ T8853] loop2: lost filesystem error report for type 5 error -117 [ 172.508291][ T8853] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 172.525075][ T8853] loop2: lost filesystem error report for type 5 error -117 [ 172.552640][ T8853] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.1062: mark_inode_dirty error [ 172.572407][ T8871] FAULT_INJECTION: forcing a failure. [ 172.572407][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 172.573795][ T8853] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.585081][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.0.1066 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 172.585121][ T8871] Tainted: [W]=WARN [ 172.585130][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.585169][ T8871] Call Trace: [ 172.585176][ T8871] [ 172.585186][ T8871] __dump_stack+0x1d/0x30 [ 172.585217][ T8871] dump_stack_lvl+0x95/0xd0 [ 172.585243][ T8871] dump_stack+0x15/0x1b [ 172.585266][ T8871] should_fail_ex+0x25e/0x270 [ 172.585311][ T8871] ? __pfx_proc_alloc_inode+0x10/0x10 [ 172.585344][ T8871] should_failslab+0x8c/0xb0 [ 172.585409][ T8871] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 172.585437][ T8871] ? proc_alloc_inode+0x34/0x90 [ 172.585519][ T8871] ? proc_alloc_inode+0x34/0x90 [ 172.585554][ T8871] ? __pfx_proc_alloc_inode+0x10/0x10 [ 172.585584][ T8871] proc_alloc_inode+0x34/0x90 [ 172.585613][ T8871] alloc_inode+0x40/0x170 [ 172.585833][ T8871] new_inode+0x1d/0xe0 [ 172.585925][ T8871] proc_pid_make_inode+0x24/0x200 [ 172.586029][ T8871] proc_fd_instantiate+0x36/0x190 [ 172.586169][ T8871] proc_fill_cache+0x1a6/0x220 [ 172.586267][ T8871] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 172.586382][ T8871] proc_readfd_common+0x292/0x3e0 [ 172.586590][ T8871] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 172.586711][ T8871] proc_fd_iterate+0x24/0x30 [ 172.586805][ T8871] iterate_dir+0x109/0x2f0 [ 172.586884][ T8871] __se_sys_getdents+0xd2/0x220 [ 172.587005][ T8871] ? __pfx_filldir+0x10/0x10 [ 172.587079][ T8871] __x64_sys_getdents+0x43/0x50 [ 172.587165][ T8871] x64_sys_call+0xea8/0x3020 [ 172.587290][ T8871] do_syscall_64+0x136/0x3c0 [ 172.587450][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.587525][ T8871] RIP: 0033:0x7f05e0c0e019 [ 172.587571][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.587591][ T8871] RSP: 002b:00007f05df667028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 172.587610][ T8871] RAX: ffffffffffffffda RBX: 00007f05e0e95fa0 RCX: 00007f05e0c0e019 [ 172.587624][ T8871] RDX: 0000000000001012 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 172.587721][ T8871] RBP: 00007f05df667090 R08: 0000000000000000 R09: 0000000000000000 [ 172.587762][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.587803][ T8871] R13: 00007f05e0e96038 R14: 00007f05e0e95fa0 R15: 00007fff7722f488 [ 172.587872][ T8871] [ 172.769301][ T280] usb 4-1: SetAddress Request (2) to port 0 [ 172.843088][ T8853] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 172.843708][ T280] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 172.855617][ T8853] EXT4-fs (loop2): 1 orphan inode deleted [ 172.867992][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.880378][ T8153] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.895061][ T8153] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 172.907327][ T8857] vhci_hcd: connection reset by peer [ 172.921979][ T68] vhci_hcd vhci_hcd.1: stop threads [ 172.937101][ T68] vhci_hcd vhci_hcd.1: release socket [ 172.943136][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 173.166567][ T8894] Failed to initialize the IGMP autojoin socket (err -2) [ 173.627180][ T8901] loop1: detected capacity change from 0 to 512 [ 173.669729][ T8901] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 173.684298][ T8901] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.696400][ T8901] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1079: Failed to acquire dquot type 1 [ 173.708894][ T8901] loop1: lost filesystem error report for type 5 error -5 [ 173.709441][ T8901] EXT4-fs (loop1): Remounting filesystem read-only [ 173.724065][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 173.724099][ C1] EXT4-fs (loop1): initial error at time 1785893479: ext4_acquire_dquot:7041 [ 173.724127][ C1] EXT4-fs (loop1): last error at time 1785893479: ext4_acquire_dquot:7041 [ 173.751147][ T8901] EXT4-fs (loop1): 1 truncate cleaned up [ 174.053209][ T8901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.170180][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.457780][ T8912] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 174.484255][ T8912] SELinux: failed to load policy [ 174.610739][ T8884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.637314][ T12] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.651613][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 174.651769][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 174.673000][ T12] loop2: lost filesystem error report for type 5 error -117 [ 174.673360][ T8884] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1062: Invalid inode table block 1 in block_group 0 [ 174.697851][ T8884] loop2: lost filesystem error report for type 5 error -117 [ 174.697960][ T8884] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 174.716945][ T8884] loop2: lost filesystem error report for type 5 error -117 [ 174.717129][ T8884] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz.2.1062: mark_inode_dirty error [ 174.736070][ T8884] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 174.906593][ T8929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1091'. [ 175.047615][ T8931] Failed to initialize the IGMP autojoin socket (err -2) [ 175.093084][ T8153] bridge_slave_1: left allmulticast mode [ 175.106893][ T8153] bridge_slave_1: left promiscuous mode [ 175.116307][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.124920][ T8153] bridge_slave_0: left allmulticast mode [ 175.130624][ T8153] bridge_slave_0: left promiscuous mode [ 175.136419][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.216980][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 175.217000][ T28] audit: type=1400 audit(1785893481.183:1642): avc: denied { module_load } for pid=8953 comm="syz.6.1098" path="/147/bus" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 175.249605][ T8153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.250316][ T8954] Invalid ELF header magic: != ELF [ 175.278322][ T8153] bond0 (unregistering): Released all slaves [ 175.288155][ T8153] bond1 (unregistering): Released all slaves [ 175.301618][ T8153] bond2 (unregistering): Released all slaves [ 175.379187][ T28] audit: type=1400 audit(1785893481.343:1643): avc: denied { write } for pid=8957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.449313][ T8153] hsr_slave_0: left promiscuous mode [ 175.455188][ T8153] hsr_slave_1: left promiscuous mode [ 175.461288][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.468983][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.512725][ T8153] team0 (unregistering): Port device team_slave_1 removed [ 175.526743][ T28] audit: type=1400 audit(1785893481.403:1644): avc: denied { write } for pid=8970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.564155][ T8153] team0 (unregistering): Port device team_slave_0 removed [ 175.633065][ T28] audit: type=1400 audit(1785893481.613:1645): avc: denied { relabelfrom } for pid=8931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 175.693037][ T28] audit: type=1400 audit(1785893481.613:1646): avc: denied { relabelto } for pid=8931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 175.867473][ T28] audit: type=1400 audit(1785893481.843:1647): avc: denied { write } for pid=8979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.914300][ T8981] Failed to initialize the IGMP autojoin socket (err -2) [ 175.926853][ T28] audit: type=1400 audit(1785893481.903:1648): avc: denied { mount } for pid=8998 comm="syz.1.1103" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.949175][ T28] audit: type=1400 audit(1785893481.903:1649): avc: denied { write } for pid=9002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.971330][ T8999] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 175.985232][ T28] audit: type=1400 audit(1785893481.903:1650): avc: denied { read } for pid=8998 comm="syz.1.1103" name="trace_pipe" dev="tracefs" ino=2227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 176.170435][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1106'. [ 176.180789][ T28] audit: type=1400 audit(1785893482.153:1651): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 176.214979][ T9024] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1107'. [ 176.379370][ T9031] loop6: detected capacity change from 0 to 512 [ 176.471848][ T9031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.491569][ T9036] Failed to initialize the IGMP autojoin socket (err -2) [ 176.632942][ T4340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.894288][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 176.903910][ T9078] Failed to initialize the IGMP autojoin socket (err -2) [ 177.082906][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1119'. [ 177.184312][ T9103] netlink: 'syz.6.1122': attribute type 2 has an invalid length. [ 177.519510][ T9108] loop1: detected capacity change from 0 to 128 [ 177.552241][ T9123] 9p: Bad value for 'wfdno' [ 177.572878][ T9111] Failed to initialize the IGMP autojoin socket (err -2) [ 177.645908][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 177.939303][ T280] usb 4-1: device descriptor read/8, error -110 [ 177.980678][ T9146] Failed to initialize the IGMP autojoin socket (err -2) [ 178.083226][ T280] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.115631][ T280] usb 4-1: enqueue for inactive port 0 [ 178.121895][ T280] usb 4-1: enqueue for inactive port 0 [ 178.127579][ T280] usb 4-1: enqueue for inactive port 0 [ 178.528313][ T9154] bridge_slave_0: left allmulticast mode [ 178.550688][ T9154] bridge_slave_0: left promiscuous mode [ 178.732307][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.761085][ T9154] bridge_slave_1: left allmulticast mode [ 178.772685][ T9154] bridge_slave_1: left promiscuous mode [ 178.780258][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.790454][ T9154] bond0: (slave bond_slave_0): Releasing backup interface [ 178.801686][ T9154] bond0: (slave bond_slave_1): Releasing backup interface [ 178.814863][ T9154] team0: Port device team_slave_0 removed [ 178.824356][ T9154] team0: Port device team_slave_1 removed [ 178.831349][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.838750][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.847232][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.854629][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.865286][ T9154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.930367][ T9164] syzkaller0: entered promiscuous mode [ 178.951008][ T9164] syzkaller0: entered allmulticast mode [ 179.124585][ T9155] Failed to initialize the IGMP autojoin socket (err -2) [ 179.156504][ T280] usb usb4-port1: attempt power cycle [ 179.193550][ T9175] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1141'. [ 179.955020][ T9231] netlink: 'syz.4.1146': attribute type 13 has an invalid length. [ 179.966013][ T9230] program syz.6.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.061992][ T9245] loop1: detected capacity change from 0 to 512 [ 180.079422][ T9245] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 180.087452][ T9245] EXT4-fs (loop1): orphan cleanup on readonly fs [ 180.165268][ T9245] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1149: Failed to acquire dquot type 1 [ 180.180772][ T9245] loop1: lost filesystem error report for type 5 error -5 [ 180.187386][ T9245] EXT4-fs (loop1): Remounting filesystem read-only [ 180.194595][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 180.194622][ C0] EXT4-fs (loop1): initial error at time 1785893486: ext4_acquire_dquot:7041 [ 180.194651][ C0] EXT4-fs (loop1): last error at time 1785893486: ext4_acquire_dquot:7041 [ 180.231044][ T9245] EXT4-fs (loop1): 1 truncate cleaned up [ 180.240016][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 180.240035][ T28] audit: type=1400 audit(1785893486.213:1695): avc: denied { write } for pid=9257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.289928][ T9245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.374784][ T9237] Failed to initialize the IGMP autojoin socket (err -2) [ 180.406486][ T9277] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 180.416652][ T28] audit: type=1400 audit(1785893486.383:1696): avc: denied { mac_admin } for pid=9275 comm="syz.6.1152" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.463357][ T28] audit: type=1400 audit(1785893486.433:1697): avc: denied { relabelto } for pid=9275 comm="syz.6.1152" name="159" dev="tmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 180.516257][ T28] audit: type=1400 audit(1785893486.433:1698): avc: denied { associate } for pid=9275 comm="syz.6.1152" name="159" dev="tmpfs" ino=861 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 180.583139][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.704384][ T28] audit: type=1400 audit(1785893486.683:1699): avc: denied { write } for pid=9264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.741606][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1155'. [ 180.843425][ T9290] Failed to initialize the IGMP autojoin socket (err -2) [ 181.079667][ T280] usb usb4-port1: unable to enumerate USB device [ 181.622770][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 181.665042][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1157'. [ 181.719608][ T28] audit: type=1400 audit(1785893487.703:1700): avc: denied { write } for pid=9302 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.092017][ T9309] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 182.199070][ T9298] Failed to initialize the IGMP autojoin socket (err -2) [ 182.389898][ T28] audit: type=1400 audit(1785893488.373:1701): avc: denied { read } for pid=9323 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.589467][ T28] audit: type=1400 audit(1785893488.543:1702): avc: denied { write } for pid=9307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.614416][ T28] audit: type=1400 audit(1785893488.563:1703): avc: denied { write } for pid=9339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.637103][ T28] audit: type=1400 audit(1785893488.593:1704): avc: denied { create } for pid=9340 comm="syz.6.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 182.722351][ T9342] tipc: Enabling of bearer rejected, failed to enable media [ 183.541220][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 183.560641][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1168'. [ 183.586205][ T9453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9453 comm=syz.1.1166 [ 183.624383][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 183.731615][ T9471] loop1: detected capacity change from 0 to 128 [ 183.858874][ T9471] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.884431][ T9467] Failed to initialize the IGMP autojoin socket (err -2) [ 183.894476][ T9471] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.453405][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.983781][ T9598] loop1: detected capacity change from 0 to 1024 [ 184.984535][ T9597] tipc: Enabling of bearer rejected, failed to enable media [ 185.031842][ T9598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.057048][ T9598] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.085459][ T9598] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1181: bg 0: block 112: padding at end of block bitmap is not set [ 185.102268][ T9615] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1185'. [ 185.140956][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.267527][ T9617] Failed to initialize the IGMP autojoin socket (err -2) [ 185.418097][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 185.418115][ T28] audit: type=1400 audit(1785893491.393:1742): avc: denied { write } for pid=9648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.477771][ T28] audit: type=1400 audit(1785893491.453:1743): avc: denied { write } for pid=9667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.605583][ T28] audit: type=1400 audit(1785893491.583:1744): avc: denied { write } for pid=9669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.641987][ T28] audit: type=1400 audit(1785893491.623:1745): avc: denied { write } for pid=9680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.758215][ T28] audit: type=1400 audit(1785893491.733:1746): avc: denied { write } for pid=9682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.801828][ T28] audit: type=1400 audit(1785893491.783:1747): avc: denied { write } for pid=9693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.923557][ T28] audit: type=1400 audit(1785893491.903:1748): avc: denied { write } for pid=9695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.958162][ T28] audit: type=1400 audit(1785893491.933:1749): avc: denied { write } for pid=9706 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.073543][ T28] audit: type=1400 audit(1785893492.053:1750): avc: denied { write } for pid=9708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.120215][ T28] audit: type=1400 audit(1785893492.103:1751): avc: denied { write } for pid=9719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.687302][ T9775] Failed to initialize the IGMP autojoin socket (err -2) [ 186.700081][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1204'. [ 186.745833][ T9813] loop6: detected capacity change from 0 to 512 [ 186.769326][ T9813] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 186.777502][ T9813] EXT4-fs (loop6): orphan cleanup on readonly fs [ 186.785140][ T9809] loop1: detected capacity change from 0 to 8192 [ 186.815309][ T9813] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1206: Failed to acquire dquot type 1 [ 186.845910][ T9813] loop6: lost filesystem error report for type 5 error -5 [ 186.849039][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 186.851722][ T9813] EXT4-fs (loop6): Remounting filesystem read-only [ 186.856269][ C1] EXT4-fs (loop6): initial error at time 1785893492: ext4_acquire_dquot:7041 [ 186.866030][ T9813] EXT4-fs (loop6): 1 truncate cleaned up [ 186.869323][ C1] [ 186.869331][ C1] EXT4-fs (loop6): last error at time 1785893492: ext4_acquire_dquot:7041 [ 186.880665][ T9813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.958457][ T4340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.117673][ T9873] 9p: Bad value for 'wfdno' [ 188.172088][ T9866] Failed to initialize the IGMP autojoin socket (err -2) [ 188.557720][ T9865] ================================================================== [ 188.565875][ T9865] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 188.572867][ T9865] [ 188.575237][ T9865] read-write to 0xffff88810d3842a4 of 4 bytes by task 9871 on cpu 0: [ 188.583354][ T9865] fifo_open+0x89/0x5b0 [ 188.587558][ T9865] do_dentry_open+0x49f/0xa60 [ 188.592287][ T9865] vfs_open+0x37/0x1e0 [ 188.596464][ T9865] path_openat+0x1b39/0x2000 [ 188.601113][ T9865] do_file_open+0x16c/0x290 [ 188.605677][ T9865] do_sys_openat2+0xa0/0x130 [ 188.610315][ T9865] __x64_sys_open+0xe6/0x110 [ 188.614956][ T9865] x64_sys_call+0x14b9/0x3020 [ 188.619681][ T9865] do_syscall_64+0x136/0x3c0 [ 188.624311][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.630236][ T9865] [ 188.632593][ T9865] read to 0xffff88810d3842a4 of 4 bytes by task 9865 on cpu 1: [ 188.640177][ T9865] wait_for_partner+0xc9/0x1d0 [ 188.644990][ T9865] fifo_open+0x443/0x5b0 [ 188.649293][ T9865] do_dentry_open+0x49f/0xa60 [ 188.654024][ T9865] vfs_open+0x37/0x1e0 [ 188.658148][ T9865] path_openat+0x1b39/0x2000 [ 188.662802][ T9865] do_file_open+0x16c/0x290 [ 188.667364][ T9865] do_sys_openat2+0xa0/0x130 [ 188.672008][ T9865] __x64_sys_open+0xe6/0x110 [ 188.676672][ T9865] x64_sys_call+0x14b9/0x3020 [ 188.681403][ T9865] do_syscall_64+0x136/0x3c0 [ 188.686062][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.692003][ T9865] [ 188.694384][ T9865] value changed: 0x00000001 -> 0x00000002 [ 188.700212][ T9865] [ 188.702648][ T9865] Reported by Kernel Concurrency Sanitizer on: [ 188.708830][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.1.1208 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 188.719724][ T9865] Tainted: [W]=WARN [ 188.723657][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.733837][ T9865] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.654826][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.722690][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.776720][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.852388][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.947403][ T12] bridge_slave_1: left allmulticast mode [ 189.953348][ T12] bridge_slave_1: left promiscuous mode [ 189.959496][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.968107][ T12] bridge_slave_0: left allmulticast mode [ 189.973901][ T12] bridge_slave_0: left promiscuous mode [ 189.979866][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.032693][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.043945][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.054306][ T12] bond0 (unregistering): Released all slaves [ 190.113822][ T12] hsr_slave_0: left promiscuous mode [ 190.119780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.127871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.135729][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.143971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.155029][ T12] veth1_macvtap: left promiscuous mode [ 190.161162][ T12] veth0_macvtap: left promiscuous mode [ 190.166725][ T12] veth1_vlan: left promiscuous mode [ 190.172263][ T12] veth0_vlan: left promiscuous mode [ 190.244075][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.253892][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.285284][ T11] hsr0 speed is unknown, defaulting to 1000 [ 190.291423][ T11] infiniband syz2: ib_query_port failed (-19) [ 190.505015][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 190.505032][ T28] audit: type=1400 audit(1785893496.483:1785): avc: denied { write } for pid=9947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.542847][ T28] audit: type=1400 audit(1785893496.523:1786): avc: denied { write } for pid=9958 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.672124][ T28] audit: type=1400 audit(1785893496.653:1787): avc: denied { write } for pid=9961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.707929][ T28] audit: type=1400 audit(1785893496.683:1788): avc: denied { write } for pid=9972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.840384][ T28] audit: type=1400 audit(1785893496.823:1789): avc: denied { write } for pid=9976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.872993][ T28] audit: type=1400 audit(1785893496.853:1790): avc: denied { write } for pid=9987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.995997][ T12] bridge_slave_1: left promiscuous mode [ 191.001931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.009912][ T12] bridge_slave_0: left allmulticast mode [ 191.015687][ T12] bridge_slave_0: left promiscuous mode [ 191.021611][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.031712][ T28] audit: type=1400 audit(1785893497.013:1791): avc: denied { write } for pid=9990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.075890][ T28] audit: type=1400 audit(1785893497.053:1792): avc: denied { write } for pid=10001 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.112352][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.121995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.131153][ T12] bond0 (unregistering): Released all slaves [ 191.138708][ T12] bond1 (unregistering): Released all slaves [ 191.163100][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.172625][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.182021][ T12] bond0 (unregistering): Released all slaves [ 191.189500][ T12] bond1 (unregistering): Released all slaves [ 191.236220][ T12] hsr_slave_0: left promiscuous mode [ 191.242003][ T12] hsr_slave_1: left promiscuous mode [ 191.247754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.255536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.264980][ T12] hsr_slave_0: left promiscuous mode [ 191.271351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.315431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.325851][ T12] team0 (unregistering): Port device team_slave_0 removed [ 191.339988][ T28] audit: type=1400 audit(1785893497.323:1793): avc: denied { write } for pid=10004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.384611][ T28] audit: type=1400 audit(1785893497.363:1794): avc: denied { write } for pid=10015 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.427288][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.437883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 197.382514][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 197.382539][ T28] audit: type=1400 audit(1785893503.363:1805): avc: denied { write } for pid=10092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.420513][ T28] audit: type=1400 audit(1785893503.403:1806): avc: denied { write } for pid=10103 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1