last executing test programs: 4m38.018921337s ago: executing program 1 (id=295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x58040, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m37.997148718s ago: executing program 1 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000004c0)=""/198, 0xc6) 4m37.940541859s ago: executing program 1 (id=297): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f00000004c0)="fe2bd18970fda3a8854ffc4363ab8631145a4890ab898aad38735667b6c277789822c6cbf0d800ad32b4b16227521c0971e98942b26e13e7cc4692cbbccd430b47d3742a95424ff14871d72f5adb342e6621ef35bcf76644d88aeeafab7889bcb29c0e9985550a625be8350aa20f098a95b50a831516ac000cac9ece749f7dc3a384690202b1676841db2ad5f514bcb7a9a1adc9035f12de77237a0e45432846bea87dbf831539c863e5e61651fbc964a9", &(0x7f0000000680)=""/182, 0x4}, 0x20) semget$private(0x0, 0x3, 0x642) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r2 = dup(r1) socket$rds(0x15, 0x5, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 4m37.914087929s ago: executing program 1 (id=298): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1840039, &(0x7f0000000380)={[{@pids_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='cpuset'}], [{@uid_gt}, {@measure}, {@context={'context', 0x3d, 'user_u'}}]}) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, r1, 0x0, 0x0, 0xc}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0x4fb, &(0x7f00000009c0)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) (async) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1840039, &(0x7f0000000380)={[{@pids_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='cpuset'}], [{@uid_gt}, {@measure}, {@context={'context', 0x3d, 'user_u'}}]}) (async) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) (async) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, r1, 0x0, 0x0, 0xc}]) (async) 4m37.611374475s ago: executing program 1 (id=301): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 4m37.318759451s ago: executing program 1 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000004c0)=""/198, 0xc6) 4m37.110366625s ago: executing program 32 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000004c0)=""/198, 0xc6) 2m9.176019567s ago: executing program 3 (id=3006): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x2, 0x4800001c, 0x1c, 0x10000079, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) (async) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0xe8, 0x8, 0x40, 0x57, 0x0, 0x10001, 0x49020, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa997, 0x2, @perf_bp={&(0x7f0000000300), 0x5}, 0x2040, 0x7fffffffffffffff, 0x101, 0x3, 0x800, 0x9, 0x6, 0x0, 0x6dd, 0x0, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x4, 0x71, 0x0, 0xd, @private0, @empty, 0x1, 0x0, 0xfffffffc}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000800800000000400000028000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000ff0000000000000700000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x18) utime(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m9.093671979s ago: executing program 3 (id=3010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2m8.814200494s ago: executing program 5 (id=3015): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa199, 0x1000}, 0x48, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 2m8.797759244s ago: executing program 5 (id=3017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=@deltaction={0x244, 0x31, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7bdf}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80c}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78b}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x244}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0\x00') bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r12, 0x1, {}, 0xfe}, 0x18) sendmsg$can_j1939(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r12, 0x200000000000000, {0x0, 0xff, 0x4}, 0x1}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x260488d1}, 0x20008801) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x3, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r14, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x65, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000f80)={0x204, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4080}, 0x40884) mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1) 2m8.53113745s ago: executing program 5 (id=3021): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 4) 2m8.199762566s ago: executing program 5 (id=3024): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000a502000000000900007f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000009c8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000746809c00b00000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110004b9f787f7dd84dfd98548a784f4a255dccca0e3753c67c458fdd1a5d7017abb1ecd9dd150e2ea754c66ee74604a0a17f7e6a892683bee855d07be5de13aec14ccfd1164dceab19992", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x108001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) 2m8.124660448s ago: executing program 3 (id=3026): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2m7.900020002s ago: executing program 3 (id=3030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd2, &(0x7f0000000280)=""/210, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000140)={0x1}) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0xe3f, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x1051, &(0x7f0000001280)="$eJzsz7EJwlAUBdAbTIIiSBp7LR3jD+Em9gouo87jJLY2kpg4gqQ4Bz58Hvc+eGEuXqmS/r3HwTLJ4vttk6yn4PNXuez2uZbzEK36eOmG1mab1Wms3kubqmtSp0lyO0zrUtc5Pv55IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM1ScAAP//gqkI3g==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000000)={'geneve1\x00', @ifru_addrs=@nl=@unspec}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m7.738132805s ago: executing program 5 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c000000060000000000000a030000000b0000000000000c0100000003050000000000020100000000305f5f2e00305f302e2800"], &(0x7f0000000280)=""/109, 0x48, 0x6d, 0x1, 0x7}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffed8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x4, 0x2, 0x1a, 0x7, 0x45, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x20, 0x401, 0x3}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000440), 0x66) socket$pptp(0x18, 0x1, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000000)={0x29, 0xabe, 0x8, 0xa, 0xffffff80}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") socket$l2tp6(0xa, 0x2, 0x73) 2m7.624599117s ago: executing program 3 (id=3036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/168, 0xa8}], 0x1, 0xf0, 0xd215) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 2m7.586941678s ago: executing program 5 (id=3037): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2m7.572903748s ago: executing program 33 (id=3037): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2m7.4720605s ago: executing program 3 (id=3039): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 2m7.47159888s ago: executing program 34 (id=3039): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 1m13.42523367s ago: executing program 2 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="00000000000000228df435140ba1e2f20db153f8a80000000000960e62cac3d24df80c4e0000c691a2abe17caaedcfd08d2989a10d5a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m13.354951731s ago: executing program 2 (id=3835): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) 1m13.305619763s ago: executing program 2 (id=3839): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0xe03f030000000000) 1m13.232406324s ago: executing program 2 (id=3840): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x20000000001}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000440)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x2, 0x0, @remote, 0xeffffffe}, 0xffffffffffffffe1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f", 0x3b}], 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "126dc1f5a060c700", "9630de4c4a7edea30f23d9b423a663fc10e748e13037a7baded61cea3359ae7f", '\x00', "44b17babe3190c5d"}, 0x38) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb309}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000aa4020000060a0b040000000000000000020000001400048010000180080001006e617400040002800900010073797a300000000070020480100001800900010068617368000000003c000180090001007866726d000000002c0002800800014000000003080001400000001b080004400000000405000300010000000800044000000003100001800c0001007061796c6f616400100001800c00010062697477697365007c0101800c00010062697477697365006c01028048010580380002800900020073797a300000000008000180fffffffc0900020073797a300000000008000340000000030900020073797a3100000000240002800900020073797a31000000000900020073797a320000000008000340000000043c00028008000180fffffffe0900020073797a320000000008000180fffffff80900020073797a3200000000080003400000000308000180fffffffcab000100a29136650269fe190294798cb3a1ec842baf7c850a266f6e20e6fe704816117c45e823a4b408a61a489cbedb7d55fa94135fb4848fd93e6427f011aa7d514142751cab35fa7732a935182d8b7fa29486adaeff856e2aaeae2267eb34078e5bcad60f1ba3a283be3430c92124932fe8e1f784de344b461e0a503c0def5e57aef7d6e044006326b437d50231479556cc4bb828b3071a80258e8d49873cf38f002ad651ed7aa98974000800024000000016080006400000000108000640000000020800014000000004100001800b0001007470726f78790000440001800a00010072656469720000003400028008000140000000110800024000000001080003400000002e08000340000020100800034000000008080003400000001130000180080001006c6f67002400028008000340000000050600014000ff000008000640000000000800064000000000140000001100010000000000000000000200000a"], 0x2cc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.184020865s ago: executing program 2 (id=3842): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}]}}]}, 0x40}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) 1m12.93639675s ago: executing program 2 (id=3846): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x200240, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x9}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x88}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x84}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9f, 0x6, "48f2660cf3fd75cf609ca5bd0f124a8ef57116b4b370ac9866913f62262039de1a354e6c25a4ee9c5ecee2c5644e1ef73f312590e509fe27b7df599c2a51931fd2e74acd25fdd62ebfb6ee740e1813d6b65da2c28c27388d94151ce19bf895986f89a283030efe2c3527a0935bc04e38cdbd38a55e4b50df48de9de6d1b2f8fd0652a14c99169b22ec2eb0e27a95a4938736fd4ccfc6f4d92b81ad"}]}, @NFT_MSG_DELRULE={0x110, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x82, 0x7, 0x1, 0x0, "648ba724a6c9524fe14cae9b253ac93de7510d59e047bd07b13451692f2272e13f2c9cc45b0b56ae1a20e86523eda4a149d625f37d011ef1b4a5c27c6f85f3ccbe0d20ed266fc897740f7c2a077390398ca46a981734c71a8ddc279a769f679e5cd3c04cc579c9d6e0ec9f6e6a10449b692b0dcc479a8ba39e6ca538f6e2"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a1}, 0x40040) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m12.936192229s ago: executing program 35 (id=3846): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x200240, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWOBJ={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x2c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x9}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x88}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x84}, @NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9f, 0x6, "48f2660cf3fd75cf609ca5bd0f124a8ef57116b4b370ac9866913f62262039de1a354e6c25a4ee9c5ecee2c5644e1ef73f312590e509fe27b7df599c2a51931fd2e74acd25fdd62ebfb6ee740e1813d6b65da2c28c27388d94151ce19bf895986f89a283030efe2c3527a0935bc04e38cdbd38a55e4b50df48de9de6d1b2f8fd0652a14c99169b22ec2eb0e27a95a4938736fd4ccfc6f4d92b81ad"}]}, @NFT_MSG_DELRULE={0x110, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x82, 0x7, 0x1, 0x0, "648ba724a6c9524fe14cae9b253ac93de7510d59e047bd07b13451692f2272e13f2c9cc45b0b56ae1a20e86523eda4a149d625f37d011ef1b4a5c27c6f85f3ccbe0d20ed266fc897740f7c2a077390398ca46a981734c71a8ddc279a769f679e5cd3c04cc579c9d6e0ec9f6e6a10449b692b0dcc479a8ba39e6ca538f6e2"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x330}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a1}, 0x40040) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m11.650547975s ago: executing program 4 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f0000004040)}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x108, r2, 0xf99705df769554e8, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10000000000000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xbe, 0xa9, @random="883e5f39eef23d93511e6172acdeffb9094ebf02a757cd5c7c300b96a1aa0018e9135a9278bb81b9f1789d63191286ff37dc5a8f69f90e6105571bc46451aba12ededd7de2ece99e86e06149c7ebe4367a80dbdcf1d4b5cc35a39ba7bb98befe59bda6398b5ba9370a6a0d1a562cf9c1d7110ff4a50498255201f76c656a9f3e68b94a6f037d8aa36cf72a5521b226b0946eb8c3dd5d421e17f4bbc7e83590b1fb00b368dbd96eab3b5f25763caf408a75543160dbb120fc9702"}]}, 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 1m11.419996319s ago: executing program 0 (id=3874): iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m11.419417229s ago: executing program 4 (id=3875): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) close(r0) 1m11.39424506s ago: executing program 4 (id=3876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc84}, 0x2000) (fail_nth: 5) 1m11.172382434s ago: executing program 4 (id=3878): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) close(r0) 1m11.050490116s ago: executing program 4 (id=3879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f354", 0x14}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36c", 0x96}, {&(0x7f0000000b00)}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20085e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1m10.527586217s ago: executing program 0 (id=3887): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) close(r0) 1m10.518611017s ago: executing program 8 (id=3847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) getsockopt(r4, 0x110, 0x3, 0x0, 0x0) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ustat(0x3, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) 1m10.490737918s ago: executing program 0 (id=3888): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=@deltaction={0x1d4, 0x31, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7bdf}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80c}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78b}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x1d4}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0\x00') bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r12, 0x1, {}, 0xfe}, 0x18) sendmsg$can_j1939(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r12, 0x200000000000000, {0x0, 0xff, 0x4}, 0x1}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x260488d1}, 0x20008801) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x3, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r14, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x65, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000f80)={0x204, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4080}, 0x40884) mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1) 1m10.337200491s ago: executing program 6 (id=3889): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x20204e, &(0x7f0000000680)={[{@noquota}, {@abort}, {@journal_checksum}, {@discard}, {@nodelalloc}, {@data_journal}, {@data_journal}]}, 0x5, 0x472, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x3b51, 0x0, 0x0, &(0x7f0000000ac0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 1m10.085528745s ago: executing program 4 (id=3893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m10.049913556s ago: executing program 0 (id=3894): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) close(r0) 1m9.993135227s ago: executing program 0 (id=3895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m9.773380691s ago: executing program 0 (id=3898): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x58, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000013c0)={0x110c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x504, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0x6565, 0x3, 0x4, 0x3, 0xc]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x2, 0xc, 0x18, 0x30, 0x36, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1b, 0x24, 0x12, 0x0, 0x9, 0xc, 0x36, 0x48, 0x5, 0x30, 0x24, 0x1b, 0x2, 0x30, 0x5, 0x1f, 0x4, 0x36, 0x12, 0x16, 0x24, 0x12, 0x1, 0xb, 0x5a, 0x5, 0x30]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0xc, 0x36, 0x48, 0x9, 0xc, 0x60, 0x9, 0x17, 0x4, 0x10, 0x2, 0x4, 0x36, 0x5, 0xb, 0x4, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc1112d89ceb18d11, 0x36, 0x36, 0x4, 0x3, 0x24, 0xb, 0x77, 0x2, 0x18, 0x4, 0x16, 0x48, 0x9, 0x36, 0x6, 0x2, 0x1, 0x3, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x3, 0x18, 0x4, 0x12, 0x1b, 0x18, 0x24, 0x1b, 0x24, 0x1b, 0x1, 0x6c, 0x12, 0x18, 0x12, 0x2, 0x36, 0x18, 0x9, 0x12, 0x36, 0x3, 0x1b, 0x6c, 0x5, 0x6, 0x2, 0x5, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x16, 0x16, 0x5, 0x5, 0x9, 0xc, 0xc, 0xb, 0x9, 0x48, 0xb, 0x36, 0x0, 0x1, 0x2, 0x24, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x122b, 0x1, 0x9c8, 0x8, 0x800, 0x9]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe, 0x8, 0xb, 0x6, 0x8, 0x8001, 0x6c91, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4a02, 0x6, 0xffff, 0x9, 0xffff, 0x4, 0x98]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xad8f, 0x5, 0x3, 0x2, 0x8, 0x5, 0x44, 0x7]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {}, {0x5, 0x4}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x4}, {0x5, 0x2}, {0x6}, {0x4, 0x6}, {}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x7}, {0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x230, 0x4, 0x8d15, 0x8, 0x8, 0x0, 0x401, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x99, 0x5, 0x6, 0x7fff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x24, 0x6, 0x48, 0x6, 0x30, 0xb, 0x30, 0x30, 0x6f, 0x14, 0x36, 0x18, 0x1, 0x16, 0x36, 0x4, 0x73bde2474853453e, 0x2, 0x60, 0x4, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xc00, 0x4, 0x1, 0xb5f, 0x200, 0x10]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0x1, 0x0, 0x4, 0x100, 0x3, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x3, 0x2c, 0x48, 0x12, 0x1, 0x3, 0x60, 0x1, 0x16, 0x6c, 0x36, 0x6, 0x48, 0x18, 0x0, 0x60, 0x48, 0x3, 0x9, 0x1, 0x6, 0x48, 0xc, 0x24, 0xb, 0x3, 0x3]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x35, 0x16, 0xc, 0x3, 0x24, 0x72, 0x24, 0x30, 0x4, 0x6d, 0x4, 0x24, 0x6c, 0x5, 0x9, 0x6, 0x5, 0x60, 0x18, 0x13, 0x1, 0x4d, 0x1, 0x6c, 0x24, 0xb, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x12, 0xc, 0x9, 0x1, 0x0, 0x36, 0x30, 0xc, 0x30, 0x24, 0x3, 0x3, 0x10, 0x4, 0x6c, 0x9, 0x0, 0x30, 0x16, 0x60, 0x30, 0x18, 0x5, 0x2, 0x9, 0x24, 0x36, 0x5, 0x48]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x7}, {0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x5}, {}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0x1}, {0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x4}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x5}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x12, 0x5, 0x16, 0x1b, 0x0, 0xb, 0x2, 0x780c5d5fcd3a83f, 0x30, 0x16, 0x36, 0x18, 0x5, 0x24, 0x2, 0x16, 0x9, 0xc, 0xb, 0x16, 0x36, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x48, 0x30, 0x24, 0x2b, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x5}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0x1}, {0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x7}, {0x7, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x9}, {0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x7}, {0x2, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x31, 0x6, 0xc, 0x1b, 0x16, 0x24, 0xb, 0xb, 0x18, 0x9, 0x1, 0x9, 0x5, 0x1b, 0x1b, 0x1b, 0x12, 0x24, 0x16, 0xb, 0xc, 0x18, 0x6, 0x36, 0x6a]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x5, 0x401, 0x7fff, 0x7, 0x7, 0x2ed5, 0xa86]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x3}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x3}, {0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x4}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x3}, {0x1, 0x6}, {0x3, 0x5}, {}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xfbff, 0x1, 0x401, 0x0, 0x2, 0x3, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x6, 0x6c, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbb3e, 0xb, 0x8, 0x6, 0x3, 0x8, 0x1, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x514, 0x11d, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x4}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x14, 0x24, 0x6, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x7}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x18, 0x12, 0x9, 0x60, 0x48, 0x5, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x1, 0x12, 0x12, 0x5, 0xc, 0x9, 0x1b, 0x16, 0xb, 0x5, 0x16, 0x9, 0x6c, 0xb, 0x1b, 0x1b, 0x5, 0x5, 0x4, 0x1b, 0x24, 0x60, 0xb, 0xb, 0x6c, 0x6, 0x24, 0x30, 0x30, 0x30, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x765, 0x2, 0x4, 0x2, 0x6, 0xf5ba, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc, 0xd, 0x1000, 0x0, 0x5b, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7e0, 0x11e3, 0x2, 0x5, 0x0, 0x3ff, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xd, 0x4, 0x5, 0x520, 0x7, 0x94e0, 0xa80]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x18, 0x24, 0x1b, 0x3, 0x30, 0x3, 0x60, 0x60, 0x22, 0x2, 0x5, 0xc, 0x60, 0x36, 0x36, 0x3, 0x5, 0x18, 0x16, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x9, 0xe49, 0x0, 0x8, 0x1800]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x7}, {0x4, 0x9}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x2}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x6, 0xa}, {0x6, 0x8}, {0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xa2, 0x101, 0xb3da, 0x2, 0x8, 0x8, 0x2b03]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x6, 0x4, 0x3ff, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x49c7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x9, 0x16, 0x6c, 0x3, 0x24, 0x18, 0x16, 0x9, 0xb, 0x2, 0x24, 0x1b, 0x26, 0x9, 0x30, 0x5, 0x30, 0x60, 0x30, 0x2, 0x9, 0x4, 0x10, 0x36, 0x1, 0xc, 0x0, 0x30, 0x6c, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x3}, {0x5, 0x3}, {0x7}, {0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f9c, 0x81, 0x5, 0x0, 0xd, 0x343, 0xd, 0xf001]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0xc, 0x3, 0x36, 0x6c, 0x60, 0x18, 0x6c, 0x2, 0x60, 0x18, 0x12, 0x3, 0x48, 0xc, 0x60, 0x48, 0x48, 0x12, 0x12, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x16, 0x3, 0xc, 0x6c, 0xc, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x48, 0x18, 0x6c, 0x60, 0x3, 0x5, 0x0, 0x36, 0x60, 0x12, 0x6c, 0x1b, 0x48, 0x24, 0x5, 0x9, 0x1, 0xc, 0x60, 0x18, 0xb, 0x5, 0x60, 0x4, 0x24, 0x9, 0x2, 0x5, 0x16]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x0, 0x0, 0x480, 0x5, 0x6, 0x350]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x6c, 0x1b, 0x3, 0xb, 0x0, 0x4, 0x24, 0x30, 0x18, 0x1b, 0x18, 0x14, 0x1b, 0x9, 0x12, 0x78, 0x16, 0xc, 0xc, 0x12, 0x2, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf199, 0xce, 0xfff, 0x800, 0x1ff, 0xff81, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8, 0xc, 0x2, 0x4, 0x7fff, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x5, 0x562, 0x1, 0xa7f6, 0xa, 0xb461]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x5, 0x6, 0x5, 0x3ff, 0x9, 0x1, 0xd5f7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x2}, {0x3, 0x3}, {0x4}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {}, {0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x2}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x7, 0xf, 0x3, 0x200, 0x3, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x871}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0xc, 0x6, 0x7, 0x5, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x7, 0x9, 0xffff, 0x0, 0x5, 0x7ff, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0xb, 0x7, 0xf, 0x426c, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x2, 0x1, 0x0, 0xf9e0, 0x9, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}]}]}, @NL80211_ATTR_TID_CONFIG={0x36c, 0x11d, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0xa200, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x6}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x60, 0x4, 0x1b, 0x6, 0x7c, 0x9, 0x4, 0x4, 0x5, 0xc, 0x65, 0x9, 0x1, 0x6, 0x2, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xfff8, 0xfff, 0x400, 0x81, 0x84, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x48, 0x12, 0x3, 0x6, 0x9, 0x60, 0x41, 0x30, 0x6c, 0x3, 0x21, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x72, 0x5, 0x4, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x3}, {0x7, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x1, 0x3, 0xc, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xfffa, 0x3, 0x2, 0x7, 0x10, 0xb0a7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x3, 0xb, 0x101, 0x2, 0x2643, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffb, 0x7, 0x7, 0x8, 0x6, 0x400, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x804, 0x7f, 0xcfc6, 0x8, 0x6, 0x93fc]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x5, 0x6}, {0x3}, {}, {0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0x2, 0x10, 0x8, 0x2, 0x11, 0xf]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x5, 0x6722, 0x8, 0x3b43, 0x40]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x16, 0x16, 0x1b, 0x3, 0x0, 0x18, 0x0, 0x48, 0x4, 0x56, 0xc, 0x1, 0x33, 0xb, 0x1, 0x9, 0x48, 0x60, 0xc, 0x5e, 0x6, 0x1b, 0x30, 0x24, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x3}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x2}, {}, {0x4, 0x5}, {0x0, 0x3}, {0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x8}, {}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x36, 0x0, 0x56, 0x60, 0x18, 0xb, 0x2, 0x0, 0xc, 0x30, 0x48, 0x24, 0x16, 0xc, 0xb, 0x3, 0x5, 0x36, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xffff, 0x2, 0x8316, 0x2d, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x110c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 1m6.684403232s ago: executing program 6 (id=3899): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='sched_switch\x00') connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000300)=""/84, 0x54) syz_io_uring_complete(0x0) 1m5.462403486s ago: executing program 7 (id=3900): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='sched_switch\x00') connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000300)=""/84, 0x54) syz_io_uring_complete(0x0) 56.029767001s ago: executing program 7 (id=3901): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) close(r0) 54.230621716s ago: executing program 36 (id=3847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) getsockopt(r4, 0x110, 0x3, 0x0, 0x0) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ustat(0x3, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) 52.919793542s ago: executing program 37 (id=3898): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x58, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000013c0)={0x110c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x504, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0x6565, 0x3, 0x4, 0x3, 0xc]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x2, 0xc, 0x18, 0x30, 0x36, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1b, 0x24, 0x12, 0x0, 0x9, 0xc, 0x36, 0x48, 0x5, 0x30, 0x24, 0x1b, 0x2, 0x30, 0x5, 0x1f, 0x4, 0x36, 0x12, 0x16, 0x24, 0x12, 0x1, 0xb, 0x5a, 0x5, 0x30]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0xc, 0x36, 0x48, 0x9, 0xc, 0x60, 0x9, 0x17, 0x4, 0x10, 0x2, 0x4, 0x36, 0x5, 0xb, 0x4, 0x6c, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc1112d89ceb18d11, 0x36, 0x36, 0x4, 0x3, 0x24, 0xb, 0x77, 0x2, 0x18, 0x4, 0x16, 0x48, 0x9, 0x36, 0x6, 0x2, 0x1, 0x3, 0x3, 0x3]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x3, 0x18, 0x4, 0x12, 0x1b, 0x18, 0x24, 0x1b, 0x24, 0x1b, 0x1, 0x6c, 0x12, 0x18, 0x12, 0x2, 0x36, 0x18, 0x9, 0x12, 0x36, 0x3, 0x1b, 0x6c, 0x5, 0x6, 0x2, 0x5, 0x16, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x16, 0x16, 0x5, 0x5, 0x9, 0xc, 0xc, 0xb, 0x9, 0x48, 0xb, 0x36, 0x0, 0x1, 0x2, 0x24, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x122b, 0x1, 0x9c8, 0x8, 0x800, 0x9]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe, 0x8, 0xb, 0x6, 0x8, 0x8001, 0x6c91, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4a02, 0x6, 0xffff, 0x9, 0xffff, 0x4, 0x98]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xad8f, 0x5, 0x3, 0x2, 0x8, 0x5, 0x44, 0x7]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0xa}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {}, {0x5, 0x4}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x4}, {0x5, 0x2}, {0x6}, {0x4, 0x6}, {}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x7}, {0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x230, 0x4, 0x8d15, 0x8, 0x8, 0x0, 0x401, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x99, 0x5, 0x6, 0x7fff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x24, 0x6, 0x48, 0x6, 0x30, 0xb, 0x30, 0x30, 0x6f, 0x14, 0x36, 0x18, 0x1, 0x16, 0x36, 0x4, 0x73bde2474853453e, 0x2, 0x60, 0x4, 0x60, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xc00, 0x4, 0x1, 0xb5f, 0x200, 0x10]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0x1, 0x0, 0x4, 0x100, 0x3, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x3, 0x2c, 0x48, 0x12, 0x1, 0x3, 0x60, 0x1, 0x16, 0x6c, 0x36, 0x6, 0x48, 0x18, 0x0, 0x60, 0x48, 0x3, 0x9, 0x1, 0x6, 0x48, 0xc, 0x24, 0xb, 0x3, 0x3]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x35, 0x16, 0xc, 0x3, 0x24, 0x72, 0x24, 0x30, 0x4, 0x6d, 0x4, 0x24, 0x6c, 0x5, 0x9, 0x6, 0x5, 0x60, 0x18, 0x13, 0x1, 0x4d, 0x1, 0x6c, 0x24, 0xb, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x12, 0xc, 0x9, 0x1, 0x0, 0x36, 0x30, 0xc, 0x30, 0x24, 0x3, 0x3, 0x10, 0x4, 0x6c, 0x9, 0x0, 0x30, 0x16, 0x60, 0x30, 0x18, 0x5, 0x2, 0x9, 0x24, 0x36, 0x5, 0x48]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0xa}, {0x3, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x7}, {0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x5}, {}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0x1}, {0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x4}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x5}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x12, 0x5, 0x16, 0x1b, 0x0, 0xb, 0x2, 0x780c5d5fcd3a83f, 0x30, 0x16, 0x36, 0x18, 0x5, 0x24, 0x2, 0x16, 0x9, 0xc, 0xb, 0x16, 0x36, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x9, 0x48, 0x30, 0x24, 0x2b, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x5}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0x1}, {0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x7}, {0x7, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x9}, {0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x7}, {0x2, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x31, 0x6, 0xc, 0x1b, 0x16, 0x24, 0xb, 0xb, 0x18, 0x9, 0x1, 0x9, 0x5, 0x1b, 0x1b, 0x1b, 0x12, 0x24, 0x16, 0xb, 0xc, 0x18, 0x6, 0x36, 0x6a]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x5, 0x401, 0x7fff, 0x7, 0x7, 0x2ed5, 0xa86]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x3}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x3}, {0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x4}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x3}, {0x1, 0x6}, {0x3, 0x5}, {}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xfbff, 0x1, 0x401, 0x0, 0x2, 0x3, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x6, 0x6c, 0x6, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbb3e, 0xb, 0x8, 0x6, 0x3, 0x8, 0x1, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x514, 0x11d, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x4}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x14, 0x24, 0x6, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x7}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x18, 0x12, 0x9, 0x60, 0x48, 0x5, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x1, 0x12, 0x12, 0x5, 0xc, 0x9, 0x1b, 0x16, 0xb, 0x5, 0x16, 0x9, 0x6c, 0xb, 0x1b, 0x1b, 0x5, 0x5, 0x4, 0x1b, 0x24, 0x60, 0xb, 0xb, 0x6c, 0x6, 0x24, 0x30, 0x30, 0x30, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x765, 0x2, 0x4, 0x2, 0x6, 0xf5ba, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc, 0xd, 0x1000, 0x0, 0x5b, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7e0, 0x11e3, 0x2, 0x5, 0x0, 0x3ff, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xd, 0x4, 0x5, 0x520, 0x7, 0x94e0, 0xa80]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x18, 0x24, 0x1b, 0x3, 0x30, 0x3, 0x60, 0x60, 0x22, 0x2, 0x5, 0xc, 0x60, 0x36, 0x36, 0x3, 0x5, 0x18, 0x16, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x9, 0xe49, 0x0, 0x8, 0x1800]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x7}, {0x4, 0x9}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x2}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x6, 0xa}, {0x6, 0x8}, {0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xa2, 0x101, 0xb3da, 0x2, 0x8, 0x8, 0x2b03]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7ff, 0x6, 0x4, 0x3ff, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x49c7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x9, 0x16, 0x6c, 0x3, 0x24, 0x18, 0x16, 0x9, 0xb, 0x2, 0x24, 0x1b, 0x26, 0x9, 0x30, 0x5, 0x30, 0x60, 0x30, 0x2, 0x9, 0x4, 0x10, 0x36, 0x1, 0xc, 0x0, 0x30, 0x6c, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x3}, {0x5, 0x3}, {0x7}, {0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f9c, 0x81, 0x5, 0x0, 0xd, 0x343, 0xd, 0xf001]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0xc, 0x3, 0x36, 0x6c, 0x60, 0x18, 0x6c, 0x2, 0x60, 0x18, 0x12, 0x3, 0x48, 0xc, 0x60, 0x48, 0x48, 0x12, 0x12, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x16, 0x3, 0xc, 0x6c, 0xc, 0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x48, 0x18, 0x6c, 0x60, 0x3, 0x5, 0x0, 0x36, 0x60, 0x12, 0x6c, 0x1b, 0x48, 0x24, 0x5, 0x9, 0x1, 0xc, 0x60, 0x18, 0xb, 0x5, 0x60, 0x4, 0x24, 0x9, 0x2, 0x5, 0x16]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x0, 0x0, 0x480, 0x5, 0x6, 0x350]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x6c, 0x1b, 0x3, 0xb, 0x0, 0x4, 0x24, 0x30, 0x18, 0x1b, 0x18, 0x14, 0x1b, 0x9, 0x12, 0x78, 0x16, 0xc, 0xc, 0x12, 0x2, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf199, 0xce, 0xfff, 0x800, 0x1ff, 0xff81, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x8, 0xc, 0x2, 0x4, 0x7fff, 0x7, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x5, 0x562, 0x1, 0xa7f6, 0xa, 0xb461]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x5, 0x6, 0x5, 0x3ff, 0x9, 0x1, 0xd5f7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x2}, {0x3, 0x3}, {0x4}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {}, {0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x2}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x7, 0xf, 0x3, 0x200, 0x3, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x871}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x3}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0xc, 0x6, 0x7, 0x5, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x7, 0x9, 0xffff, 0x0, 0x5, 0x7ff, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0xb, 0x7, 0xf, 0x426c, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x2, 0x1, 0x0, 0xf9e0, 0x9, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}]}]}, @NL80211_ATTR_TID_CONFIG={0x36c, 0x11d, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x6, 0x3, 0x9, 0x7fff, 0xa200, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x6}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x60, 0x4, 0x1b, 0x6, 0x7c, 0x9, 0x4, 0x4, 0x5, 0xc, 0x65, 0x9, 0x1, 0x6, 0x2, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xfff8, 0xfff, 0x400, 0x81, 0x84, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x48, 0x12, 0x3, 0x6, 0x9, 0x60, 0x41, 0x30, 0x6c, 0x3, 0x21, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x72, 0x5, 0x4, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x3}, {0x7, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x3, 0x1, 0x3, 0xc, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xfffa, 0x3, 0x2, 0x7, 0x10, 0xb0a7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7fff, 0x3, 0xb, 0x101, 0x2, 0x2643, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffb, 0x7, 0x7, 0x8, 0x6, 0x400, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x804, 0x7f, 0xcfc6, 0x8, 0x6, 0x93fc]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0x3}, {0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x5, 0x6}, {0x3}, {}, {0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0x2, 0x10, 0x8, 0x2, 0x11, 0xf]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x3, 0x5, 0x6722, 0x8, 0x3b43, 0x40]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x16, 0x16, 0x1b, 0x3, 0x0, 0x18, 0x0, 0x48, 0x4, 0x56, 0xc, 0x1, 0x33, 0xb, 0x1, 0x9, 0x48, 0x60, 0xc, 0x5e, 0x6, 0x1b, 0x30, 0x24, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x3}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x2}, {}, {0x4, 0x5}, {0x0, 0x3}, {0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x8}, {}, {0x3, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x36, 0x0, 0x56, 0x60, 0x18, 0xb, 0x2, 0x0, 0xc, 0x30, 0x48, 0x24, 0x16, 0xc, 0xb, 0x3, 0x5, 0x36, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xffff, 0x2, 0x8316, 0x2d, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x110c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) 51.841303613s ago: executing program 6 (id=3904): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") r0 = open(&(0x7f000001fa00)='./file0\x00', 0x0, 0xd) fchdir(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) 48.650909286s ago: executing program 38 (id=3893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 47.240504563s ago: executing program 7 (id=3906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f73782e73656375be4f5f7d10fa97bb4d34726974792e73656c696e757800"], &(0x7f0000000080)='@\x00', 0x2, 0x0) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="2b714375f7c3d885cdbe502c74d3b24a24d2c420c6e4502853fc48064ac0277eca115931c46ab9ea3203244e2658e61242bc52a132f3312e933be6ceb3bd98081504662c71ad91cdbc881cfff02466f9a3cb51d8d54ff75f02df07bb068d8e340bfa20c8a75d2488e1816f2b0196571fb2e194ebb513217b6e39278eab6c8668e55bda9e80d6ff7d5fb2d34d844de765bdc725822760252de5ebce1f91fe9ecf249fa21c18e83f5c2a8e80c00e68395d6c96d2be74bea75d438cb880ae56226ddc95"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8272614e733d3576256bf635e5d260", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 43.509198306s ago: executing program 6 (id=3907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a17c6209d1b079045d0013c09618000000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 41.460419387s ago: executing program 7 (id=3908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=@deltaction={0x1cc, 0x31, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7bdf}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d90}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80c}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78b}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x1cc}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0\x00') bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r12, 0x1, {}, 0xfe}, 0x18) sendmsg$can_j1939(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r12, 0x200000000000000, {0x0, 0xff, 0x4}, 0x1}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x260488d1}, 0x20008801) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x3, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r14, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x65, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000f80)={0x204, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4080}, 0x40884) mkdir(&(0x7f0000000180)='./file0\x00', 0xffa1) 38.679669021s ago: executing program 6 (id=3909): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}]}}]}, 0x40}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) 29.809687425s ago: executing program 7 (id=3910): r0 = socket$netlink(0x10, 0x3, 0xf) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r3, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r3) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) inotify_init() 29.447557312s ago: executing program 6 (id=3911): timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2af3636e3ea20c6552af6a03c531e6aa2584b0c6f06b64b167754d7f8b4e99a6a45fff20f035587a624294a53d558633343b9294c0bcb05ef51a3c03e9e10fa03742cb153061863e13f6693328b3a56830e6e69a0f4ba07e5c058c99", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRESDEC=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6b}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) unshare(0x2040400) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="b9ff030711a5268c019e14f088a847e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 18.915049969s ago: executing program 7 (id=3912): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlockall(0x3) 11.472580225s ago: executing program 39 (id=3911): timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2af3636e3ea20c6552af6a03c531e6aa2584b0c6f06b64b167754d7f8b4e99a6a45fff20f035587a624294a53d558633343b9294c0bcb05ef51a3c03e9e10fa03742cb153061863e13f6693328b3a56830e6e69a0f4ba07e5c058c99", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRESDEC=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6b}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) unshare(0x2040400) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="b9ff030711a5268c019e14f088a847e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 0s ago: executing program 40 (id=3912): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlockall(0x3) kernel console output (not intermixed with test programs): /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.961642][T13803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13803 comm=syz.4.3518 [ 227.106089][T13815] netlink: 'syz.6.3521': attribute type 13 has an invalid length. [ 227.114872][T13815] syz_tun: refused to change device tx_queue_len [ 227.204091][T13817] loop6: detected capacity change from 0 to 2048 [ 227.258556][T13817] GPT:first_usable_lbas don't match. [ 227.264072][T13817] GPT:34 != 290 [ 227.267530][T13817] GPT: Use GNU Parted to correct GPT errors. [ 227.273620][T13817] loop6: p1 p2 p3 [ 227.755209][T12420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.883320][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 227.883333][ T29] audit: type=1400 audit(1766909337.014:11406): avc: denied { create } for pid=13832 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.937867][ T29] audit: type=1400 audit(1766909337.044:11407): avc: denied { setopt } for pid=13832 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.957657][ T29] audit: type=1400 audit(1766909337.044:11408): avc: denied { write } for pid=13832 comm="syz.2.3529" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.960022][T13840] serio: Serial port ptm0 [ 227.981121][ T29] audit: type=1400 audit(1766909337.044:11409): avc: denied { open } for pid=13832 comm="syz.2.3529" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.981150][ T29] audit: type=1400 audit(1766909337.044:11410): avc: denied { ioctl } for pid=13832 comm="syz.2.3529" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.035428][ T29] audit: type=1326 audit(1766909337.054:11411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13832 comm="syz.2.3529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6f949ec29 code=0x0 [ 228.118913][ T29] audit: type=1400 audit(1766909337.164:11412): avc: denied { bind } for pid=13832 comm="syz.2.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.138450][ T29] audit: type=1326 audit(1766909337.224:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.4.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 228.162188][ T29] audit: type=1326 audit(1766909337.224:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.4.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 228.185804][ T29] audit: type=1326 audit(1766909337.224:11415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.4.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 228.227258][T13855] loop0: detected capacity change from 0 to 512 [ 228.238456][T13860] bond_slave_0: entered promiscuous mode [ 228.244188][T13860] bond_slave_1: entered promiscuous mode [ 228.250899][T13860] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 228.259758][T13860] bond_slave_0: left promiscuous mode [ 228.259958][T13855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.265182][T13860] bond_slave_1: left promiscuous mode [ 228.284715][T13855] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.348927][T13866] netlink: 'syz.6.3539': attribute type 83 has an invalid length. [ 228.770117][T13883] loop2: detected capacity change from 0 to 2048 [ 228.834272][T13883] __nla_validate_parse: 12 callbacks suppressed [ 228.834291][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3544'. [ 228.850880][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 228.894796][T13892] loop2: detected capacity change from 0 to 1024 [ 228.908752][T13892] EXT4-fs: Ignoring removed nobh option [ 228.915616][T13892] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.926966][T13892] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.3547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 228.946529][T13892] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3547: couldn't read orphan inode 11 (err -117) [ 228.959720][T13892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.983144][T13892] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3547: Invalid block bitmap block 0 in block_group 0 [ 229.001167][T13892] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3547: Failed to acquire dquot type 0 [ 229.013074][T11927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.039809][T12420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.072296][T13902] FAULT_INJECTION: forcing a failure. [ 229.072296][T13902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.085624][T13902] CPU: 1 UID: 0 PID: 13902 Comm: syz.7.3550 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.085656][T13902] Tainted: [W]=WARN [ 229.085663][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.085816][T13902] Call Trace: [ 229.085823][T13902] [ 229.085831][T13902] __dump_stack+0x1d/0x30 [ 229.085853][T13902] dump_stack_lvl+0xe8/0x140 [ 229.085872][T13902] dump_stack+0x15/0x1b [ 229.085887][T13902] should_fail_ex+0x265/0x280 [ 229.085972][T13902] should_fail+0xb/0x20 [ 229.085991][T13902] should_fail_usercopy+0x1a/0x20 [ 229.086014][T13902] _copy_from_user+0x1c/0xb0 [ 229.086040][T13902] ___sys_sendmsg+0xc1/0x1d0 [ 229.086121][T13902] __x64_sys_sendmsg+0xd4/0x160 [ 229.086151][T13902] x64_sys_call+0x191e/0x2ff0 [ 229.086173][T13902] do_syscall_64+0xd2/0x200 [ 229.086267][T13902] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.086288][T13902] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.086427][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.086508][T13902] RIP: 0033:0x7f4ca49cec29 [ 229.086523][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.086538][T13902] RSP: 002b:00007f4ca342f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.086556][T13902] RAX: ffffffffffffffda RBX: 00007f4ca4c15fa0 RCX: 00007f4ca49cec29 [ 229.086570][T13902] RDX: 0000000004040c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 229.086583][T13902] RBP: 00007f4ca342f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.086665][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.086679][T13902] R13: 00007f4ca4c16038 R14: 00007f4ca4c15fa0 R15: 00007ffd1e3e49e8 [ 229.086697][T13902] [ 229.089163][T13897] lo speed is unknown, defaulting to 1000 [ 229.282286][T13905] FAULT_INJECTION: forcing a failure. [ 229.282286][T13905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.295401][T13905] CPU: 0 UID: 0 PID: 13905 Comm: syz.4.3551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.295528][T13905] Tainted: [W]=WARN [ 229.295533][T13905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.295545][T13905] Call Trace: [ 229.295551][T13905] [ 229.295557][T13905] __dump_stack+0x1d/0x30 [ 229.295576][T13905] dump_stack_lvl+0xe8/0x140 [ 229.295592][T13905] dump_stack+0x15/0x1b [ 229.295613][T13905] should_fail_ex+0x265/0x280 [ 229.295711][T13905] should_fail+0xb/0x20 [ 229.295729][T13905] should_fail_usercopy+0x1a/0x20 [ 229.295750][T13905] _copy_to_user+0x20/0xa0 [ 229.295836][T13905] simple_read_from_buffer+0xb5/0x130 [ 229.295856][T13905] proc_fail_nth_read+0x10e/0x150 [ 229.295958][T13905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.296033][T13905] vfs_read+0x1a5/0x770 [ 229.296051][T13905] ? __rcu_read_unlock+0x4f/0x70 [ 229.296069][T13905] ? __fget_files+0x184/0x1c0 [ 229.296091][T13905] ksys_read+0xda/0x1a0 [ 229.296110][T13905] __x64_sys_read+0x40/0x50 [ 229.296204][T13905] x64_sys_call+0x27bc/0x2ff0 [ 229.296222][T13905] do_syscall_64+0xd2/0x200 [ 229.296267][T13905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.296287][T13905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.296352][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.296388][T13905] RIP: 0033:0x7f0d6b4cd63c [ 229.296407][T13905] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.296421][T13905] RSP: 002b:00007f0d69f2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.296500][T13905] RAX: ffffffffffffffda RBX: 00007f0d6b715fa0 RCX: 00007f0d6b4cd63c [ 229.296511][T13905] RDX: 000000000000000f RSI: 00007f0d69f2f0a0 RDI: 0000000000000005 [ 229.296522][T13905] RBP: 00007f0d69f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.296533][T13905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.296543][T13905] R13: 00007f0d6b716038 R14: 00007f0d6b715fa0 R15: 00007ffcc060aa98 [ 229.296559][T13905] [ 229.509966][T13897] lo speed is unknown, defaulting to 1000 [ 229.511937][T13907] lo speed is unknown, defaulting to 1000 [ 229.533095][T13908] capability: warning: `syz.7.3552' uses 32-bit capabilities (legacy support in use) [ 229.571370][T13908] tmpfs: Bad value for 'mpol' [ 229.578858][T13918] FAULT_INJECTION: forcing a failure. [ 229.578858][T13918] name failslab, interval 1, probability 0, space 0, times 0 [ 229.591524][T13918] CPU: 1 UID: 0 PID: 13918 Comm: syz.6.3556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.591689][T13918] Tainted: [W]=WARN [ 229.591696][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.591713][T13918] Call Trace: [ 229.591721][T13918] [ 229.591729][T13918] __dump_stack+0x1d/0x30 [ 229.591750][T13918] dump_stack_lvl+0xe8/0x140 [ 229.591768][T13918] dump_stack+0x15/0x1b [ 229.591783][T13918] should_fail_ex+0x265/0x280 [ 229.591812][T13918] ? alloc_netdev_mqs+0x80c/0xa30 [ 229.591835][T13918] should_failslab+0x8c/0xb0 [ 229.591857][T13918] __kmalloc_cache_noprof+0x4c/0x320 [ 229.591923][T13918] alloc_netdev_mqs+0x80c/0xa30 [ 229.591986][T13918] rtnl_create_link+0x239/0x710 [ 229.592009][T13918] rtnl_newlink_create+0x14c/0x620 [ 229.592029][T13918] ? security_capable+0x83/0x90 [ 229.592109][T13918] ? netlink_ns_capable+0x86/0xa0 [ 229.592132][T13918] rtnl_newlink+0xf29/0x12d0 [ 229.592200][T13918] ? xas_load+0x413/0x430 [ 229.592229][T13918] ? __rcu_read_unlock+0x4f/0x70 [ 229.592248][T13918] ? __rcu_read_unlock+0x4f/0x70 [ 229.592266][T13918] ? avc_has_perm_noaudit+0x1b1/0x200 [ 229.592288][T13918] ? cred_has_capability+0x210/0x280 [ 229.592356][T13918] ? selinux_capable+0x31/0x40 [ 229.592381][T13918] ? security_capable+0x83/0x90 [ 229.592415][T13918] ? ns_capable+0x7d/0xb0 [ 229.592433][T13918] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.592457][T13918] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 229.592536][T13918] netlink_rcv_skb+0x123/0x220 [ 229.592596][T13918] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.592626][T13918] rtnetlink_rcv+0x1c/0x30 [ 229.592649][T13918] netlink_unicast+0x5bd/0x690 [ 229.592674][T13918] netlink_sendmsg+0x58b/0x6b0 [ 229.592715][T13918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.592736][T13918] __sock_sendmsg+0x142/0x180 [ 229.592764][T13918] ____sys_sendmsg+0x31e/0x4e0 [ 229.592809][T13918] ___sys_sendmsg+0x17b/0x1d0 [ 229.592908][T13918] __x64_sys_sendmsg+0xd4/0x160 [ 229.593015][T13918] x64_sys_call+0x191e/0x2ff0 [ 229.593036][T13918] do_syscall_64+0xd2/0x200 [ 229.593067][T13918] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.593166][T13918] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.593234][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.593252][T13918] RIP: 0033:0x7f76daecec29 [ 229.593266][T13918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.593282][T13918] RSP: 002b:00007f76d9937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.593372][T13918] RAX: ffffffffffffffda RBX: 00007f76db115fa0 RCX: 00007f76daecec29 [ 229.593386][T13918] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 229.593399][T13918] RBP: 00007f76d9937090 R08: 0000000000000000 R09: 0000000000000000 [ 229.593465][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.593478][T13918] R13: 00007f76db116038 R14: 00007f76db115fa0 R15: 00007ffff571bf18 [ 229.593497][T13918] [ 229.635670][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3554'. [ 229.648931][T13907] lo speed is unknown, defaulting to 1000 [ 229.652510][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 229.676272][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3554'. [ 229.971541][T13928] lo speed is unknown, defaulting to 1000 [ 230.004949][T13935] loop7: detected capacity change from 0 to 512 [ 230.023189][T13936] loop4: detected capacity change from 0 to 8192 [ 230.043776][T13935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.047024][T13928] lo speed is unknown, defaulting to 1000 [ 230.056609][T13935] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.082340][T13936] loop4: p1 p2 p3 p4 [ 230.089610][T13936] loop4: p2 start 151000334 is beyond EOD, truncated [ 230.096398][T13936] loop4: p3 start 331777 is beyond EOD, truncated [ 230.102908][T13936] loop4: p4 size 263168 extends beyond EOD, truncated [ 230.299175][T13943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13943 comm=syz.0.3562 [ 230.859587][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.997646][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 231.006842][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 231.082400][T13979] loop6: detected capacity change from 0 to 512 [ 231.126081][T13981] loop2: detected capacity change from 0 to 8192 [ 231.185232][T13981] loop2: p1 p2 p3 p4 [ 231.191965][T13981] loop2: p2 start 151000334 is beyond EOD, truncated [ 231.198763][T13981] loop2: p3 start 331777 is beyond EOD, truncated [ 231.205362][T13981] loop2: p4 size 263168 extends beyond EOD, truncated [ 231.378586][T14002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3582'. [ 231.389061][T14002] lo speed is unknown, defaulting to 1000 [ 231.395374][T14002] lo speed is unknown, defaulting to 1000 [ 231.401366][T14002] lo speed is unknown, defaulting to 1000 [ 231.408468][T14002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.420083][T14002] lo speed is unknown, defaulting to 1000 [ 231.426544][T14002] lo speed is unknown, defaulting to 1000 [ 231.432799][T14002] lo speed is unknown, defaulting to 1000 [ 231.438927][T14002] lo speed is unknown, defaulting to 1000 [ 231.445083][T14002] lo speed is unknown, defaulting to 1000 [ 231.451174][T14002] lo speed is unknown, defaulting to 1000 [ 231.454493][T14006] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 231.457365][T14002] lo speed is unknown, defaulting to 1000 [ 231.480788][T14007] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 231.488876][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3583'. [ 231.497946][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3583'. [ 231.522115][T14009] FAULT_INJECTION: forcing a failure. [ 231.522115][T14009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.535227][T14009] CPU: 1 UID: 0 PID: 14009 Comm: syz.7.3584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.535255][T14009] Tainted: [W]=WARN [ 231.535320][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.535332][T14009] Call Trace: [ 231.535338][T14009] [ 231.535344][T14009] __dump_stack+0x1d/0x30 [ 231.535366][T14009] dump_stack_lvl+0xe8/0x140 [ 231.535384][T14009] dump_stack+0x15/0x1b [ 231.535388][T14011] FAULT_INJECTION: forcing a failure. [ 231.535388][T14011] name failslab, interval 1, probability 0, space 0, times 0 [ 231.535401][T14009] should_fail_ex+0x265/0x280 [ 231.535498][T14009] should_fail+0xb/0x20 [ 231.535519][T14009] should_fail_usercopy+0x1a/0x20 [ 231.535544][T14009] _copy_to_user+0x20/0xa0 [ 231.535573][T14009] simple_read_from_buffer+0xb5/0x130 [ 231.535596][T14009] proc_fail_nth_read+0x10e/0x150 [ 231.535645][T14009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.535667][T14009] vfs_read+0x1a5/0x770 [ 231.535705][T14009] ? __rcu_read_unlock+0x4f/0x70 [ 231.535759][T14009] ? __fget_files+0x184/0x1c0 [ 231.535785][T14009] ksys_read+0xda/0x1a0 [ 231.535808][T14009] __x64_sys_read+0x40/0x50 [ 231.535830][T14009] x64_sys_call+0x27bc/0x2ff0 [ 231.535852][T14009] do_syscall_64+0xd2/0x200 [ 231.535965][T14009] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.535988][T14009] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.536017][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.536038][T14009] RIP: 0033:0x7f4ca49cd63c [ 231.536081][T14009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.536098][T14009] RSP: 002b:00007f4ca342f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.536175][T14009] RAX: ffffffffffffffda RBX: 00007f4ca4c15fa0 RCX: 00007f4ca49cd63c [ 231.536228][T14009] RDX: 000000000000000f RSI: 00007f4ca342f0a0 RDI: 0000000000000006 [ 231.536241][T14009] RBP: 00007f4ca342f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.536253][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.536319][T14009] R13: 00007f4ca4c16038 R14: 00007f4ca4c15fa0 R15: 00007ffd1e3e49e8 [ 231.536338][T14009] [ 231.753114][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.0.3585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.753194][T14011] Tainted: [W]=WARN [ 231.753231][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.753239][T14011] Call Trace: [ 231.753267][T14011] [ 231.753275][T14011] __dump_stack+0x1d/0x30 [ 231.753296][T14011] dump_stack_lvl+0xe8/0x140 [ 231.753389][T14011] dump_stack+0x15/0x1b [ 231.753398][T14011] should_fail_ex+0x265/0x280 [ 231.753480][T14011] should_failslab+0x8c/0xb0 [ 231.753495][T14011] kmem_cache_alloc_node_noprof+0x57/0x320 [ 231.753552][T14011] ? __alloc_skb+0x101/0x320 [ 231.753597][T14011] __alloc_skb+0x101/0x320 [ 231.753610][T14011] netlink_ack+0xfd/0x500 [ 231.753624][T14011] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 231.753641][T14011] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 231.753657][T14011] ? __pfx_nl802154_post_doit+0x10/0x10 [ 231.753750][T14011] netlink_rcv_skb+0x192/0x220 [ 231.753764][T14011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 231.753792][T14011] genl_rcv+0x28/0x40 [ 231.753807][T14011] netlink_unicast+0x5bd/0x690 [ 231.753821][T14011] netlink_sendmsg+0x58b/0x6b0 [ 231.753837][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.753851][T14011] __sock_sendmsg+0x142/0x180 [ 231.753882][T14011] ____sys_sendmsg+0x31e/0x4e0 [ 231.753898][T14011] ___sys_sendmsg+0x17b/0x1d0 [ 231.753988][T14011] __x64_sys_sendmsg+0xd4/0x160 [ 231.754005][T14011] x64_sys_call+0x191e/0x2ff0 [ 231.754043][T14011] do_syscall_64+0xd2/0x200 [ 231.754060][T14011] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.754074][T14011] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.754122][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.754173][T14011] RIP: 0033:0x7f765391ec29 [ 231.754182][T14011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.754193][T14011] RSP: 002b:00007f7652387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.754217][T14011] RAX: ffffffffffffffda RBX: 00007f7653b65fa0 RCX: 00007f765391ec29 [ 231.754230][T14011] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 231.754242][T14011] RBP: 00007f7652387090 R08: 0000000000000000 R09: 0000000000000000 [ 231.754253][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.754283][T14011] R13: 00007f7653b66038 R14: 00007f7653b65fa0 R15: 00007ffcb7c9ef58 [ 231.754296][T14011] [ 232.055837][T14026] 9pnet_fd: Insufficient options for proto=fd [ 232.090740][T14032] loop6: detected capacity change from 0 to 1024 [ 232.098940][T14032] EXT4-fs: Ignoring removed orlov option [ 232.104778][T14032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.127281][T14032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.155538][T12242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.167646][T14037] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 232.211374][T14044] tipc: New replicast peer: 255.255.255.83 [ 232.217445][T14044] tipc: Enabled bearer , priority 10 [ 232.373498][T14062] FAULT_INJECTION: forcing a failure. [ 232.373498][T14062] name failslab, interval 1, probability 0, space 0, times 0 [ 232.386208][T14062] CPU: 1 UID: 0 PID: 14062 Comm: syz.4.3606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.386253][T14062] Tainted: [W]=WARN [ 232.386260][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.386271][T14062] Call Trace: [ 232.386277][T14062] [ 232.386283][T14062] __dump_stack+0x1d/0x30 [ 232.386303][T14062] dump_stack_lvl+0xe8/0x140 [ 232.386322][T14062] dump_stack+0x15/0x1b [ 232.386337][T14062] should_fail_ex+0x265/0x280 [ 232.386358][T14062] should_failslab+0x8c/0xb0 [ 232.386379][T14062] kmem_cache_alloc_node_noprof+0x57/0x320 [ 232.386415][T14062] ? __alloc_skb+0x101/0x320 [ 232.386517][T14062] __alloc_skb+0x101/0x320 [ 232.386540][T14062] netlink_ack+0xfd/0x500 [ 232.386564][T14062] ? __rcu_read_unlock+0x4f/0x70 [ 232.386588][T14062] audit_receive+0xff2/0x2180 [ 232.386640][T14062] ? avc_has_perm+0xf7/0x180 [ 232.386667][T14062] ? __netlink_deliver_tap+0x4f5/0x500 [ 232.386692][T14062] ? __netlink_lookup+0x266/0x2a0 [ 232.386731][T14062] netlink_unicast+0x5bd/0x690 [ 232.386755][T14062] netlink_sendmsg+0x58b/0x6b0 [ 232.386817][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.386837][T14062] __sock_sendmsg+0x142/0x180 [ 232.386864][T14062] ____sys_sendmsg+0x31e/0x4e0 [ 232.386903][T14062] ___sys_sendmsg+0x17b/0x1d0 [ 232.387003][T14062] __x64_sys_sendmsg+0xd4/0x160 [ 232.387056][T14062] x64_sys_call+0x191e/0x2ff0 [ 232.387073][T14062] do_syscall_64+0xd2/0x200 [ 232.387246][T14062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.387269][T14062] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.387297][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.387353][T14062] RIP: 0033:0x7f0d6b4cec29 [ 232.387408][T14062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.387424][T14062] RSP: 002b:00007f0d69f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.387504][T14062] RAX: ffffffffffffffda RBX: 00007f0d6b715fa0 RCX: 00007f0d6b4cec29 [ 232.387515][T14062] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 232.387529][T14062] RBP: 00007f0d69f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.387541][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.387553][T14062] R13: 00007f0d6b716038 R14: 00007f0d6b715fa0 R15: 00007ffcc060aa98 [ 232.387571][T14062] [ 232.403486][T14066] FAULT_INJECTION: forcing a failure. [ 232.403486][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.640248][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.2.3608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.640351][T14066] Tainted: [W]=WARN [ 232.640359][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.640369][T14066] Call Trace: [ 232.640375][T14066] [ 232.640385][T14066] __dump_stack+0x1d/0x30 [ 232.640407][T14066] dump_stack_lvl+0xe8/0x140 [ 232.640423][T14066] dump_stack+0x15/0x1b [ 232.640464][T14066] should_fail_ex+0x265/0x280 [ 232.640490][T14066] should_fail+0xb/0x20 [ 232.640511][T14066] should_fail_usercopy+0x1a/0x20 [ 232.640595][T14066] _copy_to_user+0x20/0xa0 [ 232.640629][T14066] simple_read_from_buffer+0xb5/0x130 [ 232.640652][T14066] proc_fail_nth_read+0x10e/0x150 [ 232.640675][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.640745][T14066] vfs_read+0x1a5/0x770 [ 232.640763][T14066] ? __rcu_read_unlock+0x4f/0x70 [ 232.640781][T14066] ? __fget_files+0x184/0x1c0 [ 232.640829][T14066] ksys_read+0xda/0x1a0 [ 232.640853][T14066] __x64_sys_read+0x40/0x50 [ 232.640937][T14066] x64_sys_call+0x27bc/0x2ff0 [ 232.640961][T14066] do_syscall_64+0xd2/0x200 [ 232.640993][T14066] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.641013][T14066] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.641062][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.641091][T14066] RIP: 0033:0x7fc6f949d63c [ 232.641108][T14066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.641123][T14066] RSP: 002b:00007fc6f7f07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.641140][T14066] RAX: ffffffffffffffda RBX: 00007fc6f96e5fa0 RCX: 00007fc6f949d63c [ 232.641177][T14066] RDX: 000000000000000f RSI: 00007fc6f7f070a0 RDI: 0000000000000003 [ 232.641191][T14066] RBP: 00007fc6f7f07090 R08: 0000000000000000 R09: 0000000000000000 [ 232.641204][T14066] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 232.641216][T14066] R13: 00007fc6f96e6038 R14: 00007fc6f96e5fa0 R15: 00007ffd73d43058 [ 232.641248][T14066] [ 232.915934][T14087] vhci_hcd: invalid port number 0 [ 232.922870][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 232.922884][ T29] audit: type=1326 audit(1766909342.054:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 232.976012][ T29] audit: type=1326 audit(1766909342.054:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 232.999591][ T29] audit: type=1326 audit(1766909342.054:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 233.002276][T14102] FAULT_INJECTION: forcing a failure. [ 233.002276][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 233.023155][ T29] audit: type=1326 audit(1766909342.054:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 233.035779][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.6.3621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.035842][T14102] Tainted: [W]=WARN [ 233.035849][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.035862][T14102] Call Trace: [ 233.035942][T14102] [ 233.035950][T14102] __dump_stack+0x1d/0x30 [ 233.035972][T14102] dump_stack_lvl+0xe8/0x140 [ 233.035991][T14102] dump_stack+0x15/0x1b [ 233.036077][T14102] should_fail_ex+0x265/0x280 [ 233.036101][T14102] should_failslab+0x8c/0xb0 [ 233.036125][T14102] __kmalloc_noprof+0xa5/0x3e0 [ 233.036151][T14102] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 233.036271][T14102] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 233.036302][T14102] ? __kfree_skb+0x109/0x150 [ 233.036327][T14102] genl_start+0xe0/0x390 [ 233.036421][T14102] __netlink_dump_start+0x334/0x520 [ 233.036460][T14102] genl_family_rcv_msg_dumpit+0x115/0x180 [ 233.036544][T14102] ? __pfx_genl_start+0x10/0x10 [ 233.036571][T14102] ? __pfx_genl_dumpit+0x10/0x10 [ 233.036637][T14102] ? __pfx_genl_done+0x10/0x10 [ 233.036669][T14102] genl_rcv_msg+0x3f0/0x460 [ 233.036698][T14102] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 233.036835][T14102] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 233.036860][T14102] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 233.036885][T14102] netlink_rcv_skb+0x123/0x220 [ 233.036907][T14102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.037005][T14102] genl_rcv+0x28/0x40 [ 233.037031][T14102] netlink_unicast+0x5bd/0x690 [ 233.037055][T14102] netlink_sendmsg+0x58b/0x6b0 [ 233.037188][T14102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.037213][T14102] __sock_sendmsg+0x142/0x180 [ 233.037243][T14102] ____sys_sendmsg+0x31e/0x4e0 [ 233.037271][T14102] ___sys_sendmsg+0x17b/0x1d0 [ 233.037318][T14102] __x64_sys_sendmsg+0xd4/0x160 [ 233.037346][T14102] x64_sys_call+0x191e/0x2ff0 [ 233.037367][T14102] do_syscall_64+0xd2/0x200 [ 233.037437][T14102] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.037489][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.037509][T14102] RIP: 0033:0x7f76daecec29 [ 233.037525][T14102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.037541][T14102] RSP: 002b:00007f76d9937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.037597][T14102] RAX: ffffffffffffffda RBX: 00007f76db115fa0 RCX: 00007f76daecec29 [ 233.037609][T14102] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 233.037621][T14102] RBP: 00007f76d9937090 R08: 0000000000000000 R09: 0000000000000000 [ 233.037634][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.037646][T14102] R13: 00007f76db116038 R14: 00007f76db115fa0 R15: 00007ffff571bf18 [ 233.037665][T14102] [ 233.070983][T14097] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 233.074450][ T29] audit: type=1326 audit(1766909342.054:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 233.114584][T14107] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 233.117864][ T29] audit: type=1326 audit(1766909342.054:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f76daed0abc code=0x7ffc0000 [ 233.393469][ T29] audit: type=1326 audit(1766909342.054:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f76daed09f4 code=0x7ffc0000 [ 233.416971][ T29] audit: type=1326 audit(1766909342.054:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f76daed09f4 code=0x7ffc0000 [ 233.440463][ T29] audit: type=1326 audit(1766909342.054:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 233.464099][ T29] audit: type=1326 audit(1766909342.054:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.6.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f76daecec29 code=0x7ffc0000 [ 233.607759][T14126] loop7: detected capacity change from 0 to 128 [ 233.617020][T14130] loop2: detected capacity change from 0 to 128 [ 233.624961][T14129] loop0: detected capacity change from 0 to 128 [ 233.643287][T14117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14117 comm=syz.6.3627 [ 233.656713][T14126] syz.7.3630: attempt to access beyond end of device [ 233.656713][T14126] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 233.674512][T14129] FAULT_INJECTION: forcing a failure. [ 233.674512][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.687840][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.0.3631 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.687871][T14129] Tainted: [W]=WARN [ 233.687878][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.687892][T14129] Call Trace: [ 233.687898][T14129] [ 233.687906][T14129] __dump_stack+0x1d/0x30 [ 233.687956][T14129] dump_stack_lvl+0xe8/0x140 [ 233.687977][T14129] dump_stack+0x15/0x1b [ 233.687995][T14129] should_fail_ex+0x265/0x280 [ 233.688021][T14129] should_fail+0xb/0x20 [ 233.688051][T14129] should_fail_usercopy+0x1a/0x20 [ 233.688095][T14129] _copy_from_user+0x1c/0xb0 [ 233.688125][T14129] io_submit_one+0x52/0x11d0 [ 233.688159][T14129] __se_sys_io_submit+0xfb/0x280 [ 233.688182][T14129] __x64_sys_io_submit+0x43/0x50 [ 233.688246][T14129] x64_sys_call+0x2d5d/0x2ff0 [ 233.688265][T14129] do_syscall_64+0xd2/0x200 [ 233.688336][T14129] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.688396][T14129] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.688544][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.688563][T14129] RIP: 0033:0x7f765391ec29 [ 233.688579][T14129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.688596][T14129] RSP: 002b:00007f7652387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 233.688614][T14129] RAX: ffffffffffffffda RBX: 00007f7653b65fa0 RCX: 00007f765391ec29 [ 233.688649][T14129] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f76546a2000 [ 233.688662][T14129] RBP: 00007f7652387090 R08: 0000000000000000 R09: 0000000000000000 [ 233.688686][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.688699][T14129] R13: 00007f7653b66038 R14: 00007f7653b65fa0 R15: 00007ffcb7c9ef58 [ 233.688718][T14129] [ 233.690903][T14130] syz.2.3632: attempt to access beyond end of device [ 233.690903][T14130] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 233.871794][T14136] loop4: detected capacity change from 0 to 512 [ 233.903760][T14136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.917102][T14136] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.993053][T12675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.046240][T14146] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 234.425025][T14163] loop2: detected capacity change from 0 to 8192 [ 234.472311][T14163] loop2: p1 p2 p3 p4 [ 234.477556][T14163] loop2: p2 start 151000334 is beyond EOD, truncated [ 234.484357][T14163] loop2: p3 start 331777 is beyond EOD, truncated [ 234.490814][T14163] loop2: p4 size 263168 extends beyond EOD, truncated [ 234.525559][T14165] loop6: detected capacity change from 0 to 512 [ 234.545361][T14165] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.564371][T14165] EXT4-fs (loop6): 1 truncate cleaned up [ 234.574247][T14165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.648014][T12242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.712089][T14174] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 234.748092][T14179] FAULT_INJECTION: forcing a failure. [ 234.748092][T14179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.761532][T14179] CPU: 1 UID: 0 PID: 14179 Comm: syz.2.3649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.761575][T14179] Tainted: [W]=WARN [ 234.761580][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.761611][T14179] Call Trace: [ 234.761617][T14179] [ 234.761625][T14179] __dump_stack+0x1d/0x30 [ 234.761654][T14179] dump_stack_lvl+0xe8/0x140 [ 234.761752][T14179] dump_stack+0x15/0x1b [ 234.761774][T14179] should_fail_ex+0x265/0x280 [ 234.761797][T14179] should_fail_alloc_page+0xf2/0x100 [ 234.761825][T14179] __alloc_frozen_pages_noprof+0xff/0x360 [ 234.761917][T14179] alloc_pages_mpol+0xb3/0x250 [ 234.761943][T14179] alloc_migration_target_by_mpol+0x11b/0x280 [ 234.762015][T14179] migrate_pages_batch+0x306/0x1ae0 [ 234.762065][T14179] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 234.762104][T14179] ? __walk_page_range+0x324/0x340 [ 234.762128][T14179] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 234.762167][T14179] migrate_pages+0xf5f/0x1770 [ 234.762198][T14179] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 234.762230][T14179] __se_sys_mbind+0x975/0xac0 [ 234.762322][T14179] __x64_sys_mbind+0x78/0x90 [ 234.762419][T14179] x64_sys_call+0x2932/0x2ff0 [ 234.762438][T14179] do_syscall_64+0xd2/0x200 [ 234.762465][T14179] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.762486][T14179] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.762586][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.762638][T14179] RIP: 0033:0x7fc6f949ec29 [ 234.762652][T14179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.762692][T14179] RSP: 002b:00007fc6f7f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 234.762718][T14179] RAX: ffffffffffffffda RBX: 00007fc6f96e5fa0 RCX: 00007fc6f949ec29 [ 234.762729][T14179] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 234.762740][T14179] RBP: 00007fc6f7f07090 R08: 0000000000000000 R09: 0000000000000002 [ 234.762751][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.762762][T14179] R13: 00007fc6f96e6038 R14: 00007fc6f96e5fa0 R15: 00007ffd73d43058 [ 234.762844][T14179] [ 234.990366][T14180] Invalid ELF header magic: != ELF [ 235.032114][T14180] __nla_validate_parse: 7 callbacks suppressed [ 235.032128][T14180] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3648'. [ 235.180613][T14194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14194 comm=syz.0.3655 [ 235.205264][T14196] infiniband pyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.393504][T14205] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3658'. [ 235.734262][T14221] loop6: detected capacity change from 0 to 1024 [ 235.754423][T14221] EXT4-fs: Ignoring removed oldalloc option [ 235.774208][T14221] EXT4-fs: Ignoring removed orlov option [ 235.779994][T14221] EXT4-fs: inline encryption not supported [ 235.792879][T14221] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 235.815585][T14221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.852143][T12242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.115572][T14236] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 236.123557][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3670'. [ 236.460339][T14239] netlink: 'syz.7.3672': attribute type 13 has an invalid length. [ 236.517284][T14239] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.524557][T14239] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.703635][ T5787] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.721353][ T5787] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.760822][ T5787] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.780316][ T5787] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.792557][T14259] FAULT_INJECTION: forcing a failure. [ 236.792557][T14259] name failslab, interval 1, probability 0, space 0, times 0 [ 236.805510][T14259] CPU: 0 UID: 0 PID: 14259 Comm: syz.2.3680 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.805600][T14259] Tainted: [W]=WARN [ 236.805608][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.805621][T14259] Call Trace: [ 236.805627][T14259] [ 236.805634][T14259] __dump_stack+0x1d/0x30 [ 236.805653][T14259] dump_stack_lvl+0xe8/0x140 [ 236.805670][T14259] dump_stack+0x15/0x1b [ 236.805755][T14259] should_fail_ex+0x265/0x280 [ 236.805776][T14259] ? io_ring_ctx_alloc+0x38/0x660 [ 236.805870][T14259] should_failslab+0x8c/0xb0 [ 236.805947][T14259] __kmalloc_cache_noprof+0x4c/0x320 [ 236.805977][T14259] ? avc_has_perm_noaudit+0x1b1/0x200 [ 236.806066][T14259] io_ring_ctx_alloc+0x38/0x660 [ 236.806088][T14259] ? avc_has_perm+0xf7/0x180 [ 236.806111][T14259] ? io_uring_fill_params+0x27f/0x300 [ 236.806146][T14259] io_uring_create+0x10f/0x610 [ 236.806168][T14259] __se_sys_io_uring_setup+0x1f7/0x210 [ 236.806196][T14259] __x64_sys_io_uring_setup+0x31/0x40 [ 236.806222][T14259] x64_sys_call+0x2b21/0x2ff0 [ 236.806289][T14259] do_syscall_64+0xd2/0x200 [ 236.806315][T14259] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.806468][T14259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.806556][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.806580][T14259] RIP: 0033:0x7fc6f949ec29 [ 236.806597][T14259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.806614][T14259] RSP: 002b:00007fc6f7f06fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 236.806632][T14259] RAX: ffffffffffffffda RBX: 00007fc6f96e5fa0 RCX: 00007fc6f949ec29 [ 236.806645][T14259] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 236.806659][T14259] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 236.806725][T14259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 236.806738][T14259] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 236.806758][T14259] [ 237.141167][T14263] netlink: 'syz.6.3682': attribute type 13 has an invalid length. [ 237.149050][T14263] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.3682'. [ 237.171134][T14263] delete_channel: no stack [ 237.176696][T14264] loop2: detected capacity change from 0 to 128 [ 237.184318][T14263] delete_channel: no stack [ 237.385421][T14277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3687'. [ 237.516286][T14291] tap0: tun_chr_ioctl cmd 1074025677 [ 237.526318][T14291] tap0: linktype set to 822 [ 237.544319][T14289] lo speed is unknown, defaulting to 1000 [ 237.550467][T14289] lo speed is unknown, defaulting to 1000 [ 237.587460][T14298] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 237.595466][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3695'. [ 237.605950][T14297] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 237.617280][T14295] lo speed is unknown, defaulting to 1000 [ 237.632033][T14300] FAULT_INJECTION: forcing a failure. [ 237.632033][T14300] name failslab, interval 1, probability 0, space 0, times 0 [ 237.644819][T14300] CPU: 0 UID: 0 PID: 14300 Comm: syz.0.3697 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.644904][T14300] Tainted: [W]=WARN [ 237.644911][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.644924][T14300] Call Trace: [ 237.644930][T14300] [ 237.644939][T14300] __dump_stack+0x1d/0x30 [ 237.644957][T14300] dump_stack_lvl+0xe8/0x140 [ 237.644975][T14300] dump_stack+0x15/0x1b [ 237.645036][T14300] should_fail_ex+0x265/0x280 [ 237.645110][T14300] should_failslab+0x8c/0xb0 [ 237.645134][T14300] kmem_cache_alloc_noprof+0x50/0x310 [ 237.645160][T14300] ? skb_clone+0x151/0x1f0 [ 237.645184][T14300] skb_clone+0x151/0x1f0 [ 237.645249][T14300] __netlink_deliver_tap+0x2c9/0x500 [ 237.645279][T14300] netlink_unicast+0x66b/0x690 [ 237.645299][T14300] netlink_sendmsg+0x58b/0x6b0 [ 237.645369][T14300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.645393][T14300] __sock_sendmsg+0x142/0x180 [ 237.645486][T14300] ____sys_sendmsg+0x31e/0x4e0 [ 237.645512][T14300] ___sys_sendmsg+0x17b/0x1d0 [ 237.645557][T14300] __x64_sys_sendmsg+0xd4/0x160 [ 237.645584][T14300] x64_sys_call+0x191e/0x2ff0 [ 237.645665][T14300] do_syscall_64+0xd2/0x200 [ 237.645772][T14300] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.645793][T14300] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.645867][T14300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.645924][T14300] RIP: 0033:0x7f765391ec29 [ 237.646019][T14300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.646037][T14300] RSP: 002b:00007f7652387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.646057][T14300] RAX: ffffffffffffffda RBX: 00007f7653b65fa0 RCX: 00007f765391ec29 [ 237.646070][T14300] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000009 [ 237.646125][T14300] RBP: 00007f7652387090 R08: 0000000000000000 R09: 0000000000000000 [ 237.646135][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.646146][T14300] R13: 00007f7653b66038 R14: 00007f7653b65fa0 R15: 00007ffcb7c9ef58 [ 237.646162][T14300] [ 237.646176][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'. [ 237.748926][T14295] lo speed is unknown, defaulting to 1000 [ 237.752507][T14289] lo speed is unknown, defaulting to 1000 [ 237.945792][ T29] kauditd_printk_skb: 12784 callbacks suppressed [ 237.945806][ T29] audit: type=1400 audit(1766909347.074:24353): avc: denied { relabelfrom } for pid=14309 comm="syz.0.3701" name="NETLINK" dev="sockfs" ino=41930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.992404][ T29] audit: type=1400 audit(1766909347.074:24354): avc: denied { relabelto } for pid=14309 comm="syz.0.3701" name="NETLINK" dev="sockfs" ino=41930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 238.018315][T14295] lo speed is unknown, defaulting to 1000 [ 238.041467][T14310] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3701'. [ 238.056010][T14316] loop2: detected capacity change from 0 to 512 [ 238.066053][ T29] audit: type=1400 audit(1766909347.164:24355): avc: denied { setopt } for pid=14309 comm="syz.0.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.088947][T14316] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.173447][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 238.184374][T14316] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 238.193666][T14325] 9pnet_fd: Insufficient options for proto=fd [ 238.194433][T14316] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 238.201028][ T29] audit: type=1400 audit(1766909347.274:24356): avc: denied { relabelfrom } for pid=14312 comm="syz.7.3702" name="" dev="pipefs" ino=41960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 238.210405][T14316] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3703: Failed to acquire dquot type 1 [ 238.233000][ T29] audit: type=1400 audit(1766909347.314:24357): avc: denied { create } for pid=14323 comm="syz.0.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 238.255915][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3705'. [ 238.267501][T14316] EXT4-fs (loop2): 1 truncate cleaned up [ 238.279109][T14316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.337037][ T29] audit: type=1400 audit(1766909347.424:24358): avc: denied { read } for pid=14314 comm="syz.2.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.356619][ T29] audit: type=1400 audit(1766909347.424:24359): avc: denied { create } for pid=14314 comm="syz.2.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.376451][ T29] audit: type=1400 audit(1766909347.424:24360): avc: denied { bind } for pid=14314 comm="syz.2.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.437344][T14333] loop7: detected capacity change from 0 to 512 [ 238.451591][T14333] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 238.491477][T14333] EXT4-fs (loop7): 1 truncate cleaned up [ 238.507606][T14333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.552889][T12420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.614358][T14340] loop2: detected capacity change from 0 to 2048 [ 238.663979][T14340] Alternate GPT is invalid, using primary GPT. [ 238.670350][T14340] loop2: p2 p3 p7 [ 238.684829][ T9] IPVS: starting estimator thread 0... [ 238.805469][T14346] IPVS: using max 2688 ests per chain, 134400 per kthread [ 238.824744][T14351] lo speed is unknown, defaulting to 1000 [ 238.830854][T14351] lo speed is unknown, defaulting to 1000 [ 238.857824][T14354] lo speed is unknown, defaulting to 1000 [ 238.997420][T14351] lo speed is unknown, defaulting to 1000 [ 238.997552][T14354] lo speed is unknown, defaulting to 1000 [ 239.203246][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.222478][T14354] lo speed is unknown, defaulting to 1000 [ 239.325484][T14370] loop7: detected capacity change from 0 to 8192 [ 239.644399][T14377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14377 comm=syz.6.3720 [ 239.657183][T14377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14377 comm=syz.6.3720 [ 239.758772][T14381] loop4: detected capacity change from 0 to 1024 [ 239.859099][T14381] EXT4-fs: Ignoring removed orlov option [ 239.864864][T14381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.894771][T14381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.966064][T12675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.112729][T14401] FAULT_INJECTION: forcing a failure. [ 240.112729][T14401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.125848][T14401] CPU: 1 UID: 0 PID: 14401 Comm: syz.2.3731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.125883][T14401] Tainted: [W]=WARN [ 240.125936][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.125948][T14401] Call Trace: [ 240.125956][T14401] [ 240.125964][T14401] __dump_stack+0x1d/0x30 [ 240.125987][T14401] dump_stack_lvl+0xe8/0x140 [ 240.126006][T14401] dump_stack+0x15/0x1b [ 240.126081][T14401] should_fail_ex+0x265/0x280 [ 240.126103][T14401] should_fail+0xb/0x20 [ 240.126121][T14401] should_fail_usercopy+0x1a/0x20 [ 240.126200][T14401] _copy_to_user+0x20/0xa0 [ 240.126228][T14401] simple_read_from_buffer+0xb5/0x130 [ 240.126248][T14401] proc_fail_nth_read+0x10e/0x150 [ 240.126315][T14401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.126377][T14401] vfs_read+0x1a5/0x770 [ 240.126429][T14401] ? __rcu_read_unlock+0x4f/0x70 [ 240.126447][T14401] ? __fget_files+0x184/0x1c0 [ 240.126486][T14401] ksys_read+0xda/0x1a0 [ 240.126517][T14401] __x64_sys_read+0x40/0x50 [ 240.126566][T14401] x64_sys_call+0x27bc/0x2ff0 [ 240.126736][T14401] do_syscall_64+0xd2/0x200 [ 240.126786][T14401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.126806][T14401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.126830][T14401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.126910][T14401] RIP: 0033:0x7fc6f949d63c [ 240.126924][T14401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.126939][T14401] RSP: 002b:00007fc6f7f07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.127009][T14401] RAX: ffffffffffffffda RBX: 00007fc6f96e5fa0 RCX: 00007fc6f949d63c [ 240.127021][T14401] RDX: 000000000000000f RSI: 00007fc6f7f070a0 RDI: 0000000000000004 [ 240.127032][T14401] RBP: 00007fc6f7f07090 R08: 0000000000000000 R09: 0000000000000000 [ 240.127043][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.127057][T14401] R13: 00007fc6f96e6038 R14: 00007fc6f96e5fa0 R15: 00007ffd73d43058 [ 240.127077][T14401] [ 240.234770][T14407] netlink: 'syz.4.3729': attribute type 4 has an invalid length. [ 240.300519][T14413] FAULT_INJECTION: forcing a failure. [ 240.300519][T14413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.356244][T14413] CPU: 1 UID: 0 PID: 14413 Comm: syz.0.3732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.356297][T14413] Tainted: [W]=WARN [ 240.356304][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.356317][T14413] Call Trace: [ 240.356330][T14413] [ 240.356337][T14413] __dump_stack+0x1d/0x30 [ 240.356355][T14413] dump_stack_lvl+0xe8/0x140 [ 240.356373][T14413] dump_stack+0x15/0x1b [ 240.356391][T14413] should_fail_ex+0x265/0x280 [ 240.356417][T14413] should_fail+0xb/0x20 [ 240.356508][T14413] should_fail_usercopy+0x1a/0x20 [ 240.356585][T14413] _copy_to_user+0x20/0xa0 [ 240.356611][T14413] simple_read_from_buffer+0xb5/0x130 [ 240.356631][T14413] proc_fail_nth_read+0x10e/0x150 [ 240.356654][T14413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.356699][T14413] vfs_read+0x1a5/0x770 [ 240.356721][T14413] ? __fget_files+0x184/0x1c0 [ 240.356742][T14413] ? __rcu_read_unlock+0x4f/0x70 [ 240.356871][T14413] ? __fget_files+0x184/0x1c0 [ 240.356896][T14413] ksys_read+0xda/0x1a0 [ 240.356963][T14413] __x64_sys_read+0x40/0x50 [ 240.357026][T14413] x64_sys_call+0x27bc/0x2ff0 [ 240.357048][T14413] do_syscall_64+0xd2/0x200 [ 240.357149][T14413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.357174][T14413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.357202][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.357278][T14413] RIP: 0033:0x7f765391d63c [ 240.357294][T14413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.357312][T14413] RSP: 002b:00007f7652366030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.357332][T14413] RAX: ffffffffffffffda RBX: 00007f7653b66090 RCX: 00007f765391d63c [ 240.357413][T14413] RDX: 000000000000000f RSI: 00007f76523660a0 RDI: 0000000000000006 [ 240.357426][T14413] RBP: 00007f7652366090 R08: 0000000000000000 R09: 0000000000000000 [ 240.357438][T14413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.357451][T14413] R13: 00007f7653b66128 R14: 00007f7653b66090 R15: 00007ffcb7c9ef58 [ 240.357471][T14413] [ 240.700804][T14432] loop7: detected capacity change from 0 to 128 [ 240.702695][T14433] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 240.716309][T14433] __nla_validate_parse: 2 callbacks suppressed [ 240.716324][T14433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3740'. [ 240.731960][T14433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3740'. [ 240.772935][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3741'. [ 240.783360][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3741'. [ 240.914944][T14441] loop0: detected capacity change from 0 to 2048 [ 240.992197][ T5774] kworker/u8:22: attempt to access beyond end of device [ 240.992197][ T5774] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 241.020406][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.020406][ T5774] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 241.040687][T14444] loop4: detected capacity change from 0 to 1024 [ 241.057792][T14444] EXT4-fs: Ignoring removed orlov option [ 241.063659][T14444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.070372][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.070372][ T5774] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 241.109312][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.109312][ T5774] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 241.132983][T14441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 241.133284][ T36] hid_parser_main: 8 callbacks suppressed [ 241.133361][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.145534][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.145534][ T5774] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 241.150798][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.178951][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.181892][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.181892][ T5774] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 241.186466][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.207406][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.212879][T14448] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3747'. [ 241.214881][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.231227][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.238700][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.245523][T14441] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 241.246196][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.268434][ T36] hid-generic 0003:54EB:0000.0003: unknown main item tag 0x0 [ 241.271511][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.271511][ T5774] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 241.276661][ T36] hid-generic 0003:54EB:0000.0003: hidraw0: USB HID vffffff.ff Device [syz0] on syz1 [ 241.290976][T14444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.298906][T14441] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 752 with error 28 [ 241.323197][T14441] EXT4-fs (loop0): This should not happen!! Data will be lost [ 241.323197][T14441] [ 241.331821][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.331821][ T5774] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 241.332857][T14441] EXT4-fs (loop0): Total free blocks count 0 [ 241.352829][T14441] EXT4-fs (loop0): Free/Dirty block details [ 241.358725][T14441] EXT4-fs (loop0): free_blocks=2415919104 [ 241.364493][T14441] EXT4-fs (loop0): dirty_blocks=768 [ 241.369686][T14441] EXT4-fs (loop0): Block reservation details [ 241.375747][T14441] EXT4-fs (loop0): i_reserved_data_blocks=48 [ 241.377186][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.377186][ T5774] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 241.414241][T14451] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.3744: inline data xattr refers to an external xattr inode [ 241.431007][T12675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.466546][ T5774] kworker/u8:22: attempt to access beyond end of device [ 241.466546][ T5774] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 241.533508][T14461] netlink: 'syz.6.3750': attribute type 4 has an invalid length. [ 241.558134][ T5798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 241.620334][T14476] loop0: detected capacity change from 0 to 128 [ 241.630992][T14478] loop7: detected capacity change from 0 to 1024 [ 241.643610][T14478] EXT4-fs: Ignoring removed orlov option [ 241.649319][T14478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.673574][T14478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.724796][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.755544][T14488] loop0: detected capacity change from 0 to 128 [ 241.776683][T14488] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.796686][T14491] loop7: detected capacity change from 0 to 1024 [ 241.832097][T14488] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.885385][T14491] EXT4-fs: Ignoring removed orlov option [ 241.891085][T14491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.985265][T14488] pim6reg1: entered promiscuous mode [ 241.990593][T14488] pim6reg1: entered allmulticast mode [ 242.002978][T14491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.076836][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.110602][T11927] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.206233][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3760'. [ 242.223189][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3760'. [ 242.232914][T14501] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 242.279707][T14508] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3764'. [ 242.434100][T14523] loop6: detected capacity change from 0 to 512 [ 242.442066][T14523] EXT4-fs: dax option not supported [ 242.457407][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3769'. [ 242.491687][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3768'. [ 242.584103][T14529] loop4: detected capacity change from 0 to 128 [ 242.598427][T14529] FAULT_INJECTION: forcing a failure. [ 242.598427][T14529] name failslab, interval 1, probability 0, space 0, times 0 [ 242.611151][T14529] CPU: 0 UID: 0 PID: 14529 Comm: syz.4.3770 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.611253][T14529] Tainted: [W]=WARN [ 242.611261][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.611333][T14529] Call Trace: [ 242.611340][T14529] [ 242.611350][T14529] __dump_stack+0x1d/0x30 [ 242.611372][T14529] dump_stack_lvl+0xe8/0x140 [ 242.611393][T14529] dump_stack+0x15/0x1b [ 242.611407][T14529] should_fail_ex+0x265/0x280 [ 242.611428][T14529] should_failslab+0x8c/0xb0 [ 242.611474][T14529] kmem_cache_alloc_node_noprof+0x57/0x320 [ 242.611503][T14529] ? __alloc_skb+0x101/0x320 [ 242.611527][T14529] __alloc_skb+0x101/0x320 [ 242.611560][T14529] ? audit_log_start+0x365/0x6c0 [ 242.611637][T14529] audit_log_start+0x380/0x6c0 [ 242.611662][T14529] ? should_fail_ex+0xdb/0x280 [ 242.611686][T14529] audit_seccomp+0x48/0x100 [ 242.611711][T14529] ? __seccomp_filter+0x68c/0x10d0 [ 242.611757][T14529] __seccomp_filter+0x69d/0x10d0 [ 242.611780][T14529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.611824][T14529] ? vfs_read+0x4e6/0x770 [ 242.611846][T14529] __secure_computing+0x82/0x150 [ 242.611918][T14529] syscall_trace_enter+0xcf/0x1e0 [ 242.611943][T14529] do_syscall_64+0xac/0x200 [ 242.611973][T14529] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 242.611993][T14529] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.612031][T14529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.612086][T14529] RIP: 0033:0x7f0d6b4cd6df [ 242.612108][T14529] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 242.612125][T14529] RSP: 002b:00007f0d69f2f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 242.612143][T14529] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d6b4cd6df [ 242.612157][T14529] RDX: 0000000000000001 RSI: 00007f0d69f2f0a0 RDI: 000000000000000a [ 242.612171][T14529] RBP: 00007f0d69f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.612184][T14529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 242.612218][T14529] R13: 00007f0d6b716038 R14: 00007f0d6b715fa0 R15: 00007ffcc060aa98 [ 242.612282][T14529] [ 242.879483][T14541] loop2: detected capacity change from 0 to 2048 [ 242.913007][T14541] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 243.082091][T14554] loop6: detected capacity change from 0 to 8192 [ 243.151438][T14559] FAULT_INJECTION: forcing a failure. [ 243.151438][T14559] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.151470][T14559] CPU: 1 UID: 0 PID: 14559 Comm: syz.0.3782 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.151500][T14559] Tainted: [W]=WARN [ 243.151506][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.151516][T14559] Call Trace: [ 243.151523][T14559] [ 243.151557][T14559] __dump_stack+0x1d/0x30 [ 243.151616][T14559] dump_stack_lvl+0xe8/0x140 [ 243.151639][T14559] dump_stack+0x15/0x1b [ 243.151652][T14559] should_fail_ex+0x265/0x280 [ 243.151712][T14559] should_fail_alloc_page+0xf2/0x100 [ 243.151735][T14559] __alloc_frozen_pages_noprof+0xff/0x360 [ 243.151766][T14559] alloc_pages_mpol+0xb3/0x250 [ 243.151812][T14559] alloc_frozen_pages_noprof+0x90/0x110 [ 243.151839][T14559] ___kmalloc_large_node+0x52/0x100 [ 243.151940][T14559] ? path_openat+0x1bf8/0x2170 [ 243.151956][T14559] __kmalloc_large_node_noprof+0x16/0xa0 [ 243.151979][T14559] __kmalloc_noprof+0x2ab/0x3e0 [ 243.152024][T14559] ? vc_do_resize+0x20e/0xd70 [ 243.152049][T14559] vc_do_resize+0x20e/0xd70 [ 243.152085][T14559] ? _raw_spin_unlock+0x26/0x50 [ 243.152180][T14559] ? __schedule+0x6b9/0xb30 [ 243.152198][T14559] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 243.152216][T14559] __vc_resize+0x3c/0x50 [ 243.152296][T14559] vt_ioctl+0x16cf/0x1880 [ 243.152319][T14559] ? tty_ioctl+0x7c7/0xb80 [ 243.152405][T14559] tty_ioctl+0x7de/0xb80 [ 243.152419][T14559] ? __pfx_tty_ioctl+0x10/0x10 [ 243.152434][T14559] __se_sys_ioctl+0xce/0x140 [ 243.152470][T14559] __x64_sys_ioctl+0x43/0x50 [ 243.152503][T14559] x64_sys_call+0x1816/0x2ff0 [ 243.152520][T14559] do_syscall_64+0xd2/0x200 [ 243.152703][T14559] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.152722][T14559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.152745][T14559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.152807][T14559] RIP: 0033:0x7f765391ec29 [ 243.152820][T14559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.152835][T14559] RSP: 002b:00007f7652387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.152851][T14559] RAX: ffffffffffffffda RBX: 00007f7653b65fa0 RCX: 00007f765391ec29 [ 243.152862][T14559] RDX: 0000200000000180 RSI: 0000000000005609 RDI: 0000000000000003 [ 243.152946][T14559] RBP: 00007f7652387090 R08: 0000000000000000 R09: 0000000000000000 [ 243.152957][T14559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.152967][T14559] R13: 00007f7653b66038 R14: 00007f7653b65fa0 R15: 00007ffcb7c9ef58 [ 243.152982][T14559] [ 243.153579][T14554] loop6: p1 p2 p3 p4 [ 243.154091][T14554] loop6: p2 start 151000334 is beyond EOD, truncated [ 243.154116][T14554] loop6: p3 start 331777 is beyond EOD, truncated [ 243.154129][T14554] loop6: p4 size 263168 extends beyond EOD, truncated [ 243.221101][T14561] loop4: detected capacity change from 0 to 128 [ 243.239999][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 243.240013][ T29] audit: type=1326 audit(1766909352.364:25034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.240037][ T29] audit: type=1326 audit(1766909352.364:25035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.240057][ T29] audit: type=1326 audit(1766909352.364:25036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.240083][ T29] audit: type=1326 audit(1766909352.364:25037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.240168][ T29] audit: type=1326 audit(1766909352.364:25038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.240238][ T29] audit: type=1326 audit(1766909352.364:25039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.244664][ T29] audit: type=1326 audit(1766909352.374:25040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14560 comm="syz.4.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6b4cec29 code=0x7ffc0000 [ 243.283596][T14572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.829238][T14586] loop7: detected capacity change from 0 to 8192 [ 243.921993][T14586] loop7: p1 p2 p3 p4 [ 243.926717][T14586] loop7: p2 start 151000334 is beyond EOD, truncated [ 243.933589][T14586] loop7: p3 start 331777 is beyond EOD, truncated [ 243.940010][T14586] loop7: p4 size 263168 extends beyond EOD, truncated [ 243.963236][ T29] audit: type=1400 audit(1766909353.094:25041): avc: denied { create } for pid=14591 comm="syz.2.3796" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.989961][ T29] audit: type=1400 audit(1766909353.124:25042): avc: denied { write } for pid=14591 comm="syz.2.3796" name="file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.012602][ T29] audit: type=1400 audit(1766909353.124:25043): avc: denied { open } for pid=14591 comm="syz.2.3796" path="/143/file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.139852][T14605] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 244.214032][T14618] loop6: detected capacity change from 0 to 128 [ 244.223696][T14612] netlink: 'syz.7.3800': attribute type 4 has an invalid length. [ 244.324557][T14621] netlink: 'syz.4.3804': attribute type 13 has an invalid length. [ 244.399010][T14632] loop6: detected capacity change from 0 to 512 [ 244.415179][T14632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.419268][T14630] loop7: detected capacity change from 0 to 8192 [ 244.431554][T14632] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.475159][T12242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.482212][T14630] loop7: p1 p2 p3 p4 [ 244.489146][T14630] loop7: p2 start 151000334 is beyond EOD, truncated [ 244.495949][T14630] loop7: p3 start 331777 is beyond EOD, truncated [ 244.502532][T14630] loop7: p4 size 263168 extends beyond EOD, truncated [ 244.540176][ T5771] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.550181][ T5771] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.559407][ T5771] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.569472][ T5771] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.606744][T14640] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.614171][T14640] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.621459][T14640] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 244.733436][T14654] netlink: 'syz.4.3815': attribute type 4 has an invalid length. [ 244.797179][T14657] program syz.0.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.838041][T14662] loop7: detected capacity change from 0 to 1764 [ 244.915745][T14664] loop4: detected capacity change from 0 to 1024 [ 244.922479][T14664] EXT4-fs: Ignoring removed orlov option [ 244.928164][T14664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.943244][T14664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.967321][T12675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.130335][T14672] netlink: 'syz.2.3822': attribute type 13 has an invalid length. [ 245.255233][T14680] SELinux: ebitmap: truncated map [ 245.260454][T14680] SELinux: failed to load policy [ 245.265948][T14680] FAULT_INJECTION: forcing a failure. [ 245.265948][T14680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.279121][T14680] CPU: 0 UID: 0 PID: 14680 Comm: syz.2.3824 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.279141][T14680] Tainted: [W]=WARN [ 245.279146][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.279154][T14680] Call Trace: [ 245.279158][T14680] [ 245.279164][T14680] __dump_stack+0x1d/0x30 [ 245.279180][T14680] dump_stack_lvl+0xe8/0x140 [ 245.279191][T14680] dump_stack+0x15/0x1b [ 245.279200][T14680] should_fail_ex+0x265/0x280 [ 245.279294][T14680] should_fail+0xb/0x20 [ 245.279306][T14680] should_fail_usercopy+0x1a/0x20 [ 245.279319][T14680] _copy_from_user+0x1c/0xb0 [ 245.279383][T14680] __sys_bpf+0x178/0x7b0 [ 245.279402][T14680] __x64_sys_bpf+0x41/0x50 [ 245.279553][T14680] x64_sys_call+0x2aea/0x2ff0 [ 245.279565][T14680] do_syscall_64+0xd2/0x200 [ 245.279583][T14680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.279692][T14680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.279712][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.279732][T14680] RIP: 0033:0x7fc6f949ec29 [ 245.279748][T14680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.279759][T14680] RSP: 002b:00007fc6f7f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.279770][T14680] RAX: ffffffffffffffda RBX: 00007fc6f96e5fa0 RCX: 00007fc6f949ec29 [ 245.279799][T14680] RDX: 0000000000000094 RSI: 00002000000012c0 RDI: 0000000000000005 [ 245.279812][T14680] RBP: 00007fc6f7f07090 R08: 0000000000000000 R09: 0000000000000000 [ 245.279823][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.279835][T14680] R13: 00007fc6f96e6038 R14: 00007fc6f96e5fa0 R15: 00007ffd73d43058 [ 245.279853][T14680] [ 245.494322][T14685] loop2: detected capacity change from 0 to 512 [ 245.502795][T14682] SELinux: ebitmap: truncated map [ 245.509429][T14685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.519294][T14685] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 245.531023][T14682] SELinux: failed to load policy [ 245.541630][T14687] loop0: detected capacity change from 0 to 1024 [ 245.552099][T14687] EXT4-fs: Ignoring removed orlov option [ 245.557853][T14687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.575808][T14687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.603759][T14689] netlink: 'syz.6.3828': attribute type 4 has an invalid length. [ 245.617309][T11927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.683353][T14710] loop0: detected capacity change from 0 to 512 [ 245.715426][T14715] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 245.730223][T14715] netlink: 'syz.6.3838': attribute type 1 has an invalid length. [ 245.796008][T14721] loop2: detected capacity change from 0 to 8192 [ 245.811662][T14705] netlink: 'syz.4.3834': attribute type 13 has an invalid length. [ 245.833960][T12420] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 245.842682][T12420] FAT-fs (loop2): Filesystem has been set read-only [ 245.853522][T12420] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 245.864467][T12420] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 245.908795][T14731] loop7: detected capacity change from 0 to 128 [ 245.916957][T14731] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.929781][T14731] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.963935][T14729] netlink: 'syz.4.3843': attribute type 4 has an invalid length. [ 246.111313][T12268] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.143731][T14746] __nla_validate_parse: 6 callbacks suppressed [ 246.143746][T14746] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3849'. [ 246.178637][T14737] lo speed is unknown, defaulting to 1000 [ 246.192000][T14737] lo speed is unknown, defaulting to 1000 [ 246.228225][T14737] lo speed is unknown, defaulting to 1000 [ 246.251290][T14755] 9pnet: Could not find request transport: 0xffffffffffffffff [ 246.290744][ T5771] bridge_slave_1: left allmulticast mode [ 246.296474][ T5771] bridge_slave_1: left promiscuous mode [ 246.302219][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.312940][ T5771] bridge_slave_0: left allmulticast mode [ 246.318753][ T5771] bridge_slave_0: left promiscuous mode [ 246.324662][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.434353][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3855'. [ 246.445125][ T5771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.454509][ T5771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.463693][ T5771] bond0 (unregistering): Released all slaves [ 246.473088][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3855'. [ 246.484156][T14737] chnl_net:caif_netlink_parms(): no params data found [ 246.507791][ T5771] tipc: Left network mode [ 246.549166][T14778] loop7: detected capacity change from 0 to 1024 [ 246.556150][T14778] EXT4-fs: Ignoring removed orlov option [ 246.561854][T14778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.579753][T14778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.605880][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.624585][ T5771] hsr_slave_0: left promiscuous mode [ 246.644260][ T5771] hsr_slave_1: left promiscuous mode [ 246.659720][ T5771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.673204][ T5771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.723416][T14798] FAULT_INJECTION: forcing a failure. [ 246.723416][T14798] name failslab, interval 1, probability 0, space 0, times 0 [ 246.736131][T14798] CPU: 1 UID: 0 PID: 14798 Comm: syz.7.3865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.736160][T14798] Tainted: [W]=WARN [ 246.736166][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.736176][T14798] Call Trace: [ 246.736182][T14798] [ 246.736188][T14798] __dump_stack+0x1d/0x30 [ 246.736245][T14798] dump_stack_lvl+0xe8/0x140 [ 246.736265][T14798] dump_stack+0x15/0x1b [ 246.736293][T14798] should_fail_ex+0x265/0x280 [ 246.736317][T14798] should_failslab+0x8c/0xb0 [ 246.736342][T14798] __kvmalloc_node_noprof+0x123/0x4e0 [ 246.736420][T14798] ? vmemdup_user+0x26/0xd0 [ 246.736448][T14798] vmemdup_user+0x26/0xd0 [ 246.736473][T14798] map_lookup_and_delete_elem+0x26b/0x5c0 [ 246.736505][T14798] ? security_bpf+0x2b/0x90 [ 246.736548][T14798] __sys_bpf+0x585/0x7b0 [ 246.736579][T14798] __x64_sys_bpf+0x41/0x50 [ 246.736603][T14798] x64_sys_call+0x2aea/0x2ff0 [ 246.736678][T14798] do_syscall_64+0xd2/0x200 [ 246.736708][T14798] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.736733][T14798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.736796][T14798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.736858][T14798] RIP: 0033:0x7f4ca49cec29 [ 246.736874][T14798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.736924][T14798] RSP: 002b:00007f4ca342f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.737013][T14798] RAX: ffffffffffffffda RBX: 00007f4ca4c15fa0 RCX: 00007f4ca49cec29 [ 246.737119][T14798] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000015 [ 246.737132][T14798] RBP: 00007f4ca342f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.737146][T14798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.737159][T14798] R13: 00007f4ca4c16038 R14: 00007f4ca4c15fa0 R15: 00007ffd1e3e49e8 [ 246.737179][T14798] [ 246.737426][ T5771] team0 (unregistering): Port device team_slave_1 removed [ 246.842145][T14799] program syz.0.3861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.877440][T14801] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3866'. [ 246.886921][ T5771] team0 (unregistering): Port device team_slave_0 removed [ 246.982380][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.989503][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.999312][T14737] bridge_slave_0: entered allmulticast mode [ 247.006787][T14737] bridge_slave_0: entered promiscuous mode [ 247.017548][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.024692][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.032489][T14737] bridge_slave_1: entered allmulticast mode [ 247.039170][T14737] bridge_slave_1: entered promiscuous mode [ 247.066093][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.086667][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.100552][T14808] loop7: detected capacity change from 0 to 128 [ 247.127051][T14737] team0: Port device team_slave_0 added [ 247.137555][T14737] team0: Port device team_slave_1 added [ 247.152728][T14808] bio_check_eod: 105 callbacks suppressed [ 247.152746][T14808] syz.7.3868: attempt to access beyond end of device [ 247.152746][T14808] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 247.172710][T14806] validate_nla: 1 callbacks suppressed [ 247.172771][T14806] netlink: 'syz.4.3867': attribute type 13 has an invalid length. [ 247.191768][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.198770][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.224703][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.243333][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.250376][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.254414][T14813] loop6: detected capacity change from 0 to 512 [ 247.276984][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.307584][T14737] hsr_slave_0: entered promiscuous mode [ 247.313773][T14737] hsr_slave_1: entered promiscuous mode [ 247.319787][T14737] debugfs: 'hsr0' already exists in 'hsr' [ 247.325627][T14737] Cannot create hsr debugfs directory [ 247.336762][ T5771] IPVS: stop unused estimator thread 0... [ 247.360599][T14816] loop7: detected capacity change from 0 to 1024 [ 247.368620][T14816] EXT4-fs: Ignoring removed orlov option [ 247.374451][T14816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.396427][T14816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.454865][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.467566][T14737] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.477754][T14737] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.539447][T14737] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.562950][T14737] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 247.614841][T14737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.623674][T14843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14843 comm=syz.4.3876 [ 247.627235][T14737] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.644317][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 247.666408][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.673498][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.673754][T14843] FAULT_INJECTION: forcing a failure. [ 247.673754][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 247.693350][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.4.3876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.693389][T14843] Tainted: [W]=WARN [ 247.693395][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.693405][T14843] Call Trace: [ 247.693412][T14843] [ 247.693419][T14843] __dump_stack+0x1d/0x30 [ 247.693440][T14843] dump_stack_lvl+0xe8/0x140 [ 247.693461][T14843] dump_stack+0x15/0x1b [ 247.693538][T14843] should_fail_ex+0x265/0x280 [ 247.693559][T14843] should_failslab+0x8c/0xb0 [ 247.693584][T14843] kmem_cache_alloc_noprof+0x50/0x310 [ 247.693689][T14843] ? xfrm_state_alloc+0x2c/0x190 [ 247.693712][T14843] xfrm_state_alloc+0x2c/0x190 [ 247.693732][T14843] xfrm_add_sa+0xf4e/0x2430 [ 247.693761][T14843] xfrm_user_rcv_msg+0x566/0x660 [ 247.693790][T14843] ? obj_cgroup_charge_account+0x122/0x1a0 [ 247.693864][T14843] netlink_rcv_skb+0x123/0x220 [ 247.693883][T14843] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 247.693900][T14843] xfrm_netlink_rcv+0x48/0x60 [ 247.693914][T14843] netlink_unicast+0x5bd/0x690 [ 247.693928][T14843] netlink_sendmsg+0x58b/0x6b0 [ 247.694028][T14843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.694103][T14843] __sock_sendmsg+0x142/0x180 [ 247.694157][T14843] ____sys_sendmsg+0x31e/0x4e0 [ 247.694173][T14843] ___sys_sendmsg+0x17b/0x1d0 [ 247.694236][T14843] __x64_sys_sendmsg+0xd4/0x160 [ 247.694342][T14843] x64_sys_call+0x191e/0x2ff0 [ 247.694362][T14843] do_syscall_64+0xd2/0x200 [ 247.694380][T14843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 247.694394][T14843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.694422][T14843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.694434][T14843] RIP: 0033:0x7f0d6b4cec29 [ 247.694445][T14843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.694456][T14843] RSP: 002b:00007f0d69f2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.694468][T14843] RAX: ffffffffffffffda RBX: 00007f0d6b715fa0 RCX: 00007f0d6b4cec29 [ 247.694475][T14843] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 247.694554][T14843] RBP: 00007f0d69f2f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.694561][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.694568][T14843] R13: 00007f0d6b716038 R14: 00007f0d6b715fa0 R15: 00007ffcc060aa98 [ 247.694578][T14843] [ 247.701816][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.943633][ T5771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.006109][T14737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.042947][T14861] loop4: detected capacity change from 0 to 512 [ 248.055032][T14861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.070402][T14861] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.153567][T14737] veth0_vlan: entered promiscuous mode [ 248.162846][T14737] veth1_vlan: entered promiscuous mode [ 248.195090][T14737] veth0_macvtap: entered promiscuous mode [ 248.202656][T14737] veth1_macvtap: entered promiscuous mode [ 248.222624][T14737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.241399][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.252953][ T5805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.281778][ T5805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.305517][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 248.305530][ T29] audit: type=1400 audit(1766909357.434:25476): avc: denied { mounton } for pid=14737 comm="syz-executor" path="/root/syzkaller.IfApzG/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 248.307699][ T5805] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.311848][ T29] audit: type=1400 audit(1766909357.434:25477): avc: denied { mount } for pid=14737 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 248.351503][ T5805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.367276][ T29] audit: type=1400 audit(1766909357.434:25478): avc: denied { mounton } for pid=14737 comm="syz-executor" path="/root/syzkaller.IfApzG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 248.402964][ T29] audit: type=1400 audit(1766909357.434:25479): avc: denied { mounton } for pid=14737 comm="syz-executor" path="/root/syzkaller.IfApzG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 248.442350][ T29] audit: type=1400 audit(1766909357.564:25480): avc: denied { mounton } for pid=14737 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 248.465441][ T29] audit: type=1400 audit(1766909357.574:25481): avc: denied { mount } for pid=14737 comm="syz-executor" name="/" dev="gadgetfs" ino=3693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 248.501838][T14901] bridge0: port 3(veth0_to_bridge) entered blocking state [ 248.509006][T14901] bridge0: port 3(veth0_to_bridge) entered disabled state [ 248.527572][T14901] veth0_to_bridge: entered allmulticast mode [ 248.537874][T14901] veth0_to_bridge: entered promiscuous mode [ 248.544295][T14901] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.557786][T14901] bridge0: port 3(veth0_to_bridge) entered blocking state [ 248.564998][T14901] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 248.582992][ T29] audit: type=1326 audit(1766909357.714:25482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.8.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f170ec29 code=0x7ffc0000 [ 248.606693][ T29] audit: type=1326 audit(1766909357.714:25483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.8.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9f170ec29 code=0x7ffc0000 [ 248.630551][ T29] audit: type=1326 audit(1766909357.714:25484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.8.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f170ec29 code=0x7ffc0000 [ 248.654156][ T29] audit: type=1326 audit(1766909357.714:25485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14900 comm="syz.8.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9f170ec29 code=0x7ffc0000 [ 248.695661][T14912] loop6: detected capacity change from 0 to 512 [ 248.706512][T14916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3888'. [ 248.734219][T14916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3888'. [ 248.743610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.755707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.767851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.779956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.792041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.804119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.816266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.828327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.840443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.852501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.870741][T14918] loop7: detected capacity change from 0 to 764 [ 248.887608][T14918] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 248.916560][T14918] Symlink component flag not implemented [ 248.930608][T12675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.943738][T14918] Symlink component flag not implemented (7) [ 249.038511][T14928] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 249.069509][T14928] SELinux: failed to load policy [ 249.079889][T14930] loop4: detected capacity change from 0 to 128 [ 249.140257][T14930] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.206580][T14930] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.793286][T14934] netlink: 'syz.7.3897': attribute type 4 has an invalid length. [ 250.801041][T14934] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3897'. [ 252.713716][T14949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14949 comm=syz.0.3898 [ 253.758594][ C0] net_ratelimit: 24777 callbacks suppressed [ 253.758630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.780147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.799779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.814686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.836989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.851619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.871528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.886306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.906642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.921021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.952838][T14953] rdma_rxe: rxe_newlink: failed to add lo [ 258.762490][ C0] net_ratelimit: 12838 callbacks suppressed [ 258.762707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.783807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.801880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.815630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.833087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.847504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.867107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.881744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.901419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.915595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.773235][ C0] net_ratelimit: 4181 callbacks suppressed [ 263.773290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.800915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.815987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.836220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.850162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.870872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.885467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.905340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.920158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.942948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.781870][ C0] net_ratelimit: 13087 callbacks suppressed [ 268.781886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.799870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.812113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.824272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.836500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.848568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.860852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.872908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.885121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.897215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.559103][T14970] loop6: detected capacity change from 0 to 1024 [ 269.630095][T14970] EXT4-fs: Ignoring removed bh option [ 272.882206][T14970] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 273.732923][T14976] 9pnet_fd: Insufficient options for proto=fd [ 273.769482][T14976] loop7: detected capacity change from 0 to 1024 [ 273.791857][ C0] net_ratelimit: 19982 callbacks suppressed [ 273.791874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.809885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.822528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.834647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.847021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.859098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.871351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.883466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.895731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.907894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.421669][T14976] EXT4-fs warning (device loop7): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop7. [ 278.801801][ C0] net_ratelimit: 23073 callbacks suppressed [ 278.801818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.820005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.832062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.844312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.856397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.868656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.880798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.892993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.905066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.917280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.478931][T14991] loop6: detected capacity change from 0 to 1024 [ 281.633419][T14991] EXT4-fs: Ignoring removed orlov option [ 281.639102][T14991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.811922][ C0] net_ratelimit: 24921 callbacks suppressed [ 283.811955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.829983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.842239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.854303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.866519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.878801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.891051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.903107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.915343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.927402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.461606][T14991] EXT4-fs: error -4 creating inode table initialization thread [ 286.510383][T14991] EXT4-fs (loop6): mount failed [ 288.821811][ C0] net_ratelimit: 20968 callbacks suppressed [ 288.821828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.839828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.852140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.864204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.876446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.888515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.900746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.912815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.925123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.937313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.657498][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 290.657515][ T29] audit: type=1400 audit(1766909399.774:25507): avc: denied { write } for pid=14997 comm="syz.7.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.831765][ C0] net_ratelimit: 19882 callbacks suppressed [ 293.831783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.849764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.862017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.874095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.886354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.898449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.910682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.922743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.934991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.947063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.841969][ C0] net_ratelimit: 24818 callbacks suppressed [ 298.841988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.859969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.872256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.884364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.896591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.908673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.920895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.932978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.945243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.052156][ T29] audit: type=1326 audit(1766909409.784:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca49cec29 code=0x7ffc0000 [ 301.078954][ T29] audit: type=1326 audit(1766909409.784:25509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca49cec29 code=0x7ffc0000 [ 301.105816][ T29] audit: type=1326 audit(1766909409.794:25510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15008 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4ca49cec29 code=0x7ffc0000 [ 303.851834][ C0] net_ratelimit: 24872 callbacks suppressed [ 303.851858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.869819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.882082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.894169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.906435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.918515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.930771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.942858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.955102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.967178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.862020][ C0] net_ratelimit: 16384 callbacks suppressed [ 308.862038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.880302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.892587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.904655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.916984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.929232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.941550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.953624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.965899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.871900][ C0] net_ratelimit: 24482 callbacks suppressed [ 313.871922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.889896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.902245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.914369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.926606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.938665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.951021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.963102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.975336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.987418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.881966][ C0] net_ratelimit: 24298 callbacks suppressed [ 318.881984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.899988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.912247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.924361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.936612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.948710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.960950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.973016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.985262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.997347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.891866][ C0] net_ratelimit: 18290 callbacks suppressed [ 323.891894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.909881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.922122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.934208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.946495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.958609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.970884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.982971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.995233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.007317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.902057][ C0] net_ratelimit: 22164 callbacks suppressed [ 328.902076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.920063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.932291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.944375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.956601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.968694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.980926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.992993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.012070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.024192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.911921][ C0] net_ratelimit: 17412 callbacks suppressed [ 333.911939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.929920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.942256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.954359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.966600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.978701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.991084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.003172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.015513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.921768][ C0] net_ratelimit: 24506 callbacks suppressed [ 338.921792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.939853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.952084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.964162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.976458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.988538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.000867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.012986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.025251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.037317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.931771][ C0] net_ratelimit: 24498 callbacks suppressed [ 343.931789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.949848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.962147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.974219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.986458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.998538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.010966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.023053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.035337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.047427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.181803][ C1] ================================================================== [ 344.189922][ C1] BUG: KCSAN: data-race in br_fdb_update / br_fdb_update [ 344.196953][ C1] [ 344.199366][ C1] read to 0xffff888103a56b40 of 8 bytes by interrupt on cpu 0: [ 344.207086][ C1] br_fdb_update+0x106/0x460 [ 344.211684][ C1] br_handle_frame_finish+0x31a/0xf50 [ 344.217065][ C1] br_nf_hook_thresh+0x1e8/0x220 [ 344.222008][ C1] br_nf_pre_routing_finish_ipv6+0x4c6/0x570 [ 344.227995][ C1] br_nf_pre_routing_ipv6+0x1fa/0x2b0 [ 344.233371][ C1] br_nf_pre_routing+0x52b/0xbd0 [ 344.238310][ C1] br_handle_frame+0x4fa/0x9e0 [ 344.243092][ C1] __netif_receive_skb_core+0xad3/0x23b0 [ 344.248740][ C1] __netif_receive_skb+0x59/0x270 [ 344.253773][ C1] process_backlog+0x229/0x420 [ 344.258552][ C1] __napi_poll+0x66/0x310 [ 344.263235][ C1] net_rx_action+0x391/0x830 [ 344.267835][ C1] handle_softirqs+0xb7/0x290 [ 344.272515][ C1] run_ksoftirqd+0x1c/0x30 [ 344.276942][ C1] smpboot_thread_fn+0x32b/0x530 [ 344.281892][ C1] kthread+0x489/0x510 [ 344.285963][ C1] ret_from_fork+0x11f/0x1b0 [ 344.290554][ C1] ret_from_fork_asm+0x1a/0x30 [ 344.295322][ C1] [ 344.297641][ C1] write to 0xffff888103a56b40 of 8 bytes by interrupt on cpu 1: [ 344.305269][ C1] br_fdb_update+0x13e/0x460 [ 344.309869][ C1] br_handle_frame_finish+0x31a/0xf50 [ 344.315252][ C1] br_nf_hook_thresh+0x1e8/0x220 [ 344.320196][ C1] br_nf_pre_routing_finish_ipv6+0x4c6/0x570 [ 344.326183][ C1] br_nf_pre_routing_ipv6+0x1fa/0x2b0 [ 344.331651][ C1] br_nf_pre_routing+0x52b/0xbd0 [ 344.336592][ C1] br_handle_frame+0x4fa/0x9e0 [ 344.341370][ C1] __netif_receive_skb_core+0xad3/0x23b0 [ 344.347016][ C1] __netif_receive_skb+0x59/0x270 [ 344.352058][ C1] process_backlog+0x229/0x420 [ 344.356841][ C1] __napi_poll+0x66/0x310 [ 344.361173][ C1] net_rx_action+0x391/0x830 [ 344.365785][ C1] handle_softirqs+0xb7/0x290 [ 344.370465][ C1] do_softirq+0x5d/0x90 [ 344.374619][ C1] __local_bh_enable_ip+0x70/0x80 [ 344.379644][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 344.384583][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 344.390222][ C1] process_scheduled_works+0x4cb/0x9d0 [ 344.395703][ C1] worker_thread+0x582/0x770 [ 344.400319][ C1] kthread+0x489/0x510 [ 344.404387][ C1] ret_from_fork+0x11f/0x1b0 [ 344.409066][ C1] ret_from_fork_asm+0x1a/0x30 [ 344.413843][ C1] [ 344.416159][ C1] value changed: 0x0000000100001113 -> 0x0000000100001114 [ 344.423257][ C1] [ 344.425573][ C1] Reported by Kernel Concurrency Sanitizer on: [ 344.431727][ C1] CPU: 1 UID: 0 PID: 5790 Comm: kworker/u8:38 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.443280][ C1] Tainted: [W]=WARN [ 344.447077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.457130][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 344.463906][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.835209][ T29] audit: type=1400 audit(1766909454.394:25511): avc: denied { write } for pid=3291 comm="syz-executor" path="pipe:[2273]" dev="pipefs" ino=2273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 348.941990][ C0] net_ratelimit: 24588 callbacks suppressed [ 348.942008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.960032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.972312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.984388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.996642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.008718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.020964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.033030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.045270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.057349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.951805][ C0] net_ratelimit: 24842 callbacks suppressed [ 353.951823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.969839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.982073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.994172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.006425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.018543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.030771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.042865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.055082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.067193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)