last executing test programs: 1m13.71456129s ago: executing program 3 (id=928): r0 = syz_open_dev$rtc(&(0x7f0000000380), 0xffffffffffff23ed, 0x103000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, 0x0, 0x20000000) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@broadcast, @initdev}, &(0x7f0000000540)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14801}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x168, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x148, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x168}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="aed32771", @ANYRES16=r10, @ANYBLOB="05020000000000000000120000000c000180080001", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0xc, 0x10, 0x0, @mcast2, @mcast2, 0x40, 0x8000, 0xea, 0x1}}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xc33) syz_emit_ethernet(0x846, &(0x7f0000001100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x810, 0x2b, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@hopopts={0x89, 0x100, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x9, 0xf7, "79f718cd082bb66ffb27540e7af860dd9e6ee4e3c8e66545f9bcc4710e26ba8070b5ef58e1e2d33338a21d518590fdef3d2137e741316128acff57f4f6c034c89b7ce4fd9420ef4f0e9c68fc13edcb19ef952b706c28f9e6cbd028b945c54a68d66d491c2e91b888fbaa4f5e4d5d723f45eaa8d6c8ad48d90b91682197819cbd279f4d877a0f3cd7cf94822c03b8bfa7366e2acb95da150db4b7cacc724787687e0b2fe9c01555683bcb6ccb07924fdeb55f0666018f3d819c3dfd512f4c0777e563c1e6489c78d5812ba2f3f770096cde1c243c570a1d8d64caa99e841cf5ba420bfd2f4e7ab222c764e28066ba90655f1b2df13c1516"}, @generic={0x14, 0x6f3, "d6104212567aa3978a2c3cd1a4d868b66b717801cff409c49009239d568b596d332b33ef4d3b9484b97b74f478fc6605ffb98a2f78c3b8e195e6a7c9d9f730b14b0afcfcf8c7cf46a521815b770cda83c34236b2901a5b02d6eec7932d2c75fd6ed644a987fe46a7262e4f49488394453cee05a8a173cc9219476fe4f21a5a1006c852e6d2549c18714b8b15dbec6bb4629b29a479e1272326ab7fcda0e8c49e3e37c398a115ff759804323de8a4176e7f18592b5afcf15e08d907f9195b48f0e503dddf228826d21265401c7774616d10c9b4377ae5d180aee75ccd0e811e8f145f3ee93d0c9803561565efddc9b5bf8b736c2a4da4f539ddc53237edb1a442c65a2fc67e726a28a9c4736209f24882d72245a2f92e1ee6e618cdf9137f92101c468beef0f5f3d8e43e4729ac127967b64e79ac00d0563d78333a74d5e266b2c2460dfe3b6ca60a206d7428f79b7ce1f5bbfc1c93fbf544afdb2f480edf3bf866b9a8502e7b4a465c8f15459c04ac9c7c8cd576835652460740a7cfe1143637c9eef4330fd6b247321ae9e3b75319a5f5bd6371682f89bb8eea2e112526475ac9741ea1c312927f80aee53eb19b548e65f07b717fd375bedb7bc0d6971cd4b2baf52fb22c0cffed68ab78333b4b67183f3ebcab6d2f76195d92d2eb10a9c311ba370e600c2859b436cac9ad9a97cd10761b85e5ab7d34c4df0626e07f6538a3d6a41a766b31e4e56eba04fa8a8f439da9358e75aced905a372834010803dbe691ed620eeb47b7b45d5ef58210a06580607c91a04352afe8f1c96eaf974860b7c3baaf08e3464db09574d11793d73e174014ee224c6e5d3f8c8581d868f6ee52f137ce539737937f71ecacd3217796a769dfba7745383fda4f7f2d6bd1f671e0c7b07b23b217db0bc17b341fcc481a35f0531e6cf7c7b7472ddae3c2dbe70464aff2b95c3937762edc1046a51e00a90b9d0027afbb1e15696e4842136a2798c265aa9a0270c57b9ced2bc509592b6211a1c09ed026f99e1835d78f6a4e955c6de192248f000a47e865e9a7aed77c5e26ace3dc8842344b7f5fb5986a955e350b473ab326fbaaf3cdc812430f8597d4b7bc30cf75735c90ecbf75b31d56d37f28a18715b1fed3c0a3c07744ab766971ebb04525dcf4bcc7659cba2c04032f2f7adf9e65ceaddb5505fe57b94c784d07eb2a2fe4fcacd9802a75c8acbec9381a04726fda6c95b6960703ffe78bcbb079c67437dac882b51d79983ee6c052b487b2edf4ceaa6c3811241897a8da7e4a5d282f415d7bf30855533ffbef090233fbdc7cfd5259d99dd1d8b4a203da5d57c9fa20ac0f4d572e7c260a0c5955855af810c44550552a066572f9838dde1717c3144f3b211d58c20c82dc94fba71d8f622bff96f3ada6d840d1321ebb47bd683a512a44048dbe8ac6d6d293facdd51fd6279aca849f9bd4b3cc2e45f44905eaed9bfcc3ab33f97069cf4889e8da2b594a8eadebe3fc81724af89737a9ef69bdecbf675d3282e074ed1d3593635555397a2c23bfa531054d71fe306667c69bd03fa6956483104ce1a0350b243739b2b1f0de8f44a6502e91beeee579c3374d0cd5c43900e587592610ce303801f08fa6970ab3d745c50f396a7bd88ec1f761b834e72f7f9511fd1c2102ed87473f23de0121e2df4941c241b8ebc8101383e1404a3bf06a209ec836dd5d5e367a6bd14caabb31efffa684eaaded13b7df7bcc1c0162f07ebd968d6ae0b4f127ef5ed589f88ac5ca5ed33534cdcefd10b4c7ef37c5537e1d02ea745e206dac16e0962fc2ccea44e4a03dc535b9a2e7183919cd7e2a7327c17940beb13e221470585f709dac534696c51bf8740d56fa0e9241068d6aec4e4cbc09f51f8b7fd027a1f884c52acd518cec328d275c5207dd413ad1b35f2710ff47e76551ccd0b4c9d0fd25d1dc87e0498b7ebb40af68474e33bdd08668ad0f5fb919acbf7d7d649997190acd35774b4eb1e35a1ac9d14675e377590192474fd9b43a82d79f06350492c42691321485944e42ec53221f59a7d3bf8c2bc92b50c7dcf61a426c2eb474cfdcbbfb44bdaacbd7b5555f3de05c45c1461c4a121ff20bb7815ca164462cf977312f53ceef57be2929cf9e8ef94c9a016ea933b127cb224652db8a870dcaec19b6faeb144150d177db884637d50faff03deef8bced965332f86b415bc3af406dbe73c68fefb97816a446232337a6a24f707633b2fb8e67b31ede05f6e9ebf6b5afd168b86a8242f963e235f1be9d8b6f5f60bf1755115519abbd53fe2ee602aa165aa8dbfaf1949fe2bc191dfa16a812d5e7136dd94a8c7c84ef240ff8f130295f161b151699f25c3b8bf7b715b40e8800d7f68c9cd57ed192584738ff64a9ca39b1d42db506f50aba87f4d6d06c9ccb2d956637c87909a59a248c892d4491e086707d095970f7170a87d83051a777ab1ce991bf7ebe905231db662d6d185e3651edb455c6f738d1c7bbc71c3cd4edf0d9ea643afe6eecd0"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 1m13.71362433s ago: executing program 3 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) 1m13.671534619s ago: executing program 3 (id=932): socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x8}, 0x100200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3df, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000880)={0x4, &(0x7f00000008c0)=[{0xfffc, 0x9, 0x3, 0xc}, {0x9, 0x7, 0xce, 0x8}, {0xf7, 0x9, 0x0, 0x5}, {0x5, 0x5, 0x7f}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x6c825000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001900000029"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10084) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x21eb}, 0x800, 0x0, 0xfffffff9, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x2000000) 1m12.752890176s ago: executing program 3 (id=948): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@discard}]}, 0xfe, 0x24d, &(0x7f0000000840)="$eJzs3T9o3GYYB+BXuru6Z5vitkuh9A+UUlqDcbdCl3ZpwVCKKaXQFlxK6VTsgmOTzZcpS4ZkToKnLCZki5MxZDFZAlmdxIOzZIjJEJMhGS7odBcu9pkkPvsUrOcBnfRJn/RKoN93WnQXQGmNRcR3EVGJiPGIqEVE0t3h03waazeX62szEc3mLw+TVr+8nevsNxIRjYj4JqLa2ba4+sfm4/Ufvzi1UPv8wurv9UFdX7etzY2fts//fPLy1NeLaXvdaHvefR0HKemxrppEvHcYxd4QSbXoM+BVTB+/dDvL/fsR8Vkr/7VI25E9Pf/W9Vp8dW6vfc88uPXhIM8VOHjNZi37Dmw0gdJJW8/ASToREflymk5M5M/wdyrD6X9z88fG/51bmP2n6JEKOCijERs/XB26MrIj//cref6BoyvL/6/TK3ez5e1K0WcDDMRH+SzL//hfS1+G/EPpyD+Ul/xDeck/HAH7zK78Q3nJP5SX/MMRVussNHpuln8oL/mH8pJ/KK/u/AMA5dIcKvoNZKAoRY8/AAAAAAAAAAAAAAAAAADAbsv1tZnONKiaN85GbH0fEdVe9Sut/yOOeLv1Ofwoybo9l+S79eXPT/o8QJ8uFvz29Tv3iq1/8+PDOe6JF5v1vfotzUY0ss6T1eru+y9p33/79+5Lttf+7rPAa0p2tL/9bbD1d3q6Umz9qfWIa9n4M9lr/Enjg9a89/gz2v0Ty/v0/5M+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAPAsAAP///YVqDQ==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r0, 0x2007ffb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r2 = open$dir(0x0, 0x0, 0x0) renameat2(r2, 0x0, r2, 0x0, 0x2) 1m12.312243954s ago: executing program 3 (id=954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7b6, &(0x7f0000001040)="$eJzs3U9oHOfZAPBn9Emxo4AJ+T7yGeM4Yzsf2HyusrtKlIoc0s1qJE0i7YrdVbEpJQmxXIyVP8SENj408SVpS0vpqcc015BLb4UeCj20PRWaQy89FAI5lRRaKC2loDKzu9ZK1j/Hkp2kv5+I3tl3nnnnmdnJPDtr7WwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJE0ZiqVanIkIpbPp9trzLRbizvMH4z3iw3NDuuNSIr/4vDhONrrOvo/67MfLH6diuO9R8fjcNEcjmv3PXj/k/89OjJYfoeEPq2Te4xLIt4qkrrywurqymsHkMgd9L2f3/Ii/1grfs9lzbzTyhfrc1mad1rp9NRU5dH52U46my9knQudbraYNtpZvdtqp2caZ9Pq9PRkmk1caC0352bqC9mg84kv1SqVqfSZiaWs3u60mo8+M9FpzOcLC3lzroypVb4ZRcwTxYH4bN5Nu1l9MU0vXV5dmdwt1SKouqHn0IYD5/gj93/8+kd/vbxSHJDbDZL0D8xatVqrVacen378iUpltFapbeyobBI3ImIkoog4kIOWz5H9O3nDbRrp1f+IhcijGctxPtJIY6T8vf4zFodjJtrRisXi8e/HNs2/qf7/36N//u1O6x2u/4Mqf3R99rEo6/+J3qMT29T/4qS8OY+D+2l+0MtmuO9qvBHX4kq8EKuxGivx2h3M51P9jOzveHORRTPy6EQr8liMetmT9nvSmI6pmIpKPBfzMRudSGM28liILDpxITrRjaw8ohrRjizq0Y1WtCONM9GIs5FGNaZjOiYjjSwm4kK0YjmaMRczUS9HuRSXy/0+uSmvB7/9fPLW7z5+t5i+EVTdYUOS4sVcEfSXHYL6xfzh2FP9v7d/LG+MUP+/aA73n+e9xu/XqRtu21pZ/0fvdhoAAADAAUrKd9+TiBiLh8qp2Xwh+9rdTgsAAADYR+XfNR8vmrFi6qFIiuv/yhaRH97x3AAAAID9kZSfsUsiYjwe7k0NPi611ZsAAAAAwOdQ+e//J4pmPOLNssP1PwAAAHzBfGe7e+x/dE//Hr2dpUPJf/Wjl84/krxUL6bqL/X7+s1Xb4zYnT2WHOkPUjZTo9fuSyJitJEdTwZ3v/zXoV77STnCsfUbEG53r/+k3R5Lrm+fQOycQPkovh8nezEnL/bai4M5vbWMz+YL2USjtfBkNem/OdJ9/eXL34oo1v7d5uKRJC5dXl2ZePGV1YtlLteLUa6/1L89fHILuaz190A8tPUWj5UfxOivd7y33srw9o/0Fh/ZeZ3J8DrfjlO9mFPjvXZ84/YfLtZZnXiyGvX6kZFudr77+trQ1vezqN7mlr8dp3sxp8+c7jVbZFHbkMXLN2dRG85ib/tiz1m8e/LN83/7VSvJJnfLYvI2swC4Wy6Vd/1Zr0L3llXon2s9Rf3fVHcHdzW/pbPcpfVXGYPlh2rdaOxPdX87zvRizvReT4we26KuVLY4o796+dVf98/oj73/4598/cRvfrp9dVtLds7i/TjbC+w38cAvb8qiGKJa7tkfbKqq7xVLvLdtVe0s1JIYi5HenMHslW+svFyrTU5VHqtUHq/FWPlSod+oPQBsYdfv2NnDt/A8tvVVdQwq3gM3/qRgIl6MV2I1Lsa58tMGEfHw1qOOD/0ZwrldrlrHh77h5dwu15brsbXNsYdOJ7FN7OTQHvvfH5XN3w/uOQGAg3Zqlzq8l/p/bpfr7o21/Gzvi3MHV8exfS3fypcPeocAwH+ArP1JMt59J2m386XnqtPT1Xp3PkvbrcazaTufmcvSvNnN2o35enMuS5farW6rMXjjeCbrpJ3lpaVWu5vOttrpUquTny+/+T3tf/V7J1usN7t5o7O0kNU7WdpoNbv1RjedyTuNdGn56YW8M5+1y4U7S1kjn80b9W7eaqad1nK7kU2kaSfLhgLzmazZzWfzYrKZLrXzxXr7ekQsLC9m6UzWabTzpW6rN+BgXXlzttVeLIeduHnz/3Sn9zcAfBZcfePalRdWV1de2zixlmzu2XriD3uIuRqxdrc3EwAYMlylAQAAAAAAAAAAAACAz6abP65X9O76kb7hibG4heBNE4fi0yz1xZ34/w96T8t+DHg749y74Tm9p3+w3P39c8sTzz/11JXtYp5+8+j8H7OI3cfZ+v+Uq/fddPTGO0ci7vnZD3s9X7lTW/ph9LYiRm9p8bVkh5i7dkoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG39OwAA///BfU8u") open(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) 1m12.043826123s ago: executing program 3 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@minixdf}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c746572000030000480080002406b10a61d140003007465616d5f736c6176655f3000000000080002404e73b858080001"], 0x130}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000300)=0x20001, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x3, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000c80)=ANY=[@ANYRESHEX], 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) iopl(0x3) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x1}, 0x2, 0xfe, 0x81, 0x12, 0x1e, 'syz1\x00', "2b5c618d4f320f5b758d8568492046873c628948827e41cf55ed4fe5f1556109", "4dc6e876912f6d4c1c14c5cd0c8a4af6ed28f520f7f440b031128f06d5bfaa68", [{0xfffc, 0x9, {0x85086420b70bdf80, 0xd}}, {0x6, 0x0, {0x1, 0x66}}, {0x6, 0x1, {0x2, 0x9}}, {0xfb, 0x0, {0x2, 0x7}}, {0x67, 0x35f, {0x0, 0x6}}, {0x24f, 0x2, {0x1}}, {0x9f6b, 0x0, {0x2, 0x1b5}}, {0xb, 0x1, {0x0, 0x6}}, {0x400, 0x881, {0x0, 0x7ff}}, {0x9, 0x7, {0x2, 0x59}}, {0x1000, 0x8000, {0x3, 0x3}}, {0x2, 0x8, {0x3, 0x238}}, {0x808, 0x4, {0x2, 0x7f}}, {0x9, 0xe5, {0x2, 0x262}}, {0x81, 0xfff, {0x2, 0x1}}, {0x4, 0x10, {0x0, 0x7fff}}, {0x1, 0x6, {0x3, 0x9}}, {0x12, 0x6, {0x0, 0x9}}, {0x4d, 0x4, {0x3, 0xa46}}, {0x9, 0x8, {0x3, 0xffff}}, {0x3, 0x7, {0x2, 0x6}}, {0x0, 0x401, {0x2, 0x10000}}, {0x4, 0x6, {0x2, 0xfffffff3}}, {0xf44a, 0xee5, {0x3, 0x6}}, {0xf, 0x4, {0x1, 0x8}}, {0xc466, 0x8000, {0x2, 0x8}}, {0x400, 0x401, {0x3, 0x401}}, {0x8000, 0x4, {0x1, 0x8}}, {0x1ff, 0x4f9, {0x2, 0xe1c}}, {0x6, 0x9, {0x1, 0xff}}, {0x6, 0x400, {0x2, 0x4}}, {0x6, 0x9, {0x3, 0xbc7e}}, {0x40, 0x40, {0x2, 0x5}}, {0xa, 0xffff, {0x3, 0x401}}, {0x4, 0x2, {0x3, 0x80000001}}, {0x1, 0x46, {0x0, 0x4}}, {0x8, 0x1, {0x3, 0x3ff}}, {0x8, 0x3ff, {0x0, 0x1e}}, {0x5, 0x7, {0x1, 0x9}}, {0x7, 0x7ff, {0x3, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040014) 1m11.995042233s ago: executing program 32 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@minixdf}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000300)=0x20001, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x3, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000c80)=ANY=[@ANYRESHEX], 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) iopl(0x3) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x1}, 0x2, 0xfe, 0x81, 0x12, 0x1e, 'syz1\x00', "2b5c618d4f320f5b758d8568492046873c628948827e41cf55ed4fe5f1556109", "4dc6e876912f6d4c1c14c5cd0c8a4af6ed28f520f7f440b031128f06d5bfaa68", [{0xfffc, 0x9, {0x85086420b70bdf80, 0xd}}, {0x6, 0x0, {0x1, 0x66}}, {0x6, 0x1, {0x2, 0x9}}, {0xfb, 0x0, {0x2, 0x7}}, {0x67, 0x35f, {0x0, 0x6}}, {0x24f, 0x2, {0x1}}, {0x9f6b, 0x0, {0x2, 0x1b5}}, {0xb, 0x1, {0x0, 0x6}}, {0x400, 0x881, {0x0, 0x7ff}}, {0x9, 0x7, {0x2, 0x59}}, {0x1000, 0x8000, {0x3, 0x3}}, {0x2, 0x8, {0x3, 0x238}}, {0x808, 0x4, {0x2, 0x7f}}, {0x9, 0xe5, {0x2, 0x262}}, {0x81, 0xfff, {0x2, 0x1}}, {0x4, 0x10, {0x0, 0x7fff}}, {0x1, 0x6, {0x3, 0x9}}, {0x12, 0x6, {0x0, 0x9}}, {0x4d, 0x4, {0x3, 0xa46}}, {0x9, 0x8, {0x3, 0xffff}}, {0x3, 0x7, {0x2, 0x6}}, {0x0, 0x401, {0x2, 0x10000}}, {0x4, 0x6, {0x2, 0xfffffff3}}, {0xf44a, 0xee5, {0x3, 0x6}}, {0xf, 0x4, {0x1, 0x8}}, {0xc466, 0x8000, {0x2, 0x8}}, {0x400, 0x401, {0x3, 0x401}}, {0x8000, 0x4, {0x1, 0x8}}, {0x1ff, 0x4f9, {0x2, 0xe1c}}, {0x6, 0x9, {0x1, 0xff}}, {0x6, 0x400, {0x2, 0x4}}, {0x6, 0x9, {0x3, 0xbc7e}}, {0x40, 0x40, {0x2, 0x5}}, {0xa, 0xffff, {0x3, 0x401}}, {0x4, 0x2, {0x3, 0x80000001}}, {0x1, 0x46, {0x0, 0x4}}, {0x8, 0x1, {0x3, 0x3ff}}, {0x8, 0x3ff, {0x0, 0x1e}}, {0x5, 0x7, {0x1, 0x9}}, {0x7, 0x7ff, {0x3, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040014) 44.371867384s ago: executing program 4 (id=1503): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0x0) getrlimit(0x4, &(0x7f0000000dc0)) 43.698902121s ago: executing program 4 (id=1510): r0 = syz_open_dev$rtc(&(0x7f0000000380), 0xffffffffffff23ed, 0x103000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, 0x0, 0x20000000) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@broadcast, @initdev}, &(0x7f0000000540)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14801}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x168, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x148, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x168}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="aed32771", @ANYRES16=r10, @ANYBLOB="05020000000000000000120000000c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0xc, 0x10, 0x0, @mcast2, @mcast2, 0x40, 0x8000, 0xea, 0x1}}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xc33) syz_emit_ethernet(0x82e, &(0x7f0000001100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7f8, 0x2b, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@hopopts={0x89, 0xfc, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x9, 0xf7, "79f718cd082bb66ffb27540e7af860dd9e6ee4e3c8e66545f9bcc4710e26ba8070b5ef58e1e2d33338a21d518590fdef3d2137e741316128acff57f4f6c034c89b7ce4fd9420ef4f0e9c68fc13edcb19ef952b706c28f9e6cbd028b945c54a68d66d491c2e91b888fbaa4f5e4d5d723f45eaa8d6c8ad48d90b91682197819cbd279f4d877a0f3cd7cf94822c03b8bfa7366e2acb95da150db4b7cacc724787687e0b2fe9c01555683bcb6ccb07924fdeb55f0666018f3d819c3dfd512f4c0777e563c1e6489c78d5812ba2f3f770096cde1c243c570a1d8d64caa99e841cf5ba420bfd2f4e7ab222c764e28066ba90655f1b2df13c1516"}, @generic={0x14, 0x6d8, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 43.660611681s ago: executing program 4 (id=1512): gettid() socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=@polexpire={0x174, 0x1b, 0x414, 0x70bd28, 0x25dfdbfe, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x4e21, 0xc, 0x0, 0xa0, 0x20, 0x5c, 0x0, 0xee01}, {0x7fffffff, 0x9, 0x4a, 0x7, 0x1, 0x0, 0x8891324, 0x9}, {0xfffffffffffffff8, 0x8000000000000001, 0x2, 0x5}, 0x10, 0x6e6bb3, 0x2, 0x1, 0x2, 0x2}, 0xe}, [@coaddr={0x14, 0xe, @in6=@loopback}, @algo_crypt={0x9d, 0x2, {{'cbc(des3_ede)\x00'}, 0x2a8, "1642158ed2102d00506a52d1818566d64d5e26cfa593dd7ca3cb0a700df777a399756fb96c9cefaaa54524e3c89c58a971ed1dbdf4a2fea732f8b7bbf64ff3781874fe3e90baacb774a43fb13b61f97d1119ef1173"}}]}, 0x174}, 0x1, 0xe}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000019e00)=""/102399, 0x1902b}], 0x1, 0x5, 0x100000) (fail_nth: 7) 43.36748505s ago: executing program 4 (id=1518): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f0000000140)={[{@nomblk_io_submit}, {@inode_readahead_blks}, {@mblk_io_submit}, {@nobarrier}, {@errors_remount}]}, 0x2, 0x4e8, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) move_mount(r1, 0x0, r1, 0x0, 0x0) umount2(0x0, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000f4a5ffff0000000074d36ab40db1c7d470bcfa746d9001000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001c000000000000000000000085000005397992435c3c9bb99c006d00000095", @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="9a967a18b0f7ae056d8922426d56cb176b98c7035a5922a31395dc4b25a5b725f925f7d173b3a21727c4a867c2411090d6422b055508dcb894c718291fac0b6a2db69383cf7b99c58812a098cc043ea24abead56f4d64df65128897a517419a1f17ec9b511e9cf80", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001c000000000000000000000085000005397992435c3c9bb99c006d00000095", @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="9a967a18b0f7ae056d8922426d56cb176b98c7035a5922a31395dc4b25a5b725f925f7d173b3a21727c4a867c2411090d6422b055508dcb894c718291fac0b6a2db69383cf7b99c58812a098cc043ea24abead56f4d64df65128897a517419a1f17ec9b511e9cf80", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000009c0)={0x81, 0x9}) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1d, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x29}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0x2, 0x3, 0x1, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xee}, @ldst={0x0, 0x3, 0x0, 0x9, 0x94c2bfe6c297114e, 0xffffffffffffffc0}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @exit, @alu={0x7, 0x0, 0x1, 0x2, 0x3, 0xffffffffffffffcc, 0x14}, @generic={0x80, 0x0, 0x0, 0x2740, 0xffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xe, 0x2, 0x8e8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000340)=[{0x1, 0x4, 0x3, 0xb}, {0x0, 0x5, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1d, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x29}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @jmp={0x5, 0x0, 0x2, 0x3, 0x1, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xee}, @ldst={0x0, 0x3, 0x0, 0x9, 0x94c2bfe6c297114e, 0xffffffffffffffc0}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @exit, @alu={0x7, 0x0, 0x1, 0x2, 0x3, 0xffffffffffffffcc, 0x14}, @generic={0x80, 0x0, 0x0, 0x2740, 0xffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xe, 0x2, 0x8e8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000340)=[{0x1, 0x4, 0x3, 0xb}, {0x0, 0x5, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r3, 0x37, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r3, 0x37, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, r4, 0x13, 0x8, 0x0, @void, @value, @void, @void, r5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_MCE_KILL_GET(0x22) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socket$inet(0x10, 0x3, 0xc) 43.171700319s ago: executing program 4 (id=1525): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRESOCT=0x0], 0x0, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.980069599s ago: executing program 4 (id=1531): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0xb}, 0x800082, 0x40, &(0x7f0000000000)="7dcbbd", 0xffffffffffffffbd, 0x0, 0x80000000, 0x2, 0x7ff, 0xda85, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0, {0x83, 0xfffffff7}}, './file0\x00'}) r2 = syz_io_uring_setup(0x49ba, &(0x7f0000001f80)={0x0, 0x0, 0x4, 0x4, 0xfffffffd, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000001f40)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30120}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000f, 0x11, r5, 0xe9d03b5cb43efe02) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=""/184, 0xb8}, 0x7}, {{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/56, 0x38}, {&(0x7f0000001480)=""/158, 0x9e}], 0x2, &(0x7f0000001580)=""/97, 0x61}, 0x40}, {{&(0x7f0000001600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/98, 0x62}], 0x1}, 0x436}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000001d00)=[{&(0x7f00000017c0)=""/109, 0x6d}, {&(0x7f0000001840)=""/130, 0x82}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/137, 0x89}, {&(0x7f0000001a40)=""/146, 0x92}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/43, 0x2b}, {&(0x7f0000001c40)=""/168, 0xa8}], 0x8, &(0x7f0000001d80)=""/32, 0x20}}], 0x4, 0x2000, &(0x7f0000001ec0)={0x77359400}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000000000000000700"/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) setsockopt$inet6_udp_int(r8, 0x11, 0x65, &(0x7f0000000040)=0x7ff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002000)={r5}, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f0000000100)=[{0x10, 0x0, 0x4}, {0x72, 0x8, 0x25, 0x7}, {0xf, 0x53, 0x5, 0x7159683f}, {0x4, 0x0, 0xd, 0x3}, {0x8, 0x8, 0x3}, {0x9, 0xd, 0x0, 0x5}, {0x10, 0x5, 0x81, 0x5471}, {0x3, 0x3, 0x2, 0xffff}, {0x0, 0xde, 0xd, 0x2}]}) 42.936574929s ago: executing program 33 (id=1531): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0xb}, 0x800082, 0x40, &(0x7f0000000000)="7dcbbd", 0xffffffffffffffbd, 0x0, 0x80000000, 0x2, 0x7ff, 0xda85, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0, {0x83, 0xfffffff7}}, './file0\x00'}) r2 = syz_io_uring_setup(0x49ba, &(0x7f0000001f80)={0x0, 0x0, 0x4, 0x4, 0xfffffffd, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000001f40)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30120}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000f, 0x11, r5, 0xe9d03b5cb43efe02) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=""/184, 0xb8}, 0x7}, {{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/56, 0x38}, {&(0x7f0000001480)=""/158, 0x9e}], 0x2, &(0x7f0000001580)=""/97, 0x61}, 0x40}, {{&(0x7f0000001600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/98, 0x62}], 0x1}, 0x436}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000001d00)=[{&(0x7f00000017c0)=""/109, 0x6d}, {&(0x7f0000001840)=""/130, 0x82}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/137, 0x89}, {&(0x7f0000001a40)=""/146, 0x92}, {&(0x7f0000001b00)=""/200, 0xc8}, {&(0x7f0000001c00)=""/43, 0x2b}, {&(0x7f0000001c40)=""/168, 0xa8}], 0x8, &(0x7f0000001d80)=""/32, 0x20}}], 0x4, 0x2000, &(0x7f0000001ec0)={0x77359400}) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000000000000000700"/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) setsockopt$inet6_udp_int(r8, 0x11, 0x65, &(0x7f0000000040)=0x7ff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002000)={r5}, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x9, &(0x7f0000000100)=[{0x10, 0x0, 0x4}, {0x72, 0x8, 0x25, 0x7}, {0xf, 0x53, 0x5, 0x7159683f}, {0x4, 0x0, 0xd, 0x3}, {0x8, 0x8, 0x3}, {0x9, 0xd, 0x0, 0x5}, {0x10, 0x5, 0x81, 0x5471}, {0x3, 0x3, 0x2, 0xffff}, {0x0, 0xde, 0xd, 0x2}]}) 1.098899694s ago: executing program 0 (id=2382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmmsg$inet(r1, &(0x7f0000000600), 0x0, 0x2000c044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.086137014s ago: executing program 0 (id=2385): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x23}], 0x1) fcntl$getown(r0, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) io_setup(0x33d, &(0x7f0000000400)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 991.607213ms ago: executing program 2 (id=2388): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000380)='./file1\x00', 0x980, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0xdb41}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2) fallocate(r0, 0x1, 0x0, 0x1001f0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2000000d3b, 0xd, 0x4, 0x400, 0x7, 0x6, 0x7, 0x4, 0x6}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000780)='user\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='-\xd2]\xcc!\x00', 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}}}, 0x24}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000006cc0)={'gretap0\x00', &(0x7f0000006c00)={'tunl0\x00', 0x0, 0x700, 0x7800, 0x4, 0x4, {{0x24, 0x4, 0x2, 0x3, 0x90, 0x64, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x36}, {[@rr={0x7, 0x1f, 0x1e, [@loopback, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @private=0xa010102]}, @lsrr={0x83, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}, @generic={0x44, 0x3, "1b"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2f, 0x3, [{0x0, 0x2}, {0x1, 0x6, "d747595e"}, {0x3, 0x11, "8fcc386081aeffa7b28773ea68e386"}, {0x0, 0x10, "117cfc012cf1f26f21bf1970cd7e"}]}, @timestamp={0x44, 0x10, 0xc9, 0x0, 0x2, [0x6, 0x7000000, 0xfffff505]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r12, 0x2) 981.864743ms ago: executing program 6 (id=2391): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5}, {0x5}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/190, 0x3b, 0xbe, 0x8, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "c97dc5"}]}], {0x14}}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 977.897753ms ago: executing program 2 (id=2392): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 914.948703ms ago: executing program 2 (id=2393): getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r0, 0x14c4, 0x7246, 0x1, 0x6}, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x8001, 0x2, 0x9, r2}, 0x10) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x402000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10) fchmodat(r4, &(0x7f0000000280)='./file0\x00', 0x1) sendto$inet6(r4, &(0x7f00000002c0)="8b028379cc67ebfe8872a72368be5d0b544d805fcd6e9a81be43c9df04cf059d3e29991e7bb658a39033338c1cd5228a83bc5478cc2b4d0f85b3e69cf90d61244dfc8ce002d15bc52dad20d5a64a28dce27e04d850a009f5c0ddd271e7b58222a40f13af7ecd80e50d96ba320f24aa03a3ead03ba5a7edc7a280251821ed23a2b8ed469631deef4f", 0x88, 0x40810, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3a2}, 0x1c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r6, &(0x7f00000003c0)="600adc0e26c5c51594e7854640a54bb336091dfddb4e4b38500d92310b536ce445e4e89fc1000ae9c2d8393d96fc7449b2e3fdc96d8e1ee85328caf059c954448860df0faca5c210d50df05fe0b06797c8c6663f5fc872", 0x57, 0x20040000, &(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10) cachestat(r4, &(0x7f0000000480)={0x5, 0x81}, &(0x7f00000004c0), 0x0) futex(&(0x7f0000000500), 0x2, 0x1, &(0x7f0000000540), &(0x7f0000000580), 0x0) getdents64(r3, &(0x7f00000005c0)=""/45, 0x2d) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0', [{0x20, ':'}, {0x20, '-'}, {0x20, '/'}, {0x20, '\x00'}], 0xa, "9a9e954904ebb08bbc6d294e4e4f546bd68af4aa8724836221056a08ca3fa03af9a9321a30001e1e955d88056147a963297e97cca67d355a"}, 0x4b) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000006c0)={@rand_addr=0x64010100, @multicast2}) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000700)=0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)=0x0) connect$nfc_llcp(r7, &(0x7f0000000780)={0x27, r9, 0x0, 0x7, 0x1, 0x2, "e0f2f1f8061eaf67623de5e8f9c6c4dfa18b84ff9c543a54d7a166ac964dd28a1c333425d03e11da16a192effbcbaa66717d8baec6fbbda50941a885d15ddc", 0x1d}, 0x60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000840)={0x4, &(0x7f0000000800)=[{0x4, 0x80, 0x3, 0x8}, {0x3, 0x9, 0xdd, 0xfffffc01}, {0xd, 0x2, 0x5, 0x4}, {0x7, 0x6, 0x7, 0xfffffff9}]}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000008c0)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000900)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@gettfilter={0x54, 0x2e, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x1, 0xd}, {0x7, 0xb}, {0xb, 0xa}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000024}, 0x80) socket$kcm(0x29, 0x7, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x7f, 0x10}, 0xc) writev(r11, &(0x7f0000000d00)=[{&(0x7f0000000a80)="8a341e198cc30f03fe2dae00c070b5c5559a858fc6704e7d5fbed82ee9504a6b6939fd8f6a8b33f0084dd3e905d82b197968a4367e28a246d24831357512099560c87c95883d9ee33866e4ae3682cc4be6c9c0d52ecd7a5a2e2c72613aca99f1458902217862aaaf0bf009c28abe7dd830e53f936eacfb8d07f256eb6481a62a0501d5c36bd145cf8af9cec460a5c78f258b6d1cb5bdba0f162384a0724fa80f839b747de080881208df2e06a0dfaa67d656751381c82efc365add6ff6bd0913", 0xc0}, {&(0x7f0000000b40)="bfccb7ce6222697e46abdaa0b8f2cd5ff1bee56be73b41cc49aaeafc5f36aa9e659f69deef7b71db75fa12456e2b2d856d909fcc1cb96061da8d38b8036a4b", 0x3f}, {&(0x7f0000000b80)="6017d88c40b88c5ab15c094aa667533e5d0221de14cf40f0bc3b5f2cc617103d8d6b0c22690080b3bbae27a104b9cdda890fe97b4f70c8e4eedc226d40fb66c0520a32b5fe646061583c4f38a75c104681aa21e25ead124597ea62122fb533ee78cb1bf395", 0x65}, {&(0x7f0000000c00)="bd1ab2ecf86f8c5d20edb491c9127b347a0a703694e828377986b3abe7a8c83115ef51df", 0x24}, {&(0x7f0000000c40)="6402cb027fb0300d48e2d085dfb3cb022424a4482a0004db02e7e723d90a7442de8aa0c9910efcc3352bbf3b3b933a2d6486ab9df000baf30c57826aae11e8deeb6a40a813516c9c07d9b881c2e50485e0277e59129568fd2a72e751a2f72c1999e23c3e08b783b071568441fb46f35ffe4aa5f4b6e39cd8fc0c2ef212fccfd857d38b8afa354125e25f11fe1f5d237a9711d203438d386132c0686da15bfefbdb4b1cd9a5ce14f5357910faba1c9c527b46dc0d0d", 0xb5}], 0x5) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x54, 0x0, 0x400, 0x70bd25, 0x5, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 903.708093ms ago: executing program 6 (id=2395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmmsg$inet(r1, &(0x7f0000000600), 0x0, 0x2000c044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 869.461863ms ago: executing program 2 (id=2396): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4000000) 868.710643ms ago: executing program 2 (id=2397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@minixdf}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000300)=0x20001, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x3, 0x4) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000c80)=ANY=[@ANYRESHEX], 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) iopl(0x3) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x1}, 0x2, 0xfe, 0x81, 0x12, 0x1e, 'syz1\x00', "2b5c618d4f320f5b758d8568492046873c628948827e41cf55ed4fe5f1556109", "4dc6e876912f6d4c1c14c5cd0c8a4af6ed28f520f7f440b031128f06d5bfaa68", [{0xfffc, 0x9, {0x85086420b70bdf80, 0xd}}, {0x6, 0x0, {0x1, 0x66}}, {0x6, 0x1, {0x2, 0x9}}, {0xfb, 0x0, {0x2, 0x7}}, {0x67, 0x35f, {0x0, 0x6}}, {0x24f, 0x2, {0x1}}, {0x9f6b, 0x0, {0x2, 0x1b5}}, {0xb, 0x1, {0x0, 0x6}}, {0x400, 0x881, {0x0, 0x7ff}}, {0x9, 0x7, {0x2, 0x59}}, {0x1000, 0x8000, {0x3, 0x3}}, {0x2, 0x8, {0x3, 0x238}}, {0x808, 0x4, {0x2, 0x7f}}, {0x9, 0xe5, {0x2, 0x262}}, {0x81, 0xfff, {0x2, 0x1}}, {0x4, 0x10, {0x0, 0x7fff}}, {0x1, 0x6, {0x3, 0x9}}, {0x12, 0x6, {0x0, 0x9}}, {0x4d, 0x4, {0x3, 0xa46}}, {0x9, 0x8, {0x3, 0xffff}}, {0x3, 0x7, {0x2, 0x6}}, {0x0, 0x401, {0x2, 0x10000}}, {0x4, 0x6, {0x2, 0xfffffff3}}, {0xf44a, 0xee5, {0x3, 0x6}}, {0xf, 0x4, {0x1, 0x8}}, {0xc466, 0x8000, {0x2, 0x8}}, {0x400, 0x401, {0x3, 0x401}}, {0x8000, 0x4, {0x1, 0x8}}, {0x1ff, 0x4f9, {0x2, 0xe1c}}, {0x6, 0x9, {0x1, 0xff}}, {0x6, 0x400, {0x2, 0x4}}, {0x6, 0x9, {0x3, 0xbc7e}}, {0x40, 0x40, {0x2, 0x5}}, {0xa, 0xffff, {0x3, 0x401}}, {0x4, 0x2, {0x3, 0x80000001}}, {0x1, 0x46, {0x0, 0x4}}, {0x8, 0x1, {0x3, 0x3ff}}, {0x8, 0x3ff, {0x0, 0x1e}}, {0x5, 0x7, {0x1, 0x9}}, {0x7, 0x7ff, {0x3, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040014) 854.772553ms ago: executing program 6 (id=2398): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r3, r0, 0x0) 749.967173ms ago: executing program 2 (id=2399): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) wait4(0x0, 0x0, 0x20000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x6, 0x3, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x7) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x210080, 0x0) fchmodat(r4, &(0x7f0000000340)='./file0/file0\x00', 0x140) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = msgget$private(0x0, 0x3a9) setreuid(0x0, 0xee01) msgrcv(r5, 0x0, 0x0, 0x2, 0x0) 732.790802ms ago: executing program 6 (id=2402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1780, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) r2 = socket$pppoe(0x18, 0x1, 0x0) unshare(0x60600) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, &(0x7f0000001600)=""/4081, 0x7, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 711.178592ms ago: executing program 5 (id=2403): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x4010, 0x0, 0xac8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<00||!') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xcd, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}}, 0x20000080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 651.167112ms ago: executing program 6 (id=2404): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x25) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001400)=@gcm_256={{0x304}, "2f0e6a8580c04c5f", "8bb8cc6754fa3be7b4646005bedb2dadc86e2dd53d379b1971a6862ab7d288de", "d62aadfe", "9af5af8935f788b6"}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 650.816612ms ago: executing program 6 (id=2405): socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x8}, 0x100200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3df, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000880)={0x4, &(0x7f00000008c0)=[{0xfffc, 0x9, 0x3, 0xc}, {0x9, 0x7, 0xce, 0x8}, {0xf7, 0x9, 0x0, 0x5}, {0x5, 0x5, 0x7f}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x6c825000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001900000029"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10084) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x2000000) 650.479942ms ago: executing program 1 (id=2406): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000000000000000065cd850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f0000000380)=@caif=@dbg={0x25, 0xd, 0x8}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x120c480, &(0x7f0000000c80), 0x3, 0x4ff, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000200)={0x2, 0x8, 0x8, 0xb8cb, 0xfff, 0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 646.731822ms ago: executing program 5 (id=2407): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4000000) 620.801152ms ago: executing program 5 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmmsg$inet(r1, &(0x7f0000000600), 0x0, 0x2000c044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 583.760992ms ago: executing program 1 (id=2409): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x884) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x0, 0x6, 0x4, 0x3, 0x3e, 0x2, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x6, 0x4, 0x8, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], "8b197dc9ec"}, 0x7d) close(r1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfe33) 583.242212ms ago: executing program 1 (id=2410): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0xfffffffffffffef4, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2040080) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) syz_open_procfs$pagemap(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601011000000000000000008a0000050001000700"], 0x1c}}, 0x0) fallocate(r2, 0x0, 0x0, 0x20000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380)=0x5, 0x12) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa000000000000000000000000ac14140000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000000000000000bf5900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000000000000000000000480003006c7a7300"], 0x138}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r6}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000040)={"d5b788debd736de6ca4ba94f98fd8589", 0x0, 0x0, {0x2, 0x5}, {0x2, 0x80000001}, 0x1, [0x3, 0x20005, 0x3, 0x5e, 0x3ff, 0xd940, 0x5, 0x0, 0x6, 0x0, 0xbe, 0xc, 0x3, 0x9, 0x2667, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000001340)={{r10}, 0x0, 0x0, @inherit={0x78, &(0x7f0000000300)=ANY=[]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001980)={0x17, 0x7, {0x8000, @usage=0x40, 0x0, 0x1, 0x5, 0xf9c5, 0x3, 0x423, 0x1, @usage=0x519f52f6, 0x0, 0x331, [0x7f, 0x1, 0x40ea, 0x4, 0x6, 0xffffffffffffffff]}, {0x372, @struct={0x5, 0x8}, 0x0, 0x1, 0x10001, 0xffffffff, 0x100000001, 0x8000000000000000, 0x21, @usage=0x7, 0x3ff, 0x6a8a, [0xffffffffffff7fff, 0x9d, 0x0, 0x1, 0xcf, 0x1000]}, {0xffff, @struct={0x43d4, 0x6}, 0x0, 0x52, 0x7, 0x3, 0x3bc, 0x800000006, 0x22, @struct={0x102, 0x5}, 0xfffffff8, 0x9db7, [0x7, 0x3, 0x8, 0x8, 0x4b99, 0x2]}, {0x800000007fffffff, 0xfffffffffffffff7, 0x7f}}) 581.952772ms ago: executing program 5 (id=2411): link(&(0x7f0000001bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000004800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 567.669232ms ago: executing program 5 (id=2412): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0cba16f3bf7a37d9f9c4c6487fd180babe8211a947942a7b91bca384286c8daaadffed6796edfc843f729dea3ad444463f94992f09333f5ef556250482b12d4a2a9e83ff010c2284f72c04064856", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000e80)='mmap_lock_acquire_returned\x00', r1}, 0x18) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x20000002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000280), 0x12) r5 = openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r6 = getpid() process_vm_readv(r6, &(0x7f0000000880)=[{&(0x7f0000000580)=""/52, 0x34}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/133, 0x85}], 0x5, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000980)=""/46, 0x2e}, {&(0x7f00000009c0)=""/28, 0x1c}, {&(0x7f0000000a00)=""/44, 0x2c}, {&(0x7f0000000a40)=""/136, 0x88}], 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='host1x_cdma_push_gather\x00', r8}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x9, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x2000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010004, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000380), &(0x7f0000000500)=0x4) 430.260241ms ago: executing program 1 (id=2413): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)}], 0x1, 0xfffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r3, r0, 0x0) 429.956831ms ago: executing program 1 (id=2414): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x50, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r4 = open$dir(&(0x7f0000005800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x401, 0x162) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000001000)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, 0x1000, 0x0, {0x0, r5}}) link(&(0x7f0000001bc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000004800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 429.651131ms ago: executing program 5 (id=2415): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (fail_nth: 3) 379.720701ms ago: executing program 1 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x36e, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/871], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000001b0000000000000000000000000000000000000089e012a16f8d957d2a2eed153771e6fb52d520f6092f69f01f8836f695e4e62cc2deaa95e8e9ad2f8c550b49c269427fe61640aee5c05384c9f26b97a4c95d3a8ee85f2c109776b32589a8683f6031ab98fd0ea6e31c31fb1a6b976b67657c954ff5d38f13f6d5ed7311a2b2e2aa860bcee345a2c51b6792500597d6f7d71283bae95b8c13edac860297b0ea64bf71cf16e4de8143b4c899cf771932c142916439b111cde668be906ffec96a14afcd82db963ae449b3b9e68df1"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) unshare(0x8000480) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) socket$nl_route(0x10, 0x3, 0x0) 159.10155ms ago: executing program 0 (id=2417): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000004c0)="89a6eba5bf", 0x5}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000fc0)={0x1804, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_TID_CONFIG={0xec, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400040000000}]}]}, @NL80211_ATTR_TID_CONFIG={0x884, 0x11d, 0x0, 0x1, [{0x2d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x1}, {0x7, 0x8}, {0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x6, 0x9}, {0x4}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0x1, 0x8001, 0x4, 0x100, 0x800, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x7}, {0x6, 0x5}, {0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x9}, {0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x7}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x9}, {0x1}, {0x1, 0x7}, {0x7}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x5, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x114, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x6}, {0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0x7}, {0x7, 0x9}, {0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x2, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x7}, {0x0, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x8}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x4, 0x1ff, 0x8001, 0x7, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x55c, 0x8fe, 0x9, 0x1, 0x9, 0x2, 0x8fd]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x4}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x4}, {0x2, 0x3}, {0x4, 0x3}, {}, {0x6, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x6c, 0xc, 0x1b, 0x1b, 0x18, 0xc, 0xb, 0x2, 0x6c, 0x16, 0x24, 0x9, 0xb, 0x1, 0x1b, 0x36, 0x48, 0x5, 0xb, 0xb, 0xb, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x6}, {0x7}, {0x6, 0x6}, {0x6}, {0x3, 0x6}, {0x1}, {0x4, 0x6}, {0x2, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {}, {0x7}, {0x4, 0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x4, 0xa}, {0x2, 0x6}, {0x6}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4, 0x6, 0xa7f, 0x2feb, 0x7fff, 0x2, 0x3]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x1, 0x1, 0x16, 0x30, 0x48, 0x30, 0x36, 0x18, 0x48, 0xb, 0xc, 0xb, 0x1b, 0xb, 0x6c, 0x3, 0x18, 0x24, 0x6c, 0x36, 0x24, 0x1b, 0x36, 0x36, 0x36, 0x5, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x390, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x358, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xf1, 0x4, 0x2, 0x100, 0xff00, 0x5, 0xa11]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4000, 0x4, 0x23, 0x5, 0x0, 0x401, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x2, 0x5, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x3, 0x4, 0x9, 0xe7a, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x4, 0x8}, {0x1}, {0x7, 0x1}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2}, {0x7, 0x6}, {0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x16}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x5, 0x18}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x1}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x5}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x4}, {0x7, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x9, 0x60, 0x3, 0x3b, 0x36, 0x1, 0xb, 0x16, 0x1b, 0x30, 0x5, 0xc, 0x24, 0x60, 0x36, 0x5, 0xb, 0x24, 0x18, 0x30, 0xe, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6c, 0x16, 0xb, 0x24, 0x1, 0x24, 0x5, 0x36, 0x1, 0x18, 0xc, 0x5, 0x41, 0x1, 0x18, 0x5, 0x1, 0x24]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x1, 0x0, 0x1000, 0x4, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x7}, {0x7}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {}, {0x4, 0x4}, {0x6, 0x1}, {}, {0x4, 0x6}, {0x3, 0x18}, {0x4, 0x7}, {0x6}, {0x4, 0x8}, {0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0xa}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0xa}, {0x2}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x36, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x7}, {0x6, 0x6}, {0x4, 0xa}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x7, 0x7}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb9a2, 0x8, 0x3, 0x1, 0x4, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x35, 0x5, 0x18, 0x60, 0xc, 0x12, 0x3, 0x3, 0x16, 0xc, 0x30, 0x18, 0x2, 0x5, 0x60, 0x30, 0x3, 0xb, 0x60, 0x12, 0x16, 0xc, 0x48, 0x6, 0x16, 0x48, 0x1a, 0x16, 0x6, 0x2, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xffff, 0x9, 0x8, 0x3, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x5, 0x2, 0x9437, 0x2, 0x7ff, 0x6]}}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x1}, {0x2, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x4}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x8}, {0x4, 0x7}, {0x2}, {0x1}, {0x2, 0x2}, {}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x800, 0x5, 0xec, 0x0, 0x6808, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x101, 0x0, 0x5, 0x457, 0x5, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x1, 0x12, 0x30, 0x6c, 0x1, 0xe42c8304a88d556d, 0xb, 0x4, 0x30, 0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x18, 0x12, 0x6c, 0x1b, 0x4, 0x4, 0x6, 0x1b, 0x12, 0xe9500f5cd95f81fa, 0x6, 0x30, 0x2, 0x1, 0x12, 0x36, 0x5, 0x24, 0xb, 0xb, 0x1c, 0x2, 0x1b, 0x24, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x2}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x7, 0x6}, {0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0x2}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {}, {0x3, 0x6}, {0x7, 0x4}, {0x2, 0x8}, {0x7, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x6}, {0x7, 0xa}]}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x86c, 0x6, 0x7, 0x2, 0x0, 0x7, 0xb, 0xea]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd60, 0x1, 0x5, 0x486, 0x9, 0x3, 0x2]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xce98, 0x7fff, 0x0, 0x700, 0x4, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x30, 0x18, 0x16, 0xc, 0x6, 0x12, 0x6, 0x4, 0x0, 0x9, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x0, 0x9, 0x80, 0x7f, 0x1000, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x641, 0x5, 0x2, 0x5, 0x3, 0x10, 0x9, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x9, 0x0, 0x12, 0x0, 0x5, 0x1b, 0x18, 0x4, 0x9, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x10, 0x802, 0x7, 0x8, 0x10, 0xf, 0x3653]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x2, 0x9, 0xcc66, 0x9, 0x5, 0x94ae]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x16, 0x9, 0x18, 0x18, 0x5, 0x63, 0x18, 0x6, 0x1, 0x45459b94744f7583, 0xb, 0x5, 0x2, 0x36, 0x9, 0x4, 0x24, 0x0, 0x9, 0x6, 0x5, 0x9, 0x3, 0x5, 0x16, 0x60, 0x6c, 0x6c]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x4}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd1b1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7da}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb359}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xce4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1480000000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x0, 0x885, 0x1915, 0x9, 0x3ff, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xf4c, 0x9, 0x5, 0x1ff, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x1, 0x18, 0x30, 0xb, 0x2, 0x9, 0x2, 0xc, 0x48, 0x12, 0x1b, 0x16, 0x60, 0x5, 0x4, 0xc, 0x1b, 0x24, 0x1b, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x7}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x8}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x1}, {0x5}, {0x7, 0xa}, {0x4, 0x3}, {0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0x5}, {0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x9}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x36, 0x30, 0x2, 0x5, 0x24, 0x36, 0x18, 0x9, 0x16, 0x6c, 0x16, 0x6c, 0x18, 0x16, 0xe, 0x12, 0x5, 0x6c, 0x8, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff9, 0x606e, 0x7, 0xfff9, 0x6, 0x8, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x9, 0x5, 0x2c, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x7, 0x4, 0x9, 0xa132, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x53c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0xc, 0xa, 0x1000, 0xffff, 0xa11f, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x4}, {0x7, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x2}, {}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x5}, {0x3, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x2, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {}, {0x2, 0x8}, {0x2, 0x6}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7b08, 0x200, 0x6, 0x7, 0x1ff, 0xca4b, 0x2c, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0x7f, 0x6, 0x2, 0xfffd, 0x543, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x6c, 0x6c, 0x4, 0x36, 0x36, 0x1, 0x60, 0x4f, 0x5, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6863, 0x2, 0xfffa, 0x7, 0x100, 0x7, 0x800]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x800, 0x81, 0x9, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x9}, {0x2, 0x9}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x5}, {0x0, 0x3}, {0x3}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x5}, {0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x1}, {0x5, 0xa}, {0x3, 0x3}, {0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xff, 0x0, 0x2, 0x6, 0x8, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x16, 0xc, 0x3, 0x18, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa3, 0x200, 0x7, 0x0, 0x3, 0x9, 0x8a]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x3, 0xf, 0x2c3, 0x7, 0x84b4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0x9, 0x6c, 0xc0, 0x4, 0xe366, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x4, 0x60, 0x5, 0x6c, 0xb, 0x60, 0x24, 0x6, 0x2, 0x2, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x36, 0x36, 0x0, 0xc7bd7980ffe9428e, 0x4, 0x24, 0x3f]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8000, 0x0, 0x0, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x8}, {0x2, 0x4}, {0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x2}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0x9}, {0x2, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x1d}, {0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x30, 0x0, 0x5, 0x12, 0x73730a09e936d7e4, 0x10, 0x12, 0x30, 0x4, 0x5, 0x5, 0x12, 0x1b, 0x12, 0x3, 0x64, 0x1b, 0x4, 0xf, 0xb, 0x1, 0x36, 0x16, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x5, 0x4, 0x8, 0x7, 0x5, 0xc5a8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x4}, {0x2, 0x2}, {0x2}, {0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x2}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x3, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0x1}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xfff, 0x8, 0xe71, 0x4, 0x9, 0x3]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x70, 0x8, 0x9, 0x800, 0xc, 0x4]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x9, 0x1000, 0x96, 0x9, 0x0, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x7fff, 0xfebc, 0xfff7, 0x0, 0xf0, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7a0, 0x7, 0xd, 0x1ff, 0x6, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x2b25, 0x2, 0xdba, 0x1, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x705}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe05}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xca}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d8, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x17a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x19, 0xb, 0x9, 0x30, 0x1, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x4}, {0x6, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0xa}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0x5}, {0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x7}, {0x1}, {0x4, 0x17}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd8f, 0x2, 0x400, 0x0, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0xf5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3410, 0x7, 0x5, 0x8, 0x1, 0x4, 0x151d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xfff4, 0x1000, 0x5, 0x8, 0x8001, 0x6]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0xfa, 0x889f, 0x8, 0x8, 0x556d, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0x9}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x7}, {0x4}, {0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb9b, 0x8, 0x8000, 0x71, 0x2, 0x1, 0x800, 0x8]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x10}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc294, 0x9, 0x4794, 0x25, 0x8, 0xfff, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6f9, 0x1, 0x2, 0x7953, 0xb, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x6, 0x5, 0x5, 0x6b, 0xc, 0x24, 0x60, 0x9, 0x1, 0x16, 0x30, 0x4, 0x2, 0x12, 0x1, 0x0, 0xc, 0x9, 0x12, 0x12, 0x16, 0x9, 0x6c, 0x5, 0x2, 0x3, 0x2, 0x2, 0x5, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x3, 0xd, 0x0, 0x7, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x88f, 0x4, 0x1, 0x6, 0x6896, 0x2000, 0x4d, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0xde0, 0x3, 0x7, 0x1, 0x9, 0xa279, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x2, 0xe, 0x8, 0x7, 0x400, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xb, 0x1, 0x1, 0x3, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4, 0xd9, 0x374, 0x2f, 0xfff, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x5, 0x4, 0x17, 0xa, 0x7f, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b4, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb9b, 0x3, 0xf3, 0xa, 0x5, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x6, 0x8, 0x9, 0x7ff, 0x4, 0x2, 0x8]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2f83, 0x8001, 0x6, 0x6, 0x9, 0x8, 0xff, 0xaab9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd3d, 0x8, 0x5, 0x1, 0x47, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x4}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x5}, {0x3, 0x7}, {0x2}, {0x2}, {0x1, 0x4}, {0x6, 0x13}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x4}, {}, {0x3, 0xa}, {0x5, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x9}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x3}, {}, {0x7}, {0x4, 0x5}, {0x1, 0x2}, {0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x5, 0x8}, {0x7, 0x8}, {0x5, 0x9}, {0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}]}]}]}, 0x1804}, 0x1, 0x0, 0x0, 0x4}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x1800}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r9, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '/dev/autofs\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) epoll_create(0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 90.85411ms ago: executing program 0 (id=2418): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4000000) 59.09682ms ago: executing program 0 (id=2419): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5}, {0x5}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000005c0)=""/190, 0x3b, 0xbe, 0x8, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "c97dc5"}]}], {0x14}}, 0x5c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 0s ago: executing program 0 (id=2420): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800800000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000434bf0ff04000000184b0000060000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800800000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000434bf0ff04000000184b0000060000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r7, 0x2e, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r7, 0x2e, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) setpriority(0x2, 0x0, 0x800) (async) setpriority(0x2, 0x0, 0x800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ed}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r10, 0x0, 0x4}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): T8369] should_fail_ex+0x223/0x230 [ 115.939373][ T8369] should_failslab+0x8f/0xb0 [ 115.943985][ T8369] __kmalloc_noprof+0xab/0x3f0 [ 115.948845][ T8369] ? ext4_find_extent+0x172/0x7c0 [ 115.953905][ T8369] ext4_find_extent+0x172/0x7c0 [ 115.958761][ T8369] ext4_ext_map_blocks+0x11f/0x35c0 [ 115.964048][ T8369] ? folios_put_refs+0x279/0x2b0 [ 115.969002][ T8369] ? __folio_batch_release+0xa4/0xc0 [ 115.974396][ T8369] ? mpage_prepare_extent_to_map+0xa7c/0xb80 [ 115.980445][ T8369] ? ext4_es_lookup_extent+0x35b/0x520 [ 115.985989][ T8369] ext4_map_blocks+0x5aa/0xd20 [ 115.990870][ T8369] ext4_do_writepages+0x14c3/0x2130 [ 115.996141][ T8369] ? try_to_wake_up+0x35e/0x570 [ 116.001030][ T8369] ? __rcu_read_unlock+0x34/0x70 [ 116.006068][ T8369] ? __find_get_block+0x66d/0x8a0 [ 116.013319][ T8369] ? queue_work_on+0xf4/0x180 [ 116.018032][ T8369] ? bdev_getblk+0x5d/0x3b0 [ 116.022621][ T8369] ? __rcu_read_unlock+0x4e/0x70 [ 116.027586][ T8369] ? should_fail_ex+0x31/0x230 [ 116.032364][ T8369] ext4_writepages+0x159/0x2e0 [ 116.037178][ T8369] ? __pfx_ext4_writepages+0x10/0x10 [ 116.042469][ T8369] do_writepages+0x1d8/0x480 [ 116.047073][ T8369] ? xa_load+0xb9/0xe0 [ 116.051187][ T8369] ? _raw_spin_unlock+0x26/0x50 [ 116.056141][ T8369] ? wbc_attach_and_unlock_inode+0x8f/0x2d0 [ 116.062049][ T8369] filemap_write_and_wait_range+0x146/0x360 [ 116.067993][ T8369] ? xas_load+0x3ae/0x3d0 [ 116.072331][ T8369] filemap_invalidate_pages+0xa5/0x1a0 [ 116.077879][ T8369] ? __iomap_dio_rw+0x144/0x1110 [ 116.082887][ T8369] ? should_failslab+0x8f/0xb0 [ 116.087663][ T8369] kiocb_invalidate_pages+0x6b/0x80 [ 116.092878][ T8369] __iomap_dio_rw+0x5ba/0x1110 [ 116.097656][ T8369] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 116.103070][ T8369] iomap_dio_rw+0x40/0x90 [ 116.107425][ T8369] ext4_file_write_iter+0xb71/0xf20 [ 116.112675][ T8369] do_iter_readv_writev+0x394/0x450 [ 116.117994][ T8369] vfs_writev+0x2d4/0x880 [ 116.122411][ T8369] ? proc_fail_nth_write+0x12a/0x150 [ 116.127792][ T8369] ? mutex_lock+0xd/0x40 [ 116.132128][ T8369] do_writev+0xf4/0x220 [ 116.136381][ T8369] __x64_sys_writev+0x45/0x50 [ 116.141101][ T8369] x64_sys_call+0x1fab/0x2dc0 [ 116.145782][ T8369] do_syscall_64+0xc9/0x1c0 [ 116.150288][ T8369] ? clear_bhb_loop+0x55/0xb0 [ 116.154989][ T8369] ? clear_bhb_loop+0x55/0xb0 [ 116.159756][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.165677][ T8369] RIP: 0033:0x7fe65d535d19 [ 116.170090][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.189777][ T8369] RSP: 002b:00007fe65bba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 116.198328][ T8369] RAX: ffffffffffffffda RBX: 00007fe65d725fa0 RCX: 00007fe65d535d19 [ 116.206366][ T8369] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000007 [ 116.214358][ T8369] RBP: 00007fe65bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.222336][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.230308][ T8369] R13: 0000000000000000 R14: 00007fe65d725fa0 R15: 00007ffdab3c8978 [ 116.238281][ T8369] [ 116.290787][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.300275][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.301544][ T8381] FAULT_INJECTION: forcing a failure. [ 116.301544][ T8381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.322401][ T8381] CPU: 1 UID: 0 PID: 8381 Comm: syz.6.1847 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 116.333254][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 116.343331][ T8381] Call Trace: [ 116.346615][ T8381] [ 116.347805][ T8369] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 116.349548][ T8381] dump_stack_lvl+0xf2/0x150 [ 116.368945][ T8381] dump_stack+0x15/0x1a [ 116.372085][ T8369] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 116.373127][ T8381] should_fail_ex+0x223/0x230 [ 116.373164][ T8381] should_fail+0xb/0x10 [ 116.385351][ T8369] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.385351][ T8369] [ 116.389934][ T8381] should_fail_usercopy+0x1a/0x20 [ 116.390050][ T8381] _copy_from_iter+0xd5/0xd00 [ 116.394126][ T8369] EXT4-fs (loop2): Total free blocks count 0 [ 116.403721][ T8381] ? kmalloc_reserve+0x16e/0x190 [ 116.408769][ T8369] EXT4-fs (loop2): Free/Dirty block details [ 116.413401][ T8381] ? __build_skb_around+0x196/0x1f0 [ 116.419403][ T8369] EXT4-fs (loop2): free_blocks=68451041280 [ 116.424305][ T8381] ? __alloc_skb+0x21f/0x310 [ 116.430199][ T8369] EXT4-fs (loop2): dirty_blocks=64 [ 116.430212][ T8369] EXT4-fs (loop2): Block reservation details [ 116.435386][ T8381] ? __virt_addr_valid+0x1ed/0x250 [ 116.441192][ T8369] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 116.444052][ T8369] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 116.445822][ T8381] ? __check_object_size+0x364/0x520 [ 116.485461][ T8381] netlink_sendmsg+0x460/0x6e0 [ 116.490283][ T8381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.495613][ T8381] __sock_sendmsg+0x140/0x180 [ 116.495783][ T8369] syz.2.1843 (8369) used greatest stack depth: 9464 bytes left [ 116.500368][ T8381] ____sys_sendmsg+0x312/0x410 [ 116.500417][ T8381] __sys_sendmsg+0x19d/0x230 [ 116.517336][ T8381] __x64_sys_sendmsg+0x46/0x50 [ 116.522166][ T8381] x64_sys_call+0x2734/0x2dc0 [ 116.526863][ T8381] do_syscall_64+0xc9/0x1c0 [ 116.531434][ T8381] ? clear_bhb_loop+0x55/0xb0 [ 116.536112][ T8381] ? clear_bhb_loop+0x55/0xb0 [ 116.540788][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.546769][ T8381] RIP: 0033:0x7f9ce2615d19 [ 116.551225][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.570906][ T8381] RSP: 002b:00007f9ce0c81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.579324][ T8381] RAX: ffffffffffffffda RBX: 00007f9ce2805fa0 RCX: 00007f9ce2615d19 [ 116.587329][ T8381] RDX: 0000000000004084 RSI: 00000000200002c0 RDI: 0000000000000003 [ 116.595495][ T8381] RBP: 00007f9ce0c81090 R08: 0000000000000000 R09: 0000000000000000 [ 116.603558][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.611526][ T8381] R13: 0000000000000000 R14: 00007f9ce2805fa0 R15: 00007fff010847c8 [ 116.619572][ T8381] [ 116.637702][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.665592][ T8395] loop2: detected capacity change from 0 to 512 [ 116.675569][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.676419][ T8397] netlink: 'syz.6.1853': attribute type 3 has an invalid length. [ 116.692457][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1853'. [ 116.694322][ T8401] loop0: detected capacity change from 0 to 512 [ 116.703836][ T8397] batadv_slave_1: entered promiscuous mode [ 116.724476][ T8397] batadv_slave_1: left promiscuous mode [ 116.731944][ T8397] loop6: detected capacity change from 0 to 128 [ 116.735589][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.744501][ T8395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.747950][ T8380] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1846'. [ 116.767759][ T8401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.769130][ T8395] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.783038][ T8401] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.797594][ T8409] loop1: detected capacity change from 0 to 512 [ 116.810736][ T8409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.842829][ T8409] EXT4-fs (loop1): 1 truncate cleaned up [ 116.853957][ T8409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.873963][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.884883][ T8395] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1851: corrupted xattr block 33: e_value out of bounds [ 116.901066][ T8395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 116.912441][ T8395] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1851: corrupted xattr block 33: e_value out of bounds [ 116.928366][ T8395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 116.939498][ T8395] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.1851: corrupted xattr block 33: e_value out of bounds [ 116.953447][ T8414] loop5: detected capacity change from 0 to 764 [ 116.960163][ T8409] loop1: detected capacity change from 512 to 64 [ 116.974074][ T8412] Symlink component flag not implemented [ 116.975118][ T8395] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 116.991127][ T8409] syz.1.1855: attempt to access beyond end of device [ 116.991127][ T8409] loop1: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 116.993704][ T8412] Symlink component flag not implemented (129) [ 117.004377][ T8409] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 117.004410][ T8409] Buffer I/O error on device loop1, logical block 35 [ 117.017023][ T8416] netlink: 'syz.6.1858': attribute type 4 has an invalid length. [ 117.038612][ T8412] rock: directory entry would overflow storage [ 117.041722][ T8418] loop0: detected capacity change from 0 to 512 [ 117.044761][ T8412] rock: sig=0x4f50, size=4, remaining=3 [ 117.056618][ T8412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 117.067304][ T3303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 117.073528][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.097909][ T8418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.123729][ T8418] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.136166][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.201220][ T8433] FAULT_INJECTION: forcing a failure. [ 117.201220][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 117.213921][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.2.1865 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 117.224677][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 117.234731][ T8433] Call Trace: [ 117.238024][ T8433] [ 117.241034][ T8433] dump_stack_lvl+0xf2/0x150 [ 117.245644][ T8433] dump_stack+0x15/0x1a [ 117.249812][ T8433] should_fail_ex+0x223/0x230 [ 117.254563][ T8433] should_failslab+0x8f/0xb0 [ 117.259186][ T8433] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 117.264916][ T8433] ? sock_alloc_inode+0x34/0xa0 [ 117.269785][ T8433] sock_alloc_inode+0x34/0xa0 [ 117.274475][ T8433] ? __pfx_sock_alloc_inode+0x10/0x10 [ 117.280463][ T8433] alloc_inode+0x3c/0x160 [ 117.284838][ T8433] new_inode_pseudo+0x15/0x20 [ 117.289543][ T8433] __sock_create+0x12b/0x5a0 [ 117.294157][ T8433] __sys_socketpair+0x17c/0x430 [ 117.299045][ T8433] __x64_sys_socketpair+0x52/0x60 [ 117.304088][ T8433] x64_sys_call+0x1cad/0x2dc0 [ 117.308772][ T8433] do_syscall_64+0xc9/0x1c0 [ 117.313341][ T8433] ? clear_bhb_loop+0x55/0xb0 [ 117.318027][ T8433] ? clear_bhb_loop+0x55/0xb0 [ 117.322703][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.328703][ T8433] RIP: 0033:0x7fe65d535d19 [ 117.333140][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.352748][ T8433] RSP: 002b:00007fe65bba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 117.361216][ T8433] RAX: ffffffffffffffda RBX: 00007fe65d725fa0 RCX: 00007fe65d535d19 [ 117.369223][ T8433] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 117.377295][ T8433] RBP: 00007fe65bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.385265][ T8433] R10: 00000000200029c0 R11: 0000000000000246 R12: 0000000000000001 [ 117.393239][ T8433] R13: 0000000000000000 R14: 00007fe65d725fa0 R15: 00007ffdab3c8978 [ 117.401294][ T8433] [ 117.404464][ T8433] socket: no more sockets [ 117.436300][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.521345][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'. [ 117.538261][ T8448] sd 0:0:1:0: device reset [ 117.563375][ T8448] rdma_op ffff88810313f180 conn xmit_rdma 0000000000000000 [ 117.579938][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'. [ 117.588019][ T8454] netlink: 'syz.6.1872': attribute type 4 has an invalid length. [ 117.630415][ T8446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1867'. [ 117.681013][ T8463] loop6: detected capacity change from 0 to 512 [ 117.701556][ T8463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.722597][ T8463] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.754651][ T8463] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1875: corrupted xattr block 33: e_value out of bounds [ 117.770223][ T8463] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 117.779633][ T8463] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1875: corrupted xattr block 33: e_value out of bounds [ 117.802266][ T8463] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 117.813327][ T8463] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.1875: corrupted xattr block 33: e_value out of bounds [ 117.834532][ T8463] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 117.873591][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.884014][ T8482] tipc: Enabling of bearer rejected, already enabled [ 117.898035][ T8484] loop6: detected capacity change from 0 to 512 [ 117.925210][ T8487] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 117.989908][ T8484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.015919][ T8484] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.073578][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.222314][ T8517] tipc: Enabling of bearer rejected, already enabled [ 118.275663][ T8522] loop2: detected capacity change from 0 to 512 [ 118.322155][ T8529] loop0: detected capacity change from 0 to 512 [ 118.334836][ T8522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.345675][ T8531] lo speed is unknown, defaulting to 1000 [ 118.354391][ T8522] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.368727][ T8522] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.1894: corrupted inode contents [ 118.377330][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.387563][ T8522] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.1894: mark_inode_dirty error [ 118.393091][ T8529] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.413399][ T8522] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.1894: corrupted inode contents [ 118.419486][ T8538] loop5: detected capacity change from 0 to 512 [ 118.456614][ T8522] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1894: mark_inode_dirty error [ 118.470047][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.479907][ T8538] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.506298][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.540443][ T8546] program syz.6.1901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.561304][ T8550] FAULT_INJECTION: forcing a failure. [ 118.561304][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.574472][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.2.1900 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 118.585176][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 118.595315][ T8550] Call Trace: [ 118.598643][ T8550] [ 118.601585][ T8550] dump_stack_lvl+0xf2/0x150 [ 118.606235][ T8550] dump_stack+0x15/0x1a [ 118.610467][ T8550] should_fail_ex+0x223/0x230 [ 118.615311][ T8550] should_fail+0xb/0x10 [ 118.615747][ T8547] lo speed is unknown, defaulting to 1000 [ 118.619480][ T8550] should_fail_usercopy+0x1a/0x20 [ 118.619516][ T8550] _copy_from_user+0x1e/0xb0 [ 118.634848][ T8550] vmemdup_user+0x12e/0x1b0 [ 118.639391][ T8550] path_setxattrat+0x1c9/0x310 [ 118.644191][ T8550] __x64_sys_fsetxattr+0x6d/0x80 [ 118.649195][ T8550] x64_sys_call+0x29d2/0x2dc0 [ 118.653882][ T8550] do_syscall_64+0xc9/0x1c0 [ 118.658404][ T8550] ? clear_bhb_loop+0x55/0xb0 [ 118.663102][ T8550] ? clear_bhb_loop+0x55/0xb0 [ 118.667803][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.673720][ T8550] RIP: 0033:0x7fe65d535d19 [ 118.678179][ T8550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.697863][ T8550] RSP: 002b:00007fe65bba7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 118.706444][ T8550] RAX: ffffffffffffffda RBX: 00007fe65d725fa0 RCX: 00007fe65d535d19 [ 118.714441][ T8550] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000005 [ 118.722514][ T8550] RBP: 00007fe65bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.730578][ T8550] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 118.738577][ T8550] R13: 0000000000000000 R14: 00007fe65d725fa0 R15: 00007ffdab3c8978 [ 118.746659][ T8550] [ 118.753963][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 118.753980][ T29] audit: type=1400 audit(1734420040.060:35177): avc: denied { setopt } for pid=8530 comm="syz.5.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.780743][ T29] audit: type=1400 audit(1734420040.090:35178): avc: denied { cpu } for pid=8530 comm="syz.5.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.866856][ T8562] tipc: Enabling of bearer rejected, failed to enable media [ 118.891054][ T8566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49684 sclass=netlink_route_socket pid=8566 comm=syz.2.1907 [ 118.919252][ T29] audit: type=1400 audit(1734420040.210:35179): avc: denied { sqpoll } for pid=8567 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.938766][ T29] audit: type=1326 audit(1734420040.210:35180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 118.962363][ T29] audit: type=1326 audit(1734420040.210:35181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 118.985956][ T29] audit: type=1326 audit(1734420040.210:35182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.2.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 119.015437][ T29] audit: type=1400 audit(1734420040.290:35183): avc: denied { create } for pid=8574 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.023583][ T8576] loop2: detected capacity change from 0 to 512 [ 119.035117][ T29] audit: type=1400 audit(1734420040.290:35184): avc: denied { connect } for pid=8574 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.041163][ T8578] loop6: detected capacity change from 0 to 128 [ 119.068699][ T8578] EXT4-fs: Ignoring removed nobh option [ 119.076347][ T8578] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.089093][ T8578] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.091884][ T8576] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.104775][ T29] audit: type=1400 audit(1734420040.410:35185): avc: denied { ioctl } for pid=8577 comm="syz.6.1911" path="/56/file0/file1" dev="loop6" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.135315][ T8578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40538 sclass=netlink_route_socket pid=8578 comm=syz.6.1911 [ 119.236094][ T29] audit: type=1400 audit(1734420040.540:35186): avc: denied { create } for pid=8589 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.258255][ T8593] 9pnet_fd: Insufficient options for proto=fd [ 119.270035][ T8592] 9pnet_fd: Insufficient options for proto=fd [ 119.286189][ T8591] loop2: detected capacity change from 0 to 512 [ 119.299927][ T8591] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 119.320862][ T8591] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.329673][ T8591] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.338506][ T8591] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.347235][ T8591] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.367542][ T8602] 0ªX¹¦À: renamed from caif0 [ 119.374389][ T8602] 0ªX¹¦À: entered allmulticast mode [ 119.379660][ T8602] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 119.402176][ T8602] loop1: detected capacity change from 0 to 512 [ 119.416665][ T8605] netlink: 'syz.5.1921': attribute type 13 has an invalid length. [ 119.434227][ T8605] gretap0: refused to change device tx_queue_len [ 119.440652][ T8605] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.471911][ T8602] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.595086][ T8630] FAULT_INJECTION: forcing a failure. [ 119.595086][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 119.603067][ T8632] loop2: detected capacity change from 0 to 512 [ 119.607841][ T8630] CPU: 0 UID: 0 PID: 8630 Comm: syz.5.1929 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 119.615476][ T8632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.624819][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.624855][ T8630] Call Trace: [ 119.624863][ T8630] [ 119.624873][ T8630] dump_stack_lvl+0xf2/0x150 [ 119.638545][ T8632] EXT4-fs (loop2): 1 truncate cleaned up [ 119.644768][ T8630] dump_stack+0x15/0x1a [ 119.665514][ T8630] should_fail_ex+0x223/0x230 [ 119.670275][ T8630] should_failslab+0x8f/0xb0 [ 119.674891][ T8630] kmem_cache_alloc_noprof+0x52/0x320 [ 119.680275][ T8630] ? security_file_alloc+0x32/0x100 [ 119.685561][ T8630] security_file_alloc+0x32/0x100 [ 119.690595][ T8630] init_file+0x5b/0x1b0 [ 119.694755][ T8630] alloc_empty_file+0xea/0x200 [ 119.699526][ T8630] path_openat+0x6a/0x1fa0 [ 119.704014][ T8630] ? exc_page_fault+0x4fc/0x650 [ 119.708885][ T8630] ? __check_object_size+0x74/0x520 [ 119.714095][ T8630] ? strncpy_from_user+0x17d/0x210 [ 119.719294][ T8630] ? strncpy_from_user+0x1ef/0x210 [ 119.724492][ T8630] do_filp_open+0x107/0x230 [ 119.729092][ T8630] do_sys_openat2+0xab/0x120 [ 119.733734][ T8630] __x64_sys_creat+0x66/0x90 [ 119.738384][ T8630] x64_sys_call+0x1084/0x2dc0 [ 119.743121][ T8630] do_syscall_64+0xc9/0x1c0 [ 119.747628][ T8630] ? clear_bhb_loop+0x55/0xb0 [ 119.752307][ T8630] ? clear_bhb_loop+0x55/0xb0 [ 119.757010][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.762965][ T8630] RIP: 0033:0x7f0d10f35d19 [ 119.767383][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.787003][ T8630] RSP: 002b:00007f0d0f5a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 119.795422][ T8630] RAX: ffffffffffffffda RBX: 00007f0d11125fa0 RCX: 00007f0d10f35d19 [ 119.803406][ T8630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 119.811453][ T8630] RBP: 00007f0d0f5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 119.819425][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.827402][ T8630] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 119.835390][ T8630] [ 119.846850][ T8634] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1930: corrupted in-inode xattr: overlapping e_value [ 119.881022][ T8638] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 119.887490][ T8632] loop2: detected capacity change from 512 to 64 [ 119.889302][ T8638] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 119.897319][ T8634] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.1930: unable to update i_inline_off [ 119.926939][ T8634] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1930: corrupted in-inode xattr: overlapping e_value [ 119.929317][ T8644] loop6: detected capacity change from 0 to 512 [ 119.962360][ T8644] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.975150][ T8644] EXT4-fs (loop6): 1 truncate cleaned up [ 119.986117][ T3304] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 120.011148][ T8654] loop2: detected capacity change from 0 to 128 [ 120.019672][ T8654] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.027477][ T8644] loop6: detected capacity change from 512 to 64 [ 120.099106][ T8644] syz.6.1933: attempt to access beyond end of device [ 120.099106][ T8644] loop6: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 120.112404][ T8644] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 120.123599][ T8644] Buffer I/O error on device loop6, logical block 35 [ 120.164642][ T8661] loop5: detected capacity change from 0 to 1024 [ 120.174560][ T7469] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 120.174925][ T8663] tipc: Enabling of bearer rejected, already enabled [ 120.189565][ T8661] EXT4-fs: Ignoring removed orlov option [ 120.202640][ T8661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.258325][ T8675] FAULT_INJECTION: forcing a failure. [ 120.258325][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 120.271020][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.1.1942 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 120.281730][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.291448][ T8677] loop6: detected capacity change from 0 to 512 [ 120.291786][ T8675] Call Trace: [ 120.291795][ T8675] [ 120.299380][ T8677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.301283][ T8675] dump_stack_lvl+0xf2/0x150 [ 120.318700][ T8675] dump_stack+0x15/0x1a [ 120.319443][ T8677] EXT4-fs (loop6): 1 truncate cleaned up [ 120.322896][ T8675] should_fail_ex+0x223/0x230 [ 120.333279][ T8675] should_failslab+0x8f/0xb0 [ 120.337892][ T8675] kmem_cache_alloc_noprof+0x52/0x320 [ 120.343276][ T8675] ? audit_log_start+0x34c/0x6b0 [ 120.348255][ T8675] audit_log_start+0x34c/0x6b0 [ 120.353046][ T8675] ? ref_tracker_alloc+0x1f5/0x2f0 [ 120.358239][ T8675] audit_seccomp+0x4b/0x130 [ 120.362825][ T8675] __seccomp_filter+0x6fa/0x1180 [ 120.367787][ T8675] ? vfs_write+0x59d/0x920 [ 120.372222][ T8675] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 120.377865][ T8675] __secure_computing+0x9f/0x1c0 [ 120.382819][ T8675] syscall_trace_enter+0xd1/0x1f0 [ 120.387935][ T8675] ? fpregs_assert_state_consistent+0x83/0xa0 [ 120.394054][ T8675] do_syscall_64+0xaa/0x1c0 [ 120.398621][ T8675] ? clear_bhb_loop+0x55/0xb0 [ 120.403321][ T8675] ? clear_bhb_loop+0x55/0xb0 [ 120.408288][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.414222][ T8675] RIP: 0033:0x7f7cdca0472c [ 120.418664][ T8675] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.438373][ T8675] RSP: 002b:00007f7cdb071030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.446850][ T8675] RAX: ffffffffffffffda RBX: 00007f7cdcbf5fa0 RCX: 00007f7cdca0472c [ 120.454866][ T8675] RDX: 000000000000000f RSI: 00007f7cdb0710a0 RDI: 0000000000000003 [ 120.462874][ T8675] RBP: 00007f7cdb071090 R08: 0000000000000000 R09: 0000000000000000 [ 120.470858][ T8675] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 120.478863][ T8675] R13: 0000000000000000 R14: 00007f7cdcbf5fa0 R15: 00007ffea79cf918 [ 120.486859][ T8675] [ 120.527545][ T8677] loop6: detected capacity change from 512 to 64 [ 120.548192][ T8683] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.558551][ T8677] syz.6.1947: attempt to access beyond end of device [ 120.558551][ T8677] loop6: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 120.571895][ T8677] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 120.583060][ T8677] Buffer I/O error on device loop6, logical block 35 [ 120.593558][ T8683] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 120.647358][ T7469] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 120.717147][ T8696] tipc: Enabling of bearer rejected, already enabled [ 120.719060][ T8697] loop6: detected capacity change from 0 to 2048 [ 120.750691][ T8691] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 120.797768][ T3377] IPVS: starting estimator thread 0... [ 120.811120][ T8711] loop0: detected capacity change from 0 to 512 [ 120.818290][ T8704] lo speed is unknown, defaulting to 1000 [ 120.839599][ T8711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.876337][ T8711] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1959: bad orphan inode 131083 [ 120.887516][ T8709] IPVS: using max 2112 ests per chain, 105600 per kthread [ 120.949491][ T8711] tmpfs: Unknown parameter 'ôT¥R©Œ¶ß¼^îbI4–uyù}zÿ›/̓€W{7üè»k¯Õn€Ò¼¯gKmËÐæƒRÓým7MDÄûëÿ|“.Ñ›ç' [ 121.002612][ T8722] loop2: detected capacity change from 0 to 256 [ 121.013606][ T8724] loop0: detected capacity change from 0 to 512 [ 121.027183][ T8722] FAT-fs (loop2): Directory bread(block 64) failed [ 121.040453][ T8722] FAT-fs (loop2): Directory bread(block 65) failed [ 121.047275][ T8722] FAT-fs (loop2): Directory bread(block 66) failed [ 121.054036][ T8722] FAT-fs (loop2): Directory bread(block 67) failed [ 121.064513][ T8731] loop6: detected capacity change from 0 to 128 [ 121.065193][ T8722] FAT-fs (loop2): Directory bread(block 68) failed [ 121.073663][ T8724] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.082778][ T8722] FAT-fs (loop2): Directory bread(block 69) failed [ 121.100973][ T8722] FAT-fs (loop2): Directory bread(block 70) failed [ 121.101413][ T8731] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.139471][ T8722] FAT-fs (loop2): Directory bread(block 71) failed [ 121.146086][ T8722] FAT-fs (loop2): Directory bread(block 72) failed [ 121.153065][ T8722] FAT-fs (loop2): Directory bread(block 73) failed [ 121.208449][ T8735] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.270575][ T8735] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.319602][ T8744] loop5: detected capacity change from 0 to 764 [ 121.319783][ T8735] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.346512][ T8737] Symlink component flag not implemented [ 121.354171][ T8737] Symlink component flag not implemented (129) [ 121.355294][ T8747] FAULT_INJECTION: forcing a failure. [ 121.355294][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.373464][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.2.1970 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 121.373499][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 121.394189][ T8747] Call Trace: [ 121.394200][ T8747] [ 121.394210][ T8747] dump_stack_lvl+0xf2/0x150 [ 121.400421][ T8747] dump_stack+0x15/0x1a [ 121.409252][ T8747] should_fail_ex+0x223/0x230 [ 121.409288][ T8747] should_fail+0xb/0x10 [ 121.418104][ T8747] should_fail_usercopy+0x1a/0x20 [ 121.418209][ T8747] _copy_from_user+0x1e/0xb0 [ 121.427804][ T8747] addrconf_add_ifaddr+0x93/0x120 [ 121.427896][ T8747] inet6_ioctl+0xb1/0x190 [ 121.437187][ T8747] ? ioctl_has_perm+0x286/0x2e0 [ 121.437228][ T8747] sock_do_ioctl+0x81/0x260 [ 121.446553][ T8747] sock_ioctl+0x40f/0x600 [ 121.446602][ T8747] ? __pfx_sock_ioctl+0x10/0x10 [ 121.446632][ T8747] __se_sys_ioctl+0xc9/0x140 [ 121.455823][ T8747] __x64_sys_ioctl+0x43/0x50 [ 121.464977][ T8747] x64_sys_call+0x1690/0x2dc0 [ 121.465068][ T8747] do_syscall_64+0xc9/0x1c0 [ 121.474239][ T8747] ? clear_bhb_loop+0x55/0xb0 [ 121.474265][ T8747] ? clear_bhb_loop+0x55/0xb0 [ 121.474286][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.480767][ T8737] rock: directory entry would overflow storage [ 121.483640][ T8747] RIP: 0033:0x7fe65d535d19 [ 121.483668][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.489613][ T8737] rock: sig=0x4f50, size=4, remaining=3 [ 121.495735][ T8747] RSP: 002b:00007fe65bba7038 EFLAGS: 00000246 [ 121.500227][ T8737] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 121.519833][ T8747] ORIG_RAX: 0000000000000010 [ 121.519847][ T8747] RAX: ffffffffffffffda RBX: 00007fe65d725fa0 RCX: 00007fe65d535d19 [ 121.519865][ T8747] RDX: 0000000020000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 121.559775][ T8747] RBP: 00007fe65bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.567763][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.575805][ T8747] R13: 0000000000000000 R14: 00007fe65d725fa0 R15: 00007ffdab3c8978 [ 121.583809][ T8747] [ 121.599392][ T8735] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.645798][ T8735] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.660053][ T8735] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.671519][ T8735] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.683687][ T8759] loop5: detected capacity change from 0 to 128 [ 121.692317][ T8735] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.721641][ T8762] loop1: detected capacity change from 0 to 512 [ 121.729097][ T8759] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.794743][ T8762] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.901437][ T8780] loop1: detected capacity change from 0 to 512 [ 121.962161][ T8789] lo speed is unknown, defaulting to 1000 [ 122.030972][ T8792] loop1: detected capacity change from 0 to 128 [ 122.160011][ T8798] loop6: detected capacity change from 0 to 128 [ 122.178563][ T8798] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.321418][ T8805] loop6: detected capacity change from 0 to 512 [ 122.354077][ T8805] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.430044][ T8812] __nla_validate_parse: 27 callbacks suppressed [ 122.430062][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.445841][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.468281][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.477562][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.507572][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.516633][ T8812] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1994'. [ 122.546302][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.554973][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.596447][ T8822] loop2: detected capacity change from 0 to 128 [ 122.606859][ T8822] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.627621][ T8822] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.1997: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 122.631237][ T8818] loop6: detected capacity change from 0 to 2048 [ 122.647847][ T8822] EXT4-fs error (device loop2) in do_split:2055: Corrupt filesystem [ 122.664353][ T8822] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.1997: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 122.684102][ T8822] EXT4-fs error (device loop2) in do_split:2055: Corrupt filesystem [ 122.700531][ T8818] hub 9-0:1.0: USB hub found [ 122.705338][ T8818] hub 9-0:1.0: 8 ports detected [ 122.734916][ T8825] FAULT_INJECTION: forcing a failure. [ 122.734916][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 122.747684][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.5.1998 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 122.758447][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 122.768538][ T8825] Call Trace: [ 122.771886][ T8825] [ 122.774810][ T8825] dump_stack_lvl+0xf2/0x150 [ 122.779546][ T8825] dump_stack+0x15/0x1a [ 122.783724][ T8825] should_fail_ex+0x223/0x230 [ 122.788403][ T8825] should_failslab+0x8f/0xb0 [ 122.793004][ T8825] kmem_cache_alloc_noprof+0x52/0x320 [ 122.798383][ T8825] ? skb_clone+0x154/0x1f0 [ 122.802803][ T8825] skb_clone+0x154/0x1f0 [ 122.807066][ T8825] __netlink_deliver_tap+0x2bd/0x4f0 [ 122.812370][ T8825] netlink_unicast+0x64a/0x670 [ 122.817333][ T8825] netlink_sendmsg+0x5cc/0x6e0 [ 122.822106][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.827417][ T8825] __sock_sendmsg+0x140/0x180 [ 122.832147][ T8825] ____sys_sendmsg+0x312/0x410 [ 122.836971][ T8825] __sys_sendmsg+0x19d/0x230 [ 122.841599][ T8825] __x64_sys_sendmsg+0x46/0x50 [ 122.846360][ T8825] x64_sys_call+0x2734/0x2dc0 [ 122.851035][ T8825] do_syscall_64+0xc9/0x1c0 [ 122.855629][ T8825] ? clear_bhb_loop+0x55/0xb0 [ 122.860313][ T8825] ? clear_bhb_loop+0x55/0xb0 [ 122.864999][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.870997][ T8825] RIP: 0033:0x7f0d10f35d19 [ 122.875414][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.895041][ T8825] RSP: 002b:00007f0d0f5a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.903458][ T8825] RAX: ffffffffffffffda RBX: 00007f0d11125fa0 RCX: 00007f0d10f35d19 [ 122.911432][ T8825] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 122.919536][ T8825] RBP: 00007f0d0f5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 122.927511][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.935493][ T8825] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 122.943476][ T8825] [ 123.014839][ T8831] loop5: detected capacity change from 0 to 128 [ 123.021627][ T8830] loop1: detected capacity change from 0 to 512 [ 123.029466][ T8830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.042233][ T8831] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.092754][ T8830] EXT4-fs (loop1): 1 truncate cleaned up [ 123.127536][ T8830] loop1: detected capacity change from 512 to 64 [ 123.136438][ T8830] syz.1.2001: attempt to access beyond end of device [ 123.136438][ T8830] loop1: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 123.149891][ T8830] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 123.161092][ T8830] Buffer I/O error on device loop1, logical block 35 [ 123.192967][ T3303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 123.239113][ T8856] FAULT_INJECTION: forcing a failure. [ 123.239113][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 123.251807][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.5.2010 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 123.262503][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 123.272602][ T8856] Call Trace: [ 123.275958][ T8856] [ 123.278905][ T8856] dump_stack_lvl+0xf2/0x150 [ 123.283576][ T8856] dump_stack+0x15/0x1a [ 123.287862][ T8856] should_fail_ex+0x223/0x230 [ 123.292604][ T8856] should_failslab+0x8f/0xb0 [ 123.297305][ T8856] kmem_cache_alloc_noprof+0x52/0x320 [ 123.302719][ T8856] ? skb_clone+0x154/0x1f0 [ 123.307157][ T8856] skb_clone+0x154/0x1f0 [ 123.311421][ T8856] __netlink_deliver_tap+0x2bd/0x4f0 [ 123.316817][ T8856] netlink_sendskb+0x126/0x150 [ 123.321601][ T8856] netlink_unicast+0x291/0x670 [ 123.326459][ T8856] nlmsg_notify+0x10f/0x170 [ 123.331004][ T8856] rtnetlink_send+0x4a/0x60 [ 123.335574][ T8856] tc_ctl_action+0x737/0x840 [ 123.340282][ T8856] ? xa_load+0xb9/0xe0 [ 123.344389][ T8856] ? __pfx_tc_ctl_action+0x10/0x10 [ 123.349550][ T8856] rtnetlink_rcv_msg+0x6aa/0x710 [ 123.354571][ T8856] ? ref_tracker_free+0x3a5/0x410 [ 123.359609][ T8856] ? __dev_queue_xmit+0x186/0x2090 [ 123.364826][ T8856] netlink_rcv_skb+0x12c/0x230 [ 123.369652][ T8856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.375142][ T8856] rtnetlink_rcv+0x1c/0x30 [ 123.379581][ T8856] netlink_unicast+0x599/0x670 [ 123.384384][ T8856] netlink_sendmsg+0x5cc/0x6e0 [ 123.389222][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.394526][ T8856] __sock_sendmsg+0x140/0x180 [ 123.399269][ T8856] ____sys_sendmsg+0x312/0x410 [ 123.404058][ T8856] __sys_sendmsg+0x19d/0x230 [ 123.408747][ T8856] __x64_sys_sendmsg+0x46/0x50 [ 123.413524][ T8856] x64_sys_call+0x2734/0x2dc0 [ 123.418212][ T8856] do_syscall_64+0xc9/0x1c0 [ 123.422744][ T8856] ? clear_bhb_loop+0x55/0xb0 [ 123.427450][ T8856] ? clear_bhb_loop+0x55/0xb0 [ 123.432139][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.438057][ T8856] RIP: 0033:0x7f0d10f35d19 [ 123.442581][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.462305][ T8856] RSP: 002b:00007f0d0f5a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.470726][ T8856] RAX: ffffffffffffffda RBX: 00007f0d11125fa0 RCX: 00007f0d10f35d19 [ 123.478736][ T8856] RDX: 0000000000000000 RSI: 00000000200096c0 RDI: 0000000000000003 [ 123.486787][ T8856] RBP: 00007f0d0f5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.494820][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.502859][ T8856] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 123.510925][ T8856] [ 123.633848][ T8869] loop5: detected capacity change from 0 to 128 [ 123.642617][ T8869] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.730720][ T8872] loop5: detected capacity change from 0 to 512 [ 123.759482][ T8872] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.764682][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 123.764700][ T29] audit: type=1326 audit(1734420045.070:36023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a6a4ecce7 code=0x7ffc0000 [ 123.799770][ T29] audit: type=1326 audit(1734420045.080:36024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d10f34680 code=0x7ffc0000 [ 123.823373][ T29] audit: type=1326 audit(1734420045.080:36025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d10f34a67 code=0x7ffc0000 [ 123.846830][ T29] audit: type=1326 audit(1734420045.080:36026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d10f34680 code=0x7ffc0000 [ 123.870434][ T29] audit: type=1326 audit(1734420045.080:36027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 123.893952][ T29] audit: type=1326 audit(1734420045.080:36028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 123.917477][ T29] audit: type=1326 audit(1734420045.080:36029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 123.923091][ T8884] FAULT_INJECTION: forcing a failure. [ 123.923091][ T8884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.941033][ T29] audit: type=1326 audit(1734420045.080:36030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 123.941108][ T29] audit: type=1326 audit(1734420045.080:36031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 123.954185][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.0.2017 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 123.977593][ T29] audit: type=1326 audit(1734420045.080:36032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.5.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 124.000964][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.000981][ T8884] Call Trace: [ 124.001006][ T8884] [ 124.001017][ T8884] dump_stack_lvl+0xf2/0x150 [ 124.056160][ T8884] dump_stack+0x15/0x1a [ 124.060342][ T8884] should_fail_ex+0x223/0x230 [ 124.065028][ T8884] should_fail+0xb/0x10 [ 124.069269][ T8884] should_fail_usercopy+0x1a/0x20 [ 124.074351][ T8884] strncpy_from_user+0x25/0x210 [ 124.079225][ T8884] strncpy_from_user_nofault+0x66/0xe0 [ 124.084696][ T8884] bpf_probe_read_compat_str+0xb3/0x130 [ 124.090253][ T8884] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 124.095723][ T8884] bpf_trace_run3+0x10c/0x1d0 [ 124.100477][ T8884] ? lockref_get+0x101/0x160 [ 124.105090][ T8884] ? do_mknodat+0x3e2/0x420 [ 124.109601][ T8884] ? shmem_mknod+0x169/0x180 [ 124.114233][ T8884] ? do_mknodat+0x3e2/0x420 [ 124.118744][ T8884] __traceiter_kmem_cache_free+0x33/0x50 [ 124.124469][ T8884] ? do_mknodat+0x3e2/0x420 [ 124.129045][ T8884] kmem_cache_free+0x237/0x2d0 [ 124.133860][ T8884] do_mknodat+0x3e2/0x420 [ 124.138246][ T8884] __x64_sys_mknodat+0x60/0x70 [ 124.143027][ T8884] x64_sys_call+0x27de/0x2dc0 [ 124.147714][ T8884] do_syscall_64+0xc9/0x1c0 [ 124.152224][ T8884] ? clear_bhb_loop+0x55/0xb0 [ 124.156910][ T8884] ? clear_bhb_loop+0x55/0xb0 [ 124.161592][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.167653][ T8884] RIP: 0033:0x7f5a6a4f5d19 [ 124.172075][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.191690][ T8884] RSP: 002b:00007f5a68b61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 124.200119][ T8884] RAX: ffffffffffffffda RBX: 00007f5a6a6e5fa0 RCX: 00007f5a6a4f5d19 [ 124.208169][ T8884] RDX: 00000000000081c0 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 124.216143][ T8884] RBP: 00007f5a68b61090 R08: 0000000000000000 R09: 0000000000000000 [ 124.224115][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.232093][ T8884] R13: 0000000000000000 R14: 00007f5a6a6e5fa0 R15: 00007ffc96d278b8 [ 124.240080][ T8884] [ 124.263669][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 124.282911][ T8890] loop1: detected capacity change from 0 to 512 [ 124.293063][ T8890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.308446][ T8890] EXT4-fs (loop1): 1 truncate cleaned up [ 124.343594][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 124.352550][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 124.361478][ T8896] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2022'. [ 124.361607][ T8890] loop1: detected capacity change from 512 to 64 [ 124.387343][ T8890] syz.1.2019: attempt to access beyond end of device [ 124.387343][ T8890] loop1: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 124.400775][ T8890] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 124.412268][ T8890] Buffer I/O error on device loop1, logical block 35 [ 124.421212][ T8898] FAULT_INJECTION: forcing a failure. [ 124.421212][ T8898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.434404][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.0.2023 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 124.445122][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.448520][ T8900] lo speed is unknown, defaulting to 1000 [ 124.455187][ T8898] Call Trace: [ 124.455198][ T8898] [ 124.455208][ T8898] dump_stack_lvl+0xf2/0x150 [ 124.471771][ T8898] dump_stack+0x15/0x1a [ 124.475963][ T8898] should_fail_ex+0x223/0x230 [ 124.480707][ T8898] should_fail+0xb/0x10 [ 124.484951][ T8898] should_fail_usercopy+0x1a/0x20 [ 124.490012][ T8898] _copy_from_user+0x1e/0xb0 [ 124.494810][ T8898] copy_msghdr_from_user+0x54/0x2a0 [ 124.500062][ T8898] ? __fget_files+0x17c/0x1c0 [ 124.504787][ T8898] __sys_sendmsg+0x13e/0x230 [ 124.509430][ T8898] __x64_sys_sendmsg+0x46/0x50 [ 124.514231][ T8898] x64_sys_call+0x2734/0x2dc0 [ 124.518937][ T8898] do_syscall_64+0xc9/0x1c0 [ 124.523466][ T8898] ? clear_bhb_loop+0x55/0xb0 [ 124.528184][ T8898] ? clear_bhb_loop+0x55/0xb0 [ 124.532950][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.538886][ T8898] RIP: 0033:0x7f5a6a4f5d19 [ 124.543318][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.563010][ T8898] RSP: 002b:00007f5a68b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.571474][ T8898] RAX: ffffffffffffffda RBX: 00007f5a6a6e5fa0 RCX: 00007f5a6a4f5d19 [ 124.579518][ T8898] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 124.587528][ T8898] RBP: 00007f5a68b61090 R08: 0000000000000000 R09: 0000000000000000 [ 124.595514][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.603530][ T8898] R13: 0000000000000000 R14: 00007f5a6a6e5fa0 R15: 00007ffc96d278b8 [ 124.611611][ T8898] [ 124.621078][ T8903] netlink: 'syz.2.2025': attribute type 4 has an invalid length. [ 124.631543][ T3303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 124.670022][ T8915] loop1: detected capacity change from 0 to 512 [ 124.719626][ T8915] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.756018][ T8915] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2026: corrupted xattr block 33: e_value out of bounds [ 124.761312][ T8924] loop0: detected capacity change from 0 to 128 [ 124.798886][ T8915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 124.813700][ T8915] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2026: corrupted xattr block 33: e_value out of bounds [ 124.831072][ T8915] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 124.861392][ T8915] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.2026: corrupted xattr block 33: e_value out of bounds [ 124.879110][ T8915] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 124.879300][ T8939] loop6: detected capacity change from 0 to 512 [ 124.936878][ T8939] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.936949][ T8944] netlink: 'syz.5.2039': attribute type 4 has an invalid length. [ 124.986579][ T8939] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2037: corrupted xattr block 33: e_value out of bounds [ 125.030949][ T8939] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 125.056762][ T8961] loop0: detected capacity change from 0 to 128 [ 125.066682][ T8962] netlink: 'syz.5.2044': attribute type 10 has an invalid length. [ 125.076852][ T8939] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2037: corrupted xattr block 33: e_value out of bounds [ 125.098168][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.104665][ T8939] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 125.118723][ T8939] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2037: corrupted xattr block 33: e_value out of bounds [ 125.134565][ T8961] ext4 filesystem being mounted at /440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.174662][ T8939] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 125.195745][ T8969] FAULT_INJECTION: forcing a failure. [ 125.195745][ T8969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.208872][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.1.2047 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 125.219654][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 125.229781][ T8969] Call Trace: [ 125.233083][ T8969] [ 125.236094][ T8969] dump_stack_lvl+0xf2/0x150 [ 125.240775][ T8969] dump_stack+0x15/0x1a [ 125.245105][ T8969] should_fail_ex+0x223/0x230 [ 125.249837][ T8969] should_fail+0xb/0x10 [ 125.254037][ T8969] should_fail_usercopy+0x1a/0x20 [ 125.258927][ T8973] Cannot find del_set index 0 as target [ 125.259127][ T8969] _copy_to_user+0x20/0xa0 [ 125.259166][ T8969] simple_read_from_buffer+0xa0/0x110 [ 125.259236][ T8969] proc_fail_nth_read+0xf9/0x140 [ 125.259275][ T8969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.285228][ T8969] vfs_read+0x1a2/0x700 [ 125.289420][ T8969] ? __rcu_read_unlock+0x4e/0x70 [ 125.294395][ T8969] ? __fget_files+0x17c/0x1c0 [ 125.299096][ T8969] ksys_read+0xe8/0x1b0 [ 125.303293][ T8969] __x64_sys_read+0x42/0x50 [ 125.307871][ T8969] x64_sys_call+0x2874/0x2dc0 [ 125.312598][ T8969] do_syscall_64+0xc9/0x1c0 [ 125.317110][ T8969] ? clear_bhb_loop+0x55/0xb0 [ 125.321861][ T8969] ? clear_bhb_loop+0x55/0xb0 [ 125.326603][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.332588][ T8969] RIP: 0033:0x7f7cdca0472c [ 125.337007][ T8969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.356658][ T8969] RSP: 002b:00007f7cdb071030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.365075][ T8969] RAX: ffffffffffffffda RBX: 00007f7cdcbf5fa0 RCX: 00007f7cdca0472c [ 125.373047][ T8969] RDX: 000000000000000f RSI: 00007f7cdb0710a0 RDI: 0000000000000005 [ 125.381052][ T8969] RBP: 00007f7cdb071090 R08: 0000000000000000 R09: 0000000000000000 [ 125.389041][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.397012][ T8969] R13: 0000000000000000 R14: 00007f7cdcbf5fa0 R15: 00007ffea79cf918 [ 125.405008][ T8969] [ 125.433918][ T8975] netlink: 'syz.1.2052': attribute type 4 has an invalid length. [ 125.671893][ T8989] lo speed is unknown, defaulting to 1000 [ 125.762348][ T8992] loop1: detected capacity change from 0 to 128 [ 125.772498][ T8992] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.851063][ T8996] loop5: detected capacity change from 0 to 512 [ 125.860157][ T8996] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.872040][ T8996] EXT4-fs (loop5): 1 truncate cleaned up [ 125.933405][ T8998] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2060: corrupted in-inode xattr: overlapping e_value [ 125.948821][ T8998] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1772: inode #15: comm syz.5.2060: unable to update i_inline_off [ 125.961372][ T8998] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2060: corrupted in-inode xattr: overlapping e_value [ 126.114611][ T9005] loop1: detected capacity change from 0 to 512 [ 126.130325][ T8996] loop5: detected capacity change from 512 to 64 [ 126.132376][ T9010] loop0: detected capacity change from 0 to 512 [ 126.141112][ T9005] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.154831][ T9010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.168061][ T9005] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2061: corrupted xattr block 33: e_value out of bounds [ 126.182811][ T9010] EXT4-fs (loop0): 1 truncate cleaned up [ 126.188599][ T9005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 126.205513][ T9005] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2061: corrupted xattr block 33: e_value out of bounds [ 126.224762][ T9005] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 126.236498][ T5898] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 126.254227][ T9005] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.2061: corrupted xattr block 33: e_value out of bounds [ 126.274017][ T9017] netlink: 'syz.6.2064': attribute type 4 has an invalid length. [ 126.282037][ T9005] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 126.317438][ T9010] loop0: detected capacity change from 512 to 64 [ 126.330492][ T9010] syz.0.2062: attempt to access beyond end of device [ 126.330492][ T9010] loop0: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 126.343803][ T9010] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 126.345724][ T9026] lo speed is unknown, defaulting to 1000 [ 126.355160][ T9010] Buffer I/O error on device loop0, logical block 35 [ 126.367182][ T9027] loop5: detected capacity change from 0 to 512 [ 126.386077][ T9030] loop1: detected capacity change from 0 to 128 [ 126.395199][ T3298] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 126.415595][ T9027] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2065: bg 0: block 393: padding at end of block bitmap is not set [ 126.433372][ T9030] ext4 filesystem being mounted at /398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.466935][ T9027] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 126.482968][ T9027] EXT4-fs (loop5): 2 truncates cleaned up [ 126.522859][ T9041] loop6: detected capacity change from 0 to 128 [ 126.548540][ T9041] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.633321][ T9050] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 126.643514][ T9053] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 126.764244][ T9064] loop2: detected capacity change from 0 to 2048 [ 126.784090][ T9069] loop1: detected capacity change from 0 to 512 [ 126.790573][ T9071] FAULT_INJECTION: forcing a failure. [ 126.790573][ T9071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.790597][ T9071] CPU: 1 UID: 0 PID: 9071 Comm: syz.6.2081 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 126.790622][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 126.824433][ T9071] Call Trace: [ 126.827741][ T9071] [ 126.830680][ T9071] dump_stack_lvl+0xf2/0x150 [ 126.835319][ T9071] dump_stack+0x15/0x1a [ 126.839495][ T9071] should_fail_ex+0x223/0x230 [ 126.844213][ T9071] should_fail+0xb/0x10 [ 126.848388][ T9071] should_fail_usercopy+0x1a/0x20 [ 126.853488][ T9071] _copy_from_user+0x1e/0xb0 [ 126.858106][ T9071] move_addr_to_kernel+0x82/0x120 [ 126.863161][ T9071] __sys_bind+0x9e/0x190 [ 126.867436][ T9071] __x64_sys_bind+0x41/0x50 [ 126.871982][ T9071] x64_sys_call+0x20ab/0x2dc0 [ 126.876666][ T9071] do_syscall_64+0xc9/0x1c0 [ 126.881230][ T9071] ? clear_bhb_loop+0x55/0xb0 [ 126.885911][ T9071] ? clear_bhb_loop+0x55/0xb0 [ 126.890811][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.896726][ T9071] RIP: 0033:0x7f9ce2615d19 [ 126.901226][ T9071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.920982][ T9071] RSP: 002b:00007f9ce0c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 126.929458][ T9071] RAX: ffffffffffffffda RBX: 00007f9ce2805fa0 RCX: 00007f9ce2615d19 [ 126.937434][ T9071] RDX: 000000000000006e RSI: 0000000020000380 RDI: 0000000000000004 [ 126.945411][ T9071] RBP: 00007f9ce0c81090 R08: 0000000000000000 R09: 0000000000000000 [ 126.953412][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.961389][ T9071] R13: 0000000000000000 R14: 00007f9ce2805fa0 R15: 00007fff010847c8 [ 126.969414][ T9071] [ 127.009697][ T9069] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.032146][ T9084] loop6: detected capacity change from 0 to 128 [ 127.041696][ T9069] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2080: corrupted xattr block 33: e_value out of bounds [ 127.056157][ T9069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 127.060533][ T9084] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.068049][ T9069] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2080: corrupted xattr block 33: e_value out of bounds [ 127.115017][ T9069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 127.125325][ T9069] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.2080: corrupted xattr block 33: e_value out of bounds [ 127.139955][ T9069] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 127.260522][ T9110] FAULT_INJECTION: forcing a failure. [ 127.260522][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 127.273243][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.2.2091 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 127.284083][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 127.294157][ T9110] Call Trace: [ 127.297463][ T9110] [ 127.300442][ T9110] dump_stack_lvl+0xf2/0x150 [ 127.305078][ T9110] dump_stack+0x15/0x1a [ 127.309383][ T9110] should_fail_ex+0x223/0x230 [ 127.314221][ T9110] should_failslab+0x8f/0xb0 [ 127.318910][ T9110] kmem_cache_alloc_node_noprof+0x59/0x320 [ 127.324737][ T9110] ? __alloc_skb+0x10b/0x310 [ 127.329350][ T9110] __alloc_skb+0x10b/0x310 [ 127.333800][ T9110] ? audit_log_start+0x34c/0x6b0 [ 127.338816][ T9110] audit_log_start+0x368/0x6b0 [ 127.343637][ T9110] ? exc_page_fault+0x32e/0x650 [ 127.348534][ T9110] audit_seccomp+0x4b/0x130 [ 127.353086][ T9110] __seccomp_filter+0x6fa/0x1180 [ 127.358068][ T9110] ? folio_mark_accessed+0xed/0x360 [ 127.363344][ T9110] ? __rcu_read_unlock+0x4e/0x70 [ 127.368307][ T9110] ? kmem_cache_free+0xdc/0x2d0 [ 127.373322][ T9110] __secure_computing+0x9f/0x1c0 [ 127.378288][ T9110] syscall_trace_enter+0xd1/0x1f0 [ 127.383409][ T9110] do_syscall_64+0xaa/0x1c0 [ 127.387956][ T9110] ? clear_bhb_loop+0x55/0xb0 [ 127.392648][ T9110] ? clear_bhb_loop+0x55/0xb0 [ 127.397420][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.403398][ T9110] RIP: 0033:0x7fe65d53472c [ 127.407902][ T9110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.427612][ T9110] RSP: 002b:00007fe65bba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.436112][ T9110] RAX: ffffffffffffffda RBX: 00007fe65d725fa0 RCX: 00007fe65d53472c [ 127.444172][ T9110] RDX: 000000000000000f RSI: 00007fe65bba70a0 RDI: 0000000000000003 [ 127.452157][ T9110] RBP: 00007fe65bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.460227][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.468226][ T9110] R13: 0000000000000000 R14: 00007fe65d725fa0 R15: 00007ffdab3c8978 [ 127.476219][ T9110] [ 127.560997][ T9127] __nla_validate_parse: 34 callbacks suppressed [ 127.561013][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.578110][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.595895][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.607323][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.650500][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.659561][ T9127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'. [ 127.677632][ T9137] loop0: detected capacity change from 0 to 128 [ 127.695412][ T9137] ext4 filesystem being mounted at /447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.734890][ T9140] loop2: detected capacity change from 0 to 512 [ 127.760447][ T9140] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.783898][ T9140] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2098: corrupted xattr block 33: e_value out of bounds [ 127.798575][ T9140] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 127.808340][ T9140] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.2098: corrupted xattr block 33: e_value out of bounds [ 127.825081][ T9140] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 127.835498][ T9140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.2098: corrupted xattr block 33: e_value out of bounds [ 127.851819][ T9140] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 127.911611][ T9154] loop2: detected capacity change from 0 to 512 [ 127.918579][ T9154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.939695][ T9154] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.953499][ T9157] netlink: 'syz.0.2102': attribute type 10 has an invalid length. [ 127.966443][ T9154] ebt_among: dst integrity fail: 101 [ 127.983011][ T9159] FAULT_INJECTION: forcing a failure. [ 127.983011][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 127.995724][ T9159] CPU: 1 UID: 0 PID: 9159 Comm: syz.5.2104 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 127.995757][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 127.995772][ T9159] Call Trace: [ 127.995781][ T9159] [ 127.995790][ T9159] dump_stack_lvl+0xf2/0x150 [ 127.995911][ T9159] dump_stack+0x15/0x1a [ 127.995954][ T9159] should_fail_ex+0x223/0x230 [ 127.995984][ T9159] should_failslab+0x8f/0xb0 [ 127.996066][ T9159] kmem_cache_alloc_noprof+0x52/0x320 [ 127.996093][ T9159] ? __anon_vma_prepare+0x73/0x310 [ 127.996217][ T9159] __anon_vma_prepare+0x73/0x310 [ 127.996256][ T9159] do_madvise+0x2459/0x2a70 [ 127.996350][ T9159] ? __fget_files+0x17c/0x1c0 [ 127.996397][ T9159] ? fput+0x1c4/0x200 [ 127.996421][ T9159] ? ksys_write+0x176/0x1b0 [ 127.996465][ T9159] __x64_sys_madvise+0x61/0x70 [ 127.996490][ T9159] x64_sys_call+0x23ab/0x2dc0 [ 127.996586][ T9159] do_syscall_64+0xc9/0x1c0 [ 127.996609][ T9159] ? clear_bhb_loop+0x55/0xb0 [ 127.996632][ T9159] ? clear_bhb_loop+0x55/0xb0 [ 127.996656][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.996758][ T9159] RIP: 0033:0x7f0d10f35d19 [ 127.996775][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.996796][ T9159] RSP: 002b:00007f0d0f5a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 127.996821][ T9159] RAX: ffffffffffffffda RBX: 00007f0d11125fa0 RCX: 00007f0d10f35d19 [ 127.996836][ T9159] RDX: 0000000000000066 RSI: 7fffffffffffffff RDI: 0000000020000000 [ 127.996851][ T9159] RBP: 00007f0d0f5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 127.996865][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.996891][ T9159] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 127.996914][ T9159] [ 128.181776][ T9173] loop1: detected capacity change from 0 to 512 [ 128.182228][ T9173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.182494][ T9171] loop6: detected capacity change from 0 to 128 [ 128.202311][ T9171] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.216412][ T9173] EXT4-fs (loop1): 1 truncate cleaned up [ 128.240115][ T9176] netlink: 'syz.5.2111': attribute type 4 has an invalid length. [ 128.305901][ T9173] loop1: detected capacity change from 512 to 64 [ 128.315529][ T9180] FAULT_INJECTION: forcing a failure. [ 128.315529][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 128.328222][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.6.2112 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 128.338924][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 128.348990][ T9180] Call Trace: [ 128.352272][ T9180] [ 128.355276][ T9180] dump_stack_lvl+0xf2/0x150 [ 128.359915][ T9180] dump_stack+0x15/0x1a [ 128.364139][ T9180] should_fail_ex+0x223/0x230 [ 128.368902][ T9180] should_failslab+0x8f/0xb0 [ 128.373507][ T9180] __kmalloc_noprof+0xab/0x3f0 [ 128.378294][ T9180] ? bpf_test_init+0xc7/0x170 [ 128.383027][ T9180] bpf_test_init+0xc7/0x170 [ 128.387556][ T9180] bpf_prog_test_run_xdp+0x321/0x8b0 [ 128.392852][ T9180] ? __rcu_read_unlock+0x4e/0x70 [ 128.397945][ T9180] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.403766][ T9180] bpf_prog_test_run+0x20f/0x3a0 [ 128.408719][ T9180] __sys_bpf+0x400/0x7a0 [ 128.412972][ T9180] __x64_sys_bpf+0x43/0x50 [ 128.417443][ T9180] x64_sys_call+0x2914/0x2dc0 [ 128.422183][ T9180] do_syscall_64+0xc9/0x1c0 [ 128.426744][ T9180] ? clear_bhb_loop+0x55/0xb0 [ 128.431565][ T9180] ? clear_bhb_loop+0x55/0xb0 [ 128.436375][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.442332][ T9180] RIP: 0033:0x7f9ce2615d19 [ 128.446784][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.466396][ T9180] RSP: 002b:00007f9ce0c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.474814][ T9180] RAX: ffffffffffffffda RBX: 00007f9ce2805fa0 RCX: 00007f9ce2615d19 [ 128.482784][ T9180] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.490765][ T9180] RBP: 00007f9ce0c81090 R08: 0000000000000000 R09: 0000000000000000 [ 128.498751][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.506727][ T9180] R13: 0000000000000000 R14: 00007f9ce2805fa0 R15: 00007fff010847c8 [ 128.514711][ T9180] [ 128.541706][ T9173] syz.1.2110: attempt to access beyond end of device [ 128.541706][ T9173] loop1: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 128.555234][ T9173] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 128.566414][ T9173] Buffer I/O error on device loop1, logical block 35 [ 128.592818][ T3303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 128.634151][ T9194] loop6: detected capacity change from 0 to 512 [ 128.638804][ T9196] bond1: entered promiscuous mode [ 128.645552][ T9196] bond1: entered allmulticast mode [ 128.651315][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.661462][ T9196] bond1 (unregistering): Released all slaves [ 128.666081][ T9194] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.689589][ T9194] EXT4-fs (loop6): 1 truncate cleaned up [ 128.762242][ T9194] loop6: detected capacity change from 512 to 64 [ 128.778427][ T9194] syz.6.2117: attempt to access beyond end of device [ 128.778427][ T9194] loop6: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 128.791761][ T9194] EXT4-fs warning (device loop6): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 128.803100][ T9194] Buffer I/O error on device loop6, logical block 35 [ 128.834969][ T7469] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 128.887132][ T9229] FAULT_INJECTION: forcing a failure. [ 128.887132][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 128.889651][ T9227] loop6: detected capacity change from 0 to 512 [ 128.899830][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.5.2128 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 128.916754][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 128.926826][ T9229] Call Trace: [ 128.930143][ T9229] [ 128.933130][ T9229] dump_stack_lvl+0xf2/0x150 [ 128.933909][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2130'. [ 128.937756][ T9229] dump_stack+0x15/0x1a [ 128.937798][ T9229] should_fail_ex+0x223/0x230 [ 128.947209][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2130'. [ 128.950891][ T9229] ? alloc_fs_context+0x44/0x4e0 [ 128.969505][ T9229] should_failslab+0x8f/0xb0 [ 128.974134][ T9229] __kmalloc_cache_noprof+0x4e/0x320 [ 128.979431][ T9229] alloc_fs_context+0x44/0x4e0 [ 128.984254][ T9229] ? strncmp+0x34/0x70 [ 128.988334][ T9229] fs_context_for_mount+0x21/0x30 [ 128.993376][ T9229] do_new_mount+0xf3/0x690 [ 128.997987][ T9229] path_mount+0x49b/0xb30 [ 129.002332][ T9229] __se_sys_mount+0x27c/0x2d0 [ 129.007045][ T9229] __x64_sys_mount+0x67/0x80 [ 129.011672][ T9229] x64_sys_call+0x2c84/0x2dc0 [ 129.016377][ T9229] do_syscall_64+0xc9/0x1c0 [ 129.021012][ T9229] ? clear_bhb_loop+0x55/0xb0 [ 129.025695][ T9229] ? clear_bhb_loop+0x55/0xb0 [ 129.030544][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.036457][ T9229] RIP: 0033:0x7f0d10f35d19 [ 129.040873][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.060485][ T9229] RSP: 002b:00007f0d0f5a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.069002][ T9229] RAX: ffffffffffffffda RBX: 00007f0d11125fa0 RCX: 00007f0d10f35d19 [ 129.077005][ T9229] RDX: 0000000020002000 RSI: 0000000020001fc0 RDI: 0000000000000000 [ 129.085025][ T9229] RBP: 00007f0d0f5a1090 R08: 0000000020002040 R09: 0000000000000000 [ 129.093000][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.101048][ T9229] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 129.109029][ T9229] [ 129.126038][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2130'. [ 129.136060][ T9233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2130'. [ 129.146485][ T9227] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.167445][ T9227] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2125: corrupted xattr block 33: e_value out of bounds [ 129.181510][ T9227] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 129.190872][ T9227] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2125: corrupted xattr block 33: e_value out of bounds [ 129.205451][ T9227] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 129.217323][ T9227] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2125: corrupted xattr block 33: e_value out of bounds [ 129.234959][ T9227] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 129.254751][ T9245] netlink: 'syz.5.2131': attribute type 10 has an invalid length. [ 129.277864][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 129.277880][ T29] audit: type=1326 audit(1734420050.590:36565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.278005][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.286891][ T29] audit: type=1326 audit(1734420050.590:36566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.343812][ T29] audit: type=1326 audit(1734420050.620:36567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.367499][ T29] audit: type=1326 audit(1734420050.620:36568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.391318][ T29] audit: type=1326 audit(1734420050.670:36569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.414886][ T29] audit: type=1326 audit(1734420050.670:36570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.438511][ T29] audit: type=1326 audit(1734420050.670:36571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.462150][ T29] audit: type=1326 audit(1734420050.670:36572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.485745][ T29] audit: type=1326 audit(1734420050.670:36573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.509358][ T29] audit: type=1326 audit(1734420050.670:36574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 129.569627][ T9261] loop6: detected capacity change from 0 to 512 [ 129.576509][ T9261] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.588073][ T9261] EXT4-fs (loop6): 1 truncate cleaned up [ 129.638968][ T9266] loop0: detected capacity change from 0 to 512 [ 129.646255][ T9266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.658108][ T9266] EXT4-fs (loop0): 1 truncate cleaned up [ 129.670246][ T9266] FAULT_INJECTION: forcing a failure. [ 129.670246][ T9266] name failslab, interval 1, probability 0, space 0, times 0 [ 129.682904][ T9266] CPU: 0 UID: 0 PID: 9266 Comm: syz.0.2140 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 129.693615][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 129.703696][ T9266] Call Trace: [ 129.706988][ T9266] [ 129.709954][ T9266] dump_stack_lvl+0xf2/0x150 [ 129.714647][ T9266] dump_stack+0x15/0x1a [ 129.718884][ T9266] should_fail_ex+0x223/0x230 [ 129.723583][ T9266] should_failslab+0x8f/0xb0 [ 129.728236][ T9266] kmem_cache_alloc_noprof+0x52/0x320 [ 129.733646][ T9266] ? getname_flags+0x81/0x3b0 [ 129.738341][ T9266] getname_flags+0x81/0x3b0 [ 129.742882][ T9266] __x64_sys_unlink+0x21/0x40 [ 129.747615][ T9266] x64_sys_call+0x2329/0x2dc0 [ 129.752321][ T9266] do_syscall_64+0xc9/0x1c0 [ 129.756849][ T9266] ? clear_bhb_loop+0x55/0xb0 [ 129.761538][ T9266] ? clear_bhb_loop+0x55/0xb0 [ 129.766252][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.772178][ T9266] RIP: 0033:0x7f5a6a4f5d19 [ 129.776682][ T9266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.796356][ T9266] RSP: 002b:00007f5a68b61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 129.804807][ T9266] RAX: ffffffffffffffda RBX: 00007f5a6a6e5fa0 RCX: 00007f5a6a4f5d19 [ 129.812786][ T9266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 129.820766][ T9266] RBP: 00007f5a68b61090 R08: 0000000000000000 R09: 0000000000000000 [ 129.828742][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.836756][ T9266] R13: 0000000000000000 R14: 00007f5a6a6e5fa0 R15: 00007ffc96d278b8 [ 129.844821][ T9266] [ 130.010514][ T9279] loop5: detected capacity change from 0 to 512 [ 130.018434][ T9279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.030912][ T9279] EXT4-fs (loop5): 1 truncate cleaned up [ 130.056270][ T9284] loop0: detected capacity change from 0 to 512 [ 130.069928][ T9284] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.077474][ T9279] loop5: detected capacity change from 512 to 64 [ 130.090804][ T9284] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2145: corrupted xattr block 33: e_value out of bounds [ 130.091637][ T9279] syz.5.2144: attempt to access beyond end of device [ 130.091637][ T9279] loop5: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 130.105270][ T9284] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 130.117837][ T9279] EXT4-fs warning (device loop5): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 35) [ 130.117871][ T9279] Buffer I/O error on device loop5, logical block 35 [ 130.144830][ T9284] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2145: corrupted xattr block 33: e_value out of bounds [ 130.151817][ T5898] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 130.159150][ T9284] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 130.183334][ T9284] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2145: corrupted xattr block 33: e_value out of bounds [ 130.203209][ T9284] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 130.310361][ T9303] lo speed is unknown, defaulting to 1000 [ 130.313161][ T9306] loop0: detected capacity change from 0 to 512 [ 130.331678][ T9306] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.522296][ T9331] loop1: detected capacity change from 0 to 512 [ 130.561106][ T9331] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.613644][ T9341] lo speed is unknown, defaulting to 1000 [ 130.701698][ T9347] loop0: detected capacity change from 0 to 128 [ 130.718043][ T9347] ext4 filesystem being mounted at /465/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.751481][ T9353] netlink: 'syz.2.2171': attribute type 4 has an invalid length. [ 130.764899][ T9354] tipc: Enabling of bearer rejected, failed to enable media [ 130.826115][ T9360] netlink: 'syz.6.2175': attribute type 10 has an invalid length. [ 130.840857][ T9360] bond0: (slave netdevsim1): no link monitoring support [ 130.849656][ T9360] bond0: (slave netdevsim1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 130.879661][ T9360] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 130.915916][ T9365] loop0: detected capacity change from 0 to 512 [ 130.930900][ T9365] EXT4-fs mount: 97 callbacks suppressed [ 130.930931][ T9365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.949713][ T9365] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.982411][ T9365] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2177: corrupted xattr block 33: e_value out of bounds [ 130.997205][ T9365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 131.009919][ T9365] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2177: corrupted xattr block 33: e_value out of bounds [ 131.026568][ T9365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 131.038553][ T9365] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2177: corrupted xattr block 33: e_value out of bounds [ 131.059546][ T9365] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 131.078780][ T9372] FAULT_INJECTION: forcing a failure. [ 131.078780][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.091940][ T9372] CPU: 1 UID: 0 PID: 9372 Comm: syz.6.2179 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 131.102619][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.112684][ T9372] Call Trace: [ 131.115979][ T9372] [ 131.118960][ T9372] dump_stack_lvl+0xf2/0x150 [ 131.123708][ T9372] dump_stack+0x15/0x1a [ 131.127909][ T9372] should_fail_ex+0x223/0x230 [ 131.132614][ T9372] should_fail+0xb/0x10 [ 131.136780][ T9372] should_fail_usercopy+0x1a/0x20 [ 131.141828][ T9372] _copy_to_user+0x20/0xa0 [ 131.146278][ T9372] simple_read_from_buffer+0xa0/0x110 [ 131.151669][ T9372] proc_fail_nth_read+0xf9/0x140 [ 131.156690][ T9372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.162326][ T9372] vfs_read+0x1a2/0x700 [ 131.166562][ T9372] ? __rcu_read_unlock+0x4e/0x70 [ 131.171513][ T9372] ? __fget_files+0x17c/0x1c0 [ 131.176286][ T9372] ksys_read+0xe8/0x1b0 [ 131.180510][ T9372] __x64_sys_read+0x42/0x50 [ 131.185082][ T9372] x64_sys_call+0x2874/0x2dc0 [ 131.189824][ T9372] do_syscall_64+0xc9/0x1c0 [ 131.194330][ T9372] ? clear_bhb_loop+0x55/0xb0 [ 131.199011][ T9372] ? clear_bhb_loop+0x55/0xb0 [ 131.203770][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.209709][ T9372] RIP: 0033:0x7f9ce261472c [ 131.214126][ T9372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.233809][ T9372] RSP: 002b:00007f9ce0c81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.242227][ T9372] RAX: ffffffffffffffda RBX: 00007f9ce2805fa0 RCX: 00007f9ce261472c [ 131.250232][ T9372] RDX: 000000000000000f RSI: 00007f9ce0c810a0 RDI: 0000000000000003 [ 131.258203][ T9372] RBP: 00007f9ce0c81090 R08: 0000000000000000 R09: 0000000000000000 [ 131.266255][ T9372] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 131.274227][ T9372] R13: 0000000000000001 R14: 00007f9ce2805fa0 R15: 00007fff010847c8 [ 131.282206][ T9372] [ 131.291365][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.336465][ T9379] loop6: detected capacity change from 0 to 128 [ 131.357500][ T9376] 9pnet_fd: Insufficient options for proto=fd [ 131.373640][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.397468][ T9383] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 131.406260][ T9379] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.420229][ T9379] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.463498][ T9385] netlink: 'syz.1.2184': attribute type 4 has an invalid length. [ 131.550622][ T7469] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.565005][ T9391] tipc: Enabling of bearer rejected, already enabled [ 131.620141][ T9399] loop1: detected capacity change from 0 to 512 [ 131.639534][ T9396] netlink: 'syz.6.2188': attribute type 13 has an invalid length. [ 131.665321][ T9399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.679824][ T9396] gretap0: refused to change device tx_queue_len [ 131.686246][ T9396] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.707841][ T9399] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.726158][ T9399] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2191: corrupted xattr block 33: e_value out of bounds [ 131.741925][ T9399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 131.751114][ T9399] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2191: corrupted xattr block 33: e_value out of bounds [ 131.767533][ T9399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 131.795273][ T9399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz.1.2191: corrupted xattr block 33: e_value out of bounds [ 131.811685][ T9417] loop6: detected capacity change from 0 to 512 [ 131.823787][ T9399] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 131.884630][ T9417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.899485][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.911511][ T9417] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.929027][ T9423] netlink: 'syz.2.2198': attribute type 4 has an invalid length. [ 131.977943][ T9429] loop1: detected capacity change from 0 to 128 [ 131.985637][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.998182][ T9429] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.013489][ T9429] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.013734][ T9432] tipc: Enabling of bearer rejected, already enabled [ 132.058040][ T9433] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 132.069920][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.080526][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.131979][ T9444] netlink: 'syz.6.2201': attribute type 10 has an invalid length. [ 132.143325][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.152299][ T9444] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.182024][ T9449] FAULT_INJECTION: forcing a failure. [ 132.182024][ T9449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.195567][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.5.2206 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 132.206317][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 132.216392][ T9449] Call Trace: [ 132.219694][ T9449] [ 132.222706][ T9449] dump_stack_lvl+0xf2/0x150 [ 132.227338][ T9449] dump_stack+0x15/0x1a [ 132.231568][ T9449] should_fail_ex+0x223/0x230 [ 132.236328][ T9449] should_fail_alloc_page+0xfd/0x110 [ 132.241696][ T9449] __alloc_pages_noprof+0x109/0x340 [ 132.246948][ T9449] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 132.252355][ T9449] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 132.257764][ T9449] handle_mm_fault+0xdd7/0x2ac0 [ 132.262757][ T9449] exc_page_fault+0x3b9/0x650 [ 132.267562][ T9449] asm_exc_page_fault+0x26/0x30 [ 132.272460][ T9449] RIP: 0033:0x7f0d10ee335b [ 132.276884][ T9449] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 132.296663][ T9449] RSP: 002b:00007f0d0f59ee10 EFLAGS: 00010246 [ 132.302770][ T9449] RAX: 00007f0d0f5a0f30 RBX: 00007f0d110fb620 RCX: 0000000000000000 [ 132.310776][ T9449] RDX: 00007f0d0f5a0f78 RSI: 00007f0d10f95bd8 RDI: 00007f0d0f59ee30 [ 132.318769][ T9449] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 132.326778][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.334768][ T9449] R13: 0000000000000000 R14: 00007f0d11125fa0 R15: 00007ffd23f46a88 [ 132.342785][ T9449] [ 132.345948][ T9449] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 132.466148][ T9456] netlink: 'syz.0.2209': attribute type 4 has an invalid length. [ 132.481894][ T9457] loop5: detected capacity change from 0 to 764 [ 132.497838][ T9454] Symlink component flag not implemented [ 132.503914][ T9454] Symlink component flag not implemented (129) [ 132.511615][ T9454] rock: directory entry would overflow storage [ 132.517931][ T9454] rock: sig=0x4f50, size=4, remaining=3 [ 132.523570][ T9454] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 132.787216][ T9468] loop5: detected capacity change from 0 to 128 [ 132.805968][ T9468] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.820696][ T9468] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.824214][ T9471] lo speed is unknown, defaulting to 1000 [ 132.874179][ T5898] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.893706][ T9473] syz.5.2215 (9473): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.939381][ T9476] smc: net device bond0 erased user defined pnetid SYZ0 [ 132.979666][ T9486] netlink: 'syz.5.2220': attribute type 4 has an invalid length. [ 132.994580][ T9478] loop6: detected capacity change from 0 to 8192 [ 133.002585][ T9478] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.018676][ T9478] FAULT_INJECTION: forcing a failure. [ 133.018676][ T9478] name failslab, interval 1, probability 0, space 0, times 0 [ 133.031434][ T9478] CPU: 1 UID: 0 PID: 9478 Comm: syz.6.2217 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 133.042139][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.052276][ T9478] Call Trace: [ 133.055582][ T9478] [ 133.058553][ T9478] dump_stack_lvl+0xf2/0x150 [ 133.063191][ T9478] dump_stack+0x15/0x1a [ 133.067381][ T9478] should_fail_ex+0x223/0x230 [ 133.072087][ T9478] should_failslab+0x8f/0xb0 [ 133.076742][ T9478] kmem_cache_alloc_noprof+0x52/0x320 [ 133.082186][ T9478] ? audit_log_start+0x34c/0x6b0 [ 133.087262][ T9478] audit_log_start+0x34c/0x6b0 [ 133.092058][ T9478] audit_seccomp+0x4b/0x130 [ 133.096575][ T9478] __seccomp_filter+0x6fa/0x1180 [ 133.101596][ T9478] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.107276][ T9478] ? vfs_write+0x596/0x920 [ 133.111746][ T9478] ? putname+0xcf/0xf0 [ 133.115859][ T9478] __secure_computing+0x9f/0x1c0 [ 133.120853][ T9478] syscall_trace_enter+0xd1/0x1f0 [ 133.125918][ T9478] ? fpregs_assert_state_consistent+0x83/0xa0 [ 133.129321][ T9491] loop5: detected capacity change from 0 to 764 [ 133.132008][ T9478] do_syscall_64+0xaa/0x1c0 [ 133.142732][ T9478] ? clear_bhb_loop+0x55/0xb0 [ 133.147501][ T9478] ? clear_bhb_loop+0x55/0xb0 [ 133.152205][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.158148][ T9478] RIP: 0033:0x7f9ce2615d19 [ 133.162562][ T9478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.182324][ T9478] RSP: 002b:00007f9ce0c81038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 133.190771][ T9478] RAX: ffffffffffffffda RBX: 00007f9ce2805fa0 RCX: 00007f9ce2615d19 [ 133.198748][ T9478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 133.206725][ T9478] RBP: 00007f9ce0c81090 R08: 0000000000000000 R09: 0000000000000000 [ 133.214718][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.222789][ T9478] R13: 0000000000000000 R14: 00007f9ce2805fa0 R15: 00007fff010847c8 [ 133.230779][ T9478] [ 133.235927][ T9478] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 133.244524][ T9478] FAT-fs (loop6): Filesystem has been set read-only [ 133.265146][ T9488] Symlink component flag not implemented [ 133.271024][ T9488] Symlink component flag not implemented (129) [ 133.279135][ T9488] rock: directory entry would overflow storage [ 133.285356][ T9488] rock: sig=0x4f50, size=4, remaining=3 [ 133.290984][ T9488] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 133.416250][ T9499] FAULT_INJECTION: forcing a failure. [ 133.416250][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 133.428925][ T9499] CPU: 0 UID: 0 PID: 9499 Comm: syz.0.2223 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 133.439698][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.449826][ T9499] Call Trace: [ 133.453118][ T9499] [ 133.456068][ T9499] dump_stack_lvl+0xf2/0x150 [ 133.457431][ T9501] loop6: detected capacity change from 0 to 128 [ 133.460690][ T9499] dump_stack+0x15/0x1a [ 133.469386][ T9501] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.471105][ T9499] should_fail_ex+0x223/0x230 [ 133.483550][ T9501] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.487763][ T9499] should_failslab+0x8f/0xb0 [ 133.487805][ T9499] kmem_cache_alloc_node_noprof+0x59/0x320 [ 133.487836][ T9499] ? __alloc_skb+0x10b/0x310 [ 133.487862][ T9499] __alloc_skb+0x10b/0x310 [ 133.539233][ T9499] netlink_alloc_large_skb+0xad/0xe0 [ 133.544548][ T9499] netlink_sendmsg+0x3b4/0x6e0 [ 133.549337][ T9499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.554680][ T9499] __sock_sendmsg+0x140/0x180 [ 133.559387][ T9499] ____sys_sendmsg+0x312/0x410 [ 133.564170][ T9499] __sys_sendmsg+0x19d/0x230 [ 133.568860][ T9499] __x64_sys_sendmsg+0x46/0x50 [ 133.573630][ T9499] x64_sys_call+0x2734/0x2dc0 [ 133.578306][ T9499] do_syscall_64+0xc9/0x1c0 [ 133.582838][ T9499] ? clear_bhb_loop+0x55/0xb0 [ 133.587643][ T9499] ? clear_bhb_loop+0x55/0xb0 [ 133.592320][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.598275][ T9499] RIP: 0033:0x7f5a6a4f5d19 [ 133.602729][ T9499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.622629][ T9499] RSP: 002b:00007f5a68b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.631129][ T9499] RAX: ffffffffffffffda RBX: 00007f5a6a6e5fa0 RCX: 00007f5a6a4f5d19 [ 133.639139][ T9499] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 133.647146][ T9499] RBP: 00007f5a68b61090 R08: 0000000000000000 R09: 0000000000000000 [ 133.655116][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.663117][ T9499] R13: 0000000000000000 R14: 00007f5a6a6e5fa0 R15: 00007ffc96d278b8 [ 133.671137][ T9499] [ 133.692235][ T7469] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.745544][ T9512] lo speed is unknown, defaulting to 1000 [ 133.838972][ T9525] loop0: detected capacity change from 0 to 512 [ 133.852739][ T9525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.865565][ T9525] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.893208][ T9525] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2233: corrupted xattr block 33: e_value out of bounds [ 133.915554][ T9538] xt_HMARK: proto mask must be zero with L3 mode [ 133.923392][ T9525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 133.944874][ T9525] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2233: corrupted xattr block 33: e_value out of bounds [ 133.970676][ T9525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 133.992922][ T9525] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.2233: corrupted xattr block 33: e_value out of bounds [ 134.011656][ T9525] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 134.040181][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.056881][ T9541] __nla_validate_parse: 14 callbacks suppressed [ 134.056900][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.076667][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.099358][ T9545] loop0: detected capacity change from 0 to 128 [ 134.116111][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.126045][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.137027][ T9545] syz.0.2238: attempt to access beyond end of device [ 134.137027][ T9545] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 134.160219][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.169351][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2237'. [ 134.290361][ T29] kauditd_printk_skb: 1220 callbacks suppressed [ 134.290379][ T29] audit: type=1326 audit(1734420055.600:37793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.5.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d10f2cce7 code=0x7ffc0000 [ 134.320136][ T29] audit: type=1326 audit(1734420055.600:37794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.5.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d10ed1f29 code=0x7ffc0000 [ 134.343928][ T29] audit: type=1326 audit(1734420055.600:37795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9511 comm="syz.5.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f0d10f35d19 code=0x7ffc0000 [ 134.369091][ T29] audit: type=1326 audit(1734420055.620:37796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.392731][ T29] audit: type=1326 audit(1734420055.630:37797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.416351][ T29] audit: type=1326 audit(1734420055.630:37798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.439930][ T29] audit: type=1326 audit(1734420055.630:37799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.463512][ T29] audit: type=1326 audit(1734420055.630:37800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.487070][ T29] audit: type=1326 audit(1734420055.630:37801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.510671][ T29] audit: type=1326 audit(1734420055.630:37802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.0.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6a4f5d19 code=0x7ffc0000 [ 134.579264][ T9561] siw: device registration error -23 [ 134.863866][ T9575] lo speed is unknown, defaulting to 1000 [ 134.915086][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2253'. [ 134.938873][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2253'. [ 134.968848][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2253'. [ 134.992102][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2253'. [ 135.533503][ T9605] loop5: detected capacity change from 0 to 512 [ 135.549461][ T9605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.562319][ T9605] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.583811][ T9605] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.2261: corrupted xattr block 33: e_value out of bounds [ 135.600143][ T9605] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 135.609689][ T9605] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.2261: corrupted xattr block 33: e_value out of bounds [ 135.627131][ T9605] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 135.630375][ T9612] loop6: detected capacity change from 0 to 512 [ 135.643641][ T9605] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #15: comm syz.5.2261: corrupted xattr block 33: e_value out of bounds [ 135.658428][ T9605] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 135.680119][ T9612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.693452][ T9612] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.693826][ T5898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.717990][ T9612] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2263: corrupted xattr block 33: e_value out of bounds [ 135.725460][ T9618] loop5: detected capacity change from 0 to 128 [ 135.741310][ T9618] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.748392][ T9612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 135.753791][ T9618] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.796646][ T9612] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2263: corrupted xattr block 33: e_value out of bounds [ 135.814469][ T9612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 135.827548][ T5898] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.845197][ T9612] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2263: corrupted xattr block 33: e_value out of bounds [ 135.861881][ T9612] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 135.899136][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.022517][ T9643] validate_nla: 1 callbacks suppressed [ 136.022534][ T9643] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 136.064602][ T9642] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 136.164501][ T9658] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 136.206734][ T9662] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 136.319323][ T9668] siw: device registration error -23 [ 136.403242][ T9673] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 136.411900][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.419957][ T9673] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 136.669109][ T9690] netlink: 'syz.2.2290': attribute type 4 has an invalid length. [ 136.708805][ T9694] veth1_to_batadv: mtu less than device minimum [ 136.745147][ T9697] siw: device registration error -23 [ 136.893389][ T9717] netlink: 'syz.2.2301': attribute type 4 has an invalid length. [ 136.961612][ T9720] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 137.029184][ T9727] lo speed is unknown, defaulting to 1000 [ 137.101084][ T9738] netlink: 'syz.0.2306': attribute type 10 has an invalid length. [ 137.379952][ T9740] loop6: detected capacity change from 0 to 512 [ 137.400211][ T9740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.412946][ T9740] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.430969][ T9740] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2309: corrupted xattr block 33: e_value out of bounds [ 137.445127][ T9740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 137.454443][ T9740] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2309: corrupted xattr block 33: e_value out of bounds [ 137.468528][ T9740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 137.478960][ T9740] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2309: corrupted xattr block 33: e_value out of bounds [ 137.493265][ T9740] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 137.514528][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.599261][ T9752] netlink: 'syz.6.2312': attribute type 4 has an invalid length. [ 137.761545][ T9757] vlan2: entered allmulticast mode [ 137.885824][ T9763] delete_channel: no stack [ 137.891058][ T9763] delete_channel: no stack [ 137.934415][ T9759] netlink: 'syz.2.2315': attribute type 10 has an invalid length. [ 137.962521][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.972100][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.116447][ T9780] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.260426][ T9804] bond0: (slave batadv0): Releasing backup interface [ 138.483435][ T9818] siw: device registration error -23 [ 138.580359][ T9828] sctp: [Deprecated]: syz.2.2341 (pid 9828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.580359][ T9828] Use struct sctp_sack_info instead [ 138.865588][ T9851] pim6reg1: entered promiscuous mode [ 138.870969][ T9851] pim6reg1: entered allmulticast mode [ 139.099416][ T9888] SELinux: syz.0.2359 (9888) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 139.310370][ T9895] rdma_op ffff88810313e580 conn xmit_rdma 0000000000000000 [ 139.321112][ T29] kauditd_printk_skb: 1751 callbacks suppressed [ 139.321178][ T29] audit: type=1400 audit(1734420060.630:39552): avc: denied { bind } for pid=9894 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.372731][ T29] audit: type=1400 audit(1734420060.680:39553): avc: denied { create } for pid=9894 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.392409][ T29] audit: type=1400 audit(1734420060.680:39554): avc: denied { setopt } for pid=9894 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.605846][ T29] audit: type=1400 audit(1734420060.910:39555): avc: denied { mount } for pid=9897 comm="syz.2.2363" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.641976][ T29] audit: type=1326 audit(1734420060.940:39556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.665617][ T29] audit: type=1326 audit(1734420060.940:39557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.689105][ T29] audit: type=1326 audit(1734420060.940:39558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.712644][ T29] audit: type=1326 audit(1734420060.940:39559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.736284][ T29] audit: type=1326 audit(1734420060.940:39560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.760100][ T29] audit: type=1326 audit(1734420060.940:39561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9897 comm="syz.2.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65d535d19 code=0x7ffc0000 [ 139.836095][ T9904] bpf_get_probe_write_proto: 14 callbacks suppressed [ 139.836149][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.843259][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.854951][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.868186][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.880298][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.891719][ T9904] syz.6.2366[9904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.918104][ T9904] lo speed is unknown, defaulting to 1000 [ 139.935277][ T9902] __nla_validate_parse: 55 callbacks suppressed [ 139.935296][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2365'. [ 140.279052][ T9928] loop6: detected capacity change from 0 to 512 [ 140.322806][ T9928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.335733][ T9928] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.374256][ T9928] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2374: corrupted xattr block 33: e_value out of bounds [ 140.392190][ T9928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 140.408891][ T9928] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.2374: corrupted xattr block 33: e_value out of bounds [ 140.437331][ T9928] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 140.456626][ T9928] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2977: inode #15: comm syz.6.2374: corrupted xattr block 33: e_value out of bounds [ 140.471310][ T9928] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 140.495009][ T7469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.575871][ T9946] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2380'. [ 140.799260][ T9980] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2391'. [ 140.894567][ T9995] loop6: detected capacity change from 0 to 128 [ 140.926115][ T9995] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.948224][ T9995] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.998875][ T7469] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.119523][T10020] validate_nla: 9 callbacks suppressed [ 141.119549][T10020] netlink: 'syz.5.2408': attribute type 4 has an invalid length. [ 141.617074][T10044] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 141.703424][T10050] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2419'. [ 141.739695][T10055] netlink: 'syz.0.2420': attribute type 21 has an invalid length. [ 141.747872][T10054] netlink: 'syz.0.2420': attribute type 21 has an invalid length. [ 141.764706][T10055] ================================================================== [ 141.772830][T10055] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 141.780243][T10055] [ 141.782577][T10055] write to 0xffff8881411e4000 of 4096 bytes by task 10056 on cpu 1: [ 141.790554][T10055] _copy_from_iter+0x133/0xd00 [ 141.795331][T10055] copy_page_from_iter+0x14f/0x280 [ 141.800449][T10055] process_vm_rw+0x59c/0x890 [ 141.805131][T10055] __x64_sys_process_vm_writev+0x7a/0x90 [ 141.810792][T10055] x64_sys_call+0x2c48/0x2dc0 [ 141.815473][T10055] do_syscall_64+0xc9/0x1c0 [ 141.819982][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.825894][T10055] [ 141.828215][T10055] write to 0xffff8881411e4000 of 4096 bytes by task 10055 on cpu 0: [ 141.836187][T10055] _copy_from_iter+0x133/0xd00 [ 141.840959][T10055] copy_page_from_iter+0x14f/0x280 [ 141.846076][T10055] process_vm_rw+0x59c/0x890 [ 141.850669][T10055] __x64_sys_process_vm_writev+0x7a/0x90 [ 141.856309][T10055] x64_sys_call+0x2c48/0x2dc0 [ 141.860986][T10055] do_syscall_64+0xc9/0x1c0 [ 141.865490][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.871400][T10055] [ 141.873720][T10055] Reported by Kernel Concurrency Sanitizer on: [ 141.879951][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.0.2420 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 141.890712][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 141.901808][T10055] ==================================================================