last executing test programs: 7m10.303822078s ago: executing program 32 (id=428): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 6m37.735161791s ago: executing program 33 (id=1054): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 5m59.479974617s ago: executing program 34 (id=2211): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = dup2(r2, r2) write$tun(r3, 0x0, 0x46) 5m58.564066721s ago: executing program 35 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f4}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(0xffffffffffffffff, 0x7) sendfile(r5, r5, 0x0, 0x1000000201005) fchown(r4, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r7, 0x4, 0x0) renameat2(r6, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000080)='./file0\x00', 0x2) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_flags_required={0x3, 0x8}, @ioring_restriction_sqe_op={0x1, 0x9}], 0x3) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) shutdown(r3, 0x2) 5m46.171010605s ago: executing program 36 (id=2458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x2000000000000075, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket(0x25, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0xffff, 0x477b, 0x8acf, 0x9}, 0x10) recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 5m21.777531056s ago: executing program 37 (id=2991): syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x105802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 4m58.956294194s ago: executing program 38 (id=3427): r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x34, &(0x7f0000000640)={0x6, 0x0, 0x4}) 4m39.969891055s ago: executing program 39 (id=3499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) unshare(0x62040200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20004810) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYBLOB="7c7e1e03d2f4d7dca4f3853c82c4220839340170925f81c3b40f158d435692f963e2f4ca3199aff9756c4879e0c12fea3d78b7df058b114c1bb69476", @ANYRESHEX=r5, @ANYRESHEX=r6], 0x3c}, 0x1, 0x0, 0x0, 0x8c4}, 0x5ed9fc8c1eb20134) (async) sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94f3dffad827f4a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kfree\x00', r8, 0x0, 0x1000}, 0x18) write$selinux_load(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf90800005345204c696e7578"], 0x10) (async) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0xfffc, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) (async) socket$kcm(0x2d, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r3], 0x38}}, 0x840) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r12, 0x2d3e, 0xfffffffc, 0x22, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xce, 0x301) (async) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000400)) 4m15.208439592s ago: executing program 40 (id=4023): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0xd42}, 0x8) 3m19.080158553s ago: executing program 41 (id=5395): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = syz_io_uring_setup(0x417, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x110}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000007c0)='GPL\x00', 0xfff, 0x61, &(0x7f0000000800)=""/97, 0x40f00, 0xb, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000880)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[r3, r3, r3, r3, r2, r3, r2, r3, r3], &(0x7f00000009c0)=[{0x3, 0x5, 0x9, 0x6}, {0x0, 0x4, 0xe}, {0x5, 0x3, 0xd, 0x2}, {0x4, 0x0, 0x4, 0xc}, {0x4, 0x2, 0x10, 0x4}, {0x3, 0x3, 0x10}], 0x10, 0xc2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="0ca178e71c52dc0a14d149b222d4c9811100007c93c8abdd4def85d6cafda0bcc6319798a119307f7de0d0ff7c5ee2a12d891c616fb940857b85455b3b589d937e4e5280d53d0f7c521a2248d2dc3afeb272187f24aa7618b88a9c25487502a065189dc6cc4bf9df9f63f5df7b46efecab2b3df8fa990dcaa772d45999e3bbb20ecd2c1ddcdf83000016000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001800000002000000000000003d66782b18150000", @ANYRES32=r2, @ANYBLOB="00000000000000008500000077000000185200000100"/32], &(0x7f00000003c0)='GPL\x00', 0xc8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x4, r6, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x81, 0x80000}, 0x10, 0x0, r9, 0x3, 0x0, &(0x7f0000000b00)=[{0x2, 0x1, 0xc, 0x7}, {0x4, 0x2, 0x9, 0x6}, {0x5, 0x5, 0x4, 0x8}], 0x10, 0x4b0}, 0x94) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0}) io_uring_enter(r6, 0x693b, 0x217, 0x2, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x2, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3m5.576037913s ago: executing program 42 (id=5365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x14) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000004c0)='./file0\x00', 0x80000000) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10000100) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x84, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/263, 0x107}], 0x1, &(0x7f0000000380)=[{&(0x7f0000217f28)=""/231, 0xe7}, {&(0x7f00000007c0)=""/218, 0xda}], 0x2, 0x0) r6 = dup(r3) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7) 2m26.55214588s ago: executing program 0 (id=6401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r1, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c21c", 0x2}, {&(0x7f00000007c0)}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000070040000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000065b797dc80f96057f07084001bf500"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}]}, 0xc9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) ptrace$setregs(0xf, 0x0, 0x6, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='kmem_cache_free\x00', r9}, 0xffffffffffffff1c) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) fcntl$setlease(r10, 0x400, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 2m26.324349254s ago: executing program 0 (id=6404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r']) 2m26.213053915s ago: executing program 0 (id=6406): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x600, 0x0) read$rfkill(r7, &(0x7f0000000500), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) r8 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000070000001c000180060001000200000008000300ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) 2m26.104421677s ago: executing program 0 (id=6409): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0xc5, "6287034e68e124e7a7355de4a6c1f7d50f92fa5724285ce3b913a66adb13166954d727efcbaaa920c8188fb940b113bd9151528fb37bf413808bcd8f50fe709f3c7e7c4a3a5a6c93c9fb209442c47394fe5f4b51034b78f67691236131abc73b199734321fb0d11695bebb673b15a4762ad3be5265cea3f91e56f46e25708b7bd8e464d0dd35a6379e0cf72d72f92493c857efae50c12701dc8ab4a4288572946b78cc59c0c4adc0c0434de2ad58cb04fdc75c5efca0488966197e9a23a4e5d8750e902ed6"}, &(0x7f0000000400)=0xcd) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r5, 0x4, 0xfff9, 0x8, 0x8, 0x4}, 0x14) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(r4, &(0x7f00000000c0)='./bus\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m25.21634741s ago: executing program 0 (id=6422): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f0000000100), 0x0}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r3, 0x4, 0x7c00) dup3(r4, r3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0a0000001000000000000000", @ANYRES32, @ANYBLOB="f75531b1f3722aee9fd0ec29941d7b9dc64ecea0d3e52db8a0eed7a3c01119db872b02da54d4e7e3c76655646c0e40ff9f31730f5b11b1a20b9a0b6621c622272f60a65da3377cc33c380cc925b95fc7824af22275af9f854e066cd2fe0f81d46430435024505ad8497af7f58bca90fc3cf2bce811c81016d54ef57b3cd8793c14277b79f6e7227160df6ca2c5c793d72cb520d4a46e58b7783d82253ad27dd5800c1d9a3782fc8837616f71", @ANYRES64=r2], 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5827f8c8aca512e8b1f14d710d20f5ddad2e0a21460b1e97000807fb1a2c0519864a3672a1d211", @ANYRES64=r2], 0x20) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 2m24.617600639s ago: executing program 0 (id=6433): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) 2m24.5645682s ago: executing program 43 (id=6433): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) 2m22.54015062s ago: executing program 2 (id=6470): sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40080, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)={0x16fc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1014, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x290, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "4a54c43fd09937a7a8de8d0e2f1c872798af0dc5555e80bf9a6f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "41640f9b02d238578cec6ebe92b0f0dbce05e3f8c5135160ec6dc1052b35b6fbc7b58be66e7c82f854f5703e24ec460d5708409e955bf0d6fa73d3c284d4be53ae23f306e2e49f7cf4797ffad4df97dad39908baffadbf195a0673"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "4fab72513ec4b1d365c0df63b22fc857984b129ff48f4e8174ac998d4ab5cf1352a0f04753a61d9956aec65213efa3eaf3783c42c2180b414016b07c19869552363d8fdad0669a9c2424b5f60b03180e780339c4f9bff87729d60a1d76dbe38cba7d623ec83b0f0435ecb1f363d3f143fff4abd8e2c412409c1cdfb034e72e69039061125eb1f7643366b9f9dd73e12780286bea8c8ec508"}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "9b1e8e5d589c74710b8adaf3c5121b0a0eff53f794e9e441475962c2b2ecbb3bafb9cd84207c504f0d48860f51adbf4a735cef33c1e7147cf47e40ecc816b75105811b7ec770c67a5c6c3fac1aba102d5927577c45d13ecbc5dc8008a6db0c7e604485649cb55e2684ea7beec1ca319e50bd23e5df96bbddce94b11913fa83ee7b148b88c45a91618d3f"}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "275e18903e91d17232ec942fad3cd14ad16a334a5c30c1fa193b5659f86b819f1faa1b81a6cb10a11873abb163f4d8312d6c393ef70d84cd719e9f33dd5cf96c6c01a2c0ed4fd13041914f8cb09bfe6cecad22998afa6804732f1b278b8a5d4ead1c043b3bc53901bbe69a17e979b3045bbc168e4383c7ca7825"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "1e2e97102ab7f644ff35f752034f54982d05c9d023f8f0fd6fd1491edf8126272b94a9f4c51fdb6b9a610cc6dfeae567f251e9fe62de6f3c14a48c0641269676ec75d9ed2e450c78365656f35c1b956c6ebe37f3"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',-%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8aee}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18a1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.()]-*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "ef95036376a8321337328f282dba71b16eb321403a30e6cdb5806c63bb4d8e0fdaa89da30a356b9afc4c5aa0bff924055cdf51d5246b17c2c9e4a6799e5a44b455e2898697e77a867267f67d8623fd1d8eb2531a6c55280724785697dd430c6cd794f1768b8490c904f3444066a22bf1148608021707d19f1151ed801c69df46b8cefe63e4cf6ee58642ce20815f391f958b1e902adb954f2e7dd2223f2e985bf7194959a78a2709847ca90a4fd2b08459a5d68a63f5aff9d1fd911082eb1c56bd692546f315c2017bea44ab632893a1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe4, 0x4, "0688c6f663c0081fd149428af5a0e4090ce863c91120d1b1d3e881284e85b8e8b166fc5d6a5aaccb6dd0de43ca94daef812fed960d9314c86ccb3ab3e6e6e14c150462fae47ba99fc8defa9a56bf54daa4ad9f54ea62d434cadbc7e70928fe4d9300899b26af3e8559904b5fd4cb708560ad4ae835de45f940607e3946c96390680816728ccc229670594dd3ee87c47d874399d5e2a81edf864d1664d804e4028d57671b5e87908bcf7ad026e8819d41a84cf0b3ed6d1467281be393315344716225844142495d663ffb5f0d90bcf860c7a03b83e4708162b871624bed897c41"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "4bf5c22d7642db5cbb6a1d00232aa066411b3c8c2863d2919285ca7941881ea2ec0ac1368f56094d74013caab315ffda26c48e9642f0108bf7d919b86f19a00a418eb028d0643880d4ca423e3a9d346fc04dd1a2a3c73dc0eabd28240b883eece9d0954f5c6adedd4c92a22f443378757ef5ef2a7c4e93df8c23aa3982f144095efcff7352c4f7352fc46173e8d6557dfc6c11d4216e1bf0ebb47c84d1a238fc3f414d8efa2ca7dbe3c92f622092790470def4787f45463a6a34e435d7b1c27ede286b36046ed414db3d6426c73f336a3a5fd50ae4ae3ee0"}]}]}, 0x16fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 2m22.53981525s ago: executing program 2 (id=6471): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2m22.505694s ago: executing program 2 (id=6472): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x88, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x88, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) rt_sigaction(0x38, &(0x7f0000000600)={0x0, 0x1c000006, 0x0, {[0x200008000000000]}}, 0x0, 0x8, &(0x7f0000000280)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2000840) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000002c0)=0x8000, 0x4) open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21) (async) open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) kexec_load(0x2, 0x0, 0x0, 0x0) (async) kexec_load(0x2, 0x0, 0x0, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000340)={0x3, 'macvlan1\x00', {0x4}, 0x3}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000340)={0x3, 'macvlan1\x00', {0x4}, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m22.250541594s ago: executing program 2 (id=6478): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480), 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m22.060264367s ago: executing program 2 (id=6481): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2m21.398402157s ago: executing program 2 (id=6489): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) sendfile(r2, r2, 0x0, 0x6a3) 2m21.385199217s ago: executing program 44 (id=6489): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) sendfile(r2, r2, 0x0, 0x6a3) 2m1.411696313s ago: executing program 9 (id=6745): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xffff, 0xa5, &(0x7f0000000140)=""/165, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f1}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x8, 0xfffffff5, 0x2, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x5a, 0x29, 0x0, @local, @rand_addr=0x64010100}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}, 0x1000000}], 0x2, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000600)='skb_copy_datagram_iovec\x00', r1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xffff, 0xa5, &(0x7f0000000140)=""/165, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f1}, 0x94) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x8, 0xfffffff5, 0x2, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x5a, 0x29, 0x0, @local, @rand_addr=0x64010100}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b2", 0x1}], 0x1}, 0x1000000}], 0x2, 0x4004040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000600)='skb_copy_datagram_iovec\x00', r1}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) 2m1.368450493s ago: executing program 9 (id=6746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8002, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x2c020400) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x3a, 0x36, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r3, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 2m1.240680045s ago: executing program 9 (id=6748): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0xfffffc9f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff39, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', &(0x7f00000001c0)={0x193000, 0x40, 0x10}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000580)=0x14) sendmsg$xdp(r5, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, 0x4, r6, 0x16}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="ac40e6c4148f3412f979fc3830f2a836f85b694a865325fd1010942b68b8fc99cc1a2412b3eb72d135b72175932c3540941c737aab3fdfa5a7f0046fc01212c14e3eedf113a7478d625c51bd770e91cc72086b88565810c041c3448b95fd404f0befa91e7d7440ba3fa31096a7d645024bc0f097b837350e7f7a3320b280b3369a70e44fa2f528c95cc91fc06322649dd9fda799c1b127a78399b19f71", 0x9d}, {&(0x7f00000006c0)="a697622670", 0x5}, {&(0x7f0000000700)="7084237b7ca407569a93862a4bf2437fa46f7b736d257e37cf0a4c81632a7dcd7be9d67ec2ab443ea40204521f1c65ca737f9f2bc1ea3e137813b3951cc27b57eddc5e337a2efe054d44a617a1171d0488a50277", 0x54}, {&(0x7f0000000780)}], 0x4, 0x0, 0x0, 0x8840}, 0x4004010) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x1004018, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) 2m1.240290045s ago: executing program 9 (id=6749): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0xc5, "6287034e68e124e7a7355de4a6c1f7d50f92fa5724285ce3b913a66adb13166954d727efcbaaa920c8188fb940b113bd9151528fb37bf413808bcd8f50fe709f3c7e7c4a3a5a6c93c9fb209442c47394fe5f4b51034b78f67691236131abc73b199734321fb0d11695bebb673b15a4762ad3be5265cea3f91e56f46e25708b7bd8e464d0dd35a6379e0cf72d72f92493c857efae50c12701dc8ab4a4288572946b78cc59c0c4adc0c0434de2ad58cb04fdc75c5efca0488966197e9a23a4e5d8750e902ed6"}, &(0x7f0000000400)=0xcd) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r5, 0x4, 0xfff9, 0x8, 0x8, 0x4}, 0x14) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(r4, &(0x7f00000000c0)='./bus\x00', 0x200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2m1.025200649s ago: executing program 9 (id=6751): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000001300)="921ef023", 0x4, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0xc9}]}, @dstopts={0x62}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', r6, 0x40, 0x7, 0x8000, 0xf, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x67, 0x0, 0x8, 0x0, 0x0, @empty, @loopback, {[@cipso={0x86, 0x67, 0xffffffffffffffff, [{0x1, 0x9, "8f82d84594b125"}, {0x2, 0x9, "c48e1450c2d53b"}, {0x6, 0xd, "86ab170fe4227a2f336d1e"}, {0x6, 0x11, "32c8135cc4a7fe475c0d2dcc81c493"}, {0x5, 0x11, "7119a494aa1bc44a582d74e8ddb862"}, {0x0, 0x9, "5d93b8bfe69756"}, {0x2, 0xf, "0942e5e0a89552abfeed67a776"}, {0x5, 0x8, "fffd33cf5694"}]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x190, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x88, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2004c840}, 0x40000) 2m0.690337524s ago: executing program 9 (id=6752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 2m0.689914294s ago: executing program 45 (id=6752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1m55.758386217s ago: executing program 8 (id=6821): memfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000108000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}}, 0x0) 1m55.743539787s ago: executing program 8 (id=6822): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 1m54.640211863s ago: executing program 8 (id=6837): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5827f8c8aca512e8b1f14d710d20f5ddad2e0a21460b1e97000807fb1a2c0519864a3672a1d211", @ANYRES64], 0x20) fsmount(0xffffffffffffffff, 0x1, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 1m54.16975359s ago: executing program 8 (id=6846): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0xc5, "6287034e68e124e7a7355de4a6c1f7d50f92fa5724285ce3b913a66adb13166954d727efcbaaa920c8188fb940b113bd9151528fb37bf413808bcd8f50fe709f3c7e7c4a3a5a6c93c9fb209442c47394fe5f4b51034b78f67691236131abc73b199734321fb0d11695bebb673b15a4762ad3be5265cea3f91e56f46e25708b7bd8e464d0dd35a6379e0cf72d72f92493c857efae50c12701dc8ab4a4288572946b78cc59c0c4adc0c0434de2ad58cb04fdc75c5efca0488966197e9a23a4e5d8750e902ed6"}, &(0x7f0000000400)=0xcd) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r4, 0x4, 0xfff9, 0x8, 0x8, 0x4}, 0x14) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1m53.703263347s ago: executing program 8 (id=6850): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (fail_nth: 4) 1m53.260084683s ago: executing program 8 (id=6862): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x4080) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@buf) 1m53.239532294s ago: executing program 46 (id=6862): sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x4080) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000340)=@buf) 24.729534924s ago: executing program 4 (id=8271): statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setgid(0x0) 24.616067416s ago: executing program 4 (id=8273): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_emit_ethernet(0x52, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa8100100086dd6001010000181101fe8000000000000000000000000000bbff0200000000000000000000000000014e200e2200189078040000000f0000000600000010000000"], 0x0) r1 = socket$inet(0x10, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0xa67, 0x5ad5, {{0xa, 0x4, 0x3, 0x1b, 0x28, 0x65, 0x0, 0xf6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty, {[@generic={0x86, 0xa, "ff82245a2fe52202"}, @cipso={0x86, 0x6, 0x2}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000001cc0)={'erspan0\x00', r3, 0x40, 0x20, 0xb, 0x6, {{0x38, 0x4, 0x0, 0x8, 0xe0, 0x65, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0x24, 0x75, 0x3, 0x5, [{@empty, 0x2f}, {@broadcast, 0x7fff}, {@private=0xa010102, 0x8}, {@multicast1, 0x9}]}, @end, @timestamp_addr={0x44, 0x14, 0x14, 0x1, 0xe, [{@private=0xa010100, 0x9}, {@loopback, 0xfffffffd}]}, @rr={0x7, 0x2b, 0x87, [@dev={0xac, 0x14, 0x14, 0x44}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @multicast1, @private=0xa010102, @empty, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xf, 0x0, 0x8, [0xd5, 0x6, 0x27, 0xd4c, 0x4, 0x10000, 0x5, 0xd]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x8, "0d6402ec1eb5"}, {0x0, 0xb, "52635ce264212b2821"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xa5, 0x1, 0x8, [{@broadcast, 0x8}, {@multicast2, 0xffffffff}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}]}]}}}}}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000001e00007110080000b38500005382bd2a27680b45945359530aeed9c9fbdf8801176346c330e5aa25142dc4a3eb350b456a16fa3e03f37620930f842013e1860b179db000f967b163d3f336eb7768387e81d371c2601d1e048e1dbc0f5bcaadb5af68f1da2d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) r12 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r12, 0x0, 0x40000000, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r13 = socket$netlink(0x10, 0x3, 0x1d) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000000080500000000000000000002400a00000006000240000700000600024043050000050003000600000005000300110000000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x40) 24.486632728s ago: executing program 4 (id=8275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.34497179s ago: executing program 4 (id=8277): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0x1, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_clone3(&(0x7f00000015c0)={0x105000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 24.070129014s ago: executing program 4 (id=8281): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa00001812", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) getpid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000001540)={[{@discard}, {@mblk_io_submit}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000007c0), 0x10) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x8800, &(0x7f0000000500)={[{@errors_remount}, {@sysvgroups}, {@data_err_abort}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2004000, &(0x7f00000003c0)=ANY=[]) (async) chdir(&(0x7f0000000340)='./file0\x00') (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) 23.899506666s ago: executing program 4 (id=8285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x459}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 23.894024426s ago: executing program 47 (id=8285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x459}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 5.575760848s ago: executing program 7 (id=8586): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c1d8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6a7e42a58fc020000000000000000000000000000fe80000000000000b59a1a00000000aa6c00000000000000"], 0x0) 5.484280929s ago: executing program 7 (id=8588): r0 = open(0x0, 0x40, 0x170) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4048040) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 5.385167181s ago: executing program 7 (id=8589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0x6, 0x50, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0xb46, 0xc46}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x0, 0x40, 0xcce, 0x5, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0xf, 0x96, [@rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1fc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r13}, 0x38) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r14, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0xffffff7f, 0x4, 0x2, 0x9, 0x2, 0x7ffb, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x8, 0x2, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x1, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x800, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x8, 0x9, 0x400, 0x207f, 0x4, 0x4, 0x1000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r17 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r17, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r17, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20) 3.314039371s ago: executing program 6 (id=8623): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="d2deb6e13d", @ANYRESDEC=r1, @ANYBLOB=',obj_role=msdos\x00,func=PATH_CHECK,context=system_u,dont_measure,sync,smackfshat=,\x00'], 0x1, 0x2cc, &(0x7f00000003c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601000000000000000000020000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001400078005001500040000000800064000000000050005000200683730ff010006000000"], 0x5c}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xf80}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170", 0x12}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000d000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r10, r9) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r9, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) sendmsg$xdp(r5, &(0x7f0000000e80)={&(0x7f00000007c0)={0x2c, 0x11, r0, 0x1f}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000800)="6b03833e5236bb1c9c0a7cf618c35c88fe2726e3070f0d4b981423b251f06eead1e6256ba12cacea352b7ad52216c9746eac7498f0746fe14d7844b783b4fcdeac0c44d256efd84331ff99a3c01e48e99e32bd39d070fa4e552484ecb138e201af0d23ef254d5ac21fff1412b22c300b0f55e359d6677272f6dbb085b9437060ca222f20ab9a109494e2f70168a2ff0c9fd27c9caf09ec4d03905b81170dbc9eda09ce84d52cd628f5310d09230fd459947695c87539fb27d654a69b3c995b6a1a98943a731e83c9bc3f67c832237705db523206569fdcf32f6ea241716449c7ddcc", 0xe2}, {&(0x7f0000000900)="5360aa47a40d93ebce49e7e089ce1c12920eb13181d5a9dfbbbd9459cdc2f58dcd6664092ff1a3b7410a5b9b179ee65b2159a36f3eb9a86de313b314c81071b052ae2439fa4a2407034ac5f4193142c6255291c2b642bf44dd49838a04e492f8764036eeb956b44d737f96a8d2c13ff45c672ef81ee6a592ca934566ffa1a616d8bc6ad4a4695ed8f86b4fdf1132b03db85bc93763249ed2cb0991468eb778cdfcb41dec5eaa1e08a47b76ca70", 0xad}, {&(0x7f00000009c0)="41408ca1a043ea2e248f2a5907bc5118500fa515b60ee9c3715a637225718c208413ff533dc429ef9983f759a30f1b6f3ba9702c4005a7eff282dbfb40d9ec7521127612bb0f44f7fec50586112e558166b83c1a38ff920a232e33c6b41e910cd9bae579e893f2c50be9656aae9296e7c99f5c2e9fe47b384f0988138f6b10d0fa70189f2b3e1ca045f636799bfe97145615457561ee10ed3075cf3467ee35b5c01d402104ed096bef0d654dc9ac66f971185c5902fc9f3310619cf535d3bb929bdd906ac2a7d6a12e56eb9a2b111476b079033975", 0xd5}, {&(0x7f0000000ac0)="ee53926c8ce3a8b52424557ef856ba4e47e33d36047cd3dceaa290f5b13847b59c40773eba27a8ec3ddd029530162ed3048227820e43c442ae85718c3b440409770d2e5c17408dc1129e65ca9aa3bf22a6720a71951597da7a4732fe684f775520a4934d3dfce683e2", 0x69}, {&(0x7f0000000b40)="ddc5beea60524cfd2b61858686b6a75809bc78e6f70b65d703adde5e6db3bbcd75ba169fc6c1083c9538f3bee301b01686f2b6029a657ddc007707cfe3f175b1d43b201593b92320a7c9df", 0x4b}, {&(0x7f0000000f80)="2c5806f3713f184ad288aba15437f14a45b418a35f7437f7529bb2b49c89156a64e42e97d9d7b4d7eeef1ce6bef8082249de2eabdc5af0a5ba6ab82b6089f8ffe6bf5c655e18ac8af20338126c36cf53e842f21d82e27ca1675a7dfd93fa63485e4fc81c5ebe980cd756674743f92e7b654737717d24fe1fca7b224d201e2c73ccbbebe564a1529b2af9434d3721a9dc7d8f72e0d6ce9cbc732dfdbe57667e7c730933f87cb88ef6511ba346524f35447e96230622425eb1ea2204b5cae237ff9afef6", 0xc3}, {&(0x7f0000000cc0)="65d61cbd6a7e36c6c61358479cf4eb9c7621656d9454c52e6e13c972dc5f7e88fa2a332eae215978d1e355eddbb0e1508591bf21ec1ce64279531db6b67b2a12976fb563f9933f0041cad5e7684aea6f051dd1e3b60022baf02e647eb3aaad83a36b", 0x62}, {&(0x7f0000000d40)="44c07544fbe34d78205de5c119429c81b2cd87976451e9c2aae42b6479b849d6c8fc5af9119f11fe7905a30ee2038d01d026c34c14c84930030bb2574bd5ce49b2b35318a469623dd2884ecbfe5aa003cd41b5118bd46744d6a48e859b15004ededfbbfbbcde8e63c28693f83d35560b58c3e79aac15f3a57049c5212e290011a6747b8ad3fa6b5fee47c39bcb2c569877223cf1c63930cf6abbbf83d6f0a549aca207c03995cb1424ced2e58d582b002ec1e44c379f938ca0", 0xb9}], 0x8, 0x0, 0x0, 0x20000884}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x12062) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 2.71592452s ago: executing program 1 (id=8630): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00'/16], 0x10}}], 0x1, 0x44008004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x7be7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x10000, 0xffffffff, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x1, 0x7, 0x80, 0x5, 0x8, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x5, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x5, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x9, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x4, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0x200a, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x405, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1810000000000020ae200000008a00000900000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r11, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_ACT={0x64, 0x9, 0x0, 0x1, [@m_skbedit={0x60, 0x9, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x2, 0x3, 0x1}}]}, {0x1c, 0x6, "52b64f75790faf0d05b7cba44ad3b91fdba8d9ee8c51f1dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0xa0}}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r12, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r12, 0xfff) accept4(r12, 0x0, 0x0, 0x0) 2.492810374s ago: executing program 6 (id=8632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000700)=""/171}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000000)=""/87, 0x57, 0x0, &(0x7f0000000080)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x4}}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0xfffffffd, 0xf4, 0x4, 0x2, 0x1}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r10}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x6, &(0x7f0000001000)) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 2.260411647s ago: executing program 3 (id=8635): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 5) 2.256688727s ago: executing program 6 (id=8636): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, r1, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) inotify_init1(0x1800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = open(0x0, 0x64842, 0x86) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300001e, 0x62033, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(0xffffffffffffffff, &(0x7f0000001b00)="3e214f0deee0e2609361d796ad7459e18a62b163d42e984084f8e13c5a393b00000000800000019f57adc1fd080bc542458529e6fe1797d3257af57434955f935c8072d088203d703e5cc5b50bae822bad16b3edf1d8a411591360181832f7950077cc846f0dcd0ab1e311aa6e36afa0b6632781bdb1c38752e214bceaca516b7e9fdb0fe432595bbdf9c5db318cf6f8fdba85118ea044ddc34341f975a45149a4ee26e308e9002c0b89fbe3f6d7e8b8bfa3e0cfc1ab77cd12f29d6d5504fb47e90777964e0289b3847e0bf2b0a99e6d38cc2f26a971cabb", 0xd8) sendfile(r9, r8, 0x0, 0x7ffff000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.887866772s ago: executing program 3 (id=8638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.881203082s ago: executing program 6 (id=8639): socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) shutdown(r4, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r7 = inotify_init1(0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYRES8=r7, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r12}, 0x18) ftruncate(r10, 0x2007ffc) sendfile(r10, r10, 0x0, 0x800000009) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r9, 0x25, 0x0, @val=@netfilter}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(r2, r13, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$netlink(0x10, 0x3, 0x0) 1.837855323s ago: executing program 3 (id=8640): r0 = open(0x0, 0x40, 0x170) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x4048040) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1.566766247s ago: executing program 3 (id=8642): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="d2deb6e13d", @ANYRESDEC=r1, @ANYBLOB=',obj_role=msdos\x00,func=PATH_CHECK,context=system_u,dont_measure,sync,smackfshat=,\x00'], 0x1, 0x2cc, &(0x7f00000003c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601000000000000000000020000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001400078005001500040000000800064000000000050005000200683730ff010006000000"], 0x5c}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xf80}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170", 0x12}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000d000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r10, r9) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r9, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) sendmsg$xdp(r5, &(0x7f0000000e80)={&(0x7f00000007c0)={0x2c, 0x11, r0, 0x1f}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000800)="6b03833e5236bb1c9c0a7cf618c35c88fe2726e3070f0d4b981423b251f06eead1e6256ba12cacea352b7ad52216c9746eac7498f0746fe14d7844b783b4fcdeac0c44d256efd84331ff99a3c01e48e99e32bd39d070fa4e552484ecb138e201af0d23ef254d5ac21fff1412b22c300b0f55e359d6677272f6dbb085b9437060ca222f20ab9a109494e2f70168a2ff0c9fd27c9caf09ec4d03905b81170dbc9eda09ce84d52cd628f5310d09230fd459947695c87539fb27d654a69b3c995b6a1a98943a731e83c9bc3f67c832237705db523206569fdcf32f6ea241716449c7ddcc", 0xe2}, {&(0x7f0000000900)="5360aa47a40d93ebce49e7e089ce1c12920eb13181d5a9dfbbbd9459cdc2f58dcd6664092ff1a3b7410a5b9b179ee65b2159a36f3eb9a86de313b314c81071b052ae2439fa4a2407034ac5f4193142c6255291c2b642bf44dd49838a04e492f8764036eeb956b44d737f96a8d2c13ff45c672ef81ee6a592ca934566ffa1a616d8bc6ad4a4695ed8f86b4fdf1132b03db85bc93763249ed2cb0991468eb778cdfcb41dec5eaa1e08a47b76ca70", 0xad}, {&(0x7f00000009c0)="41408ca1a043ea2e248f2a5907bc5118500fa515b60ee9c3715a637225718c208413ff533dc429ef9983f759a30f1b6f3ba9702c4005a7eff282dbfb40d9ec7521127612bb0f44f7fec50586112e558166b83c1a38ff920a232e33c6b41e910cd9bae579e893f2c50be9656aae9296e7c99f5c2e9fe47b384f0988138f6b10d0fa70189f2b3e1ca045f636799bfe97145615457561ee10ed3075cf3467ee35b5c01d402104ed096bef0d654dc9ac66f971185c5902fc9f3310619cf535d3bb929bdd906ac2a7d6a12e56eb9a2b111476b079033975", 0xd5}, {&(0x7f0000000ac0)="ee53926c8ce3a8b52424557ef856ba4e47e33d36047cd3dceaa290f5b13847b59c40773eba27a8ec3ddd029530162ed3048227820e43c442ae85718c3b440409770d2e5c17408dc1129e65ca9aa3bf22a6720a71951597da7a4732fe684f775520a4934d3dfce683e2", 0x69}, {&(0x7f0000000b40)="ddc5beea60524cfd2b61858686b6a75809bc78e6f70b65d703adde5e6db3bbcd75ba169fc6c1083c9538f3bee301b01686f2b6029a657ddc007707cfe3f175b1d43b201593b92320a7c9df", 0x4b}, {&(0x7f0000000f80)="2c5806f3713f184ad288aba15437f14a45b418a35f7437f7529bb2b49c89156a64e42e97d9d7b4d7eeef1ce6bef8082249de2eabdc5af0a5ba6ab82b6089f8ffe6bf5c655e18ac8af20338126c36cf53e842f21d82e27ca1675a7dfd93fa63485e4fc81c5ebe980cd756674743f92e7b654737717d24fe1fca7b224d201e2c73ccbbebe564a1529b2af9434d3721a9dc7d8f72e0d6ce9cbc732dfdbe57667e7c730933f87cb88ef6511ba346524f35447e96230622425eb1ea2204b5cae237ff9afef6", 0xc3}, {&(0x7f0000000cc0)="65d61cbd6a7e36c6c61358479cf4eb9c7621656d9454c52e6e13c972dc5f7e88fa2a332eae215978d1e355eddbb0e1508591bf21ec1ce64279531db6b67b2a12976fb563f9933f0041cad5e7684aea6f051dd1e3b60022baf02e647eb3aaad83a36b", 0x62}, {&(0x7f0000000d40)="44c07544fbe34d78205de5c119429c81b2cd87976451e9c2aae42b6479b849d6c8fc5af9119f11fe7905a30ee2038d01d026c34c14c84930030bb2574bd5ce49b2b35318a469623dd2884ecbfe5aa003cd41b5118bd46744d6a48e859b15004ededfbbfbbcde8e63c28693f83d35560b58c3e79aac15f3a57049c5212e290011a6747b8ad3fa6b5fee47c39bcb2c569877223cf1c63930cf6abbbf83d6f0a549aca207c03995cb1424ced2e58d582b002ec1e44c379f938ca0", 0xb9}], 0x8, 0x0, 0x0, 0x20000884}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x12062) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 1.511858598s ago: executing program 1 (id=8644): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000200)='./cgroup/../file0\x00') 1.476115838s ago: executing program 1 (id=8645): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = accept(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2e678ca7b627fd2f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x10001, 0x0, 0x3574, 0x5, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a310000ffff0500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) (async) setresuid(r0, r5, r8) (async) pipe2$9p(&(0x7f0000000500), 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="fd350ead", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, &(0x7f00000001c0), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.36038333s ago: executing program 1 (id=8647): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@nogrpid}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, 0x3bd}) syz_emit_ethernet(0xbe, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80080, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0x20) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r5], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) r10 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x2, 0xfffffffc, 0x0, r9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 1.282043541s ago: executing program 1 (id=8648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x0, 0x200000, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048840}, 0x4001000) (fail_nth: 2) 1.031356585s ago: executing program 1 (id=8649): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b3af000000000000c259784c0000"], 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000240)}, {&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000000880)=""/134, 0x86}], 0x5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_clone3(0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000100), 0x6) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x3}, &(0x7f0000000540)=0x28) close(r7) 943.162267ms ago: executing program 5 (id=8652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (fail_nth: 15) 892.199897ms ago: executing program 6 (id=8653): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c1d8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6a7e42a58fc020000000000000000000000000000fe80000000000000b59a1a00000000aa6c00000000000000"], 0x0) 622.212081ms ago: executing program 5 (id=8654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) 621.208911ms ago: executing program 3 (id=8655): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 503.152343ms ago: executing program 7 (id=8656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) (fail_nth: 1) 487.643363ms ago: executing program 5 (id=8657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1114, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x170, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x0, 0x6, 0x8001, 0x7d02, 0xcb7, 0x80, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x8}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0xa}, {}, {0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x7, 0x4}, {0x1}, {0x7, 0x4}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x4}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x3}, {0x6, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {0x6, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x3}, {0x6, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0xa}, {0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0x7}, {}, {0x2, 0x4}, {0x4, 0x3}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0xe, 0x6c, 0x48, 0xc, 0x6c, 0x60, 0x6c, 0x9, 0x5, 0x16, 0x4, 0x1b, 0x9, 0x9, 0x5, 0x24]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x6c, 0x24, 0xc, 0x48, 0x60, 0x18]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x4, 0xc, 0x5, 0x48, 0x2, 0xc, 0x3, 0xb, 0x30, 0xb, 0x5, 0x1, 0xb, 0x48, 0x24, 0x60, 0xebda70a0fe92f5db, 0x36, 0x3, 0x6, 0x48, 0x30, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbc6b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1682, 0xa, 0x0, 0x6, 0x7, 0x0, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x1}, {}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x5}, {0x6, 0x6}, {0x3}, {0x4, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x7}, {0x7, 0x9}, {}, {0x7, 0x6}, {0x0, 0x6}, {0x1}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0x17}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x4}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x6}, {0x4, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x6}, {0x1, 0x4}, {}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x4}, {0x7}, {0x1, 0x9}, {0x1, 0xb}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x2}, {0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x4}, {0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0xa}, {0x5, 0x3}, {0x3, 0x4}, {0x2, 0x3}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x9}, {}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0xa}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {0x6, 0x2}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x18, 0xc, 0x5, 0x60, 0x4, 0x36, 0x4, 0x1, 0x48, 0x9, 0x12, 0x6c, 0x48, 0x6c, 0x6, 0x3, 0x2, 0x60, 0x16, 0x16, 0x36, 0x5, 0x1b, 0x1b, 0xc, 0x4]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7, 0x9, 0x8, 0x4, 0x5, 0x8, 0x7d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xf, 0x8, 0x9, 0x1f, 0x6, 0xff, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5e, 0x1ff, 0x4f99, 0x3, 0x9a25, 0x2, 0xd]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x9, 0x30, 0x2, 0x24, 0x1b, 0x1b, 0x3, 0x6]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x534, 0x11d, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x1}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x3}, {0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x5}, {0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x4}, {0x4}, {0x2, 0x7}, {0x3, 0x6}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0xa}, {0x2, 0x9}, {0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x6}, {0x4, 0xa}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x4, 0x3, 0xe5, 0x5, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0xb, 0x30, 0x4, 0x16, 0xb, 0x30, 0x12, 0x16, 0x0, 0x6, 0x1b, 0x2, 0x1, 0x6, 0x26, 0x4, 0x6, 0xb, 0x24, 0x9, 0x4, 0x60, 0x6, 0x5, 0x1b, 0x36, 0x6, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x1f}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x6, 0x7}, {0x6}, {0x5, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x5}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0xc, 0x16, 0xc, 0x30, 0x60, 0xe, 0x16, 0x48, 0x30, 0x2, 0x16, 0x6c, 0x60, 0x6c, 0x1]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x3}, {0x3, 0x4}, {0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x3}, {0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x0, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x5, 0x4, 0x30, 0xb, 0x1b, 0x6, 0x36, 0x3, 0xb, 0x6, 0x24, 0x2, 0x18, 0x23, 0x48, 0x5, 0x36, 0x6, 0x5, 0x2, 0x5, 0x58]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x4}, {}, {0x0, 0xa}, {0x4, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x7}, {0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa3a2000000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xca37}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x1b, 0x60, 0x0, 0xb, 0x2, 0x2, 0x1b, 0x1b, 0x36, 0x30, 0x30, 0x2, 0x3, 0xa, 0x6c, 0x2, 0x24, 0x2e, 0x5, 0x16, 0x12, 0x24, 0x18, 0x18, 0x60, 0x48, 0x7, 0x18, 0x1, 0x3]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x5}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x5}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x4}, {}, {0x6, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x5}, {}, {0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x9}, {0x1}, {0x6, 0x9}, {0x2}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x5}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x5}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80e, 0x8, 0x2, 0x3, 0x0, 0x0, 0x7fff, 0x9e]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x77e2, 0x3, 0x1, 0x6, 0x98b3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x82f, 0x81, 0x80, 0x1000, 0x69, 0x3, 0xc8c, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0x401, 0x6, 0x0, 0x2, 0xec6a, 0x101, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x30, 0x5, 0x60, 0x6c, 0x2, 0x9, 0x9, 0x4, 0x6, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x9, 0x6, 0x1b, 0x18, 0x3b, 0x1b]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x3, 0x36, 0x18, 0x24, 0x48, 0x9, 0x60, 0x4, 0x6d, 0x12, 0x9]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x6c, 0x24, 0x36, 0x36, 0x18, 0x18, 0x36, 0x30, 0xc, 0x18, 0x3, 0x36, 0x5a, 0x16, 0x12, 0x24, 0x3, 0x2, 0x36, 0x60, 0x6, 0x48, 0x2, 0x4, 0x2, 0xc, 0x2, 0x0, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x8, 0x9, 0x1, 0x6, 0x7f, 0x3]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x7, 0x5}, {0x5}, {0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0x4}, {0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x6}, {0x7}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xc66, 0x6, 0x4, 0x9, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}]}]}, @NL80211_ATTR_TID_CONFIG={0x410, 0x11d, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x12, 0x6, 0x24, 0x4, 0x24, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x7, 0x9, 0xd, 0x4, 0x7da9, 0x8]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x2, 0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x3, 0x9, 0x4, 0x80, 0x6, 0xc]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x5, 0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x71f0, 0x5, 0x100, 0xd193, 0x3, 0x2, 0x33a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x97ab, 0x5, 0x0, 0x1f4, 0x5, 0x3, 0x6, 0xf]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {}, {0x4, 0x5}, {0x6, 0x8}, {0x2}, {0x7, 0xa}, {0x2}, {0x1, 0x3}, {0x6}, {0x1, 0x7}, {0x2, 0x6}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1e, 0x60, 0x18, 0x36, 0x6, 0x6c, 0x16, 0x16, 0x24, 0x12, 0x1b, 0x9, 0x4, 0x60, 0x6c, 0x12, 0x1, 0x1, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe7, 0x1855, 0x2, 0x8, 0xa, 0x7fff, 0xe7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x36, 0x5, 0x4c, 0x3e, 0x4, 0x24, 0x1, 0x2, 0x24, 0x36, 0x6a, 0x6c, 0x48, 0x1b, 0x2, 0x6, 0x18, 0x24, 0x30, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0xfbff, 0x0, 0x7, 0x2, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x6, 0x4, 0x4, 0x1e, 0x1b, 0x30, 0x36, 0x9, 0x16, 0x6, 0x2, 0x18, 0x1b, 0xf0, 0x6c, 0xc, 0x24, 0x9, 0x36, 0x6, 0x1, 0x2, 0x16, 0x3, 0x4, 0x3, 0x1b]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x4a95ffded92751df}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x7}, {0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x10}, {0x1, 0xa}, {0x6}, {0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x6, 0x9}, {0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x2}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x6}, {0x6}, {0x7, 0xa}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x81, 0x6, 0x8001, 0x0, 0x1, 0x9, 0xd2]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x100, 0x0, 0x0, 0x0, 0x200, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7fff, 0x1, 0x748d, 0x71a, 0x7, 0x1, 0xe687]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x5, 0x8, 0xef34, 0x6, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff9, 0x7ff, 0x3, 0xb, 0x2, 0xfc00, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x2d, 0x12, 0x3, 0x16, 0x4, 0xb, 0x60, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x9, 0xbc, 0x2, 0x9, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc, 0x3, 0x8, 0xe3bd, 0x0, 0x1000, 0xb999]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xcc, 0x11d, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x10, 0x5, 0xb, 0x16, 0x3, 0x3, 0x18, 0x1b, 0x72, 0xc, 0x60, 0x2f, 0x30, 0x30, 0x1b, 0x60, 0x6c, 0x1, 0xc1, 0x3, 0xb, 0x6c, 0x48, 0x0, 0x48, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9444, 0x1, 0x8, 0x764, 0x9, 0x6, 0x8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x36, 0x48, 0x6c, 0x16, 0x4, 0x0, 0x2, 0x3, 0x12, 0xb, 0x2, 0x2, 0xb, 0x6c, 0x60, 0x12, 0x18, 0x5, 0xd87f3a261297b766, 0x48, 0x6c, 0x18, 0x60, 0x9, 0x48]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9f}]}]}, @NL80211_ATTR_TID_CONFIG={0x274, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x7f, 0x8, 0x3, 0x3, 0x8, 0x5]}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff86}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xb, 0xd3ba, 0x1, 0xe0, 0x0, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x6, 0x13, 0x18, 0x0, 0x2, 0x12, 0x16, 0x12, 0x2, 0x36, 0xc, 0x5, 0x48, 0x9, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x36, 0x1, 0x16, 0x36, 0x30, 0x2, 0x12, 0xc, 0x3, 0xc, 0x3, 0x6, 0x5, 0x5, 0x24, 0x16, 0x3, 0x1, 0x30, 0x9, 0xb, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x9}, {}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x0, 0x7}, {0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0x7}, {0x4}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf801, 0xfff3, 0x1, 0x8f, 0x3, 0xff7f, 0x81]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x6ec89a5144fe2b40, 0x14, 0x24, 0xb, 0x48, 0x18, 0x0, 0x6, 0x5, 0x60, 0x6c, 0x4, 0x8fac0ff351470f28, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x0, 0x12, 0x12, 0xb, 0x60, 0x5, 0xb, 0x67, 0xb, 0x3, 0xb]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x5}, {0x6, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x5}, {0x3, 0x7}, {0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0xc, 0x48, 0x9, 0x24, 0x1b, 0xc, 0x9, 0x16]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x5, 0x8, 0x793c, 0x4, 0x0, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2c}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}]}]}]}, 0x1114}}, 0x10000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) io_submit(0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendfile(r4, r5, 0x0, 0xd344) 487.356883ms ago: executing program 3 (id=8658): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15db", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90", 0x5}], 0x1}}], 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc0", 0x52, 0x11, 0x0, 0x2000) 485.671863ms ago: executing program 6 (id=8659): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r5, 0x1) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x188, 0x32, 0x1, 0x2, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ba2}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaa}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0xffffffff, 0x0, 0x6, 0x4201, r6, 0x5, '\x00', r7, r6, 0x3, 0x3, 0x1}, 0x50) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x4, r7, 0xe}, 0x10) recvfrom(r5, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 416.179685ms ago: executing program 5 (id=8660): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4000000000002ab}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet(0xa, 0x801, 0x84) getcwd(&(0x7f00000002c0)=""/70, 0x46) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)='w', 0x1}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x4000045) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x80a80, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x17, &(0x7f0000000100)=0x5, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfe24}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0) 415.603025ms ago: executing program 7 (id=8661): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000080000000850000000600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_setup(0xe688, &(0x7f0000000380)=0x0) io_destroy(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x60cc0, 0xb, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) unshare(0x26020480) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x2c, 0x8, 0x1000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d00000005000000040000000700000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000080893130d78ab7afa26498cadef337c5d580e78d00000000000000000000003ec14599ae148e900f9867151a61ddeeedc68951b4d5b30d9a9b4b79d97a1ebde7b6a612dc36a75dda707ae414be2516e3dbce9561f4e5077b690d72ea3d745fad7187e68dadbc9b74c52a7aedcd4e7f80dc136304c5ff53acba3d6198b71a8db2206a2837567d6bf37a8ca7204ff0bf1cc7b6081bbf2fe3cac54b9477f91e56123df676676b1357f27837925dfb12510f330f65e5084d801987707d4cce6792"], 0x50) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req3={0x8, 0x0, 0x9, 0x10000, 0x7ff, 0x2, 0x4e1a}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0xc5d8, 0x97, 0x71, 0x6}]}) sync() 373.669785ms ago: executing program 5 (id=8662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x82000000, 0x0, 0x300, 0x0, 0x0, 0x0) 112.825499ms ago: executing program 5 (id=8663): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x9, {"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", 0x1028}}, 0xfffffd00) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/126) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x10, 0x6, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x1000}, 0x1100, 0xc1, 0x0, 0x3, 0x0, 0x8, 0xfff3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002f12ae0505eb4076643df65e5e43e856fa6633e28858fa85000d2c625c758f003be5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r7}, 0x10) r10 = syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r13 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xcc90, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x22, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x600d}, 0x2fffe596994b649a, {0x0, r15}}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) 0s ago: executing program 7 (id=8664): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) kernel console output (not intermixed with test programs): ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.991389][T12836] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.991484][T12836] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 472.991498][T12836] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 472.991512][T12836] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.991525][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.991539][T12836] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 472.991557][T12836] [ 473.312792][T12845] netlink: 'syz.6.8123': attribute type 10 has an invalid length. [ 473.382997][T12849] loop3: detected capacity change from 0 to 512 [ 473.414976][T12849] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 473.423151][T12849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 473.432869][T12849] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8125: corrupted inode contents [ 473.446831][T12849] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.8125: mark_inode_dirty error [ 473.465751][T12849] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8125: corrupted inode contents [ 473.496263][T12849] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8125: mark_inode_dirty error [ 473.508706][T12849] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8125: corrupted inode contents [ 473.521815][T12849] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 473.536022][T12849] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8125: corrupted inode contents [ 473.556347][T12849] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.8125: mark_inode_dirty error [ 473.569913][T12849] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 473.582891][T12849] EXT4-fs (loop3): 1 truncate cleaned up [ 473.584062][T12865] delete_channel: no stack [ 473.594726][ T3861] __quota_error: 44 callbacks suppressed [ 473.594740][ T3861] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 473.610381][ T3861] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 473.622725][T12869] FAULT_INJECTION: forcing a failure. [ 473.622725][T12869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.625327][T12865] delete_channel: no stack [ 473.636218][T12869] CPU: 1 UID: 0 PID: 12869 Comm: syz.6.8129 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 473.636282][T12869] Tainted: [W]=WARN [ 473.636289][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.636302][T12869] Call Trace: [ 473.636307][T12869] [ 473.636314][T12869] __dump_stack+0x1d/0x30 [ 473.636336][T12869] dump_stack_lvl+0xe8/0x140 [ 473.636355][T12869] dump_stack+0x15/0x1b [ 473.636371][T12869] should_fail_ex+0x265/0x280 [ 473.636421][T12869] should_fail_alloc_page+0xf2/0x100 [ 473.636445][T12869] __alloc_frozen_pages_noprof+0xff/0x360 [ 473.636479][T12869] alloc_pages_mpol+0xb3/0x250 [ 473.636536][T12869] vma_alloc_folio_noprof+0x1aa/0x300 [ 473.636566][T12869] handle_mm_fault+0xec2/0x2be0 [ 473.636588][T12869] ? mas_walk+0xf2/0x120 [ 473.636696][T12869] do_user_addr_fault+0x636/0x1090 [ 473.636729][T12869] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 473.636799][T12869] exc_page_fault+0x62/0xa0 [ 473.636826][T12869] asm_exc_page_fault+0x26/0x30 [ 473.636846][T12869] RIP: 0033:0x7ff87e250ca3 [ 473.636861][T12869] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 473.636892][T12869] RSP: 002b:00007ff87c9f64a0 EFLAGS: 00010206 [ 473.636905][T12869] RAX: 000000000000a000 RBX: 00007ff87c9f6540 RCX: 00007ff8745d7000 [ 473.636918][T12869] RDX: 00007ff87c9f66e0 RSI: 000000000000007d RDI: 00007ff87c9f65e0 [ 473.636997][T12869] RBP: 0000000000000079 R08: 0000000000000007 R09: 000000000000003d [ 473.637067][T12869] R10: 000000000000004e R11: 00007ff87c9f6540 R12: 0000000000000001 [ 473.637079][T12869] R13: 00007ff87e42c3a0 R14: 0000000000000005 R15: 00007ff87c9f65e0 [ 473.637099][T12869] [ 473.637107][T12869] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 473.653981][T12865] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8127'. [ 473.657398][T12849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.666940][T12865] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8127'. [ 473.686059][T12869] loop6: detected capacity change from 0 to 512 [ 473.861143][T12869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.863886][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.882974][T12869] EXT4-fs (loop6): orphan cleanup on readonly fs [ 473.910862][T12878] loop4: detected capacity change from 0 to 1024 [ 473.921045][T12869] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8129: bg 0: block 248: padding at end of block bitmap is not set [ 473.938438][T12869] Quota error (device loop6): write_blk: dquota write failed [ 473.946078][T12869] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 473.956252][T12869] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8129: Failed to acquire dquot type 1 [ 473.972013][T12869] EXT4-fs (loop6): 1 truncate cleaned up [ 473.976977][ T29] audit: type=1326 audit(2000001098.865:54789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475bf6e929 code=0x7ffc0000 [ 474.001267][ T29] audit: type=1326 audit(2000001098.865:54790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f475bf6e929 code=0x7ffc0000 [ 474.003849][T12885] netlink: 'syz.4.8134': attribute type 10 has an invalid length. [ 474.024898][ T29] audit: type=1326 audit(2000001098.865:54791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475bf6e929 code=0x7ffc0000 [ 474.024933][ T29] audit: type=1326 audit(2000001098.865:54792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.8132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475bf6e929 code=0x7ffc0000 [ 474.081493][T12869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.114621][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.141832][T12889] SELinux: failed to load policy [ 474.167076][ T29] audit: type=1400 audit(2000001099.105:54793): avc: denied { map_create } for pid=12897 comm="syz.6.8136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 474.186606][ T29] audit: type=1400 audit(2000001099.105:54794): avc: denied { bpf } for pid=12897 comm="syz.6.8136" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.207491][ T29] audit: type=1400 audit(2000001099.105:54795): avc: denied { map_read map_write } for pid=12897 comm="syz.6.8136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 474.236284][T12904] loop4: detected capacity change from 0 to 512 [ 474.243422][T12904] EXT4-fs: Ignoring removed bh option [ 474.260611][T12904] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 474.269745][T12904] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 474.285961][T12913] netlink: 'syz.5.8141': attribute type 29 has an invalid length. [ 474.294030][T12904] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 474.303652][T12904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 474.314102][T12904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.352441][T12931] loop6: detected capacity change from 0 to 1024 [ 474.366115][T12931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.381548][T12931] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8143: Allocating blocks 481-513 which overlap fs metadata [ 474.404700][T12940] IPv6: Can't replace route, no match found [ 474.419483][T12931] EXT4-fs (loop6): pa ffff888106c28b60: logic 352, phys. 465, len 3 [ 474.427703][T12931] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 474.461346][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.487915][ T5120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.501553][ T3085] block device autoloading is deprecated and will be removed. [ 474.517755][T12952] netlink: 'syz.3.8147': attribute type 10 has an invalid length. [ 474.533790][T12948] loop6: detected capacity change from 0 to 2048 [ 474.558594][ T6371] bridge_slave_1: left allmulticast mode [ 474.564394][ T6371] bridge_slave_1: left promiscuous mode [ 474.570112][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.579658][ T6371] bridge_slave_0: left allmulticast mode [ 474.585475][ T6371] bridge_slave_0: left promiscuous mode [ 474.591138][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.769023][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.781910][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.802264][ T6371] bond0 (unregistering): (slave bond1): Releasing backup interface [ 474.812688][ T6371] bond0 (unregistering): (slave bond2): Releasing backup interface [ 474.833048][ T6371] bond0 (unregistering): Released all slaves [ 474.852477][ T6371] bond1 (unregistering): Released all slaves [ 474.871727][ T6371] bond2 (unregistering): Released all slaves [ 475.003877][ T6371] hsr_slave_0: left promiscuous mode [ 475.017162][ T6371] hsr_slave_1: left promiscuous mode [ 475.023695][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8156'. [ 475.025020][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.040199][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.080869][ T6371] veth1_macvtap: left promiscuous mode [ 475.089610][ T6371] veth0_macvtap: left promiscuous mode [ 475.103065][ T6371] veth1_vlan: left promiscuous mode [ 475.118788][ T6371] veth0_vlan: left promiscuous mode [ 475.264129][ T6371] team0 (unregistering): Port device team_slave_1 removed [ 475.296035][ T6371] team0 (unregistering): Port device team_slave_0 removed [ 475.334002][ T6365] smc: removing ib device syz1 [ 475.342066][T13002] netlink: 'syz.7.8159': attribute type 10 has an invalid length. [ 475.359054][T13004] netlink: 'syz.3.8160': attribute type 10 has an invalid length. [ 475.377977][T12990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.392104][ T3395] syz1: Port: 1 Link DOWN [ 475.398161][T13002] macvlan1: entered allmulticast mode [ 475.406966][T13002] veth1_vlan: entered allmulticast mode [ 475.414591][T13002] team0: Port device macvlan1 added [ 475.482968][T13048] netlink: 404 bytes leftover after parsing attributes in process `syz.6.8162'. [ 475.608624][T13060] SELinux: syz.4.8165 (13060) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 475.626887][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8168'. [ 475.926852][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8175'. [ 475.947778][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.051118][T13147] loop5: detected capacity change from 0 to 1764 [ 476.061862][T13147] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 476.092810][T13149] lo speed is unknown, defaulting to 1000 [ 476.145024][T13170] SELinux: ebitmap: truncated map [ 476.152879][T13170] SELinux: failed to load policy [ 476.206411][T13181] loop5: detected capacity change from 0 to 512 [ 476.551385][T13194] SELinux: Context system_u:object_r:auditd_exec_t:s0 is not valid (left unmapped). [ 476.578625][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8187'. [ 476.628851][T13199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.670152][T13239] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8189'. [ 476.768978][T13244] loop5: detected capacity change from 0 to 128 [ 476.805846][T13249] SELinux: failed to load policy [ 476.943708][ T3085] block device autoloading is deprecated and will be removed. [ 476.967061][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8198'. [ 476.999155][T13274] loop3: detected capacity change from 0 to 128 [ 477.010872][T13274] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 477.049258][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8200'. [ 477.067290][T13284] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.152417][T13328] netlink: 'syz.5.8203': attribute type 10 has an invalid length. [ 477.170731][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8204'. [ 477.179823][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8204'. [ 477.223827][T13333] loop4: detected capacity change from 0 to 1024 [ 477.231249][T13333] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.261318][T13333] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.8205: lblock 1 mapped to illegal pblock 1 (length 1) [ 477.276801][T13333] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8205: Failed to acquire dquot type 0 [ 477.289640][T13333] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.8205: Freeing blocks not in datazone - block = 0, count = 4096 [ 477.306009][T13333] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.8205: Invalid inode bitmap blk 0 in block_group 0 [ 477.320711][T13333] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 477.330181][ T6325] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 477.354558][ T6325] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 477.354894][T13333] EXT4-fs (loop4): 1 orphan inode deleted [ 477.383579][T13333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.402393][T13333] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.8205: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 477.408524][T13348] smc: net device bond0 applied user defined pnetid SYZ0 [ 477.438988][ T5120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.452346][T13348] smc: net device bond0 erased user defined pnetid SYZ0 [ 477.481108][T13363] loop4: detected capacity change from 0 to 1024 [ 477.507451][T13374] netlink: 'syz.6.8214': attribute type 3 has an invalid length. [ 477.523392][T13374] 9pnet_fd: Insufficient options for proto=fd [ 477.533218][T13378] netlink: 'syz.5.8216': attribute type 10 has an invalid length. [ 477.548466][T13376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.569564][T13380] loop5: detected capacity change from 0 to 512 [ 477.638980][T13378] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 477.671157][T13421] netlink: 'syz.7.8219': attribute type 10 has an invalid length. [ 477.684374][T13421] veth1_vlan: left allmulticast mode [ 477.698784][T13426] 9pnet_fd: Insufficient options for proto=fd [ 477.758263][T13429] lo speed is unknown, defaulting to 1000 [ 477.770894][T13437] loop6: detected capacity change from 0 to 1024 [ 477.786084][T13437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.800725][T13437] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8223: Allocating blocks 481-513 which overlap fs metadata [ 477.846482][T13437] EXT4-fs (loop6): pa ffff888106da3c40: logic 352, phys. 465, len 3 [ 477.854602][T13437] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 477.900722][T13469] Cannot find add_set index 0 as target [ 477.915883][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.929719][T13481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 477.960623][T13518] netlink: 'syz.6.8228': attribute type 4 has an invalid length. [ 477.971649][T13518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13518 comm=syz.6.8228 [ 478.022768][T13527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.031649][T13527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.097848][T13545] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472) [ 478.109862][T13545] SELinux: failed to load policy [ 478.120314][T13549] netlink: zone id is out of range [ 478.125574][T13549] netlink: zone id is out of range [ 478.130919][T13549] netlink: get zone limit has 8 unknown bytes [ 478.186158][T13559] netlink: 'syz.5.8236': attribute type 10 has an invalid length. [ 478.198023][T13559] batman_adv: batadv0: Adding interface: team0 [ 478.204280][T13559] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.229723][T13559] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 478.276686][T13571] bridge0: entered promiscuous mode [ 478.282090][T13571] macsec1: entered promiscuous mode [ 478.287977][T13571] bridge0: port 3(macsec1) entered blocking state [ 478.295178][T13571] bridge0: port 3(macsec1) entered disabled state [ 478.311152][T13571] macsec1: entered allmulticast mode [ 478.316504][T13571] bridge0: entered allmulticast mode [ 478.329100][T13571] macsec1: left allmulticast mode [ 478.334153][T13571] bridge0: left allmulticast mode [ 478.350073][T13571] bridge0: left promiscuous mode [ 478.372268][T13615] IPv6: Can't replace route, no match found [ 478.374171][T13583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.422514][T13622] FAULT_INJECTION: forcing a failure. [ 478.422514][T13622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.435779][T13622] CPU: 1 UID: 0 PID: 13622 Comm: syz.3.8243 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 478.435846][T13622] Tainted: [W]=WARN [ 478.435852][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.435863][T13622] Call Trace: [ 478.435869][T13622] [ 478.435951][T13622] __dump_stack+0x1d/0x30 [ 478.435972][T13622] dump_stack_lvl+0xe8/0x140 [ 478.436001][T13622] dump_stack+0x15/0x1b [ 478.436010][T13622] should_fail_ex+0x265/0x280 [ 478.436027][T13622] should_fail_alloc_page+0xf2/0x100 [ 478.436041][T13622] __alloc_frozen_pages_noprof+0xff/0x360 [ 478.436132][T13622] alloc_pages_mpol+0xb3/0x250 [ 478.436148][T13622] vma_alloc_folio_noprof+0x1aa/0x300 [ 478.436165][T13622] handle_mm_fault+0xec2/0x2be0 [ 478.436177][T13622] ? __rcu_read_lock+0x37/0x50 [ 478.436255][T13622] __get_user_pages+0x1036/0x1fb0 [ 478.436271][T13622] __mm_populate+0x243/0x3a0 [ 478.436283][T13622] do_mlock+0x47f/0x520 [ 478.436333][T13622] ? __bpf_trace_sys_enter+0x10/0x30 [ 478.436345][T13622] ? trace_sys_enter+0xd0/0x110 [ 478.436415][T13622] __x64_sys_mlock+0x36/0x50 [ 478.436428][T13622] x64_sys_call+0x28f4/0x2fb0 [ 478.436440][T13622] do_syscall_64+0xd2/0x200 [ 478.436450][T13622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 478.436605][T13622] ? clear_bhb_loop+0x40/0x90 [ 478.436617][T13622] ? clear_bhb_loop+0x40/0x90 [ 478.436629][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.436716][T13622] RIP: 0033:0x7fdd7531e929 [ 478.436790][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.436800][T13622] RSP: 002b:00007fdd73987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 478.436811][T13622] RAX: ffffffffffffffda RBX: 00007fdd75545fa0 RCX: 00007fdd7531e929 [ 478.436890][T13622] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 478.436897][T13622] RBP: 00007fdd73987090 R08: 0000000000000000 R09: 0000000000000000 [ 478.436981][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.436988][T13622] R13: 0000000000000000 R14: 00007fdd75545fa0 R15: 00007ffea93fc638 [ 478.436999][T13622] [ 478.691426][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 478.691441][ T29] audit: type=1326 audit(2000001103.635:55226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.7.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 478.742836][ T29] audit: type=1326 audit(2000001103.635:55227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.7.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 478.766534][ T29] audit: type=1326 audit(2000001103.635:55228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.7.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 478.790303][ T29] audit: type=1326 audit(2000001103.655:55229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.7.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 478.814054][ T29] audit: type=1326 audit(2000001103.675:55230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdd7531d33c code=0x7ffc0000 [ 478.837597][ T29] audit: type=1326 audit(2000001103.675:55231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd7531d3df code=0x7ffc0000 [ 478.861035][ T29] audit: type=1326 audit(2000001103.675:55232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd7531d58a code=0x7ffc0000 [ 478.884643][ T29] audit: type=1326 audit(2000001103.675:55233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 478.891001][T13634] lo speed is unknown, defaulting to 1000 [ 478.980464][ T29] audit: type=1400 audit(2000001103.925:55234): avc: denied { create } for pid=13647 comm="syz.3.8251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 479.021114][ T29] audit: type=1400 audit(2000001103.925:55235): avc: denied { write } for pid=13647 comm="syz.3.8251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 479.073857][T13684] loop5: detected capacity change from 0 to 512 [ 479.101933][T13684] msdos: Unknown parameter 'ÒÞ¶á' [ 479.157376][T13684] vhci_hcd: invalid port number 96 [ 479.162608][T13684] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 479.311175][T13707] loop4: detected capacity change from 0 to 1764 [ 479.414174][T13707] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 479.588019][T13726] smc: net device bond0 applied user defined pnetid SYZ0 [ 479.619230][T13726] smc: net device bond0 erased user defined pnetid SYZ0 [ 479.819135][T13740] pim6reg1: entered promiscuous mode [ 479.824645][T13740] pim6reg1: entered allmulticast mode [ 479.852786][T13744] smc: net device bond0 applied user defined pnetid SYZ0 [ 479.873281][T13744] smc: net device bond0 erased user defined pnetid SYZ0 [ 480.049951][T13749] wg2: entered promiscuous mode [ 480.054923][T13749] wg2: entered allmulticast mode [ 480.282875][T13757] loop4: detected capacity change from 0 to 2048 [ 480.601705][T13782] lo speed is unknown, defaulting to 1000 [ 480.829557][ T6325] bridge_slave_1: left allmulticast mode [ 480.835843][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.854010][ T6325] bridge_slave_0: left allmulticast mode [ 480.860437][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.885526][T13842] netlink: 'syz.3.8291': attribute type 10 has an invalid length. [ 481.021580][T13851] loop6: detected capacity change from 0 to 512 [ 481.037028][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.048679][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.058289][ T6325] bond0 (unregistering): Released all slaves [ 481.058947][T13851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.076815][ T6325] bond1 (unregistering): Released all slaves [ 481.079305][ T6325] bond2 (unregistering): Released all slaves [ 481.089247][T13851] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.096835][ T6325] bond3 (unregistering): Released all slaves [ 481.116806][ T6325] bond4 (unregistering): Released all slaves [ 481.130429][ T6325] bond5 (unregistering): Released all slaves [ 481.142275][ T6325] bond6 (unregistering): Released all slaves [ 481.150821][ T6325] bond7 (unregistering): Released all slaves [ 481.157952][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.168892][T13846] FAULT_INJECTION: forcing a failure. [ 481.168892][T13846] name failslab, interval 1, probability 0, space 0, times 0 [ 481.181802][T13846] CPU: 0 UID: 0 PID: 13846 Comm: syz.7.8293 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 481.181881][T13846] Tainted: [W]=WARN [ 481.181887][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.181898][T13846] Call Trace: [ 481.181904][T13846] [ 481.181911][T13846] __dump_stack+0x1d/0x30 [ 481.181932][T13846] dump_stack_lvl+0xe8/0x140 [ 481.181977][T13846] dump_stack+0x15/0x1b [ 481.181994][T13846] should_fail_ex+0x265/0x280 [ 481.182023][T13846] ? tcf_action_init_1+0x11e/0x4a0 [ 481.182091][T13846] should_failslab+0x8c/0xb0 [ 481.182114][T13846] __kmalloc_cache_noprof+0x4c/0x320 [ 481.182186][T13846] tcf_action_init_1+0x11e/0x4a0 [ 481.182219][T13846] tcf_action_init+0x267/0x6d0 [ 481.182284][T13846] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 481.182405][T13846] tc_ctl_action+0x291/0x830 [ 481.182441][T13846] ? __pfx_tc_ctl_action+0x10/0x10 [ 481.182532][T13846] rtnetlink_rcv_msg+0x657/0x6d0 [ 481.182566][T13846] netlink_rcv_skb+0x120/0x220 [ 481.182596][T13846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.182641][T13846] rtnetlink_rcv+0x1c/0x30 [ 481.182661][T13846] netlink_unicast+0x5a5/0x680 [ 481.182739][T13846] netlink_sendmsg+0x58b/0x6b0 [ 481.182760][T13846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.182790][T13846] __sock_sendmsg+0x145/0x180 [ 481.182888][T13846] ____sys_sendmsg+0x31e/0x4e0 [ 481.182919][T13846] ___sys_sendmsg+0x17b/0x1d0 [ 481.183020][T13846] __x64_sys_sendmsg+0xd4/0x160 [ 481.183059][T13846] x64_sys_call+0x2999/0x2fb0 [ 481.183081][T13846] do_syscall_64+0xd2/0x200 [ 481.183105][T13846] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 481.183217][T13846] ? clear_bhb_loop+0x40/0x90 [ 481.183247][T13846] ? clear_bhb_loop+0x40/0x90 [ 481.183270][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.183439][T13846] RIP: 0033:0x7f58bb58e929 [ 481.183455][T13846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.183474][T13846] RSP: 002b:00007f58b9bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.183495][T13846] RAX: ffffffffffffffda RBX: 00007f58bb7b5fa0 RCX: 00007f58bb58e929 [ 481.183508][T13846] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 481.183522][T13846] RBP: 00007f58b9bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.183541][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.183554][T13846] R13: 0000000000000000 R14: 00007f58bb7b5fa0 R15: 00007ffe62958238 [ 481.183637][T13846] [ 481.476446][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.483801][T13864] loop6: detected capacity change from 0 to 128 [ 481.490678][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.532748][ T6325] team0 (unregistering): Port device team_slave_1 removed [ 481.561614][ T6325] team0 (unregistering): Port device team_slave_0 removed [ 481.622596][T13875] loop5: detected capacity change from 0 to 2048 [ 481.662236][T13881] loop6: detected capacity change from 0 to 2048 [ 481.682666][T13814] lo speed is unknown, defaulting to 1000 [ 481.690035][T13881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.725014][ T3085] block device autoloading is deprecated and will be removed. [ 481.751508][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.819564][T13814] chnl_net:caif_netlink_parms(): no params data found [ 481.988048][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.995485][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.026217][T14074] netlink: 'syz.3.8306': attribute type 10 has an invalid length. [ 482.027340][T13814] bridge_slave_0: entered allmulticast mode [ 482.055017][T13814] bridge_slave_0: entered promiscuous mode [ 482.071918][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.079000][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.105706][T13814] bridge_slave_1: entered allmulticast mode [ 482.121501][T13814] bridge_slave_1: entered promiscuous mode [ 482.166786][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.212876][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.229583][T14102] loop3: detected capacity change from 0 to 256 [ 482.293363][T13814] team0: Port device team_slave_0 added [ 482.308745][T13814] team0: Port device team_slave_1 added [ 482.327122][T14142] FAULT_INJECTION: forcing a failure. [ 482.327122][T14142] name failslab, interval 1, probability 0, space 0, times 0 [ 482.339851][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.7.8310 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 482.339898][T14142] Tainted: [W]=WARN [ 482.339904][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.339915][T14142] Call Trace: [ 482.339921][T14142] [ 482.339929][T14142] __dump_stack+0x1d/0x30 [ 482.339951][T14142] dump_stack_lvl+0xe8/0x140 [ 482.340012][T14142] dump_stack+0x15/0x1b [ 482.340031][T14142] should_fail_ex+0x265/0x280 [ 482.340140][T14142] should_failslab+0x8c/0xb0 [ 482.340308][T14142] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 482.340378][T14142] ? sidtab_sid2str_get+0xa0/0x130 [ 482.340398][T14142] kmemdup_noprof+0x2b/0x70 [ 482.340420][T14142] sidtab_sid2str_get+0xa0/0x130 [ 482.340444][T14142] security_sid_to_context_core+0x1eb/0x2e0 [ 482.340498][T14142] security_sid_to_context+0x27/0x40 [ 482.340521][T14142] avc_audit_post_callback+0x10f/0x520 [ 482.340545][T14142] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 482.340624][T14142] common_lsm_audit+0x1b8/0x230 [ 482.340669][T14142] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 482.340700][T14142] slow_avc_audit+0x104/0x140 [ 482.340727][T14142] avc_has_perm+0x128/0x150 [ 482.340750][T14142] selinux_kernel_load_data+0x128/0x140 [ 482.340853][T14142] security_kernel_load_data+0x3e/0x80 [ 482.340878][T14142] __se_sys_kexec_load+0x38/0x160 [ 482.340913][T14142] __x64_sys_kexec_load+0x55/0x70 [ 482.341019][T14142] x64_sys_call+0xa36/0x2fb0 [ 482.341042][T14142] do_syscall_64+0xd2/0x200 [ 482.341060][T14142] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 482.341086][T14142] ? clear_bhb_loop+0x40/0x90 [ 482.341104][T14142] ? clear_bhb_loop+0x40/0x90 [ 482.341183][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.341278][T14142] RIP: 0033:0x7f58bb58e929 [ 482.341294][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.341313][T14142] RSP: 002b:00007f58b9bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 482.341332][T14142] RAX: ffffffffffffffda RBX: 00007f58bb7b5fa0 RCX: 00007f58bb58e929 [ 482.341343][T14142] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 482.341400][T14142] RBP: 00007f58b9bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 482.341413][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.341426][T14142] R13: 0000000000000000 R14: 00007f58bb7b5fa0 R15: 00007ffe62958238 [ 482.341496][T14142] [ 482.590316][T14144] __nla_validate_parse: 12 callbacks suppressed [ 482.590349][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8311'. [ 482.638739][T14144] random: crng reseeded on system resumption [ 482.668950][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.676118][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.702523][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.721217][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.728291][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.754367][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.770066][T14174] hsr0: entered promiscuous mode [ 482.801059][T13814] hsr_slave_0: entered promiscuous mode [ 482.810436][T13814] hsr_slave_1: entered promiscuous mode [ 482.819416][T14205] loop6: detected capacity change from 0 to 1024 [ 482.836173][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.849363][T13814] Cannot create hsr debugfs directory [ 482.856452][T14205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.857012][T14210] tipc: Started in network mode [ 482.873388][T14210] tipc: Node identity ac14140f, cluster identity 4711 [ 482.878303][T14205] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8314: Allocating blocks 481-513 which overlap fs metadata [ 482.894068][T14210] tipc: New replicast peer: 255.255.255.255 [ 482.900551][T14210] tipc: Enabled bearer , priority 7 [ 482.907240][T14209] tipc: Enabling of bearer rejected, already enabled [ 482.924035][T14173] hsr0: left promiscuous mode [ 482.929301][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8315'. [ 482.938350][T14210] tipc: Disabling bearer [ 482.965460][T14205] EXT4-fs (loop6): pa ffff888106c28c40: logic 352, phys. 465, len 3 [ 482.973481][T14205] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 483.032823][T14144] block device autoloading is deprecated and will be removed. [ 483.042335][T14144] loop3: detected capacity change from 0 to 128 [ 483.052570][T14248] smc: net device bond0 applied user defined pnetid SYZ0 [ 483.072777][T14248] smc: net device bond0 erased user defined pnetid SYZ0 [ 483.092738][T14144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.152287][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.164185][T14144] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 483.193660][T13814] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.231481][T14276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 483.257462][T13814] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.308907][T13814] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.371650][ T3085] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 483.399214][T13814] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.446807][T14316] loop6: detected capacity change from 0 to 512 [ 483.485622][T14316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.503487][T14331] smc: net device bond0 applied user defined pnetid SYZ0 [ 483.511412][T14331] smc: net device bond0 erased user defined pnetid SYZ0 [ 483.527313][T14316] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.537103][T14338] netlink: 'syz.7.8328': attribute type 10 has an invalid length. [ 483.542438][T14305] loop5: detected capacity change from 0 to 256 [ 483.560602][T14305] msdos: Unknown parameter 'flush(umask' [ 483.573744][T13814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 483.598105][T13814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 483.623987][T13814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 483.637336][T14357] FAULT_INJECTION: forcing a failure. [ 483.637336][T14357] name failslab, interval 1, probability 0, space 0, times 0 [ 483.637636][T13814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 483.650020][T14357] CPU: 0 UID: 0 PID: 14357 Comm: syz.5.8332 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 483.650055][T14357] Tainted: [W]=WARN [ 483.650062][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.650081][T14357] Call Trace: [ 483.650087][T14357] [ 483.650093][T14357] __dump_stack+0x1d/0x30 [ 483.650115][T14357] dump_stack_lvl+0xe8/0x140 [ 483.650177][T14357] dump_stack+0x15/0x1b [ 483.650196][T14357] should_fail_ex+0x265/0x280 [ 483.650226][T14357] should_failslab+0x8c/0xb0 [ 483.650260][T14357] kmem_cache_alloc_noprof+0x50/0x310 [ 483.650282][T14357] ? skb_clone+0x151/0x1f0 [ 483.650369][T14357] skb_clone+0x151/0x1f0 [ 483.650387][T14357] __netlink_deliver_tap+0x2c9/0x500 [ 483.650482][T14357] netlink_unicast+0x653/0x680 [ 483.650511][T14357] netlink_sendmsg+0x58b/0x6b0 [ 483.650548][T14357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.650567][T14357] __sock_sendmsg+0x145/0x180 [ 483.650591][T14357] ____sys_sendmsg+0x31e/0x4e0 [ 483.650624][T14357] ___sys_sendmsg+0x17b/0x1d0 [ 483.650751][T14357] __x64_sys_sendmsg+0xd4/0x160 [ 483.650861][T14357] x64_sys_call+0x2999/0x2fb0 [ 483.650882][T14357] do_syscall_64+0xd2/0x200 [ 483.650900][T14357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 483.650983][T14357] ? clear_bhb_loop+0x40/0x90 [ 483.651004][T14357] ? clear_bhb_loop+0x40/0x90 [ 483.651026][T14357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.651046][T14357] RIP: 0033:0x7efd3994e929 [ 483.651141][T14357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.651159][T14357] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.651178][T14357] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 483.651191][T14357] RDX: 0000000024040880 RSI: 0000200000000140 RDI: 0000000000000003 [ 483.651203][T14357] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.651215][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.651233][T14357] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 483.651251][T14357] [ 483.704413][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 483.704427][ T29] audit: type=1326 audit(2000001108.655:55431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 483.912796][ T29] audit: type=1400 audit(2000001108.855:55432): avc: denied { relabelfrom } for pid=14363 comm="syz.5.8335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 483.933012][ T29] audit: type=1400 audit(2000001108.855:55433): avc: denied { relabelto } for pid=14363 comm="syz.5.8335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 483.974477][T14370] syzkaller0: entered promiscuous mode [ 483.979984][T14370] syzkaller0: entered allmulticast mode [ 484.026673][T14396] FAULT_INJECTION: forcing a failure. [ 484.026673][T14396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.040767][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.3.8337 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 484.040878][T14396] Tainted: [W]=WARN [ 484.040884][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.040894][T14396] Call Trace: [ 484.040899][T14396] [ 484.040904][T14396] __dump_stack+0x1d/0x30 [ 484.040922][T14396] dump_stack_lvl+0xe8/0x140 [ 484.041011][T14396] dump_stack+0x15/0x1b [ 484.041071][T14396] should_fail_ex+0x265/0x280 [ 484.041103][T14396] should_fail_alloc_page+0xf2/0x100 [ 484.041154][T14396] __alloc_frozen_pages_noprof+0xff/0x360 [ 484.041190][T14396] alloc_pages_mpol+0xb3/0x250 [ 484.041222][T14396] folio_alloc_mpol_noprof+0x39/0x80 [ 484.041251][T14396] shmem_get_folio_gfp+0x3cf/0xd60 [ 484.041299][T14396] shmem_write_begin+0xa8/0x190 [ 484.041369][T14396] generic_perform_write+0x181/0x490 [ 484.041393][T14396] shmem_file_write_iter+0xc5/0xf0 [ 484.041415][T14396] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 484.041437][T14396] vfs_write+0x49d/0x8e0 [ 484.041486][T14396] ksys_write+0xda/0x1a0 [ 484.041514][T14396] __x64_sys_write+0x40/0x50 [ 484.041614][T14396] x64_sys_call+0x2cdd/0x2fb0 [ 484.041632][T14396] do_syscall_64+0xd2/0x200 [ 484.041648][T14396] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 484.041670][T14396] ? clear_bhb_loop+0x40/0x90 [ 484.041690][T14396] ? clear_bhb_loop+0x40/0x90 [ 484.041795][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.041858][T14396] RIP: 0033:0x7fdd7531d3df [ 484.041873][T14396] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 484.041891][T14396] RSP: 002b:00007fdd73986df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 484.041909][T14396] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007fdd7531d3df [ 484.041922][T14396] RDX: 0000000000020000 RSI: 00007fdd6b567000 RDI: 0000000000000004 [ 484.041935][T14396] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001ea [ 484.041997][T14396] R10: 00000000000001d8 R11: 0000000000000293 R12: 0000000000000004 [ 484.042008][T14396] R13: 00007fdd73986ef0 R14: 00007fdd73986eb0 R15: 00007fdd6b567000 [ 484.042025][T14396] [ 484.059536][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.100377][ T29] audit: type=1326 audit(2000001109.045:55434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.119326][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.121133][ T29] audit: type=1326 audit(2000001109.045:55435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.142962][T13814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.178082][ T29] audit: type=1326 audit(2000001109.125:55436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.180433][T13814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.186364][ T29] audit: type=1326 audit(2000001109.125:55437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.305629][T14398] loop3: detected capacity change from 0 to 512 [ 484.323045][ T29] audit: type=1326 audit(2000001109.125:55438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.323106][ T29] audit: type=1326 audit(2000001109.175:55439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.444159][ T29] audit: type=1326 audit(2000001109.175:55440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14397 comm="syz.3.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 484.470476][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.491671][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.498771][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.518144][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.525235][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.536121][T14413] netlink: 'syz.6.8340': attribute type 10 has an invalid length. [ 484.639548][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.673874][T14430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.697232][T14431] loop5: detected capacity change from 0 to 1024 [ 484.709090][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8346'. [ 484.807823][T13814] veth0_vlan: entered promiscuous mode [ 484.832945][T13814] veth1_vlan: entered promiscuous mode [ 484.871652][T13814] veth0_macvtap: entered promiscuous mode [ 484.897431][T13814] veth1_macvtap: entered promiscuous mode [ 484.917818][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.944471][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.954886][T13814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.963605][T13814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.972468][T13814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.981351][T13814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.993438][T14470] netlink: 'syz.7.8352': attribute type 10 has an invalid length. [ 485.149142][T14475] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8286'. [ 485.219820][T14487] netlink: 'syz.7.8356': attribute type 29 has an invalid length. [ 485.300428][T14493] loop6: detected capacity change from 0 to 512 [ 485.316249][T14495] loop5: detected capacity change from 0 to 1764 [ 485.328092][T14493] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8358: bg 0: block 5: invalid block bitmap [ 485.341655][T14495] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 485.355531][T14493] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 485.372218][T14493] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8358: invalid indirect mapped block 3 (level 2) [ 485.375743][T14489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=133 sclass=netlink_route_socket pid=14489 comm=syz.1.8357 [ 485.387216][T14493] EXT4-fs (loop6): 2 truncates cleaned up [ 485.404960][T14493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.421733][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8357'. [ 485.463825][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.539496][T14520] smc: net device bond0 applied user defined pnetid SYZ0 [ 485.547586][T14520] smc: net device bond0 erased user defined pnetid SYZ0 [ 485.575886][T14523] loop6: detected capacity change from 0 to 1024 [ 485.588056][T14523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.604682][T14523] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8366: Allocating blocks 481-513 which overlap fs metadata [ 485.645676][T14523] EXT4-fs (loop6): pa ffff888106da3bd0: logic 352, phys. 465, len 3 [ 485.653709][T14523] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 485.700287][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.731402][T14530] smc: net device bond0 applied user defined pnetid SYZ0 [ 485.740198][T14530] smc: net device bond0 erased user defined pnetid SYZ0 [ 485.776063][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8368'. [ 485.808445][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8370'. [ 485.817381][T14540] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8370'. [ 485.831371][T14540] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.840162][T14540] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.848875][T14540] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.857565][T14540] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.867990][T14540] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.876950][T14540] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.885872][T14540] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.894748][T14540] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.126950][T14561] loop6: detected capacity change from 0 to 1024 [ 486.152952][T14561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.173295][T14561] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.8377: Allocating blocks 481-513 which overlap fs metadata [ 486.190427][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8380'. [ 486.221167][T14572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.226224][T14561] EXT4-fs (loop6): pa ffff888106c28c40: logic 352, phys. 465, len 3 [ 486.235851][T14561] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 486.290004][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.362761][T14624] netlink: 160872 bytes leftover after parsing attributes in process `+}[@'. [ 486.373910][T14624] RDS: rds_bind could not find a transport for ::ffff:172.20.20.47, load rds_tcp or rds_rdma? [ 486.381774][T14622] SELinux: failed to load policy [ 486.472296][T14638] loop5: detected capacity change from 0 to 1024 [ 486.595557][T14640] FAULT_INJECTION: forcing a failure. [ 486.595557][T14640] name failslab, interval 1, probability 0, space 0, times 0 [ 486.608262][T14640] CPU: 0 UID: 0 PID: 14640 Comm: syz.6.8393 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 486.608295][T14640] Tainted: [W]=WARN [ 486.608301][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.608311][T14640] Call Trace: [ 486.608317][T14640] [ 486.608323][T14640] __dump_stack+0x1d/0x30 [ 486.608402][T14640] dump_stack_lvl+0xe8/0x140 [ 486.608422][T14640] dump_stack+0x15/0x1b [ 486.608497][T14640] should_fail_ex+0x265/0x280 [ 486.608531][T14640] should_failslab+0x8c/0xb0 [ 486.608553][T14640] kmem_cache_alloc_noprof+0x50/0x310 [ 486.608608][T14640] ? audit_log_start+0x365/0x6c0 [ 486.608641][T14640] audit_log_start+0x365/0x6c0 [ 486.608674][T14640] audit_seccomp+0x48/0x100 [ 486.608771][T14640] ? __seccomp_filter+0x68c/0x10d0 [ 486.608793][T14640] __seccomp_filter+0x69d/0x10d0 [ 486.608839][T14640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.608919][T14640] ? vfs_write+0x75e/0x8e0 [ 486.608948][T14640] ? __rcu_read_unlock+0x4f/0x70 [ 486.608970][T14640] ? __fget_files+0x184/0x1c0 [ 486.609060][T14640] __secure_computing+0x82/0x150 [ 486.609080][T14640] syscall_trace_enter+0xcf/0x1e0 [ 486.609104][T14640] do_syscall_64+0xac/0x200 [ 486.609123][T14640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 486.609173][T14640] ? clear_bhb_loop+0x40/0x90 [ 486.609192][T14640] ? clear_bhb_loop+0x40/0x90 [ 486.609214][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.609237][T14640] RIP: 0033:0x7ff87e38e929 [ 486.609276][T14640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.609294][T14640] RSP: 002b:00007ff87c9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.609312][T14640] RAX: ffffffffffffffda RBX: 00007ff87e5b5fa0 RCX: 00007ff87e38e929 [ 486.609325][T14640] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 486.609414][T14640] RBP: 00007ff87c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 486.609428][T14640] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 486.609442][T14640] R13: 0000000000000000 R14: 00007ff87e5b5fa0 R15: 00007ffcab2fef88 [ 486.609462][T14640] [ 486.895301][T14654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.017625][T14698] lo speed is unknown, defaulting to 1000 [ 487.116182][T14709] vhci_hcd: invalid port number 96 [ 487.121392][T14709] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 487.129801][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.140785][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.155109][T14732] vhci_hcd: invalid port number 96 [ 487.160256][T14732] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 487.292405][ T3085] block device autoloading is deprecated and will be removed. [ 488.000420][T14752] FAULT_INJECTION: forcing a failure. [ 488.000420][T14752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 488.013710][T14752] CPU: 1 UID: 0 PID: 14752 Comm: syz.7.8404 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 488.013741][T14752] Tainted: [W]=WARN [ 488.013748][T14752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.013761][T14752] Call Trace: [ 488.013768][T14752] [ 488.013774][T14752] __dump_stack+0x1d/0x30 [ 488.013862][T14752] dump_stack_lvl+0xe8/0x140 [ 488.013922][T14752] dump_stack+0x15/0x1b [ 488.013987][T14752] should_fail_ex+0x265/0x280 [ 488.014018][T14752] should_fail_alloc_page+0xf2/0x100 [ 488.014042][T14752] __alloc_frozen_pages_noprof+0xff/0x360 [ 488.014079][T14752] alloc_pages_mpol+0xb3/0x250 [ 488.014151][T14752] alloc_pages_noprof+0x90/0x130 [ 488.014195][T14752] alloc_skb_with_frags+0x193/0x470 [ 488.014234][T14752] sock_alloc_send_pskb+0x43a/0x4f0 [ 488.014256][T14752] ? _find_next_bit+0x29/0x90 [ 488.014282][T14752] tun_get_user+0x8d3/0x2500 [ 488.014387][T14752] ? ref_tracker_alloc+0x1f2/0x2f0 [ 488.014417][T14752] ? selinux_file_permission+0x1e4/0x320 [ 488.014442][T14752] tun_chr_write_iter+0x15e/0x210 [ 488.014470][T14752] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 488.014527][T14752] vfs_write+0x49d/0x8e0 [ 488.014640][T14752] ksys_write+0xda/0x1a0 [ 488.014699][T14752] __x64_sys_write+0x40/0x50 [ 488.014729][T14752] x64_sys_call+0x2cdd/0x2fb0 [ 488.014788][T14752] do_syscall_64+0xd2/0x200 [ 488.014803][T14752] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.014857][T14752] ? clear_bhb_loop+0x40/0x90 [ 488.014990][T14752] ? clear_bhb_loop+0x40/0x90 [ 488.015011][T14752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.015033][T14752] RIP: 0033:0x7f58bb58e929 [ 488.015049][T14752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.015146][T14752] RSP: 002b:00007f58b9bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.015164][T14752] RAX: ffffffffffffffda RBX: 00007f58bb7b5fa0 RCX: 00007f58bb58e929 [ 488.015175][T14752] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000005 [ 488.015186][T14752] RBP: 00007f58b9bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 488.015196][T14752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.015209][T14752] R13: 0000000000000000 R14: 00007f58bb7b5fa0 R15: 00007ffe62958238 [ 488.015230][T14752] [ 488.315164][T14758] delete_channel: no stack [ 488.325069][T14758] delete_channel: no stack [ 488.359416][T14760] Cannot find add_set index 0 as target [ 488.382455][T14774] __nla_validate_parse: 4 callbacks suppressed [ 488.382511][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8408'. [ 488.408880][T14774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.497533][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8409'. [ 488.726539][ T3085] block device autoloading is deprecated and will be removed. [ 488.812167][T14829] binfmt_misc: register: failed to install interpreter file ./file0 [ 488.875668][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 488.875683][ T29] audit: type=1400 audit(2000001113.825:55579): avc: denied { read } for pid=14828 comm="syz.3.8413" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 488.921560][ T29] audit: type=1400 audit(2000001113.825:55580): avc: denied { open } for pid=14828 comm="syz.3.8413" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 488.945380][ T29] audit: type=1400 audit(2000001113.825:55581): avc: denied { ioctl } for pid=14828 comm="syz.3.8413" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.008394][T14840] macsec0: entered allmulticast mode [ 489.018462][ T29] audit: type=1400 audit(2000001113.965:55582): avc: denied { write } for pid=14838 comm="syz.3.8415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 489.045127][T14841] netlink: 'syz.1.8416': attribute type 3 has an invalid length. [ 489.170293][T14846] lo speed is unknown, defaulting to 1000 [ 489.417785][ T29] audit: type=1326 audit(2000001114.365:55583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.502055][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8425'. [ 489.537807][ T3085] block device autoloading is deprecated and will be removed. [ 489.552002][ T29] audit: type=1326 audit(2000001114.395:55584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.575691][ T29] audit: type=1326 audit(2000001114.395:55585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.599259][ T29] audit: type=1326 audit(2000001114.395:55586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.622962][ T29] audit: type=1326 audit(2000001114.395:55587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.646529][ T29] audit: type=1326 audit(2000001114.395:55588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.7.8424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f58bb58e929 code=0x7ffc0000 [ 489.672894][T14899] xt_hashlimit: max too large, truncated to 1048576 [ 489.702865][T14899] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.8425' sets config #1 [ 489.759942][T14908] delete_channel: no stack [ 489.766185][T14908] delete_channel: no stack [ 489.811789][T14909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8426'. [ 489.913589][T14914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.923395][T14914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.936558][T14914] netlink: 'syz.7.8429': attribute type 1 has an invalid length. [ 490.602862][T14949] netlink: 'syz.5.8438': attribute type 10 has an invalid length. [ 490.617034][ T3085] block device autoloading is deprecated and will be removed. [ 490.842790][T14967] FAULT_INJECTION: forcing a failure. [ 490.842790][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 490.855706][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.5.8444 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 490.855739][T14967] Tainted: [W]=WARN [ 490.855746][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.855817][T14967] Call Trace: [ 490.855823][T14967] [ 490.855830][T14967] __dump_stack+0x1d/0x30 [ 490.855852][T14967] dump_stack_lvl+0xe8/0x140 [ 490.855897][T14967] dump_stack+0x15/0x1b [ 490.855914][T14967] should_fail_ex+0x265/0x280 [ 490.855944][T14967] should_failslab+0x8c/0xb0 [ 490.855966][T14967] kmem_cache_alloc_noprof+0x50/0x310 [ 490.855991][T14967] ? skb_clone+0x151/0x1f0 [ 490.856033][T14967] skb_clone+0x151/0x1f0 [ 490.856050][T14967] __netlink_deliver_tap+0x2c9/0x500 [ 490.856125][T14967] netlink_unicast+0x653/0x680 [ 490.856155][T14967] netlink_sendmsg+0x58b/0x6b0 [ 490.856223][T14967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.856241][T14967] __sock_sendmsg+0x145/0x180 [ 490.856311][T14967] ____sys_sendmsg+0x31e/0x4e0 [ 490.856421][T14967] ___sys_sendmsg+0x17b/0x1d0 [ 490.856462][T14967] __x64_sys_sendmsg+0xd4/0x160 [ 490.856554][T14967] x64_sys_call+0x2999/0x2fb0 [ 490.856574][T14967] do_syscall_64+0xd2/0x200 [ 490.856591][T14967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 490.856628][T14967] ? clear_bhb_loop+0x40/0x90 [ 490.856648][T14967] ? clear_bhb_loop+0x40/0x90 [ 490.856677][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.856696][T14967] RIP: 0033:0x7efd3994e929 [ 490.856711][T14967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.856728][T14967] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.856746][T14967] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 490.856758][T14967] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 490.856825][T14967] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 490.856836][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.856848][T14967] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 490.856866][T14967] [ 491.176076][T14984] smc: net device bond0 applied user defined pnetid SYZ0 [ 491.186538][T14984] smc: net device bond0 erased user defined pnetid SYZ0 [ 491.202111][T14988] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8451'. [ 491.415100][T14988] batadv1: entered promiscuous mode [ 491.420369][T14988] batadv1: entered allmulticast mode [ 491.487336][T15006] lo speed is unknown, defaulting to 1000 [ 491.505911][T15021] FAULT_INJECTION: forcing a failure. [ 491.505911][T15021] name failslab, interval 1, probability 0, space 0, times 0 [ 491.518915][T15021] CPU: 1 UID: 0 PID: 15021 Comm: syz.7.8457 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 491.518946][T15021] Tainted: [W]=WARN [ 491.518967][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.518980][T15021] Call Trace: [ 491.518987][T15021] [ 491.518995][T15021] __dump_stack+0x1d/0x30 [ 491.519016][T15021] dump_stack_lvl+0xe8/0x140 [ 491.519036][T15021] dump_stack+0x15/0x1b [ 491.519050][T15021] should_fail_ex+0x265/0x280 [ 491.519197][T15021] should_failslab+0x8c/0xb0 [ 491.519221][T15021] __kmalloc_noprof+0xa5/0x3e0 [ 491.519269][T15021] ? ethnl_default_doit+0x133/0x8f0 [ 491.519290][T15021] ethnl_default_doit+0x133/0x8f0 [ 491.519363][T15021] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 491.519386][T15021] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 491.519415][T15021] genl_family_rcv_msg_doit+0x140/0x1b0 [ 491.519572][T15021] genl_rcv_msg+0x422/0x460 [ 491.519597][T15021] ? __pfx_ethnl_default_doit+0x10/0x10 [ 491.519632][T15021] netlink_rcv_skb+0x120/0x220 [ 491.519658][T15021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.519701][T15021] genl_rcv+0x28/0x40 [ 491.519723][T15021] netlink_unicast+0x5a5/0x680 [ 491.519755][T15021] netlink_sendmsg+0x58b/0x6b0 [ 491.519803][T15021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.519820][T15021] __sock_sendmsg+0x145/0x180 [ 491.519844][T15021] ____sys_sendmsg+0x31e/0x4e0 [ 491.519996][T15021] ___sys_sendmsg+0x17b/0x1d0 [ 491.520040][T15021] __x64_sys_sendmsg+0xd4/0x160 [ 491.520076][T15021] x64_sys_call+0x2999/0x2fb0 [ 491.520128][T15021] do_syscall_64+0xd2/0x200 [ 491.520151][T15021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 491.520245][T15021] ? clear_bhb_loop+0x40/0x90 [ 491.520263][T15021] ? clear_bhb_loop+0x40/0x90 [ 491.520283][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.520303][T15021] RIP: 0033:0x7f58bb58e929 [ 491.520316][T15021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.520396][T15021] RSP: 002b:00007f58b9bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.520474][T15021] RAX: ffffffffffffffda RBX: 00007f58bb7b5fa0 RCX: 00007f58bb58e929 [ 491.520485][T15021] RDX: 0000000000000090 RSI: 0000200000000980 RDI: 0000000000000003 [ 491.520496][T15021] RBP: 00007f58b9bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 491.520507][T15021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.520518][T15021] R13: 0000000000000000 R14: 00007f58bb7b5fa0 R15: 00007ffe62958238 [ 491.520543][T15021] [ 491.933930][T15041] loop5: detected capacity change from 0 to 1764 [ 492.120349][T15041] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 492.273072][T15060] smc: net device bond0 applied user defined pnetid SYZ0 [ 492.293254][T15060] smc: net device bond0 erased user defined pnetid SYZ0 [ 492.691761][T15080] loop6: detected capacity change from 0 to 128 [ 493.204136][T15107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15107 comm=syz.7.8477 [ 493.217516][T15107] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8477'. [ 493.545673][T15137] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 493.580929][T15141] loop6: detected capacity change from 0 to 1764 [ 493.591029][T15141] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.614987][T15148] loop6: detected capacity change from 0 to 512 [ 493.621727][T15148] EXT4-fs: inline encryption not supported [ 493.627689][T15148] EXT4-fs: Ignoring removed orlov option [ 493.633390][T15148] ext4: Unknown parameter 'nouser_xattr' [ 493.829443][T15160] loop3: detected capacity change from 0 to 1764 [ 493.871153][T15160] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.970026][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 493.970115][ T29] audit: type=1326 audit(2000001118.915:55698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.017788][T15180] loop6: detected capacity change from 0 to 128 [ 494.037360][T15177] can0: slcan on ptm0. [ 494.045784][T15180] FAT-fs (loop6): error, corrupted directory (invalid i_start) [ 494.053365][T15180] FAT-fs (loop6): Filesystem has been set read-only [ 494.111690][ T29] audit: type=1326 audit(2000001118.955:55699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.135516][ T29] audit: type=1326 audit(2000001118.955:55700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.159540][ T29] audit: type=1326 audit(2000001118.955:55701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.183524][ T29] audit: type=1326 audit(2000001118.955:55702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.207489][ T29] audit: type=1326 audit(2000001118.955:55703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.231295][ T29] audit: type=1326 audit(2000001118.955:55704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.243474][T15197] netlink: 'syz.6.8496': attribute type 1 has an invalid length. [ 494.254973][ T29] audit: type=1326 audit(2000001118.955:55705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.286412][ T29] audit: type=1326 audit(2000001118.955:55706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.310185][ T29] audit: type=1326 audit(2000001118.955:55707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15175 comm="syz.3.8494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 494.342250][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8497'. [ 494.351816][T15199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.359629][T15199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.448069][T15224] FAULT_INJECTION: forcing a failure. [ 494.448069][T15224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.461464][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.1.8501 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 494.461499][T15224] Tainted: [W]=WARN [ 494.461507][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.461520][T15224] Call Trace: [ 494.461526][T15224] [ 494.461535][T15224] __dump_stack+0x1d/0x30 [ 494.461557][T15224] dump_stack_lvl+0xe8/0x140 [ 494.461578][T15224] dump_stack+0x15/0x1b [ 494.461649][T15224] should_fail_ex+0x265/0x280 [ 494.461677][T15224] should_fail+0xb/0x20 [ 494.461699][T15224] should_fail_usercopy+0x1a/0x20 [ 494.461728][T15224] _copy_to_iter+0xcf/0xe30 [ 494.461825][T15224] ? chacha_block_generic+0x218/0x240 [ 494.461860][T15224] get_random_bytes_user+0x12d/0x290 [ 494.461893][T15224] ? import_ubuf+0xe8/0x120 [ 494.461915][T15224] __x64_sys_getrandom+0xcf/0x1a0 [ 494.461937][T15224] x64_sys_call+0x2bb4/0x2fb0 [ 494.461989][T15224] do_syscall_64+0xd2/0x200 [ 494.462007][T15224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 494.462036][T15224] ? clear_bhb_loop+0x40/0x90 [ 494.462058][T15224] ? clear_bhb_loop+0x40/0x90 [ 494.462086][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.462109][T15224] RIP: 0033:0x7fdd8e70e929 [ 494.462124][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.462142][T15224] RSP: 002b:00007fdd8cd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 494.462204][T15224] RAX: ffffffffffffffda RBX: 00007fdd8e935fa0 RCX: 00007fdd8e70e929 [ 494.462218][T15224] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 494.462233][T15224] RBP: 00007fdd8cd77090 R08: 0000000000000000 R09: 0000000000000000 [ 494.462303][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.462316][T15224] R13: 0000000000000000 R14: 00007fdd8e935fa0 R15: 00007ffea7e52748 [ 494.462336][T15224] [ 494.683133][T15229] loop3: detected capacity change from 0 to 128 [ 494.686182][T15231] loop6: detected capacity change from 0 to 1024 [ 494.691575][T15229] bio_check_eod: 104 callbacks suppressed [ 494.691589][T15229] syz.3.8503: attempt to access beyond end of device [ 494.691589][T15229] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 494.705085][T15234] delete_channel: no stack [ 494.719596][T15234] delete_channel: no stack [ 494.726682][T15142] can0 (unregistered): slcan off ptm0. [ 494.736936][T15229] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 494.744859][T15229] FAT-fs (loop3): Filesystem has been set read-only [ 494.753882][T15229] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 494.762543][T15229] syz.3.8503: attempt to access beyond end of device [ 494.762543][T15229] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 494.767109][T15231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.846715][T15231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=15231 comm=syz.6.8502 [ 494.853822][T15244] loop5: detected capacity change from 0 to 8192 [ 494.859444][T15231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=15231 comm=syz.6.8502 [ 494.870018][T15231] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 494.909265][T15244] loop5: detected capacity change from 0 to 128 [ 494.933400][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8510'. [ 494.942577][T15263] IPVS: Error joining to the multicast group [ 494.966033][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.065684][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8515'. [ 495.094882][T15279] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0 [ 495.106711][T15275] vhci_hcd: invalid port number 96 [ 495.107694][T15244] IPVS: stopping master sync thread 15279 ... [ 495.111819][T15275] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 495.184630][T15292] lo speed is unknown, defaulting to 1000 [ 495.486739][T15325] loop5: detected capacity change from 0 to 512 [ 495.508415][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8520'. [ 495.518046][T15330] FAULT_INJECTION: forcing a failure. [ 495.518046][T15330] name failslab, interval 1, probability 0, space 0, times 0 [ 495.530940][T15330] CPU: 0 UID: 0 PID: 15330 Comm: syz.5.8520 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 495.531025][T15330] Tainted: [W]=WARN [ 495.531032][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.531109][T15330] Call Trace: [ 495.531113][T15330] [ 495.531117][T15330] __dump_stack+0x1d/0x30 [ 495.531135][T15330] dump_stack_lvl+0xe8/0x140 [ 495.531161][T15330] dump_stack+0x15/0x1b [ 495.531255][T15330] should_fail_ex+0x265/0x280 [ 495.531304][T15330] ? register_netdevice+0x1e8/0xf00 [ 495.531456][T15330] should_failslab+0x8c/0xb0 [ 495.531469][T15330] __kmalloc_cache_noprof+0x4c/0x320 [ 495.531509][T15330] register_netdevice+0x1e8/0xf00 [ 495.531525][T15330] ? alloc_netdev_mqs+0xa32/0xab0 [ 495.531542][T15330] ? validate_linkmsg+0x4f2/0x570 [ 495.531599][T15330] br_dev_newlink+0x42/0x100 [ 495.531665][T15330] ? __pfx_br_dev_newlink+0x10/0x10 [ 495.531678][T15330] rtnl_newlink_create+0x1bc/0x620 [ 495.531745][T15330] ? __schedule+0x6a8/0xb30 [ 495.531771][T15330] rtnl_newlink+0xf29/0x12d0 [ 495.531793][T15330] ? bpf_trace_run3+0x12c/0x1d0 [ 495.531823][T15330] ? __memcg_slab_free_hook+0x135/0x230 [ 495.531887][T15330] ? __kfree_skb+0x109/0x150 [ 495.531931][T15330] ? __rcu_read_unlock+0x4f/0x70 [ 495.531944][T15330] ? avc_has_perm_noaudit+0x1b1/0x200 [ 495.531959][T15330] ? selinux_capable+0x1f9/0x270 [ 495.532030][T15330] ? security_capable+0x83/0x90 [ 495.532053][T15330] ? ns_capable+0x7d/0xb0 [ 495.532177][T15330] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.532197][T15330] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 495.532218][T15330] netlink_rcv_skb+0x120/0x220 [ 495.532244][T15330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.532336][T15330] rtnetlink_rcv+0x1c/0x30 [ 495.532347][T15330] netlink_unicast+0x5a5/0x680 [ 495.532365][T15330] netlink_sendmsg+0x58b/0x6b0 [ 495.532426][T15330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.532438][T15330] __sock_sendmsg+0x145/0x180 [ 495.532451][T15330] ____sys_sendmsg+0x31e/0x4e0 [ 495.532535][T15330] ___sys_sendmsg+0x17b/0x1d0 [ 495.532697][T15330] __x64_sys_sendmsg+0xd4/0x160 [ 495.532775][T15330] x64_sys_call+0x2999/0x2fb0 [ 495.532862][T15330] do_syscall_64+0xd2/0x200 [ 495.532872][T15330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 495.532909][T15330] ? clear_bhb_loop+0x40/0x90 [ 495.532921][T15330] ? clear_bhb_loop+0x40/0x90 [ 495.532933][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.532997][T15330] RIP: 0033:0x7efd3994e929 [ 495.533006][T15330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.533017][T15330] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.533031][T15330] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 495.533070][T15330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 495.533078][T15330] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 495.533086][T15330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.533175][T15330] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 495.533188][T15330] [ 495.853732][T15334] loop6: detected capacity change from 0 to 128 [ 495.913063][ T3085] block device autoloading is deprecated and will be removed. [ 495.947363][ T5951] block device autoloading is deprecated and will be removed. [ 495.988917][ T6353] kworker/u8:47: attempt to access beyond end of device [ 495.988917][ T6353] loop6: rw=1, sector=137, nr_sectors = 8 limit=128 [ 496.027296][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.027296][ T6353] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 496.068797][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.068797][ T6353] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 496.112121][T15369] 9p: Unknown access argument ‚: -22 [ 496.121194][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.121194][ T6353] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 496.135221][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.135221][ T6353] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 496.149211][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.149211][ T6353] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 496.151071][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8532'. [ 496.176041][T15372] loop3: detected capacity change from 0 to 128 [ 496.217862][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.217862][ T6353] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 496.241985][ T6353] kworker/u8:47: attempt to access beyond end of device [ 496.241985][ T6353] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 496.248210][T15371] vhci_hcd: invalid port number 96 [ 496.260592][T15371] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 496.313764][T15374] lo speed is unknown, defaulting to 1000 [ 496.339765][T15384] FAULT_INJECTION: forcing a failure. [ 496.339765][T15384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.352869][T15384] CPU: 1 UID: 0 PID: 15384 Comm: syz.3.8535 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 496.352900][T15384] Tainted: [W]=WARN [ 496.352907][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.352922][T15384] Call Trace: [ 496.352928][T15384] [ 496.352962][T15384] __dump_stack+0x1d/0x30 [ 496.352982][T15384] dump_stack_lvl+0xe8/0x140 [ 496.352999][T15384] dump_stack+0x15/0x1b [ 496.353024][T15384] should_fail_ex+0x265/0x280 [ 496.353057][T15384] should_fail+0xb/0x20 [ 496.353086][T15384] should_fail_usercopy+0x1a/0x20 [ 496.353233][T15384] _copy_from_user+0x1c/0xb0 [ 496.353254][T15384] ___sys_sendmsg+0xc1/0x1d0 [ 496.353297][T15384] __sys_sendmmsg+0x178/0x300 [ 496.353332][T15384] __x64_sys_sendmmsg+0x57/0x70 [ 496.353426][T15384] x64_sys_call+0x2f2f/0x2fb0 [ 496.353445][T15384] do_syscall_64+0xd2/0x200 [ 496.353463][T15384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.353566][T15384] ? clear_bhb_loop+0x40/0x90 [ 496.353649][T15384] ? clear_bhb_loop+0x40/0x90 [ 496.353673][T15384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.353695][T15384] RIP: 0033:0x7fdd7531e929 [ 496.353711][T15384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.353730][T15384] RSP: 002b:00007fdd73987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.353792][T15384] RAX: ffffffffffffffda RBX: 00007fdd75545fa0 RCX: 00007fdd7531e929 [ 496.353803][T15384] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 496.353816][T15384] RBP: 00007fdd73987090 R08: 0000000000000000 R09: 0000000000000000 [ 496.353829][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.353842][T15384] R13: 0000000000000000 R14: 00007fdd75545fa0 R15: 00007ffea93fc638 [ 496.353887][T15384] [ 496.538376][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8529'. [ 496.587944][T15411] loop3: detected capacity change from 0 to 1024 [ 496.613386][T15412] smc: net device bond0 applied user defined pnetid SYZ0 [ 496.620937][T15412] smc: net device bond0 erased user defined pnetid SYZ0 [ 496.634946][T15411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.656132][T15411] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.8537: Allocating blocks 481-513 which overlap fs metadata [ 496.687385][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.715596][T15430] loop3: detected capacity change from 0 to 1764 [ 496.725931][T15430] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 496.791642][T15441] loop3: detected capacity change from 0 to 1024 [ 496.817578][T15441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.837911][T15452] hsr0: entered promiscuous mode [ 496.847158][T15441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 496.867788][T15456] SELinux: Context system_u:object is not valid (left unmapped). [ 496.868276][T15441] EXT4-fs (loop3): Remounting filesystem read-only [ 496.924134][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8547'. [ 496.933360][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8547'. [ 496.949026][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.983981][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8547'. [ 497.011850][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8547'. [ 497.086371][T15479] FAULT_INJECTION: forcing a failure. [ 497.086371][T15479] name failslab, interval 1, probability 0, space 0, times 0 [ 497.099108][T15479] CPU: 0 UID: 0 PID: 15479 Comm: syz.1.8549 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 497.099164][T15479] Tainted: [W]=WARN [ 497.099171][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.099184][T15479] Call Trace: [ 497.099190][T15479] [ 497.099196][T15479] __dump_stack+0x1d/0x30 [ 497.099214][T15479] dump_stack_lvl+0xe8/0x140 [ 497.099230][T15479] dump_stack+0x15/0x1b [ 497.099248][T15479] should_fail_ex+0x265/0x280 [ 497.099306][T15479] should_failslab+0x8c/0xb0 [ 497.099372][T15479] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 497.099397][T15479] ? __kthread_create_on_node+0xcb/0x230 [ 497.099437][T15479] kvasprintf+0x8a/0x110 [ 497.099459][T15479] ? __kmalloc_cache_noprof+0x189/0x320 [ 497.099488][T15479] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 497.099546][T15479] __kthread_create_on_node+0xcb/0x230 [ 497.099574][T15479] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 497.099604][T15479] kthread_create_on_node+0x89/0xc0 [ 497.099637][T15479] ? _raw_spin_unlock+0x26/0x50 [ 497.099659][T15479] rxrpc_lookup_local+0x963/0xc70 [ 497.099706][T15479] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 497.099814][T15479] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 497.099939][T15479] rxrpc_sendmsg+0x2f3/0x590 [ 497.099972][T15479] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 497.100071][T15479] __sock_sendmsg+0x145/0x180 [ 497.100148][T15479] ____sys_sendmsg+0x31e/0x4e0 [ 497.100183][T15479] ___sys_sendmsg+0x17b/0x1d0 [ 497.100226][T15479] __x64_sys_sendmsg+0xd4/0x160 [ 497.100294][T15479] x64_sys_call+0x2999/0x2fb0 [ 497.100330][T15479] do_syscall_64+0xd2/0x200 [ 497.100377][T15479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.100398][T15479] ? clear_bhb_loop+0x40/0x90 [ 497.100416][T15479] ? clear_bhb_loop+0x40/0x90 [ 497.100434][T15479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.100513][T15479] RIP: 0033:0x7fdd8e70e929 [ 497.100526][T15479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.100541][T15479] RSP: 002b:00007fdd8cd35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.100557][T15479] RAX: ffffffffffffffda RBX: 00007fdd8e936160 RCX: 00007fdd8e70e929 [ 497.100568][T15479] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 497.100578][T15479] RBP: 00007fdd8cd35090 R08: 0000000000000000 R09: 0000000000000000 [ 497.100600][T15479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.100611][T15479] R13: 0000000000000000 R14: 00007fdd8e936160 R15: 00007ffea7e52748 [ 497.100626][T15479] [ 497.448576][T15489] batman_adv: batadv0: Removing interface: team0 [ 497.481903][T15489] bridge_slave_0: left allmulticast mode [ 497.487776][T15489] bridge_slave_0: left promiscuous mode [ 497.493519][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.583575][T15498] FAULT_INJECTION: forcing a failure. [ 497.583575][T15498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.597259][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.6.8558 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 497.597310][T15498] Tainted: [W]=WARN [ 497.597316][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.597326][T15498] Call Trace: [ 497.597331][T15498] [ 497.597337][T15498] __dump_stack+0x1d/0x30 [ 497.597355][T15498] dump_stack_lvl+0xe8/0x140 [ 497.597373][T15498] dump_stack+0x15/0x1b [ 497.597389][T15498] should_fail_ex+0x265/0x280 [ 497.597461][T15498] should_fail+0xb/0x20 [ 497.597484][T15498] should_fail_usercopy+0x1a/0x20 [ 497.597512][T15498] copy_folio_from_iter_atomic+0x278/0x1170 [ 497.597555][T15498] ? shmem_write_begin+0xa8/0x190 [ 497.597644][T15498] ? shmem_write_begin+0xe1/0x190 [ 497.597672][T15498] generic_perform_write+0x2c2/0x490 [ 497.597677][T15489] bridge_slave_1: left allmulticast mode [ 497.597697][T15498] shmem_file_write_iter+0xc5/0xf0 [ 497.597754][T15498] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 497.597775][T15498] vfs_write+0x49d/0x8e0 [ 497.597810][T15498] ksys_write+0xda/0x1a0 [ 497.597839][T15498] __x64_sys_write+0x40/0x50 [ 497.598006][T15498] x64_sys_call+0x2cdd/0x2fb0 [ 497.598027][T15498] do_syscall_64+0xd2/0x200 [ 497.598045][T15498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.598092][T15498] ? clear_bhb_loop+0x40/0x90 [ 497.598113][T15498] ? clear_bhb_loop+0x40/0x90 [ 497.598146][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.598200][T15498] RIP: 0033:0x7ff87e38e929 [ 497.598239][T15498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.598256][T15498] RSP: 002b:00007ff87c9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.598288][T15498] RAX: ffffffffffffffda RBX: 00007ff87e5b5fa0 RCX: 00007ff87e38e929 [ 497.598300][T15498] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 497.598312][T15498] RBP: 00007ff87c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 497.598325][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.598340][T15498] R13: 0000000000000000 R14: 00007ff87e5b5fa0 R15: 00007ffcab2fef88 [ 497.598358][T15498] [ 497.775390][T15502] netlink: 'syz.6.8559': attribute type 10 has an invalid length. [ 497.780503][T15489] bridge_slave_1: left promiscuous mode [ 497.828975][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.840483][T15489] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 497.848520][T15489] bond_slave_1: left promiscuous mode [ 497.857556][T15489] team0: Port device team_slave_0 removed [ 497.866499][T15489] team0: Port device team_slave_1 removed [ 497.872979][T15489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.880682][T15489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.891374][T15489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.898847][T15489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.917326][T15489] team0: Port device macvlan1 removed [ 497.931928][T15489] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 497.938758][T15489] batman_adv: batadv0: Removing interface: ipvlan2 [ 497.953216][T15492] vlan0: entered promiscuous mode [ 497.965449][T15492] team0: Port device vlan0 added [ 497.977287][T15503] tipc: Enabled bearer , priority 0 [ 498.000711][T15510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.045669][T15518] loop5: detected capacity change from 0 to 1024 [ 498.056035][T15518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.068718][T15521] loop6: detected capacity change from 0 to 1024 [ 498.076270][T15518] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.8564: Allocating blocks 481-513 which overlap fs metadata [ 498.077865][T15521] EXT4-fs: Ignoring removed bh option [ 498.096465][T15521] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 498.119014][T15521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.132966][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.235108][T15545] smc: net device bond0 applied user defined pnetid SYZ0 [ 498.251484][T15545] smc: net device bond0 erased user defined pnetid SYZ0 [ 498.278076][T15554] delete_channel: no stack [ 498.281205][T15551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=15551 comm=syz.1.8570 [ 498.282929][T15554] delete_channel: no stack [ 498.337886][T15563] netlink: 'syz.3.8574': attribute type 13 has an invalid length. [ 498.344801][T15558] erspan0: entered promiscuous mode [ 498.442983][T15577] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 498.449615][T15577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.457186][T15577] vhci_hcd vhci_hcd.0: Device attached [ 498.475130][T15578] vhci_hcd: cannot find the pending unlink 6 [ 498.485484][T15581] hub 9-0:1.0: USB hub found [ 498.490679][T15581] hub 9-0:1.0: 8 ports detected [ 498.497554][T15578] vhci_hcd: connection closed [ 498.497776][ T6371] vhci_hcd: stop threads [ 498.506720][ T6371] vhci_hcd: release socket [ 498.511141][ T6371] vhci_hcd: disconnect device [ 498.796330][T15600] loop5: detected capacity change from 0 to 1024 [ 498.824592][T15600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.878744][T15600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.900925][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.956633][T15619] loop6: detected capacity change from 0 to 128 [ 498.972707][T15619] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.986492][T15619] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.999707][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 498.999720][ T29] audit: type=1400 audit(2000001123.945:55810): avc: denied { mounton } for pid=15618 comm="syz.6.8587" path="/374/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.075456][ T5951] block device autoloading is deprecated and will be removed. [ 499.090083][T15632] FAULT_INJECTION: forcing a failure. [ 499.090083][T15632] name failslab, interval 1, probability 0, space 0, times 0 [ 499.094342][ T6654] tipc: Node number set to 2886997007 [ 499.102813][T15632] CPU: 1 UID: 0 PID: 15632 Comm: syz.1.8590 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 499.102845][T15632] Tainted: [W]=WARN [ 499.102852][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.102865][T15632] Call Trace: [ 499.102871][T15632] [ 499.102878][T15632] __dump_stack+0x1d/0x30 [ 499.102900][T15632] dump_stack_lvl+0xe8/0x140 [ 499.102920][T15632] dump_stack+0x15/0x1b [ 499.103006][T15632] should_fail_ex+0x265/0x280 [ 499.103094][T15632] should_failslab+0x8c/0xb0 [ 499.103117][T15632] kmem_cache_alloc_noprof+0x50/0x310 [ 499.103142][T15632] ? vm_area_alloc+0x2c/0xb0 [ 499.103235][T15632] vm_area_alloc+0x2c/0xb0 [ 499.103260][T15632] create_init_stack_vma+0x28/0x390 [ 499.103342][T15632] alloc_bprm+0x2b9/0x350 [ 499.103449][T15632] do_execveat_common+0x12e/0x750 [ 499.103480][T15632] ? getname_flags+0x154/0x3b0 [ 499.103501][T15632] __x64_sys_execveat+0x73/0x90 [ 499.103531][T15632] x64_sys_call+0x2dae/0x2fb0 [ 499.103587][T15632] do_syscall_64+0xd2/0x200 [ 499.103605][T15632] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 499.103656][T15632] ? clear_bhb_loop+0x40/0x90 [ 499.103676][T15632] ? clear_bhb_loop+0x40/0x90 [ 499.103744][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.103765][T15632] RIP: 0033:0x7fdd8e70e929 [ 499.103779][T15632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.103802][T15632] RSP: 002b:00007fdd8cd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 499.103821][T15632] RAX: ffffffffffffffda RBX: 00007fdd8e935fa0 RCX: 00007fdd8e70e929 [ 499.103854][T15632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 499.103867][T15632] RBP: 00007fdd8cd77090 R08: 0000000000001000 R09: 0000000000000000 [ 499.103907][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.103919][T15632] R13: 0000000000000000 R14: 00007fdd8e935fa0 R15: 00007ffea7e52748 [ 499.103938][T15632] [ 499.144345][ T29] audit: type=1400 audit(2000001124.055:55811): avc: denied { ioctl } for pid=15618 comm="syz.6.8587" path="/374/file1/file1" dev="loop6" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 499.173454][T15641] netlink: 'syz.1.8592': attribute type 29 has an invalid length. [ 499.197046][T15637] syzkaller1: entered promiscuous mode [ 499.296439][ T3085] block device autoloading is deprecated and will be removed. [ 499.298445][T15637] syzkaller1: entered allmulticast mode [ 499.530537][T15665] loop5: detected capacity change from 0 to 1764 [ 499.552984][T15665] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 499.621981][T15668] FAULT_INJECTION: forcing a failure. [ 499.621981][T15668] name failslab, interval 1, probability 0, space 0, times 0 [ 499.634687][T15668] CPU: 0 UID: 0 PID: 15668 Comm: syz.5.8596 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 499.634720][T15668] Tainted: [W]=WARN [ 499.634728][T15668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.634746][T15668] Call Trace: [ 499.634785][T15668] [ 499.634793][T15668] __dump_stack+0x1d/0x30 [ 499.634815][T15668] dump_stack_lvl+0xe8/0x140 [ 499.634889][T15668] dump_stack+0x15/0x1b [ 499.634906][T15668] should_fail_ex+0x265/0x280 [ 499.634937][T15668] should_failslab+0x8c/0xb0 [ 499.634958][T15668] kmem_cache_alloc_noprof+0x50/0x310 [ 499.634985][T15668] ? skb_clone+0x151/0x1f0 [ 499.635050][T15668] skb_clone+0x151/0x1f0 [ 499.635067][T15668] __netlink_deliver_tap+0x2c9/0x500 [ 499.635105][T15668] netlink_unicast+0x653/0x680 [ 499.635202][T15668] netlink_sendmsg+0x58b/0x6b0 [ 499.635223][T15668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.635242][T15668] __sock_sendmsg+0x145/0x180 [ 499.635267][T15668] ____sys_sendmsg+0x31e/0x4e0 [ 499.635342][T15668] ___sys_sendmsg+0x17b/0x1d0 [ 499.635433][T15668] __x64_sys_sendmsg+0xd4/0x160 [ 499.635469][T15668] x64_sys_call+0x2999/0x2fb0 [ 499.635495][T15668] do_syscall_64+0xd2/0x200 [ 499.635513][T15668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 499.635632][T15668] ? clear_bhb_loop+0x40/0x90 [ 499.635654][T15668] ? clear_bhb_loop+0x40/0x90 [ 499.635676][T15668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.635769][T15668] RIP: 0033:0x7efd3994e929 [ 499.635785][T15668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.635803][T15668] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.635823][T15668] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 499.635836][T15668] RDX: 0000000000004040 RSI: 0000200000000080 RDI: 0000000000000003 [ 499.635849][T15668] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 499.635875][T15668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.635888][T15668] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 499.635906][T15668] [ 499.640387][T15668] __nla_validate_parse: 9 callbacks suppressed [ 499.640399][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8596'. [ 499.873882][T15672] smc: net device bond0 applied user defined pnetid SYZ0 [ 499.882043][ T4001] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.893039][T15672] smc: net device bond0 erased user defined pnetid SYZ0 [ 499.920287][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8599'. [ 499.931728][T15677] loop6: detected capacity change from 0 to 1024 [ 499.943856][T15678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 499.971920][T15713] netlink: 'syz.3.8600': attribute type 10 has an invalid length. [ 499.990501][T15677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.030561][ T29] audit: type=1326 audit(2000001124.975:55812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.054275][ T29] audit: type=1326 audit(2000001124.975:55813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.077972][ T29] audit: type=1326 audit(2000001124.975:55814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.101589][ T29] audit: type=1326 audit(2000001124.975:55815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.125121][ T29] audit: type=1326 audit(2000001124.975:55816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.149678][ T29] audit: type=1326 audit(2000001124.975:55817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.174036][ T29] audit: type=1326 audit(2000001124.975:55818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.197658][ T29] audit: type=1326 audit(2000001124.975:55819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz.3.8600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7531e929 code=0x7ffc0000 [ 500.228365][T15719] delete_channel: no stack [ 500.236324][T15719] delete_channel: no stack [ 500.285237][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.341828][T15730] loop3: detected capacity change from 0 to 2048 [ 500.359495][T15730] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 500.372249][T15730] xt_hashlimit: max too large, truncated to 1048576 [ 500.406505][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8608'. [ 500.477729][T15760] smc: net device bond0 applied user defined pnetid SYZ0 [ 500.485110][T15760] smc: net device bond0 erased user defined pnetid SYZ0 [ 500.506408][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8612'. [ 500.583128][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8614'. [ 500.620417][T15762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 500.666273][T15802] loop6: detected capacity change from 0 to 256 [ 500.684846][T15802] FAULT_INJECTION: forcing a failure. [ 500.684846][T15802] name failslab, interval 1, probability 0, space 0, times 0 [ 500.697674][T15802] CPU: 0 UID: 0 PID: 15802 Comm: +}[@ Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 500.697762][T15802] Tainted: [W]=WARN [ 500.697769][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.697779][T15802] Call Trace: [ 500.697784][T15802] [ 500.697790][T15802] __dump_stack+0x1d/0x30 [ 500.697821][T15802] dump_stack_lvl+0xe8/0x140 [ 500.697840][T15802] dump_stack+0x15/0x1b [ 500.697858][T15802] should_fail_ex+0x265/0x280 [ 500.697885][T15802] should_failslab+0x8c/0xb0 [ 500.697907][T15802] kmem_cache_alloc_node_noprof+0x57/0x320 [ 500.697988][T15802] ? __alloc_skb+0x101/0x320 [ 500.698017][T15802] __alloc_skb+0x101/0x320 [ 500.698040][T15802] netlink_alloc_large_skb+0xba/0xf0 [ 500.698072][T15802] netlink_sendmsg+0x3cf/0x6b0 [ 500.698108][T15802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.698128][T15802] __sock_sendmsg+0x145/0x180 [ 500.698149][T15802] ____sys_sendmsg+0x31e/0x4e0 [ 500.698265][T15802] ___sys_sendmsg+0x17b/0x1d0 [ 500.698336][T15802] __x64_sys_sendmsg+0xd4/0x160 [ 500.698374][T15802] x64_sys_call+0x2999/0x2fb0 [ 500.698395][T15802] do_syscall_64+0xd2/0x200 [ 500.698417][T15802] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 500.698441][T15802] ? clear_bhb_loop+0x40/0x90 [ 500.698539][T15802] ? clear_bhb_loop+0x40/0x90 [ 500.698563][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.698586][T15802] RIP: 0033:0x7ff87e38e929 [ 500.698626][T15802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.698641][T15802] RSP: 002b:00007ff87c9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.698661][T15802] RAX: ffffffffffffffda RBX: 00007ff87e5b5fa0 RCX: 00007ff87e38e929 [ 500.698719][T15802] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 500.698729][T15802] RBP: 00007ff87c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 500.698740][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.698752][T15802] R13: 0000000000000000 R14: 00007ff87e5b5fa0 R15: 00007ffcab2fef88 [ 500.698772][T15802] [ 500.938025][T15809] netlink: 'syz.6.8617': attribute type 10 has an invalid length. [ 500.962853][T15812] delete_channel: no stack [ 500.974698][T15812] delete_channel: no stack [ 500.976978][T15815] loop5: detected capacity change from 0 to 512 [ 500.995492][T15815] msdos: Unknown parameter 'ÒÞ¶á' [ 501.013854][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8619'. [ 501.033495][T15818] loop3: detected capacity change from 0 to 1024 [ 501.046483][T15818] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 501.069987][T15815] vhci_hcd: invalid port number 96 [ 501.075135][T15815] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 501.083860][T15818] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.8620: Invalid block bitmap block 0 in block_group 0 [ 501.108869][T15818] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8620: Failed to acquire dquot type 0 [ 501.122913][T15831] loop6: detected capacity change from 0 to 512 [ 501.135467][T15831] msdos: Unknown parameter 'ÒÞ¶á' [ 501.141068][T15818] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.8620: Freeing blocks not in datazone - block = 0, count = 4096 [ 501.161535][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8623'. [ 501.172529][T15831] vhci_hcd: invalid port number 96 [ 501.177743][T15831] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 501.189079][T15818] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.8620: Invalid inode bitmap blk 0 in block_group 0 [ 501.204226][ T6371] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 501.220442][T15818] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 501.252353][T15818] EXT4-fs (loop3): 1 orphan inode deleted [ 501.260251][T15818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.297156][T15818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.416154][T15850] lo speed is unknown, defaulting to 1000 [ 501.420091][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8628'. [ 501.471918][T15855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.552759][T15910] loop3: detected capacity change from 0 to 512 [ 501.592327][T15910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.628481][T15910] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.728761][T15924] netlink: 'syz.1.8630': attribute type 3 has an invalid length. [ 501.824540][T15928] loop5: detected capacity change from 0 to 1024 [ 501.848254][T15928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.057163][T15934] netlink: 'syz.6.8632': attribute type 10 has an invalid length. [ 502.115942][ T5951] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.191471][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.240461][T15943] loop6: detected capacity change from 0 to 2048 [ 502.247419][T15944] FAULT_INJECTION: forcing a failure. [ 502.247419][T15944] name failslab, interval 1, probability 0, space 0, times 0 [ 502.260196][T15944] CPU: 0 UID: 0 PID: 15944 Comm: syz.5.8634 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 502.260226][T15944] Tainted: [W]=WARN [ 502.260232][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.260315][T15944] Call Trace: [ 502.260321][T15944] [ 502.260327][T15944] __dump_stack+0x1d/0x30 [ 502.260345][T15944] dump_stack_lvl+0xe8/0x140 [ 502.260362][T15944] dump_stack+0x15/0x1b [ 502.260376][T15944] should_fail_ex+0x265/0x280 [ 502.260405][T15944] ? cgroup_seqfile_next+0x40/0x80 [ 502.260476][T15944] ? kernfs_fop_open+0x232/0x6d0 [ 502.260500][T15944] should_failslab+0x8c/0xb0 [ 502.260522][T15944] __kmalloc_cache_noprof+0x4c/0x320 [ 502.260551][T15944] ? cgroup_seqfile_next+0x40/0x80 [ 502.260623][T15944] kernfs_fop_open+0x232/0x6d0 [ 502.260722][T15944] do_dentry_open+0x649/0xa20 [ 502.260742][T15944] ? __pfx_kernfs_fop_open+0x10/0x10 [ 502.260827][T15944] vfs_open+0x37/0x1e0 [ 502.260852][T15944] path_openat+0x1c5e/0x2170 [ 502.260880][T15944] ? _parse_integer_limit+0x170/0x190 [ 502.260926][T15944] ? _parse_integer+0x27/0x40 [ 502.260952][T15944] do_filp_open+0x109/0x230 [ 502.260997][T15944] do_sys_openat2+0xa6/0x110 [ 502.261019][T15944] __x64_sys_creat+0x65/0x90 [ 502.261045][T15944] x64_sys_call+0x114d/0x2fb0 [ 502.261066][T15944] do_syscall_64+0xd2/0x200 [ 502.261114][T15944] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.261137][T15944] ? clear_bhb_loop+0x40/0x90 [ 502.261159][T15944] ? clear_bhb_loop+0x40/0x90 [ 502.261264][T15944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.261281][T15944] RIP: 0033:0x7efd3994e929 [ 502.261294][T15944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.261378][T15944] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 502.261399][T15944] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 502.261409][T15944] RDX: 0000000000000000 RSI: 0000000000000125 RDI: 00002000000000c0 [ 502.261429][T15944] RBP: 00007efd37fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.261495][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.261518][T15944] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 502.261539][T15944] [ 502.506266][T15943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.541731][T15957] loop5: detected capacity change from 0 to 1764 [ 502.574434][ T4001] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.626811][T15957] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 502.657022][T15977] FAULT_INJECTION: forcing a failure. [ 502.657022][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 502.669842][T15977] CPU: 1 UID: 0 PID: 15977 Comm: syz.5.8641 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 502.669874][T15977] Tainted: [W]=WARN [ 502.669881][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.669891][T15977] Call Trace: [ 502.669915][T15977] [ 502.669922][T15977] __dump_stack+0x1d/0x30 [ 502.669940][T15977] dump_stack_lvl+0xe8/0x140 [ 502.669961][T15977] dump_stack+0x15/0x1b [ 502.670081][T15977] should_fail_ex+0x265/0x280 [ 502.670113][T15977] ? __se_sys_mount+0xef/0x2e0 [ 502.670146][T15977] should_failslab+0x8c/0xb0 [ 502.670169][T15977] __kmalloc_cache_noprof+0x4c/0x320 [ 502.670231][T15977] ? memdup_user+0x99/0xd0 [ 502.670254][T15977] __se_sys_mount+0xef/0x2e0 [ 502.670314][T15977] ? __bpf_trace_sys_enter+0x10/0x30 [ 502.670333][T15977] ? trace_sys_enter+0xd0/0x110 [ 502.670357][T15977] __x64_sys_mount+0x67/0x80 [ 502.670385][T15977] x64_sys_call+0xd36/0x2fb0 [ 502.670438][T15977] do_syscall_64+0xd2/0x200 [ 502.670454][T15977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.670493][T15977] ? clear_bhb_loop+0x40/0x90 [ 502.670516][T15977] ? clear_bhb_loop+0x40/0x90 [ 502.670584][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.670603][T15977] RIP: 0033:0x7efd3994e929 [ 502.670616][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.670707][T15977] RSP: 002b:00007efd37fb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.670731][T15977] RAX: ffffffffffffffda RBX: 00007efd39b75fa0 RCX: 00007efd3994e929 [ 502.670746][T15977] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 502.670760][T15977] RBP: 00007efd37fb7090 R08: 0000200000000000 R09: 0000000000000000 [ 502.670830][T15977] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000001 [ 502.670841][T15977] R13: 0000000000000000 R14: 00007efd39b75fa0 R15: 00007ffd598fb218 [ 502.670862][T15977] [ 502.911625][ T3085] block device autoloading is deprecated and will be removed. [ 502.929011][T15986] loop3: detected capacity change from 0 to 512 [ 502.954707][T15987] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 502.962358][T15986] msdos: Unknown parameter 'ÒÞ¶á' [ 502.978317][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8642'. [ 503.055683][T15998] netlink: 'syz.5.8646': attribute type 10 has an invalid length. [ 503.074953][T15986] vhci_hcd: invalid port number 96 [ 503.080118][T15986] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 503.097667][T15998] veth1_vlan: entered allmulticast mode [ 503.119131][T15998] team0: Port device macvlan1 added [ 503.173437][T16004] FAULT_INJECTION: forcing a failure. [ 503.173437][T16004] name failslab, interval 1, probability 0, space 0, times 0 [ 503.186214][T16004] CPU: 0 UID: 0 PID: 16004 Comm: syz.1.8648 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 503.186242][T16004] Tainted: [W]=WARN [ 503.186248][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.186259][T16004] Call Trace: [ 503.186265][T16004] [ 503.186272][T16004] __dump_stack+0x1d/0x30 [ 503.186293][T16004] dump_stack_lvl+0xe8/0x140 [ 503.186396][T16004] dump_stack+0x15/0x1b [ 503.186411][T16004] should_fail_ex+0x265/0x280 [ 503.186451][T16004] should_failslab+0x8c/0xb0 [ 503.186548][T16004] kmem_cache_alloc_node_noprof+0x57/0x320 [ 503.186572][T16004] ? __alloc_skb+0x101/0x320 [ 503.186601][T16004] __alloc_skb+0x101/0x320 [ 503.186627][T16004] netlink_alloc_large_skb+0xba/0xf0 [ 503.186683][T16004] netlink_sendmsg+0x3cf/0x6b0 [ 503.186705][T16004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.186725][T16004] __sock_sendmsg+0x145/0x180 [ 503.186750][T16004] ____sys_sendmsg+0x31e/0x4e0 [ 503.186791][T16004] ___sys_sendmsg+0x17b/0x1d0 [ 503.186835][T16004] __x64_sys_sendmsg+0xd4/0x160 [ 503.186873][T16004] x64_sys_call+0x2999/0x2fb0 [ 503.186895][T16004] do_syscall_64+0xd2/0x200 [ 503.186935][T16004] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 503.186958][T16004] ? clear_bhb_loop+0x40/0x90 [ 503.186981][T16004] ? clear_bhb_loop+0x40/0x90 [ 503.187040][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.187063][T16004] RIP: 0033:0x7fdd8e70e929 [ 503.187079][T16004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.187130][T16004] RSP: 002b:00007fdd8cd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.187150][T16004] RAX: ffffffffffffffda RBX: 00007fdd8e935fa0 RCX: 00007fdd8e70e929 [ 503.187161][T16004] RDX: 0000000004001000 RSI: 0000200000000300 RDI: 0000000000000003 [ 503.187172][T16004] RBP: 00007fdd8cd77090 R08: 0000000000000000 R09: 0000000000000000 [ 503.187182][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.187193][T16004] R13: 0000000000000000 R14: 00007fdd8e935fa0 R15: 00007ffea7e52748 [ 503.187214][T16004] [ 503.457228][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8651'. [ 503.523701][T16028] FAULT_INJECTION: forcing a failure. [ 503.523701][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 503.536613][T16028] CPU: 1 UID: 0 PID: 16028 Comm: syz.5.8652 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 503.536684][T16028] Tainted: [W]=WARN [ 503.536692][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.536705][T16028] Call Trace: [ 503.536741][T16028] [ 503.536747][T16028] __dump_stack+0x1d/0x30 [ 503.536765][T16028] dump_stack_lvl+0xe8/0x140 [ 503.536781][T16028] dump_stack+0x15/0x1b [ 503.536796][T16028] should_fail_ex+0x265/0x280 [ 503.536823][T16028] should_failslab+0x8c/0xb0 [ 503.536849][T16028] kmem_cache_alloc_node_noprof+0x57/0x320 [ 503.536950][T16028] ? __alloc_skb+0x101/0x320 [ 503.536975][T16028] __alloc_skb+0x101/0x320 [ 503.536996][T16028] ? audit_log_start+0x365/0x6c0 [ 503.537087][T16028] audit_log_start+0x380/0x6c0 [ 503.537117][T16028] audit_seccomp+0x48/0x100 [ 503.537208][T16028] ? __seccomp_filter+0x68c/0x10d0 [ 503.537232][T16028] __seccomp_filter+0x69d/0x10d0 [ 503.537330][T16028] ? mas_walk+0xf2/0x120 [ 503.537370][T16028] __secure_computing+0x82/0x150 [ 503.537388][T16028] syscall_trace_enter+0xcf/0x1e0 [ 503.537409][T16028] do_syscall_64+0xac/0x200 [ 503.537458][T16028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 503.537492][T16028] ? clear_bhb_loop+0x40/0x90 [ 503.537510][T16028] ? clear_bhb_loop+0x40/0x90 [ 503.537529][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.537610][T16028] RIP: 0033:0x7efd399507bc [ 503.537622][T16028] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 503.537638][T16028] RSP: 002b:00007efd37fb5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 503.537658][T16028] RAX: ffffffffffffffda RBX: 00007efd37fb5fc0 RCX: 00007efd399507bc [ 503.537739][T16028] RDX: 0000000000000020 RSI: 00007efd37fb6010 RDI: 0000000000000005 [ 503.537750][T16028] RBP: 0000000000000000 R08: 00007efd37fb5f14 R09: 000000000000000c [ 503.537764][T16028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 503.537777][T16028] R13: 00007efd37fb5f68 R14: 00007efd37fb6010 R15: 0000000000000000 [ 503.537794][T16028] [ 503.923722][T16029] tipc: Started in network mode [ 503.928661][T16029] tipc: Node identity 7ab0c8dd915f, cluster identity 4711 [ 503.935897][T16029] tipc: Enabled bearer , priority 0 [ 503.964937][T16042] FAULT_INJECTION: forcing a failure. [ 503.964937][T16042] name failslab, interval 1, probability 0, space 0, times 0 [ 503.977644][T16042] CPU: 1 UID: 0 PID: 16042 Comm: syz.7.8656 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 503.977697][T16042] Tainted: [W]=WARN [ 503.977704][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.977718][T16042] Call Trace: [ 503.977724][T16042] [ 503.977730][T16042] __dump_stack+0x1d/0x30 [ 503.977789][T16042] dump_stack_lvl+0xe8/0x140 [ 503.977809][T16042] dump_stack+0x15/0x1b [ 503.977826][T16042] should_fail_ex+0x265/0x280 [ 503.977973][T16042] ? alloc_pipe_info+0xae/0x350 [ 503.978030][T16042] should_failslab+0x8c/0xb0 [ 503.978050][T16042] __kmalloc_cache_noprof+0x4c/0x320 [ 503.978100][T16042] alloc_pipe_info+0xae/0x350 [ 503.978127][T16042] splice_direct_to_actor+0x592/0x680 [ 503.978156][T16042] ? kstrtouint_from_user+0x9f/0xf0 [ 503.978185][T16042] ? __pfx_direct_splice_actor+0x10/0x10 [ 503.978240][T16042] ? __rcu_read_unlock+0x4f/0x70 [ 503.978263][T16042] ? get_pid_task+0x96/0xd0 [ 503.978281][T16042] ? avc_policy_seqno+0x15/0x30 [ 503.978304][T16042] ? selinux_file_permission+0x1e4/0x320 [ 503.978396][T16042] do_splice_direct+0xda/0x150 [ 503.978422][T16042] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 503.978451][T16042] do_sendfile+0x380/0x650 [ 503.978497][T16042] __x64_sys_sendfile64+0x105/0x150 [ 503.978517][T16042] x64_sys_call+0xb39/0x2fb0 [ 503.978540][T16042] do_syscall_64+0xd2/0x200 [ 503.978558][T16042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 503.978632][T16042] ? clear_bhb_loop+0x40/0x90 [ 503.978650][T16042] ? clear_bhb_loop+0x40/0x90 [ 503.978669][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.978686][T16042] RIP: 0033:0x7f58bb58e929 [ 503.978700][T16042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.978724][T16042] RSP: 002b:00007f58b9bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 503.978787][T16042] RAX: ffffffffffffffda RBX: 00007f58bb7b5fa0 RCX: 00007f58bb58e929 [ 503.978798][T16042] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 503.978809][T16042] RBP: 00007f58b9bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 503.978821][T16042] R10: 000000000000d344 R11: 0000000000000246 R12: 0000000000000001 [ 503.978891][T16042] R13: 0000000000000000 R14: 00007f58bb7b5fa0 R15: 00007ffe62958238 [ 503.978910][T16042] [ 503.980107][T16006] tipc: Disabling bearer [ 504.027808][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 504.027821][ T29] audit: type=1400 audit(2000001128.975:56049): avc: denied { write } for pid=16046 comm="syz.5.8660" lport=50860 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 504.249854][ T29] audit: type=1400 audit(2000001128.995:56050): avc: denied { setopt } for pid=16046 comm="syz.5.8660" lport=50860 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 504.273650][ T29] audit: type=1400 audit(2000001129.145:56051): avc: denied { relabelto } for pid=16044 comm="syz.6.8659" name="385" dev="tmpfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 504.273756][ T29] audit: type=1400 audit(2000001129.145:56052): avc: denied { associate } for pid=16044 comm="syz.6.8659" name="385" dev="tmpfs" ino=2100 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 504.330274][ T5951] ================================================================== [ 504.330304][ T5951] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 504.330338][ T5951] [ 504.330344][ T5951] read-write to 0xffff888132005f58 of 8 bytes by task 16061 on cpu 1: [ 504.330361][ T5951] shmem_add_to_page_cache+0x37f/0x490 [ 504.330391][ T5951] shmem_get_folio_gfp+0x4e8/0xd60 [ 504.330413][ T5951] shmem_write_begin+0xa8/0x190 [ 504.330436][ T5951] generic_perform_write+0x181/0x490 [ 504.330451][ T5951] shmem_file_write_iter+0xc5/0xf0 [ 504.330467][ T5951] __kernel_write_iter+0x253/0x4c0 [ 504.330497][ T5951] dump_user_range+0x407/0x8c0 [ 504.330526][ T5951] elf_core_dump+0x1dc2/0x1f80 [ 504.330544][ T5951] do_coredump+0x1dfd/0x27b0 [ 504.330571][ T5951] get_signal+0xd85/0xf70 [ 504.330602][ T5951] arch_do_signal_or_restart+0x96/0x480 [ 504.330622][ T5951] irqentry_exit_to_user_mode+0x5e/0xa0 [ 504.330650][ T5951] irqentry_exit+0x12/0x50 [ 504.330672][ T5951] asm_exc_page_fault+0x26/0x30 [ 504.330687][ T5951] [ 504.330691][ T5951] read to 0xffff888132005f58 of 8 bytes by task 5951 on cpu 0: [ 504.330706][ T5951] shmem_getattr+0x68/0x200 [ 504.330723][ T5951] vfs_getattr_nosec+0x146/0x1e0 [ 504.330744][ T5951] vfs_statx+0x113/0x390 [ 504.330763][ T5951] vfs_fstatat+0x115/0x170 [ 504.330783][ T5951] __se_sys_newfstatat+0x55/0x260 [ 504.330805][ T5951] __x64_sys_newfstatat+0x55/0x70 [ 504.330828][ T5951] x64_sys_call+0x2c22/0x2fb0 [ 504.330850][ T5951] do_syscall_64+0xd2/0x200 [ 504.330866][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.330887][ T5951] [ 504.330891][ T5951] value changed: 0x0000000000000242 -> 0x0000000000000245 [ 504.330902][ T5951] [ 504.330906][ T5951] Reported by Kernel Concurrency Sanitizer on: [ 504.330921][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 504.330949][ T5951] Tainted: [W]=WARN [ 504.330955][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.330966][ T5951] ================================================================== [ 504.334050][ T29] audit: type=1400 audit(2000001129.275:56053): avc: denied { read write } for pid=5951 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.334146][ T29] audit: type=1400 audit(2000001129.275:56054): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.334216][ T29] audit: type=1400 audit(2000001129.275:56055): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 504.335126][ T29] audit: type=1400 audit(2000001129.285:56056): avc: denied { recv } for pid=3017 comm="dbus-daemon" saddr=10.128.0.163 src=30036 daddr=10.128.0.68 dest=55698 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 504.389386][T16045] bond4: entered promiscuous mode [ 504.389401][T16045] bond4: entered allmulticast mode [ 504.389560][T16045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.402437][T16045] bond4 (unregistering): Released all slaves [ 504.462842][ T29] audit: type=1400 audit(2000001129.405:56057): avc: denied { open } for pid=16063 comm="syz.5.8663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.777326][ T29] audit: type=1400 audit(2000001129.405:56058): avc: denied { perfmon } for pid=16063 comm="syz.5.8663" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.304462][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 512.304476][ T29] audit: type=1400 audit(2000001137.255:56075): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 512.334186][ T29] audit: type=1400 audit(2000001137.255:56076): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1