last executing test programs: 4m29.684526737s ago: executing program 32 (id=257): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) unshare(0x2000400) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000000000004498075d899317bd7506495bdc842cf14f27fa066ec29e01b336074112ff81f259d27655d14df1909b8b66d745ffdc9d01033e886bba64204c2adcccbd89a9edc35b6a347e717b7ec4e485e6db671b2b45e781229f9be4da901b72b89160d597dffaddbd156096920a6d171effa936d2536e677bf0dd137374", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x1, 0x23e, &(0x7f0000000bc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 4m22.79830775s ago: executing program 5 (id=368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000050000000000000000000053000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000005, 0x399}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 4m21.861083542s ago: executing program 5 (id=390): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) unshare(0x2000400) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000000000004498075d899317bd7506495bdc842cf14f27fa066ec29e01b336074112ff81f259d27655d14df1909b8b66d745ffdc9d01033e886bba64204c2adcccbd89a9edc35b6a347e717b7ec4e485e6db671b2b45e781229f9be4da901b72b89160d597dffaddbd156096920a6d171effa936d2536e677bf0dd137374", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x1, 0x23e, &(0x7f0000000bc0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r8, 0x0) 4m21.493245226s ago: executing program 5 (id=396): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa268802d8b00000000000000000000000000377c26e5b0dd6642df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") socket(0xf, 0x3, 0x5) chmod(&(0x7f0000000380)='./file0\x00', 0x100) creat(&(0x7f0000000000)='./file2\x00', 0xecf86c37d53049cc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r2}, 0x18) inotify_init1(0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="737985e95c7d6a7d58df626a6563745f723a617574685f63616368655f742072"], 0x27) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r4, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x10000000000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) 4m21.230966199s ago: executing program 5 (id=402): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x9, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r6, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00') 4m21.047999052s ago: executing program 5 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000700"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) 4m20.739367195s ago: executing program 5 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x20040, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x3fffffffc00, 0x9f52, 0x3}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) (async) close_range(r2, 0xffffffffffffffff, 0x10000000000000) 4m20.706729556s ago: executing program 33 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x20040, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x3fffffffc00, 0x9f52, 0x3}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) (async) close_range(r2, 0xffffffffffffffff, 0x10000000000000) 4m10.894121355s ago: executing program 0 (id=538): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a48500000004000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a10b6cdda2ab2e3100"/28], 0x48) r10 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r10}, 0x20) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x15000022}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="94020000", @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x3e80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 4m10.303548082s ago: executing program 0 (id=544): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r4 = dup(r2) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a", 0x23}], 0x1}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 4m10.212850694s ago: executing program 0 (id=546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000050000000000000000000053000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000005, 0x399}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc91542382b09e080}, 0x40db, 0x0, 0x4, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 4m9.238867845s ago: executing program 0 (id=566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0xc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x9, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r8, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00') 4m9.187537066s ago: executing program 0 (id=568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") socket$inet6(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 4m8.760154021s ago: executing program 0 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (fail_nth: 2) 4m8.712950832s ago: executing program 34 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (fail_nth: 2) 3m42.009328067s ago: executing program 1 (id=1096): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa268802d8b00000000000000000000000000377c26e5b0dd6642df4b59f7a801e10000b703000002000040b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") socket(0xf, 0x3, 0x5) chmod(&(0x7f0000000380)='./file0\x00', 0x100) creat(&(0x7f0000000000)='./file2\x00', 0xecf86c37d53049cc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r2}, 0x18) inotify_init1(0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="737985e95c7d6a7d58df626a6563745f723a617574685f63616368655f742072"], 0x27) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r4, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x10000000000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) 3m41.497586994s ago: executing program 1 (id=1107): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 3m41.274203856s ago: executing program 1 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa268802d8b00000000000000000000000000377c26e5b0dd6642df4b59f7a801e10000b703000002000040b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") socket(0xf, 0x3, 0x5) chmod(&(0x7f0000000380)='./file0\x00', 0x100) creat(&(0x7f0000000000)='./file2\x00', 0xecf86c37d53049cc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r2}, 0x18) inotify_init1(0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="737985e95c7d6a7d58df626a6563745f723a617574685f63616368655f742072"], 0x27) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r3, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000001c0)) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) 3m41.044232659s ago: executing program 1 (id=1120): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x9, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m40.819871022s ago: executing program 1 (id=1127): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000002000000850000008600000095", @ANYBLOB="ee43c4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x8, 0xffffff7f, 0x11, @remote, @empty, 0x40, 0x20, 0x4ae72ed0, 0x9}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0xff6e, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x402}, 0x18) 3m40.534654735s ago: executing program 6 (id=1131): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045", 0x19}], 0x1) unshare(0x2040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3m40.475799816s ago: executing program 1 (id=1132): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 3m40.475579546s ago: executing program 35 (id=1132): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 3m40.399539867s ago: executing program 6 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 3m40.313043728s ago: executing program 6 (id=1138): unshare(0x2000400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) 3m40.227868729s ago: executing program 6 (id=1140): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m40.196832019s ago: executing program 6 (id=1142): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000002000000850000008600000095", @ANYBLOB="ee43c4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x8, 0xffffff7f, 0x11, @remote, @empty, 0x40, 0x20, 0x4ae72ed0, 0x9}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0xff6e, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x402}, 0x18) 3m39.991214582s ago: executing program 6 (id=1145): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a10b6cdda2ab2e3100"/28], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x15000022}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="94020000", @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000f0ff0054000000cd005b00a009927e4ade9fb1505ae1ad7ff3e114b079cf22d2afe2adf220a93be60c2d8fd149c5f7c83455fdbcf2952645eab371e2019143b0e9b6706db70ebd9482b9c7c0b58cc37c42b6712905b92da79e99fa97ae61bf02bc6b6552d882e57dec5aeb8eccc1eb13499f08166e6ca5859ad4a32ecd5509d36b0a9acf6b7f989f7229b087826bfde59b597bac9f62cac2cf7e2d9af2f1f8b31146346d962d8ab67d7e12e2326556e37bab26f448e4e9fbb5347084192ac4ba29727262fab24688c47be0589e8ccc719cd5cf3100000003015b00ee4e258bee3ac8dc17f5f1ad193558a99316f1e25e24300f1e90f7e71cca34fc53321091ceffb9281d4ba5b810872fa2c04f153e763fe18b27f3cc68fd1c744601f72dd03c9e8fc001951426343badefeaf4b64224652dab88c6e5c29afe78d3d5b6c7baf344e762b7540dfcac2adb4f0295b37c2726daab39692ef54d0ddda510cb9493b646b5560a8e3af44b87267661caba29a68a7ba5015ee53063ac11f7e40a3e75d75fa91cb7ea0ebc0f3a703f67b8e3aebea57e3bb701eae337901cf6cca4f25112c596795f9912cb3c3a5c27db53162088d78167817133dbe668598e21473600f3eacfe71882539eb15cb277d4ee1dac9af1c882be03737adf0378000600650001f000008f005b00373cf75a3e5701905ac3950ae31fab746dda5e8ab8e49164c75ccc796ae761a1b9d6d2d16fe20a56491ce93c2a2b3c42a47c68cf4c301819a7ab22cd836883c0f5a3dd6ef06f4e71723bc15c9570bb7783ef511ae9ac2949a04e78f69763f7cf6beafc4691db8a27eb0ddb6b4b6d96c6a615017402898f9b77e2542c2b5b7da7451a5e12dd94e666a6657000216949265fa85ceea86e10a777b94ae4"], 0x294}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x3e80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 3m39.967602562s ago: executing program 36 (id=1145): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a10b6cdda2ab2e3100"/28], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x15000022}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="94020000", @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x3e80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 3m11.139377763s ago: executing program 3 (id=1704): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = io_uring_setup(0x7c8c, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000140)}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r1, 0xffffffffffffffff, 0x80000) 3m11.106903924s ago: executing program 3 (id=1705): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) pivot_root(0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x800, 0x0, 0x3, 0x0, 0x0, 0xfffc}, 0x20) 3m11.064064025s ago: executing program 3 (id=1709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 3m11.010124545s ago: executing program 3 (id=1711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x9, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) 3m10.910705306s ago: executing program 3 (id=1712): r0 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0xb) fchmod(r0, 0x180) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffff010080c20000000300000000"], 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwrite64(r2, &(0x7f0000000800)="edcd329a3812313bd05f4d9883c55c571e5411bbd6730282611f37c903e2eab9e8e04d31cd77438664a7403c05826b74d57698abbe291c44a548abfe91e0c643f3", 0x41, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000900)="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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m10.59586475s ago: executing program 3 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x3ff, 0x9}, @mss={0x2, 0x5e}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRESOCT=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) 3m10.520144081s ago: executing program 37 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x3ff, 0x9}, @mss={0x2, 0x5e}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYRESOCT=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) 2.517011229s ago: executing program 2 (id=4912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) 2.495534689s ago: executing program 2 (id=4914): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) (async) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000012c0)={&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x4, 0x2, {0xa, 0x9, 0x2, @mcast2, 0xefa}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000011c0)="d0b2a6d77bf8ac6a159e5b6c3799c49a9c2f7248c2355b9a27167a8284902d4d248eac1bae3a17d5e505998c1199d4bd34d668261e25f2330a924aa86944d3e0148c458a359ded303da45f336d1cbdddeccbeb8352a7150a67ce09a5e050ad99f371a98f618a5e1caec851d48d7bf87e244ece3de84164f0392c32f99ac2c1cdafc7a85d8d9ef4f2270cf79d78f30a9717b9e310", 0x94}], 0x1, &(0x7f0000001600)=[{0xe8, 0x10b, 0x2c, "ec4729eff1529e7accd3929972e94807adf5169df3871723562a2791dea140d805c05261fb339418ad64b725fe1200eebacbb72aba3db16e3e1ed154ca62f17911acdad8c44ea508e3c8f610812a90a096b8e016074a86529c0a7f504dd755eb6485c9c7a66c49c7b1a0778b96eb6a92e8eedae7b46ac2f98ffb3d525be44eea09cd61c99765c52dc98a2a2d24be845d7e0a12ee03a50814505ecf87d9fa96f060ef8eca1c5e99331dd56efb1be70f058c9fbe23df4c67ace984581c3a476b15b4eabc9303783e28eab7fb1e57281108a9a847"}, {0xf8, 0x116, 0xd, "feb5ea83c62363bd8ed0cedea9dee512fd90fa24427c822ec53183af6e2c74430762fab9badfb00bc0cb02b90075932cc7b59595f59e8fb202166cf9f40ef5e40c8c35958bc55ed28ee95f5ec75afbe24de3da7b8375effe2ab0717eedb0d80c9079139f68dc57253a8432b62f306ff1d0c5d3cfc5e816fed075f51ec03f4ecb7c26066b4b695d0433d0d7f1c7b2206ed469838ffc5d75bc4729c4f267f875462a6d0e1fce83bccc61d9415d33cb870938902f8fe7e1a246d0ede2267f0726fd3642a47de792a4cc5dd16947e85b32dec26b468b7808bc524df33b1503cccd8de681854c2939"}, {0xd0, 0x110, 0x6, "b3d7e94556bb19f3c0ac7be44942e6d42db6e3bf1ca28e5a06222c3ea124c7830c1ddbddb6d0b6ad66f815a2bfbd6b2b9d332ee7548020e161324d408d5bf860c75a0a10c421aebab0a11bb053f4e63cbb283ff3b2a367e18790926477195dc421f4ce9a86c5f190cc29ab202b7721a440da81cf6eab81e79ba2a47c150469bb1d182808fea205b21035f06c9d293143de17eec2c1178791caa3078e90a9875579713ca45fd280805b5ef869d068f2f87395bce48b30f28d69ab"}, {0x20, 0x107, 0x400, "342b0a80aa962796bc001be5"}, {0x108, 0x0, 0x0, "a8a997c793ef23bb843118f6696851ba94c0b11e4248350d31e4518403ee6bc7abee365f76d45c6c0194fb7837ce21d4a4d70654c38139b3ddbc8147bd4bd6a90807c6435338c9d2c3c2aba3ab64f2b3179bbab7e3fcaba6f91569e9ca3b6711bda6cd71b73cf252c7a1e7cccae68a6a7ad5c60e15b1169e133d60d6a5679c39077c05efe66370fc7c731d7873f174815592ff5c790c7894bee98280609a0855ff118a1f353affc44bf0d947181f5213a98a48711e17d2e2e8aeadc67d12eff1e13056f8f873ade46050c98aa8369dfb9d868d94e2af07c86abda50f69babcc0c3cc4a40dc4e103f5a7a2e1c3edb2ace9ac886"}, {0x50, 0x101, 0xfffffff7, "36d9c696878cc6eeb530f06a3457201eb6a432f67514ed9a5b6e24e2364cc7415a186cb52e8688c5d7316aa7a099aec7e0d2bf213561cd85f32af0bd60"}, {0x28, 0x119, 0x6, "20957f025135a07256b02f05fd86f7b5b0"}], 0x450}, 0x20004004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x5) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) (async, rerun: 64) unshare(0x64000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r5], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r9, 0x0) (async) shutdown(r8, 0x0) 1.958953415s ago: executing program 8 (id=4925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.913670526s ago: executing program 8 (id=4927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000100)="1700000002000100003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a881a00d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dfb060115003901090000000000ea000000000000000009ffff02dfccebf6ba000812e500000000e90504062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf2da6e000"/184, 0xb8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x89) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) 1.913352436s ago: executing program 8 (id=4928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1}, 0x5}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 1.831722877s ago: executing program 8 (id=4929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='afs_receive_data\x00', r4}, 0x18) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x1, 0x0, 0xb7400000000}) close_range(0xffffffffffffffff, r0, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa71}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x5a60}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) creat(&(0x7f0000000240)='./bus\x00', 0x0) 1.806594067s ago: executing program 2 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) 1.654770149s ago: executing program 4 (id=4933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1}, 0x5}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 1.58075895s ago: executing program 4 (id=4934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aa6792a22508a4b1f205b9c2aaaaaaabaa50a245d5cdf4b60045000028000000000002ff1100907800000040010100"/56], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000340)="ed68", 0x2, 0xfffffffffffffffc) 1.537964551s ago: executing program 4 (id=4935): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000000000004498075d899317bd7506495bdc842cf14f27fa066ec29e01b336074112ff81f259d27655d14df1909b8b66d745ffdc9d01033e886bba64204c2adcccbd89a9edc35b6a347e717b7ec4e485e6db671b2b45e781229f9be4da901b72b89160d597dffaddbd156096920a6d171effa936d2536e677bf0dd137374", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x1, 0x23e, &(0x7f0000000bc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.520555111s ago: executing program 9 (id=4937): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='afs_make_fs_call2\x00', r1, 0x0, 0x40000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)='\\\\@[\x01\x00\x00\x00', 0xfffffffffffffffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0xa0}, 0x1, 0xfffff000}, 0x0) 1.370604463s ago: executing program 4 (id=4938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) semget$private(0x3f, 0x1, 0x28) 1.307509594s ago: executing program 4 (id=4939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='afs_receive_data\x00', r4}, 0x18) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x80ff, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x1, 0x0, 0xb7400000000}) close_range(0xffffffffffffffff, r0, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xa71}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x5a60}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) creat(&(0x7f0000000240)='./bus\x00', 0x0) 889.246959ms ago: executing program 8 (id=4942): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000044) 888.854429ms ago: executing program 2 (id=4943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000540)='&', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="af5c5989", 0x4}], 0x1, &(0x7f00000002c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x3, 0x78}]}}}], 0x18}}], 0x1, 0x24000800) 595.473492ms ago: executing program 8 (id=4946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x1, 0x28) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000004c0)={0x0, 0xfb, 0xf7, 0x2, 0xd, "b9ea678281d11ca15d4220fe867ace68", "e51d42a6ddbe3ec62f3cd0d69a1cf8098928598b180a62a781950663befa41f44f3b153fb268097397c806a885d66919c8d623b3b4562a22cc8d6f23709eb534f927b173441c88e18d235628a47153c72c336e7b933aab11eae3e8a8a78466bf8898b3cc67b7a45d34086aed9e2141831fc1ce466079209bc1ceea0a75ae9310e41a7dd57dc03f5e819426902d641d625d9b18d52a0a9a3a657fcdf111dedbbdcbece8828d5a6ad34960fe7894d8b838ff98b1d1eb624ea6b63c76601d9022a41fd2361017fdb8bbd6b6b36af5df082bdb8be906761ff7e2ef62091599b6efa0345a"}, 0xf7, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008805}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0x1508, r6, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_TID_CONFIG={0x284, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x12, 0x60, 0x12, 0x6, 0x60, 0x36, 0x16, 0x18, 0x1b, 0xc, 0x12, 0x3, 0x4, 0x2b, 0xb, 0x18, 0x2, 0x30, 0x15, 0x16, 0x6c, 0x1b, 0xb, 0x1b, 0x18, 0x18, 0xb, 0xc, 0xc, 0x4, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0xfff, 0x80, 0x1000, 0x9, 0x5, 0x800, 0x40]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x12, 0x6c, 0x1b, 0x2, 0x48, 0x1b, 0x1b, 0x6c, 0x60, 0x20, 0x0, 0x3, 0x24, 0x48, 0x18, 0x1, 0xc]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x7, 0x17}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x1}, {}, {0x7, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x1}, {}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x9}, {0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0xa}, {0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x7}, {0x4}, {0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaf, 0xfbb8, 0x9, 0x3, 0xe4, 0x9, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0x1, 0x4, 0x3, 0x2, 0xfffd, 0x9, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0x6, 0x9, 0x7fff, 0x7e7c, 0xc68e, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x2}, {0x0, 0x4}, {0x7, 0x2}, {}, {0x7, 0xa}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x7}, {}, {0x2, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x1}, {0x7}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x2}, {0x1}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x8}, {0x7}, {0x5, 0x3}, {0x5}, {0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x7}, {}, {0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x4}, {}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x7}, {0x6, 0x7}, {0x7}, {0x6, 0x4}, {0x5, 0x4}, {}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x2}, {0x1, 0x9}, {0x4, 0x1}, {}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x1, 0x5}, {0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x1}, {0x1, 0x2}, {0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x7}, {0x6}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}]}]}, @NL80211_ATTR_TID_CONFIG={0x638, 0x11d, 0x0, 0x1, [{0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x120, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x3}, {0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {}, {0x0, 0x9}, {0x7}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {}, {0x6, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0xa}, {0x3, 0x9}, {}, {0x1}, {0x4, 0x6}, {0x5, 0x4}, {0x1}, {0x6, 0x1}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x3}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x3}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x7}, {0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x2}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x8}, {0x3}, {0x1, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {}, {0x6}, {0x4, 0x3}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x8, 0x2, 0x6, 0x2, 0x2, 0x101, 0x75]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x1}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x9}, {0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x2}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x4, 0x72, 0x18, 0x5, 0x6, 0x30, 0x3, 0x12, 0x16, 0x6, 0xb, 0x36, 0xb, 0x4, 0x1, 0xc, 0xc, 0x1, 0x30, 0x60, 0x4, 0x1, 0x4, 0x30, 0xc, 0x12, 0x18, 0x6, 0x36, 0x12, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffd, 0x4, 0xff81, 0x1ff, 0x4, 0x9, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x4}, {0x5, 0x1}, {}, {0x3, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x5}, {0x5, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x5}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5, 0x3, 0x5, 0x91a6, 0x7, 0x0, 0x7, 0x8524]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x401, 0x1, 0xb, 0x6, 0xaf9f, 0x8c48, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x71, 0x6, 0x8, 0x7, 0xff3c, 0x4, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x374, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x1}, {0x1, 0x5}, {0x6}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xfff9, 0x4, 0x2af9, 0x7, 0x1, 0x8000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x4, 0x3, 0x513, 0x0, 0x0, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x1, 0x2400, 0x1, 0x5, 0xc, 0x5]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x4}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x4}, {0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x5}, {0x2, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x7}, {0x4, 0x4}, {0x6, 0xa}, {0x4}, {0x1, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x500, 0xa7, 0x4, 0x5, 0xd, 0x3, 0xfffe, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x24, 0xb, 0x3, 0x1b, 0x2, 0x6, 0x30, 0x10, 0x48, 0x64, 0x1b, 0x28, 0x12, 0x5]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x2, 0x5, 0x4, 0x18, 0x7f]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x8000, 0x7f, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4000, 0x7, 0x5, 0xca7, 0x800, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x17, 0x12, 0xb, 0x6, 0x44, 0x16, 0x3, 0x24, 0x5, 0x2]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x2}, {0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x5}, {0x3, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x6, 0x7}, {0x6, 0x9}, {0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x3, 0x7}, {}, {0x3, 0x2}, {0x4, 0x7}, {0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x4, 0x1}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x1}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {}, {}, {0x5, 0x1}, {0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {}, {0x7, 0x2}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x2a, 0x12, 0x16, 0x30, 0x16, 0x9, 0x12, 0xc, 0x48, 0x9, 0xc, 0x1b, 0x60, 0x1b, 0x3, 0x9, 0x12]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x3}, {0x0, 0x7}, {}, {0x0, 0x5}, {0x0, 0x9}, {0x1}, {0x4}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x4}, {0x4, 0x5}, {0x1}, {0x7, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0xff9, 0xb9, 0x2, 0x6, 0x2]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x5}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x16, 0x5, 0x30, 0x5, 0xde2c23c66a798563, 0x5, 0x2, 0x60, 0x36, 0x5, 0xc, 0xc, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x93}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x900, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0xc, 0x1, 0x12, 0x12, 0x6c, 0x3, 0xc, 0x3, 0x1b, 0x36]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x7}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x3, 0x2}, {0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x3, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x6}, {0x1, 0x6}, {0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x7}, {0x5}, {0x2}, {0x7, 0x6}, {0x3, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x7}, {0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3cc3, 0x8, 0xe, 0x3, 0x1, 0x0, 0x1e7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xae}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9f}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x7, 0x5, 0x4, 0x8001, 0xc]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {}, {0x2, 0x6}, {0x5, 0x9}, {0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0xb, 0x0, 0xb, 0x17, 0x3, 0x1, 0xc, 0x24, 0x48, 0x1b, 0x24, 0x2, 0x2, 0xd5, 0xb, 0xb, 0x5, 0x9, 0x0, 0x24, 0x48, 0x36, 0x3b, 0x36, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x4}, {0x7, 0x9}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9892, 0x400, 0x79, 0x6, 0x1, 0x5, 0x200, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x3, 0xff, 0xfff7, 0x7, 0x9, 0xbbf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x2, 0x33c, 0x0, 0xe, 0x81, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x8, 0x9, 0x7, 0xdd37, 0x5, 0x8, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x8, 0x6, 0x800, 0xfe3, 0x7, 0x60]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xfff1, 0x8, 0x2, 0x8, 0x80, 0xd0]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x0, 0x8, 0x6, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x5, 0x2, 0x52b4, 0x9607, 0x43bd, 0x30d6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x100, 0x4, 0x0, 0xff9a, 0x7fff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x8, 0xe, 0x0, 0x800, 0x2, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x6, 0xde, 0x8, 0xfff8, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x4, 0x7, 0x4, 0x400, 0xbe74, 0x5]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x3}, {0x7, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x92fb, 0x1, 0xc61, 0x3, 0xa, 0x531, 0x6]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x8}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x3}, {0x1}, {0x1, 0x4}, {0x4}, {0x7, 0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x6}, {0x0, 0x17}, {0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x7, 0x1}, {0x6}, {0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x4}, {0x5, 0x2}, {0x4, 0x6}, {0x7, 0x5}, {0x3, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x7}, {0x4}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x9, 0x1, 0xfffc, 0xe, 0xd2, 0x2]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd0, 0xb9, 0x0, 0x7, 0x77f, 0x5, 0xaf2b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0, 0x3, 0x6, 0x9, 0xd359, 0x7f, 0x0, 0x24]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x2c, 0x5, 0x18, 0x12, 0x6c, 0x48, 0xc, 0x30, 0x4d, 0x36, 0xa5107ec8dccb54, 0x2, 0xb, 0x9, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x8000, 0x800, 0x0, 0x6, 0x3, 0x7, 0xfffc]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0xc, 0xc, 0x4, 0x30, 0x30, 0x24, 0x6, 0x24, 0x18, 0x3, 0x24, 0x18, 0x16, 0x24, 0x24, 0x2, 0x6c, 0x9, 0x1b, 0x1, 0x24, 0x16, 0x1b, 0x36, 0x16, 0x6, 0x9, 0x2, 0x60]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x6}, {0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x14}, {0x3, 0x1}, {0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x6}, {0x7}, {0x6, 0x9}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x2, 0x9}, {0x2}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x1}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0xb, 0x1b, 0x60, 0x4, 0x3, 0x12, 0x1b, 0x5, 0x6c, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}]}, {0x448, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3fc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x48, 0x1f, 0x4, 0x30, 0x24, 0x1, 0x6c, 0x5, 0x2, 0x4, 0x1, 0x3a, 0xb, 0x48, 0x9, 0x5, 0x9, 0x24, 0x1, 0x18, 0x18, 0x6, 0x12, 0x3a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4, 0x3, 0xe4c7, 0x9, 0x7ff, 0x2, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x1, 0x18, 0x9, 0x48, 0x30, 0x1, 0x24, 0x3, 0x6, 0x12, 0x479c1d95c587191a, 0x12, 0x0, 0xb, 0x6, 0x3, 0x9, 0x5, 0x6c, 0x36, 0x6, 0x6, 0x24, 0xb, 0x30, 0x18, 0x16, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x6, 0x6, 0x2, 0x7ff, 0x7, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff7, 0xfff, 0x1000, 0x6, 0x8, 0x6, 0xd]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x6, 0xfff, 0x7, 0x80, 0x34d1, 0xf3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffd, 0x0, 0xffff, 0xfff, 0x3, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x3, 0x9, 0x100, 0xf922, 0x91c4, 0x100]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x6}, {0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x7}, {0x5}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x4}, {0x3, 0x8}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x48, 0x66, 0x6c, 0x12, 0x2, 0x60, 0x60, 0x66, 0x60, 0x2, 0x1, 0x4, 0x3, 0x48, 0xb, 0x30, 0x30, 0x2, 0x1, 0x1, 0x36, 0x48, 0x0, 0x2, 0x60, 0x1, 0x4, 0x6c, 0x30, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x6, 0x4, 0x9, 0x401, 0xa161, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf4b9, 0x5, 0x4, 0x1f9, 0x9c99, 0xff80, 0x79, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x36, 0x60, 0x24, 0x18, 0x0, 0x9, 0x9, 0x18, 0x6c, 0x36, 0x28, 0x30, 0x69, 0x2]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x48, 0x6c, 0x5, 0x16, 0x9, 0x6c, 0xc, 0x9, 0x1, 0x48, 0x2, 0x16, 0x1b, 0x4, 0x9, 0xb, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff9, 0x7, 0x6, 0x8, 0x800, 0x5, 0xc526]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x4a3, 0x1, 0x0, 0x7, 0xc, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x2}, {0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0xf}, {0x3, 0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x1}, {0x6}, {0x2, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0x3}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5290, 0x40, 0xcd, 0x6, 0x58, 0x3, 0x3, 0xcd8f]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x5}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x2}, {}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x1}, {0x1}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x3, 0x7}, {0x4, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x9}, {0x6}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x6}, {0x5, 0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x4}, {0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x18}, {0x0, 0xa}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x6, 0x9}, {}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x5, 0xd}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x4}, {}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6}, {0x5, 0x1}, {0x4, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x7}, {0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x5}, {0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x65, 0x7e61, 0x4, 0x3, 0xe, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x3}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x8}, {0x7}, {0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x5}, {0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x32c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x4, 0x4, 0x2, 0x1, 0x6, 0x5, 0x48, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1, 0x8, 0xffff, 0x6a, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x9}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0xa}, {0x2, 0x9}, {0x2, 0x2}, {0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0xa}, {0x4}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x1f}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x76c9, 0x5, 0x0, 0x84e, 0x5, 0xd1bf]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x92f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xb7, 0x5, 0x3, 0x81, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {}, {0x1}, {0x6, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0x9}, {0x7}, {0x6, 0x9}, {}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x2}, {0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x6}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x2, 0x7, 0x1, 0x6, 0x9885, 0x8]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xb4d, 0x9, 0x7, 0x4, 0x0, 0x81]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x3, 0x9771, 0x1fe, 0x400, 0x2af, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1}, {0x6, 0x3}, {0x3}, {0x2, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x986, 0x0, 0x1af, 0x6, 0x6, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1e, 0x50, 0x6c, 0x6c, 0x30, 0x30, 0x1b, 0x24, 0x1, 0x5, 0x36, 0x0, 0x36, 0xb, 0x29, 0x2, 0x6c, 0x24, 0x24, 0x3, 0xc, 0x24, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5}]}]}]}]}]}, 0x1508}, 0x1, 0x0, 0x0, 0x890}, 0x4000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/198, 0xc6}], 0x1}, 0x300) readlinkat(r3, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000700)=""/47, 0x2f) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48020002}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x44) 572.626162ms ago: executing program 9 (id=4947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) 565.515703ms ago: executing program 9 (id=4948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000180)={0x2, 0xfffc, @private=0xa010100}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000640)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x4fd, 0x7fff, 0xc9d, 0x4e9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) 516.195133ms ago: executing program 9 (id=4950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 499.710513ms ago: executing program 9 (id=4951): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@tclass={{0x14, 0x29, 0x43, 0xf}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x30}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x90}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/12, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 439.452624ms ago: executing program 9 (id=4952): r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x100000000000}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000000000008510", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000a40)=ANY=[@ANYRES64=r9, @ANYRESOCT=r2, @ANYBLOB="31ef3ed2c2e831c0a30e0bbc0d8b4caa49286c1a9fe4d7f3198435c1154df66abb719e683a4230236fa307acc767c793ca81ec8d990251ca6e6df12f622ba68a0ec1fc51160f44980b917dff653f4e74487a64161b6bb6a04338b88d694c8be2f5f294f8f0dc6e12a632b9964c39fc0282c809bf8739af7b48efc2df0ba24075c87b44eff8a8a77ee73aefae2e4ac411fdc6586c6c9d3c34329919a30246ff87d94d5d8adc9f5fdb025fcefb07f068f30701bb96562031d8d2ec2a18bb7ea69848c1b3eab86a2384dc4b5e904e9c5665cbffbd0e324f989aaa1243b654f851c784d9347986f299cfa724"], &(0x7f0000000800)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000816, &(0x7f0000000500), 0x0, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") 438.561114ms ago: executing program 4 (id=4953): r0 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sctp\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x9, 0x0, @void}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x7, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff, @void, @value}, 0x94) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 396.573475ms ago: executing program 7 (id=4954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r2) 331.745435ms ago: executing program 7 (id=4955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/10, 0xa}], 0x1}, 0x5}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 331.474546ms ago: executing program 7 (id=4956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r1) 328.832955ms ago: executing program 7 (id=4957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)}], 0x1}, 0x4004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 309.325416ms ago: executing program 7 (id=4958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) 293.277916ms ago: executing program 7 (id=4959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="001d006ffe00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5df477a6269504000b2c5f440700"/27}], 0x1, 0x0, 0x6d121272d61efb13}, 0x4004000) creat(&(0x7f0000000040)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x40}}}]}, 0x78}}, 0x1040) r7 = dup(r3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r8}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4093, 0xffd}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r12) sendmsg$NET_DM_CMD_STOP(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r13, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r11, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000013c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 38.234989ms ago: executing program 2 (id=4960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000180)={0x2, 0xfffc, @private=0xa010100}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) 0s ago: executing program 2 (id=4961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) kernel console output (not intermixed with test programs): bridge_slave_1: entered allmulticast mode [ 258.364943][T16273] bridge_slave_1: entered promiscuous mode [ 258.381912][ T51] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.404949][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.417950][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.441097][T16334] loop8: detected capacity change from 0 to 512 [ 258.455653][ T51] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.474194][T16334] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.477841][T16336] loop7: detected capacity change from 0 to 2048 [ 258.499177][T16273] team0: Port device team_slave_0 added [ 258.505674][T16334] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 258.506304][T16273] team0: Port device team_slave_1 added [ 258.538826][ T51] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.562651][ T7173] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 258.571949][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.579156][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.605282][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.623481][ T51] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.636806][T16344] xt_hashlimit: size too large, truncated to 1048576 [ 258.643546][T16344] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 258.652543][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.659591][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.685697][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.727751][T16350] loop8: detected capacity change from 0 to 256 [ 258.732446][T16353] xt_hashlimit: size too large, truncated to 1048576 [ 258.734563][T16350] FAT-fs (loop8): bogus number of FAT sectors [ 258.747000][T16350] FAT-fs (loop8): Can't find a valid FAT filesystem [ 258.827071][ T51] bridge_slave_1: left allmulticast mode [ 258.832795][ T51] bridge_slave_1: left promiscuous mode [ 258.838671][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.846740][ T51] bridge_slave_0: left allmulticast mode [ 258.852488][ T51] bridge_slave_0: left promiscuous mode [ 258.858337][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.033005][T16273] hsr_slave_0: entered promiscuous mode [ 259.039182][T16273] hsr_slave_1: entered promiscuous mode [ 259.045271][T16273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.052946][T16273] Cannot create hsr debugfs directory [ 259.074151][T16360] lo speed is unknown, defaulting to 1000 [ 259.109383][ T51] hsr_slave_0: left promiscuous mode [ 259.126691][ T51] hsr_slave_1: left promiscuous mode [ 259.135631][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.143514][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.152790][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.160507][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.172920][ T51] veth1_macvtap: left promiscuous mode [ 259.182012][ T51] veth0_macvtap: left promiscuous mode [ 259.187661][ T51] veth1_vlan: left promiscuous mode [ 259.193167][ T51] veth0_vlan: left promiscuous mode [ 259.199386][T16370] loop8: detected capacity change from 0 to 1024 [ 259.208274][T16370] journal_path: Non-blockdev passed as './file1' [ 259.214742][T16370] EXT4-fs: error: could not find journal device path [ 259.274727][ T51] team0 (unregistering): Port device team_slave_1 removed [ 259.284573][ T51] team0 (unregistering): Port device team_slave_0 removed [ 259.537269][T16389] loop4: detected capacity change from 0 to 2048 [ 259.604091][T16389] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 259.660538][T16396] xt_hashlimit: size too large, truncated to 1048576 [ 259.720399][T16273] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 259.851146][T16273] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 259.910963][T16404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16404 comm=syz.4.4170 [ 259.923669][T16404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16404 comm=syz.4.4170 [ 259.957423][T16273] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 259.971205][T16273] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 260.092409][T16418] lo speed is unknown, defaulting to 1000 [ 260.101312][T16273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.147875][T16426] loop4: detected capacity change from 0 to 2048 [ 260.149488][T16273] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.198499][T16426] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 260.218887][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.226040][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.250678][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.257871][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.351275][T16432] loop7: detected capacity change from 0 to 1024 [ 260.389383][T16450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16450 comm=syz.8.4183 [ 260.397565][T16432] journal_path: Non-blockdev passed as './file1' [ 260.402124][T16450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16450 comm=syz.8.4183 [ 260.408380][T16432] EXT4-fs: error: could not find journal device path [ 260.454743][T16273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.476091][T16457] xt_hashlimit: size too large, truncated to 1048576 [ 260.616218][T16466] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4186'. [ 260.668507][T16466] netlink: zone id is out of range [ 260.674456][T16466] netlink: zone id is out of range [ 260.686061][T16466] netlink: zone id is out of range [ 260.872440][T16273] veth0_vlan: entered promiscuous mode [ 260.891720][T16273] veth1_vlan: entered promiscuous mode [ 260.929168][T16273] veth0_macvtap: entered promiscuous mode [ 260.989558][T16488] lo speed is unknown, defaulting to 1000 [ 261.069114][T16273] veth1_macvtap: entered promiscuous mode [ 261.158345][T16491] loop7: detected capacity change from 0 to 2048 [ 261.191930][T16273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.302814][T16273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.334307][T16494] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 261.343417][T16273] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.352418][T16273] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.361303][T16273] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.370082][T16273] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.465737][T16500] loop7: detected capacity change from 0 to 2048 [ 261.544991][T16508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=16508 comm=syz.2.4195 [ 262.643732][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4199'. [ 262.663760][T16508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.713278][T16515] lo speed is unknown, defaulting to 1000 [ 262.847069][T16534] xt_hashlimit: size too large, truncated to 1048576 [ 262.861142][T16508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.916053][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 262.916067][ T29] audit: type=1326 audit(1749369623.574:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 262.958748][T16539] loop9: detected capacity change from 0 to 2048 [ 262.982396][ T29] audit: type=1326 audit(1749369623.604:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.006322][ T29] audit: type=1326 audit(1749369623.604:18024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.029952][ T29] audit: type=1326 audit(1749369623.604:18025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.050242][T16516] lo speed is unknown, defaulting to 1000 [ 263.053527][ T29] audit: type=1326 audit(1749369623.604:18026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.082988][ T29] audit: type=1326 audit(1749369623.604:18027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.106819][ T29] audit: type=1326 audit(1749369623.604:18028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.130424][ T29] audit: type=1326 audit(1749369623.604:18029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.154101][ T29] audit: type=1326 audit(1749369623.604:18030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.177729][ T29] audit: type=1326 audit(1749369623.604:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16538 comm="syz.9.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 263.223148][T16516] chnl_net:caif_netlink_parms(): no params data found [ 263.256303][T16508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.263517][T16548] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 263.325736][T16553] loop9: detected capacity change from 0 to 1024 [ 263.332698][T16553] EXT4-fs: Ignoring removed bh option [ 263.339734][T16553] EXT4-fs: inline encryption not supported [ 263.351289][T16553] loop9: detected capacity change from 0 to 512 [ 263.359258][T16553] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 263.370922][T16508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.390406][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.391351][T16553] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 263.397573][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.412713][T16516] bridge_slave_0: entered allmulticast mode [ 263.419585][T16516] bridge_slave_0: entered promiscuous mode [ 263.426591][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.433672][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.440940][T16516] bridge_slave_1: entered allmulticast mode [ 263.447627][T16516] bridge_slave_1: entered promiscuous mode [ 263.473719][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.484457][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.509022][T16508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.522197][ T31] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.537076][T16516] team0: Port device team_slave_0 added [ 263.553972][T16508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.568748][T16559] loop4: detected capacity change from 0 to 2048 [ 263.577794][T16516] team0: Port device team_slave_1 added [ 263.586735][ T31] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.605377][T16508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.626178][T16508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.653259][T16566] loop4: detected capacity change from 0 to 2048 [ 263.657946][T16568] loop7: detected capacity change from 0 to 512 [ 263.683091][T16568] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.686300][ T31] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.722088][T16568] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 263.743488][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.750640][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.751918][T16575] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 263.776619][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.777551][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.801425][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.827486][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.856853][T16562] loop9: detected capacity change from 0 to 1024 [ 263.863696][T16562] journal_path: Non-blockdev passed as './file1' [ 263.870086][T16562] EXT4-fs: error: could not find journal device path [ 263.896329][T14408] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 263.915516][ T31] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.948599][T16516] hsr_slave_0: entered promiscuous mode [ 263.949554][T16585] loop9: detected capacity change from 0 to 1024 [ 263.964577][T16516] hsr_slave_1: entered promiscuous mode [ 263.973319][T16516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.992696][T16516] Cannot create hsr debugfs directory [ 264.007513][T16585] EXT4-fs: Ignoring removed bh option [ 264.025887][T16585] EXT4-fs: inline encryption not supported [ 264.039266][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4219'. [ 264.042207][T16585] loop9: detected capacity change from 0 to 512 [ 264.056602][ T31] bridge_slave_1: left allmulticast mode [ 264.062378][ T31] bridge_slave_1: left promiscuous mode [ 264.062647][T16585] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 264.068418][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.102706][ T31] bridge_slave_0: left allmulticast mode [ 264.108522][ T31] bridge_slave_0: left promiscuous mode [ 264.110314][T16585] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 264.114268][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.226713][T16606] loop4: detected capacity change from 0 to 512 [ 264.237922][T16606] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.238358][ T31] bond1 (unregistering): Released all slaves [ 264.275209][T16606] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.304772][ T9115] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 264.347203][ T31] hsr_slave_0: left promiscuous mode [ 264.352868][ T31] hsr_slave_1: left promiscuous mode [ 264.358548][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.366078][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.376770][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.384393][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.400571][T16609] loop9: detected capacity change from 0 to 1024 [ 264.407513][T16609] journal_path: Non-blockdev passed as './file1' [ 264.413895][T16609] EXT4-fs: error: could not find journal device path [ 264.429532][ T31] veth1_macvtap: left promiscuous mode [ 264.436678][ T31] veth0_macvtap: left promiscuous mode [ 264.467689][T16612] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 264.534280][ T31] team0 (unregistering): Port device team_slave_1 removed [ 264.546975][T16623] loop4: detected capacity change from 0 to 1024 [ 264.558726][ T31] team0 (unregistering): Port device team_slave_0 removed [ 264.583180][T16623] EXT4-fs: Ignoring removed bh option [ 264.590259][T16629] xt_hashlimit: size too large, truncated to 1048576 [ 264.597176][T16629] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 264.603371][T16623] EXT4-fs: inline encryption not supported [ 264.647717][T16623] loop4: detected capacity change from 0 to 512 [ 264.656733][T16623] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 264.675064][T16623] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 264.722263][T16635] loop4: detected capacity change from 0 to 512 [ 264.730995][T16635] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.743680][T16632] loop9: detected capacity change from 0 to 1024 [ 264.750619][T16632] journal_path: Non-blockdev passed as './file1' [ 264.757149][T16632] EXT4-fs: error: could not find journal device path [ 264.765655][T16635] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.798799][ T9115] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 264.922003][T16644] loop9: detected capacity change from 0 to 1024 [ 264.930763][T16644] journal_path: Non-blockdev passed as './file1' [ 264.937216][T16644] EXT4-fs: error: could not find journal device path [ 265.043442][T16657] loop9: detected capacity change from 0 to 1024 [ 265.051508][T16657] EXT4-fs: Ignoring removed bh option [ 265.056273][T16516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 265.064020][T16657] EXT4-fs: inline encryption not supported [ 265.067647][T16516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 265.078590][T16657] loop9: detected capacity change from 0 to 512 [ 265.087280][T16657] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 265.098839][T16516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 265.110725][T16657] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 265.121976][T16516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 265.171574][T16659] loop7: detected capacity change from 0 to 1024 [ 265.179892][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.193862][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.193983][T16668] loop4: detected capacity change from 0 to 2048 [ 265.206203][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.214035][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.222203][T16659] journal_path: Non-blockdev passed as './file1' [ 265.225643][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.228749][T16659] EXT4-fs: error: could not find journal device path [ 265.235808][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.253977][T16670] xt_hashlimit: size too large, truncated to 1048576 [ 265.260883][T16670] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 265.284483][T16668] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 265.350973][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.394714][T16683] loop7: detected capacity change from 0 to 2048 [ 265.460770][T16683] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 265.471039][T16686] loop4: detected capacity change from 0 to 1024 [ 265.477863][T16686] journal_path: Non-blockdev passed as './file1' [ 265.484252][T16686] EXT4-fs: error: could not find journal device path [ 265.590280][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 265.613770][T16709] loop7: detected capacity change from 0 to 1024 [ 265.620604][T16709] EXT4-fs: Ignoring removed bh option [ 265.626401][T16709] EXT4-fs: inline encryption not supported [ 265.638553][T16709] loop7: detected capacity change from 0 to 512 [ 265.647381][T16709] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 265.661754][T16709] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 265.669521][T16516] veth0_vlan: entered promiscuous mode [ 265.684562][T16516] veth1_vlan: entered promiscuous mode [ 265.717605][T16516] veth0_macvtap: entered promiscuous mode [ 265.738558][T16516] veth1_macvtap: entered promiscuous mode [ 265.758286][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.774507][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.789571][T16516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.798701][T16516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.807483][T16516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.816754][T16516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.042513][T16733] lo speed is unknown, defaulting to 1000 [ 266.173357][T16741] loop9: detected capacity change from 0 to 256 [ 266.199683][T16741] FAT-fs (loop9): bogus number of FAT sectors [ 266.205930][T16741] FAT-fs (loop9): Can't find a valid FAT filesystem [ 266.268849][T16744] xt_hashlimit: size too large, truncated to 1048576 [ 266.750995][T16762] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4273'. [ 266.765227][T16761] loop9: detected capacity change from 0 to 512 [ 266.773046][T16762] net_ratelimit: 4 callbacks suppressed [ 266.773061][T16762] netlink: zone id is out of range [ 266.788898][T16761] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.799553][T16758] lo speed is unknown, defaulting to 1000 [ 266.805371][T16762] netlink: zone id is out of range [ 266.832183][T16762] netlink: zone id is out of range [ 266.837936][T16762] netlink: zone id is out of range [ 266.843750][T16762] netlink: zone id is out of range [ 266.849281][T16762] netlink: zone id is out of range [ 266.855439][T16762] netlink: del zone limit has 8 unknown bytes [ 266.863761][T16761] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.912219][T16273] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 266.932904][T16772] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4277'. [ 267.133090][T16776] loop4: detected capacity change from 0 to 512 [ 267.143439][T16782] xt_hashlimit: size too large, truncated to 1048576 [ 267.153598][T16776] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.216328][T16776] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 267.348555][ T9115] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 267.575595][T16792] lo speed is unknown, defaulting to 1000 [ 267.843768][T16795] lo speed is unknown, defaulting to 1000 [ 267.948670][T16798] loop8: detected capacity change from 0 to 256 [ 267.963643][T16798] FAT-fs (loop8): bogus number of FAT sectors [ 267.969839][T16798] FAT-fs (loop8): Can't find a valid FAT filesystem [ 268.073814][T16805] xt_hashlimit: size too large, truncated to 1048576 [ 268.084110][T16806] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4287'. [ 268.095343][T16806] netlink: zone id is out of range [ 268.100520][T16806] netlink: zone id is out of range [ 268.106663][T16806] netlink: zone id is out of range [ 268.113330][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 268.113344][ T29] audit: type=1326 audit(1749369628.764:18421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.9.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 268.167588][ T29] audit: type=1326 audit(1749369628.824:18422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.9.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 268.193963][ T29] audit: type=1326 audit(1749369628.854:18423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.9.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 268.218368][ T29] audit: type=1326 audit(1749369628.854:18424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="syz.9.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 268.352964][ T29] audit: type=1326 audit(1749369629.004:18425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 268.376913][ T29] audit: type=1326 audit(1749369629.004:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 268.391675][T16812] loop4: detected capacity change from 0 to 1024 [ 268.400693][ T29] audit: type=1326 audit(1749369629.004:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 268.430557][ T29] audit: type=1326 audit(1749369629.004:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff116f5d290 code=0x7ffc0000 [ 268.431075][T16812] journal_path: Non-blockdev passed as './file1' [ 268.454421][ T29] audit: type=1326 audit(1749369629.004:18429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 268.460786][T16812] EXT4-fs: error: could not find journal device path [ 268.491404][ T29] audit: type=1326 audit(1749369629.004:18430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16815 comm="syz.2.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 268.528812][T16814] loop9: detected capacity change from 0 to 1024 [ 268.536314][T16814] journal_path: Non-blockdev passed as './file1' [ 268.542692][T16814] EXT4-fs: error: could not find journal device path [ 268.578863][T16824] loop8: detected capacity change from 0 to 1024 [ 268.616890][T16828] loop4: detected capacity change from 0 to 256 [ 268.623912][T16828] FAT-fs (loop4): bogus number of FAT sectors [ 268.630072][T16828] FAT-fs (loop4): Can't find a valid FAT filesystem [ 268.743088][T16841] xt_hashlimit: size too large, truncated to 1048576 [ 268.749873][T16841] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 268.765582][T16843] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4301'. [ 268.831578][T16850] xt_hashlimit: size too large, truncated to 1048576 [ 268.838344][T16850] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 268.892907][T16848] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 269.089679][T16856] loop7: detected capacity change from 0 to 1024 [ 269.098753][T16856] journal_path: Non-blockdev passed as './file1' [ 269.105172][T16856] EXT4-fs: error: could not find journal device path [ 269.130014][T16861] lo speed is unknown, defaulting to 1000 [ 269.355809][T16864] xt_hashlimit: size too large, truncated to 1048576 [ 269.588842][T16872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4309'. [ 269.759862][T16875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16875 comm=syz.4.4310 [ 269.772557][T16875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16875 comm=syz.4.4310 [ 269.844181][T16885] loop9: detected capacity change from 0 to 256 [ 269.924032][T16885] FAT-fs (loop9): bogus number of FAT sectors [ 269.930276][T16885] FAT-fs (loop9): Can't find a valid FAT filesystem [ 270.072344][T16893] loop4: detected capacity change from 0 to 1024 [ 270.082554][T16884] loop7: detected capacity change from 0 to 1024 [ 270.103944][T16884] journal_path: Non-blockdev passed as './file1' [ 270.110379][T16884] EXT4-fs: error: could not find journal device path [ 270.270091][T16897] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4315'. [ 270.413739][T16904] loop7: detected capacity change from 0 to 256 [ 270.512143][T16902] lo speed is unknown, defaulting to 1000 [ 270.522659][T16904] FAT-fs (loop7): bogus number of FAT sectors [ 270.529014][T16904] FAT-fs (loop7): Can't find a valid FAT filesystem [ 270.594116][T16912] xt_hashlimit: size too large, truncated to 1048576 [ 270.777066][T16915] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 270.846798][T16926] lo speed is unknown, defaulting to 1000 [ 270.979177][T16920] loop8: detected capacity change from 0 to 512 [ 271.019604][T16920] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.176827][T16920] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.246263][T16935] loop7: detected capacity change from 0 to 1024 [ 271.268268][T16935] EXT4-fs: Ignoring removed bh option [ 271.273981][T16935] EXT4-fs: inline encryption not supported [ 271.303674][T16516] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 271.315963][T16935] loop7: detected capacity change from 0 to 512 [ 271.324077][T16935] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 271.341783][T16935] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 271.351735][T16940] loop8: detected capacity change from 0 to 256 [ 271.359291][T16940] FAT-fs (loop8): bogus number of FAT sectors [ 271.365462][T16940] FAT-fs (loop8): Can't find a valid FAT filesystem [ 271.398377][T16943] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4328'. [ 271.489588][T16955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=16955 comm=syz.8.4334 [ 271.508842][T16957] loop7: detected capacity change from 0 to 256 [ 271.515794][T16957] FAT-fs (loop7): bogus number of FAT sectors [ 271.517686][T16955] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.521894][T16957] FAT-fs (loop7): Can't find a valid FAT filesystem [ 271.596538][T16961] loop9: detected capacity change from 0 to 1024 [ 271.617813][T16955] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.661446][T16955] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.698368][T16966] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 271.709803][T16955] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.722233][T16971] xt_hashlimit: size too large, truncated to 1048576 [ 271.740791][T16974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4340'. [ 271.792550][T16976] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16976 comm=syz.2.4341 [ 271.805336][T16976] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16976 comm=syz.2.4341 [ 271.873904][T16955] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.931910][T16955] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.932477][T16984] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4342'. [ 271.949848][T16984] net_ratelimit: 25 callbacks suppressed [ 271.949865][T16984] netlink: zone id is out of range [ 271.967425][T16984] netlink: zone id is out of range [ 271.979398][T16984] netlink: zone id is out of range [ 271.991157][T16984] netlink: zone id is out of range [ 271.997333][T16984] netlink: zone id is out of range [ 272.002641][T16984] netlink: zone id is out of range [ 272.004269][T16955] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.015000][T16984] netlink: del zone limit has 8 unknown bytes [ 272.053005][T16955] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.178340][T17001] loop8: detected capacity change from 0 to 1024 [ 272.185264][T17001] EXT4-fs: Ignoring removed bh option [ 272.190837][T17001] EXT4-fs: inline encryption not supported [ 272.211772][T17001] loop8: detected capacity change from 0 to 512 [ 272.220483][T17001] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 272.232893][T17005] loop7: detected capacity change from 0 to 256 [ 272.239769][T17005] FAT-fs (loop7): bogus number of FAT sectors [ 272.245945][T17005] FAT-fs (loop7): Can't find a valid FAT filesystem [ 272.271314][T17001] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 272.309014][T17010] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4351'. [ 272.345674][T17014] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4354'. [ 272.357503][T17012] loop9: detected capacity change from 0 to 1024 [ 272.367323][T17014] netlink: zone id is out of range [ 272.382797][T17014] netlink: zone id is out of range [ 272.388816][T17014] netlink: zone id is out of range [ 272.398953][T17016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17016 comm=syz.8.4353 [ 272.411625][T17016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17016 comm=syz.8.4353 [ 272.468340][T17031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17031 comm=syz.7.4359 [ 272.530688][T17031] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.559621][T17040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4363'. [ 272.674706][T17031] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.796227][T17031] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.836387][T17054] lo speed is unknown, defaulting to 1000 [ 273.164533][T17031] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.200202][T17058] lo speed is unknown, defaulting to 1000 [ 273.262632][T17031] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.275939][T17031] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.312177][T17031] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.327015][T17063] loop4: detected capacity change from 0 to 256 [ 273.327954][T17031] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.339757][T17063] FAT-fs (loop4): bogus number of FAT sectors [ 273.346379][T17061] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4369'. [ 273.347733][T17063] FAT-fs (loop4): Can't find a valid FAT filesystem [ 273.364425][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 273.364439][ T29] audit: type=1326 audit(1749369634.014:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.2.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 273.395885][ T29] audit: type=1326 audit(1749369634.054:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.2.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 273.421200][ T29] audit: type=1326 audit(1749369634.064:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.2.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 273.445046][ T29] audit: type=1326 audit(1749369634.064:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.2.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 273.469161][ T29] audit: type=1326 audit(1749369634.064:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17060 comm="syz.2.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 273.551444][T17070] xt_hashlimit: size too large, truncated to 1048576 [ 273.592027][T17074] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4375'. [ 273.606296][ T29] audit: type=1326 audit(1749369634.264:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17066 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 273.630136][ T29] audit: type=1326 audit(1749369634.264:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17066 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 273.654158][ T29] audit: type=1326 audit(1749369634.264:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17066 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 273.678174][ T29] audit: type=1326 audit(1749369634.264:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17066 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 273.701931][ T29] audit: type=1326 audit(1749369634.264:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17066 comm="syz.7.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 273.809586][T17084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17084 comm=syz.8.4378 [ 273.828532][T17084] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.877769][T17084] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.947874][T17084] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.025762][T17084] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.232681][T17107] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4385'. [ 274.243439][T17102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17102 comm=syz.7.4384 [ 274.395554][T17106] lo speed is unknown, defaulting to 1000 [ 274.522919][T17109] lo speed is unknown, defaulting to 1000 [ 274.869119][T17129] loop9: detected capacity change from 0 to 1024 [ 274.876002][T17129] journal_path: Non-blockdev passed as './file1' [ 274.882432][T17129] EXT4-fs: error: could not find journal device path [ 274.971619][T17140] xt_hashlimit: size too large, truncated to 1048576 [ 274.978482][T17140] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 275.114759][T17142] loop4: detected capacity change from 0 to 1024 [ 275.126103][T17142] journal_path: Non-blockdev passed as './file1' [ 275.132611][T17142] EXT4-fs: error: could not find journal device path [ 275.222566][T17159] loop7: detected capacity change from 0 to 256 [ 275.230717][T17159] FAT-fs (loop7): bogus number of FAT sectors [ 275.236996][T17159] FAT-fs (loop7): Can't find a valid FAT filesystem [ 275.258266][T17158] selinux_netlink_send: 1 callbacks suppressed [ 275.258283][T17158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17158 comm=syz.4.4405 [ 275.277292][T17158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17158 comm=syz.4.4405 [ 275.542503][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4414'. [ 275.632031][T17184] lo speed is unknown, defaulting to 1000 [ 276.026016][T17187] loop9: detected capacity change from 0 to 1024 [ 276.032707][T17187] journal_path: Non-blockdev passed as './file1' [ 276.039162][T17187] EXT4-fs: error: could not find journal device path [ 276.084864][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4416'. [ 276.199042][T17192] loop4: detected capacity change from 0 to 1024 [ 276.518685][T17211] loop7: detected capacity change from 0 to 1024 [ 276.579085][T17217] loop4: detected capacity change from 0 to 512 [ 276.589229][T17217] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.606141][T17217] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 276.636657][ T9115] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 276.773585][T17230] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4428'. [ 276.881908][T17235] lo speed is unknown, defaulting to 1000 [ 277.025874][T17084] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.046152][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 277.085957][T17084] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.239538][T17243] xt_hashlimit: size too large, truncated to 1048576 [ 277.247511][T17084] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.274126][T17084] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.376910][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4440'. [ 277.423110][T17258] loop9: detected capacity change from 0 to 256 [ 277.432753][T17258] FAT-fs (loop9): bogus number of FAT sectors [ 277.438938][T17258] FAT-fs (loop9): Can't find a valid FAT filesystem [ 277.480347][T17266] loop7: detected capacity change from 0 to 512 [ 277.533508][T17266] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.557797][T17266] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.600467][T14408] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 277.651964][T17278] loop7: detected capacity change from 0 to 1024 [ 277.666528][T17283] xt_hashlimit: size too large, truncated to 1048576 [ 277.674505][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'. [ 277.703627][T17286] loop8: detected capacity change from 0 to 1024 [ 277.731499][T17289] xt_hashlimit: size too large, truncated to 1048576 [ 277.738461][T17289] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 277.919529][T17305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17305 comm=syz.8.4462 [ 277.944944][T17307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17307 comm=syz.4.4463 [ 277.957569][T17307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17307 comm=syz.4.4463 [ 278.086532][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4467'. [ 278.167879][T17329] lo speed is unknown, defaulting to 1000 [ 278.304989][T17342] lo speed is unknown, defaulting to 1000 [ 278.386094][T17345] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17345 comm=syz.8.4475 [ 278.398739][T17345] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17345 comm=syz.8.4475 [ 278.441147][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 278.441234][ T29] audit: type=1326 audit(1749369639.084:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.471333][ T29] audit: type=1326 audit(1749369639.084:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.494979][ T29] audit: type=1326 audit(1749369639.084:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.518621][ T29] audit: type=1326 audit(1749369639.084:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.542377][ T29] audit: type=1326 audit(1749369639.084:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.566095][ T29] audit: type=1326 audit(1749369639.084:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdac860d290 code=0x7ffc0000 [ 278.589740][ T29] audit: type=1326 audit(1749369639.084:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.613658][ T29] audit: type=1326 audit(1749369639.084:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.637366][ T29] audit: type=1326 audit(1749369639.084:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.660934][ T29] audit: type=1326 audit(1749369639.084:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.7.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac860e929 code=0x7ffc0000 [ 278.734843][T17358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17358 comm=syz.9.4480 [ 278.980553][T17375] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 279.053651][T17379] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4488'. [ 279.063501][T17379] net_ratelimit: 25 callbacks suppressed [ 279.063516][T17379] netlink: zone id is out of range [ 279.074865][T17379] netlink: zone id is out of range [ 279.080083][T17379] netlink: zone id is out of range [ 279.085979][T17379] netlink: zone id is out of range [ 279.089748][T17381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17381 comm=syz.2.4489 [ 279.091122][T17379] netlink: zone id is out of range [ 279.103735][T17381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17381 comm=syz.2.4489 [ 279.108909][T17379] netlink: zone id is out of range [ 279.158237][T17390] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.168826][T17379] netlink: del zone limit has 8 unknown bytes [ 279.255118][T17390] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.272400][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 279.287282][T17401] loop7: detected capacity change from 0 to 512 [ 279.305590][T17401] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.344182][T17395] lo speed is unknown, defaulting to 1000 [ 279.389213][T17390] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.425440][T17401] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 279.479348][T14408] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 279.535653][T17390] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.614292][T17411] lo speed is unknown, defaulting to 1000 [ 279.663515][T17390] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.735631][T17390] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.783800][T17390] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.847287][T17390] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.894057][T17416] loop4: detected capacity change from 0 to 2048 [ 280.189759][T17429] xt_hashlimit: size too large, truncated to 1048576 [ 280.258221][T17438] loop8: detected capacity change from 0 to 1024 [ 280.266677][T17438] EXT4-fs: Ignoring removed bh option [ 280.272466][T17438] EXT4-fs: inline encryption not supported [ 280.293861][T17438] loop8: detected capacity change from 0 to 512 [ 280.365194][T17439] lo speed is unknown, defaulting to 1000 [ 280.425108][T17438] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 280.562087][T17443] selinux_netlink_send: 4 callbacks suppressed [ 280.562110][T17443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17443 comm=syz.7.4506 [ 280.678952][T17443] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.714050][T17438] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 280.738843][T17447] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 280.755626][T17443] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.973435][T17458] lo speed is unknown, defaulting to 1000 [ 280.995889][T17464] loop8: detected capacity change from 0 to 1024 [ 281.003012][T17464] EXT4-fs: Ignoring removed bh option [ 281.008576][T17464] EXT4-fs: inline encryption not supported [ 281.019020][T17443] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.021385][T17464] loop8: detected capacity change from 0 to 512 [ 281.037130][T17464] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 281.045694][T17467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17467 comm=syz.4.4515 [ 281.065516][T17467] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.089541][T17464] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 281.128375][T17443] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.171486][T17467] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.215294][T17443] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.229581][T17471] loop8: detected capacity change from 0 to 1024 [ 281.231395][T17443] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.245893][T17467] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.257521][T17471] journal_path: Non-blockdev passed as './file1' [ 281.264009][T17471] EXT4-fs: error: could not find journal device path [ 281.280884][T17443] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.293098][T17443] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.337410][T17467] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.353707][T17481] xt_hashlimit: size too large, truncated to 1048576 [ 281.386689][T17477] loop8: detected capacity change from 0 to 1024 [ 281.393595][T17477] journal_path: Non-blockdev passed as './file1' [ 281.400020][T17477] EXT4-fs: error: could not find journal device path [ 281.412094][T17479] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4519'. [ 281.422350][T17479] netlink: zone id is out of range [ 281.441427][T17467] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.466393][T17479] netlink: zone id is out of range [ 281.476818][T17467] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.489881][T17479] netlink: zone id is out of range [ 281.526559][T17467] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.551270][T17488] xt_hashlimit: size too large, truncated to 1048576 [ 281.663138][T17467] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.723294][T17496] loop9: detected capacity change from 0 to 1024 [ 281.730423][T17496] EXT4-fs: Ignoring removed bh option [ 281.735961][T17496] EXT4-fs: inline encryption not supported [ 281.748120][T17496] loop9: detected capacity change from 0 to 512 [ 281.755406][T17496] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 281.789408][T17496] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 281.915410][T17509] loop7: detected capacity change from 0 to 1024 [ 281.923832][T17509] EXT4-fs: Ignoring removed bh option [ 281.930942][T17509] EXT4-fs: inline encryption not supported [ 281.941363][T17511] loop9: detected capacity change from 0 to 512 [ 281.945084][T17509] loop7: detected capacity change from 0 to 512 [ 281.956636][T17508] loop4: detected capacity change from 0 to 256 [ 281.956706][T17511] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.963866][T17508] FAT-fs (loop4): bogus number of FAT sectors [ 281.981430][T17508] FAT-fs (loop4): Can't find a valid FAT filesystem [ 281.981572][T17509] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 282.024210][T17509] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 282.032801][T17511] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.097467][T16273] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 282.140893][T17522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17522 comm=syz.9.4532 [ 282.174899][T17522] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.202662][T17520] loop7: detected capacity change from 0 to 1024 [ 282.203290][T17527] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4534'. [ 282.211104][T17520] journal_path: Non-blockdev passed as './file1' [ 282.224939][T17520] EXT4-fs: error: could not find journal device path [ 282.247532][T17522] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.359177][T17534] xt_hashlimit: size too large, truncated to 1048576 [ 282.398604][T17522] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.600119][T17541] lo speed is unknown, defaulting to 1000 [ 283.393337][T17543] lo speed is unknown, defaulting to 1000 [ 283.469849][T17545] xt_hashlimit: size too large, truncated to 1048576 [ 283.606784][T17522] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.627457][T17551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17551 comm=syz.8.4539 [ 283.711225][T17551] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.736555][T17555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17555 comm=syz.4.4541 [ 283.749282][T17555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17555 comm=syz.4.4541 [ 283.823955][T17563] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4542'. [ 283.848465][T17551] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.032140][T17551] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.106504][T17551] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.122588][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4545'. [ 284.137964][T17574] loop4: detected capacity change from 0 to 1024 [ 284.145403][T17574] EXT4-fs: Ignoring removed bh option [ 284.150982][T17574] EXT4-fs: inline encryption not supported [ 284.171555][T17574] loop4: detected capacity change from 0 to 512 [ 284.186563][T17574] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 284.202840][T17551] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.214792][T17551] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.215698][T17574] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 284.227260][T17551] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.244178][T17551] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.324392][T17582] loop8: detected capacity change from 0 to 1024 [ 284.335881][T17582] EXT4-fs: Ignoring removed bh option [ 284.341588][T17582] EXT4-fs: inline encryption not supported [ 284.458688][T17582] loop8: detected capacity change from 0 to 512 [ 284.467259][T17582] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 284.578199][T17589] lo speed is unknown, defaulting to 1000 [ 284.660406][T17582] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 284.738518][T17592] lo speed is unknown, defaulting to 1000 [ 284.812032][T17594] xt_hashlimit: size too large, truncated to 1048576 [ 285.259357][T17599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17599 comm=syz.7.4553 [ 285.367801][T17599] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.388636][T17603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17603 comm=syz.4.4554 [ 285.401352][T17603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17603 comm=syz.4.4554 [ 285.487199][T17599] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.567924][T17599] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.657245][T17599] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.674418][T17618] loop4: detected capacity change from 0 to 1024 [ 285.683537][T17618] journal_path: Non-blockdev passed as './file1' [ 285.689990][T17618] EXT4-fs: error: could not find journal device path [ 285.719905][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 285.719924][ T29] audit: type=1326 audit(1749369646.374:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.750111][ T29] audit: type=1326 audit(1749369646.374:19544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.757362][T17624] xt_hashlimit: size too large, truncated to 1048576 [ 285.815228][ T29] audit: type=1326 audit(1749369646.434:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.839000][ T29] audit: type=1326 audit(1749369646.434:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.862820][ T29] audit: type=1326 audit(1749369646.434:19547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.886490][ T29] audit: type=1326 audit(1749369646.444:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07cd52d290 code=0x7ffc0000 [ 285.910272][ T29] audit: type=1326 audit(1749369646.444:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.934108][ T29] audit: type=1326 audit(1749369646.444:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.938522][T17627] loop8: detected capacity change from 0 to 1024 [ 285.957980][ T29] audit: type=1326 audit(1749369646.444:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.987923][ T29] audit: type=1326 audit(1749369646.444:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.8.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 285.989561][T17627] journal_path: Non-blockdev passed as './file1' [ 286.018058][T17627] EXT4-fs: error: could not find journal device path [ 286.115663][T17635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4564'. [ 286.131480][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4563'. [ 286.232838][T17637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17637 comm=syz.2.4565 [ 286.245687][T17637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17637 comm=syz.2.4565 [ 286.332393][T17646] loop4: detected capacity change from 0 to 2048 [ 286.527486][T17652] lo speed is unknown, defaulting to 1000 [ 286.839455][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4571'. [ 287.241515][T17522] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.254274][T17522] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.267990][T17522] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.285460][T17522] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.342192][T17671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17671 comm=syz.9.4576 [ 287.354944][T17671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17671 comm=syz.9.4576 [ 287.444067][T17676] lo speed is unknown, defaulting to 1000 [ 287.875338][T17684] loop4: detected capacity change from 0 to 2048 [ 287.950014][T17690] xt_hashlimit: size too large, truncated to 1048576 [ 288.207060][T17703] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4585'. [ 288.244922][T17703] net_ratelimit: 11 callbacks suppressed [ 288.244945][T17703] netlink: zone id is out of range [ 288.256443][T17703] netlink: zone id is out of range [ 288.256457][T17703] netlink: zone id is out of range [ 288.256466][T17703] netlink: zone id is out of range [ 288.256474][T17703] netlink: zone id is out of range [ 288.256504][T17703] netlink: del zone limit has 8 unknown bytes [ 288.360257][T17714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17714 comm=syz.9.4587 [ 288.373197][T17714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17714 comm=syz.9.4587 [ 288.635197][T17724] lo speed is unknown, defaulting to 1000 [ 289.671715][T17599] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.683729][T17599] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.697760][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4591'. [ 289.710135][T17599] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.862807][T17727] lo speed is unknown, defaulting to 1000 [ 289.938109][T17599] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.974131][T17739] xt_hashlimit: size too large, truncated to 1048576 [ 290.030120][T17741] serio: Serial port ttyS3 [ 290.037589][T17743] xt_hashlimit: size too large, truncated to 1048576 [ 290.214841][T17752] xt_hashlimit: size too large, truncated to 1048576 [ 290.221595][T17752] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 290.262764][T17756] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4599'. [ 290.273903][T17756] netlink: zone id is out of range [ 290.287985][T17756] netlink: zone id is out of range [ 290.297192][T17756] netlink: zone id is out of range [ 290.302407][T17756] netlink: zone id is out of range [ 290.481910][T17764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17764 comm=syz.4.4600 [ 290.494664][T17764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17764 comm=syz.4.4600 [ 293.109904][T17784] lo speed is unknown, defaulting to 1000 [ 293.347623][T17785] lo speed is unknown, defaulting to 1000 [ 293.442630][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 293.442647][ T29] audit: type=1326 audit(1749369654.094:19831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.569655][ T29] audit: type=1326 audit(1749369654.164:19832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.593414][ T29] audit: type=1326 audit(1749369654.164:19833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.617057][ T29] audit: type=1326 audit(1749369654.164:19834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.640769][ T29] audit: type=1326 audit(1749369654.164:19835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.662479][T17809] xt_hashlimit: size too large, truncated to 1048576 [ 293.664452][ T29] audit: type=1326 audit(1749369654.174:19836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.694782][ T29] audit: type=1326 audit(1749369654.174:19837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.708502][T17813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17813 comm=syz.9.4612 [ 293.718370][ T29] audit: type=1326 audit(1749369654.174:19838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.730945][T17813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17813 comm=syz.9.4612 [ 293.754499][ T29] audit: type=1326 audit(1749369654.174:19839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.754539][ T29] audit: type=1326 audit(1749369654.174:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17789 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 293.868304][T17815] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4611'. [ 293.880040][T17815] net_ratelimit: 3 callbacks suppressed [ 293.880055][T17815] netlink: zone id is out of range [ 293.934569][T17815] netlink: zone id is out of range [ 293.939877][T17815] netlink: zone id is out of range [ 293.946246][T17815] netlink: zone id is out of range [ 293.951556][T17815] netlink: zone id is out of range [ 293.956868][T17815] netlink: zone id is out of range [ 293.962157][T17815] netlink: del zone limit has 8 unknown bytes [ 294.087834][T17826] xt_hashlimit: size too large, truncated to 1048576 [ 294.349881][T17822] lo speed is unknown, defaulting to 1000 [ 294.681189][T17834] loop4: detected capacity change from 0 to 1024 [ 294.682585][T17835] lo speed is unknown, defaulting to 1000 [ 294.703537][T17834] journal_path: Non-blockdev passed as './file1' [ 294.710001][T17834] EXT4-fs: error: could not find journal device path [ 294.858323][T17845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17845 comm=syz.4.4619 [ 294.963330][T17846] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.057004][T17855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17855 comm=syz.9.4624 [ 295.069637][T17855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17855 comm=syz.9.4624 [ 295.087517][T17846] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.177083][T17863] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4625'. [ 295.196736][T17866] xt_hashlimit: size too large, truncated to 1048576 [ 295.201520][T17863] netlink: zone id is out of range [ 295.209812][T17846] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.221259][T17863] netlink: zone id is out of range [ 295.227885][T17863] netlink: zone id is out of range [ 295.361944][T17871] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 295.396659][T17846] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.410080][T17871] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4627'. [ 295.419383][T17871] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4627'. [ 295.428614][T17871] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4627'. [ 295.476290][T17846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.504413][T17846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.527182][T17876] xt_hashlimit: size too large, truncated to 1048576 [ 295.551395][T17873] loop7: detected capacity change from 0 to 8192 [ 295.567929][T17846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.610759][T17846] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.987279][T17899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17899 comm=syz.7.4637 [ 295.999956][T17899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17899 comm=syz.7.4637 [ 296.133584][T17910] xt_hashlimit: size too large, truncated to 1048576 [ 296.192910][T17897] loop4: detected capacity change from 0 to 1024 [ 296.200105][T17897] journal_path: Non-blockdev passed as './file1' [ 296.206569][T17897] EXT4-fs: error: could not find journal device path [ 296.293937][T17919] loop4: detected capacity change from 0 to 1024 [ 296.402993][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 296.712420][T17941] lo speed is unknown, defaulting to 1000 [ 296.782451][T17943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17943 comm=syz.8.4649 [ 296.795230][T17943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17943 comm=syz.8.4649 [ 296.921761][T17945] loop7: detected capacity change from 0 to 256 [ 296.989483][T17945] FAT-fs (loop7): bogus number of FAT sectors [ 296.995848][T17945] FAT-fs (loop7): Can't find a valid FAT filesystem [ 297.187199][T17952] loop8: detected capacity change from 0 to 256 [ 297.195062][T17952] FAT-fs (loop8): bogus number of FAT sectors [ 297.201223][T17952] FAT-fs (loop8): Can't find a valid FAT filesystem [ 297.286787][T17957] loop7: detected capacity change from 0 to 512 [ 297.295808][T17957] hub 9-0:1.0: USB hub found [ 297.300574][T17957] hub 9-0:1.0: 8 ports detected [ 297.397740][T17964] FAULT_INJECTION: forcing a failure. [ 297.397740][T17964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.410935][T17964] CPU: 1 UID: 0 PID: 17964 Comm: syz.2.4655 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 297.411045][T17964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.411062][T17964] Call Trace: [ 297.411072][T17964] [ 297.411082][T17964] __dump_stack+0x1d/0x30 [ 297.411110][T17964] dump_stack_lvl+0xe8/0x140 [ 297.411135][T17964] dump_stack+0x15/0x1b [ 297.411156][T17964] should_fail_ex+0x265/0x280 [ 297.411251][T17964] should_fail+0xb/0x20 [ 297.411274][T17964] should_fail_usercopy+0x1a/0x20 [ 297.411302][T17964] _copy_from_user+0x1c/0xb0 [ 297.411334][T17964] snd_seq_write+0x1d3/0x530 [ 297.411375][T17964] ? __pfx_snd_seq_write+0x10/0x10 [ 297.411411][T17964] vfs_write+0x266/0x8e0 [ 297.411502][T17964] ? __rcu_read_unlock+0x4f/0x70 [ 297.411525][T17964] ? __fget_files+0x184/0x1c0 [ 297.411560][T17964] ksys_write+0xda/0x1a0 [ 297.411588][T17964] __x64_sys_write+0x40/0x50 [ 297.411696][T17964] x64_sys_call+0x2cdd/0x2fb0 [ 297.411724][T17964] do_syscall_64+0xd2/0x200 [ 297.411754][T17964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.411789][T17964] ? clear_bhb_loop+0x40/0x90 [ 297.411816][T17964] ? clear_bhb_loop+0x40/0x90 [ 297.411892][T17964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.411916][T17964] RIP: 0033:0x7ff116f5e929 [ 297.411932][T17964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.412054][T17964] RSP: 002b:00007ff1155a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.412077][T17964] RAX: ffffffffffffffda RBX: 00007ff117186080 RCX: 00007ff116f5e929 [ 297.412093][T17964] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 297.412108][T17964] RBP: 00007ff1155a6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.412123][T17964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.412139][T17964] R13: 0000000000000001 R14: 00007ff117186080 R15: 00007ffe38a87e98 [ 297.412164][T17964] [ 297.614598][T17963] loop7: detected capacity change from 0 to 1024 [ 297.667548][T17970] xt_hashlimit: size too large, truncated to 1048576 [ 297.674315][T17970] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 297.716213][T17978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17978 comm=syz.8.4661 [ 297.753766][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4663'. [ 297.909015][T17991] loop7: detected capacity change from 0 to 1024 [ 297.916077][T17991] journal_path: Non-blockdev passed as './file1' [ 297.922520][T17991] EXT4-fs: error: could not find journal device path [ 298.047319][T18008] wireguard0: entered promiscuous mode [ 298.052874][T18008] wireguard0: entered allmulticast mode [ 298.133827][T18010] lo speed is unknown, defaulting to 1000 [ 298.728173][T18018] selinux_netlink_send: 1 callbacks suppressed [ 298.728226][T18018] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18018 comm=syz.8.4674 [ 298.747042][T18018] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18018 comm=syz.8.4674 [ 298.849216][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 298.849235][ T29] audit: type=1326 audit(1749369659.504:19995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 298.882347][T18025] loop4: detected capacity change from 0 to 1024 [ 298.914779][ T29] audit: type=1326 audit(1749369659.544:19996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 298.938601][ T29] audit: type=1326 audit(1749369659.544:19997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 298.962566][ T29] audit: type=1326 audit(1749369659.544:19998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 298.986320][ T29] audit: type=1326 audit(1749369659.544:19999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff116f5d290 code=0x7ffc0000 [ 299.010140][ T29] audit: type=1326 audit(1749369659.544:20000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 299.033913][ T29] audit: type=1326 audit(1749369659.544:20001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 299.057600][ T29] audit: type=1326 audit(1749369659.544:20002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 299.081248][ T29] audit: type=1326 audit(1749369659.544:20003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 299.104856][ T29] audit: type=1326 audit(1749369659.544:20004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.2.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 299.294138][T18055] 9pnet_fd: Insufficient options for proto=fd [ 299.390031][T18050] lo speed is unknown, defaulting to 1000 [ 299.416674][T18050] SELinux: policydb version 0 does not match my version range 15-34 [ 299.424915][T18050] SELinux: failed to load policy [ 299.591355][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4689'. [ 299.759709][T18072] loop9: detected capacity change from 0 to 1024 [ 299.795658][T18074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18074 comm=syz.7.4692 [ 300.403273][T18093] xt_hashlimit: size too large, truncated to 1048576 [ 300.863211][T18099] loop8: detected capacity change from 0 to 256 [ 300.885158][T18099] FAT-fs (loop8): bogus number of FAT sectors [ 300.891386][T18099] FAT-fs (loop8): Can't find a valid FAT filesystem [ 301.113175][T18113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18113 comm=syz.4.4703 [ 301.152981][T18115] loop8: detected capacity change from 0 to 1024 [ 301.161837][T18113] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.207879][T18113] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.286421][T18113] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.311369][T18122] xt_hashlimit: size too large, truncated to 1048576 [ 301.318250][T18122] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 301.365488][T18113] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.443561][T18113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.468105][T18113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.484340][T18113] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.496036][T18113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.543393][T18141] xt_hashlimit: size too large, truncated to 1048576 [ 301.973599][T18162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18162 comm=syz.4.4718 [ 302.018273][T18162] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.106823][T18166] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4719'. [ 302.116815][T18166] net_ratelimit: 4 callbacks suppressed [ 302.116832][T18166] netlink: zone id is out of range [ 302.131972][T18166] netlink: zone id is out of range [ 302.137430][T18166] netlink: zone id is out of range [ 302.142688][T18166] netlink: zone id is out of range [ 302.148182][T18166] netlink: zone id is out of range [ 302.153498][T18166] netlink: zone id is out of range [ 302.159035][T18166] netlink: del zone limit has 8 unknown bytes [ 302.212691][T18162] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.397155][T18170] loop7: detected capacity change from 0 to 1024 [ 302.414380][T18170] journal_path: Non-blockdev passed as './file1' [ 302.420846][T18170] EXT4-fs: error: could not find journal device path [ 302.433705][T18175] xt_hashlimit: size too large, truncated to 1048576 [ 302.539693][T18162] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.646894][T18162] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.659300][T18184] xt_hashlimit: size too large, truncated to 1048576 [ 302.789335][T18182] loop9: detected capacity change from 0 to 1024 [ 302.796343][T18182] journal_path: Non-blockdev passed as './file1' [ 302.802778][T18182] EXT4-fs: error: could not find journal device path [ 302.821712][T18187] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.4727'. [ 302.831424][T18187] netlink: zone id is out of range [ 302.844684][T18187] netlink: zone id is out of range [ 302.855855][T18187] netlink: zone id is out of range [ 302.934151][T18195] FAULT_INJECTION: forcing a failure. [ 302.934151][T18195] name failslab, interval 1, probability 0, space 0, times 0 [ 302.946898][T18195] CPU: 0 UID: 0 PID: 18195 Comm: syz.7.4729 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 302.946937][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.946994][T18195] Call Trace: [ 302.947003][T18195] [ 302.947013][T18195] __dump_stack+0x1d/0x30 [ 302.947039][T18195] dump_stack_lvl+0xe8/0x140 [ 302.947064][T18195] dump_stack+0x15/0x1b [ 302.947083][T18195] should_fail_ex+0x265/0x280 [ 302.947104][T18195] should_failslab+0x8c/0xb0 [ 302.947166][T18195] kmem_cache_alloc_node_noprof+0x57/0x320 [ 302.947234][T18195] ? __alloc_skb+0x101/0x320 [ 302.947260][T18195] __alloc_skb+0x101/0x320 [ 302.947350][T18195] ? audit_log_start+0x365/0x6c0 [ 302.947384][T18195] audit_log_start+0x380/0x6c0 [ 302.947472][T18195] audit_seccomp+0x48/0x100 [ 302.947507][T18195] ? __seccomp_filter+0x68c/0x10d0 [ 302.947634][T18195] __seccomp_filter+0x69d/0x10d0 [ 302.947669][T18195] ? vfs_write+0x75e/0x8e0 [ 302.947689][T18195] ? __rcu_read_unlock+0x4f/0x70 [ 302.947833][T18195] ? __fget_files+0x184/0x1c0 [ 302.947867][T18195] __secure_computing+0x82/0x150 [ 302.947928][T18195] syscall_trace_enter+0xcf/0x1e0 [ 302.947958][T18195] do_syscall_64+0xac/0x200 [ 302.947981][T18195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.948009][T18195] ? clear_bhb_loop+0x40/0x90 [ 302.948031][T18195] ? clear_bhb_loop+0x40/0x90 [ 302.948131][T18195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.948152][T18195] RIP: 0033:0x7fdac860e929 [ 302.948186][T18195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.948207][T18195] RSP: 002b:00007fdac6c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 302.948226][T18195] RAX: ffffffffffffffda RBX: 00007fdac8835fa0 RCX: 00007fdac860e929 [ 302.948292][T18195] RDX: 0000000000000003 RSI: 000000000000028c RDI: 000000000000028c [ 302.948305][T18195] RBP: 00007fdac6c77090 R08: ffffffffffffffff R09: 0000000000000000 [ 302.948317][T18195] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 302.948329][T18195] R13: 0000000000000000 R14: 00007fdac8835fa0 R15: 00007ffcb87a90b8 [ 302.948353][T18195] [ 303.218283][T18202] loop9: detected capacity change from 0 to 256 [ 303.226027][T18202] FAT-fs (loop9): bogus number of FAT sectors [ 303.232230][T18202] FAT-fs (loop9): Can't find a valid FAT filesystem [ 303.286017][T18210] loop7: detected capacity change from 0 to 1024 [ 303.299893][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 303.397770][T18222] netlink: 160 bytes leftover after parsing attributes in process `syz.9.4739'. [ 303.410697][T18222] sd 0:0:1:0: device reset [ 303.459387][T18227] loop9: detected capacity change from 0 to 1024 [ 303.495954][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4743'. [ 303.507189][T18232] $Hÿ: renamed from bond0 (while UP) [ 303.514758][T18232] $Hÿ: entered promiscuous mode [ 303.519834][T18232] bond_slave_0: entered promiscuous mode [ 303.525809][T18232] bond_slave_1: entered promiscuous mode [ 303.583102][T18238] xt_hashlimit: size too large, truncated to 1048576 [ 303.648244][T18242] loop7: detected capacity change from 0 to 8192 [ 303.872336][T18255] loop9: detected capacity change from 0 to 256 [ 303.887812][T18255] FAT-fs (loop9): bogus number of FAT sectors [ 303.894040][T18255] FAT-fs (loop9): Can't find a valid FAT filesystem [ 303.900750][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 303.900764][ T29] audit: type=1400 audit(1749369664.554:20201): avc: denied { ioctl } for pid=18241 comm="syz.7.4747" path="socket:[60433]" dev="sockfs" ino=60433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.932959][ T29] audit: type=1400 audit(1749369664.554:20202): avc: denied { bind } for pid=18241 comm="syz.7.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.090730][T18262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18262 comm=syz.9.4752 [ 304.107599][T18262] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.176346][T18262] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.196429][T18266] loop7: detected capacity change from 0 to 1024 [ 304.239304][T18262] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.291515][ T29] audit: type=1400 audit(1749369664.944:20203): avc: denied { mount } for pid=18270 comm="syz.2.4755" name="/" dev="ramfs" ino=59577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.316878][T18262] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.332636][T18274] FAULT_INJECTION: forcing a failure. [ 304.332636][T18274] name failslab, interval 1, probability 0, space 0, times 0 [ 304.345375][T18274] CPU: 1 UID: 0 PID: 18274 Comm: syz.2.4756 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 304.345411][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.345586][T18274] Call Trace: [ 304.345595][T18274] [ 304.345603][T18274] __dump_stack+0x1d/0x30 [ 304.345683][T18274] dump_stack_lvl+0xe8/0x140 [ 304.345700][T18274] dump_stack+0x15/0x1b [ 304.345715][T18274] should_fail_ex+0x265/0x280 [ 304.345733][T18274] should_failslab+0x8c/0xb0 [ 304.345877][T18274] kmem_cache_alloc_noprof+0x50/0x310 [ 304.345949][T18274] ? getname_flags+0x80/0x3b0 [ 304.346050][T18274] getname_flags+0x80/0x3b0 [ 304.346089][T18274] user_path_at+0x28/0x130 [ 304.346117][T18274] __se_sys_pivot_root+0xbc/0x720 [ 304.346193][T18274] ? fput+0x8f/0xc0 [ 304.346222][T18274] __x64_sys_pivot_root+0x31/0x40 [ 304.346326][T18274] x64_sys_call+0x2aac/0x2fb0 [ 304.346351][T18274] do_syscall_64+0xd2/0x200 [ 304.346383][T18274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.346462][T18274] ? clear_bhb_loop+0x40/0x90 [ 304.346660][T18274] ? clear_bhb_loop+0x40/0x90 [ 304.346682][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.346702][T18274] RIP: 0033:0x7ff116f5e929 [ 304.346718][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.346735][T18274] RSP: 002b:00007ff1155c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 304.346752][T18274] RAX: ffffffffffffffda RBX: 00007ff117185fa0 RCX: 00007ff116f5e929 [ 304.346793][T18274] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 304.346804][T18274] RBP: 00007ff1155c7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.346815][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.346861][T18274] R13: 0000000000000000 R14: 00007ff117185fa0 R15: 00007ffe38a87e98 [ 304.346878][T18274] [ 304.564198][T18262] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.576587][T18262] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.589549][T18262] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.605632][T18262] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.679300][T18285] xt_hashlimit: size too large, truncated to 1048576 [ 304.785431][T18279] lo speed is unknown, defaulting to 1000 [ 304.843623][T18290] loop7: detected capacity change from 0 to 1024 [ 304.850592][T18290] journal_path: Non-blockdev passed as './file1' [ 304.857040][T18290] EXT4-fs: error: could not find journal device path [ 304.974361][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4765'. [ 305.052021][ T29] audit: type=1400 audit(1749369665.704:20204): avc: denied { write } for pid=18304 comm="syz.7.4766" name="vcsa4" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.183599][ T29] audit: type=1326 audit(1749369665.834:20205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 305.230528][ T29] audit: type=1326 audit(1749369665.864:20206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 305.254308][ T29] audit: type=1326 audit(1749369665.864:20207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 305.278000][ T29] audit: type=1326 audit(1749369665.864:20208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 305.301721][ T29] audit: type=1326 audit(1749369665.864:20209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfa17e929 code=0x7ffc0000 [ 305.325559][ T29] audit: type=1326 audit(1749369665.864:20210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.9.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cfa17d290 code=0x7ffc0000 [ 305.360145][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4768'. [ 305.370522][T18311] netlink: 'syz.9.4768': attribute type 13 has an invalid length. [ 305.494770][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.502298][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.598926][T18311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.611402][T18311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.683547][T18311] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.692172][T18311] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.700615][T18311] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.709020][T18311] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.791138][T18305] lo speed is unknown, defaulting to 1000 [ 306.047259][T18337] FAULT_INJECTION: forcing a failure. [ 306.047259][T18337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.060429][T18337] CPU: 0 UID: 0 PID: 18337 Comm: syz.9.4772 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 306.060502][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.060519][T18337] Call Trace: [ 306.060527][T18337] [ 306.060537][T18337] __dump_stack+0x1d/0x30 [ 306.060563][T18337] dump_stack_lvl+0xe8/0x140 [ 306.060588][T18337] dump_stack+0x15/0x1b [ 306.060652][T18337] should_fail_ex+0x265/0x280 [ 306.060679][T18337] should_fail+0xb/0x20 [ 306.060702][T18337] should_fail_usercopy+0x1a/0x20 [ 306.060731][T18337] _copy_to_user+0x20/0xa0 [ 306.060845][T18337] simple_read_from_buffer+0xb5/0x130 [ 306.060957][T18337] proc_fail_nth_read+0x100/0x140 [ 306.060989][T18337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.061016][T18337] vfs_read+0x1a0/0x6f0 [ 306.061117][T18337] ? __rcu_read_unlock+0x4f/0x70 [ 306.061164][T18337] ? __fget_files+0x184/0x1c0 [ 306.061220][T18337] ksys_read+0xda/0x1a0 [ 306.061248][T18337] __x64_sys_read+0x40/0x50 [ 306.061275][T18337] x64_sys_call+0x2d77/0x2fb0 [ 306.061300][T18337] do_syscall_64+0xd2/0x200 [ 306.061367][T18337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.061403][T18337] ? clear_bhb_loop+0x40/0x90 [ 306.061431][T18337] ? clear_bhb_loop+0x40/0x90 [ 306.061459][T18337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.061555][T18337] RIP: 0033:0x7f5cfa17d33c [ 306.061575][T18337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 306.061596][T18337] RSP: 002b:00007f5cf87e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.061619][T18337] RAX: ffffffffffffffda RBX: 00007f5cfa3a5fa0 RCX: 00007f5cfa17d33c [ 306.061636][T18337] RDX: 000000000000000f RSI: 00007f5cf87e70a0 RDI: 0000000000000004 [ 306.061694][T18337] RBP: 00007f5cf87e7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.061711][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.061727][T18337] R13: 0000000000000000 R14: 00007f5cfa3a5fa0 R15: 00007ffc70bdc3e8 [ 306.061832][T18337] [ 306.273184][T18313] lo speed is unknown, defaulting to 1000 [ 306.289336][T18162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.301753][T18162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.372986][T18162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.393590][T18335] lo speed is unknown, defaulting to 1000 [ 306.409666][T18162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.585036][T18346] loop4: detected capacity change from 0 to 1024 [ 306.591728][T18346] journal_path: Non-blockdev passed as './file1' [ 306.598189][T18346] EXT4-fs: error: could not find journal device path [ 306.712520][T18351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18351 comm=syz.9.4778 [ 306.725369][T18351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18351 comm=syz.9.4778 [ 306.768578][T18359] futex_wake_op: syz.8.4780 tries to shift op by 32; fix this program [ 306.893186][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4782'. [ 307.050073][T18367] lo speed is unknown, defaulting to 1000 [ 307.071783][T18370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=18370 comm=syz.8.4784 [ 307.318656][T18388] loop7: detected capacity change from 0 to 1024 [ 307.339139][T18388] journal_path: Non-blockdev passed as './file1' [ 307.345599][T18388] EXT4-fs: error: could not find journal device path [ 307.355630][T18393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18393 comm=syz.8.4792 [ 307.368236][T18393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18393 comm=syz.8.4792 [ 307.384436][T18394] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 307.728049][T18420] loop8: detected capacity change from 0 to 256 [ 307.748106][T18420] FAT-fs (loop8): bogus number of FAT sectors [ 307.754264][T18420] FAT-fs (loop8): Can't find a valid FAT filesystem [ 307.771739][T18421] Illegal XDP return value 4294967274 on prog (id 3378) dev syz_tun, expect packet loss! [ 307.930532][T18426] lo speed is unknown, defaulting to 1000 [ 308.056550][T18429] sctp: [Deprecated]: syz.8.4804 (pid 18429) Use of int in max_burst socket option. [ 308.056550][T18429] Use struct sctp_assoc_value instead [ 308.094761][T18434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18434 comm=syz.9.4805 [ 308.107415][T18434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18434 comm=syz.9.4805 [ 308.194258][T18439] FAULT_INJECTION: forcing a failure. [ 308.194258][T18439] name failslab, interval 1, probability 0, space 0, times 0 [ 308.207027][T18439] CPU: 0 UID: 0 PID: 18439 Comm: syz.9.4806 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 308.207061][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.207074][T18439] Call Trace: [ 308.207081][T18439] [ 308.207092][T18439] __dump_stack+0x1d/0x30 [ 308.207166][T18439] dump_stack_lvl+0xe8/0x140 [ 308.207192][T18439] dump_stack+0x15/0x1b [ 308.207214][T18439] should_fail_ex+0x265/0x280 [ 308.207241][T18439] ? tipc_nametbl_insert_publ+0x44/0x930 [ 308.207364][T18439] should_failslab+0x8c/0xb0 [ 308.207390][T18439] __kmalloc_cache_noprof+0x4c/0x320 [ 308.207434][T18439] tipc_nametbl_insert_publ+0x44/0x930 [ 308.207518][T18439] ? tipc_group_create_member+0x42/0x270 [ 308.207607][T18439] ? should_failslab+0x8c/0xb0 [ 308.207639][T18439] ? __kmalloc_cache_noprof+0x189/0x320 [ 308.207728][T18439] ? rb_insert_color+0x71/0x2b0 [ 308.207751][T18439] ? tipc_nlist_add+0x3c/0x80 [ 308.207780][T18439] tipc_nametbl_publish+0x112/0x1c0 [ 308.207803][T18439] tipc_sk_publish+0x121/0x200 [ 308.207854][T18439] tipc_sk_join+0x24b/0x2e0 [ 308.207970][T18439] tipc_setsockopt+0x598/0x620 [ 308.208004][T18439] ? __pfx_tipc_setsockopt+0x10/0x10 [ 308.208031][T18439] __sys_setsockopt+0x184/0x200 [ 308.208133][T18439] __x64_sys_setsockopt+0x64/0x80 [ 308.208162][T18439] x64_sys_call+0x2bd5/0x2fb0 [ 308.208264][T18439] do_syscall_64+0xd2/0x200 [ 308.208288][T18439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.208340][T18439] ? clear_bhb_loop+0x40/0x90 [ 308.208369][T18439] ? clear_bhb_loop+0x40/0x90 [ 308.208455][T18439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.208483][T18439] RIP: 0033:0x7f5cfa17e929 [ 308.208503][T18439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.208527][T18439] RSP: 002b:00007f5cf87e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.208593][T18439] RAX: ffffffffffffffda RBX: 00007f5cfa3a5fa0 RCX: 00007f5cfa17e929 [ 308.208643][T18439] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 308.208660][T18439] RBP: 00007f5cf87e7090 R08: 0000000000000010 R09: 0000000000000000 [ 308.208676][T18439] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 308.208693][T18439] R13: 0000000000000000 R14: 00007f5cfa3a5fa0 R15: 00007ffc70bdc3e8 [ 308.208713][T18439] [ 308.591380][T18456] loop8: detected capacity change from 0 to 1024 [ 308.603782][T18456] journal_path: Non-blockdev passed as './file1' [ 308.610320][T18456] EXT4-fs: error: could not find journal device path [ 308.651470][T18463] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4814'. [ 308.674658][T18463] net_ratelimit: 4 callbacks suppressed [ 308.674678][T18463] netlink: zone id is out of range [ 308.688314][T18463] netlink: zone id is out of range [ 308.693482][T18463] netlink: zone id is out of range [ 308.698807][T18463] netlink: zone id is out of range [ 308.704147][T18463] netlink: zone id is out of range [ 308.722182][T18463] netlink: zone id is out of range [ 308.804760][T18463] netlink: del zone limit has 8 unknown bytes [ 308.892125][T18471] lo speed is unknown, defaulting to 1000 [ 308.957959][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 308.990788][T18483] bond0: entered promiscuous mode [ 308.995982][T18483] bond0: entered allmulticast mode [ 309.002267][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.157236][T18491] lo speed is unknown, defaulting to 1000 [ 309.583736][T18499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18499 comm=syz.4.4826 [ 309.596389][T18499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18499 comm=syz.4.4826 [ 309.625520][T18504] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4827'. [ 309.635246][T18504] netlink: zone id is out of range [ 309.640435][T18504] netlink: zone id is out of range [ 309.668681][T18508] xt_hashlimit: size too large, truncated to 1048576 [ 309.842680][T18504] netlink: zone id is out of range [ 309.895067][T18482] kexec: Could not allocate control_code_buffer [ 309.902915][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 309.902930][ T29] audit: type=1326 audit(1749369670.504:20439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.8.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 309.932738][ T29] audit: type=1326 audit(1749369670.504:20440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.8.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 309.956385][ T29] audit: type=1326 audit(1749369670.504:20441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.8.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 309.961933][T18497] loop9: detected capacity change from 0 to 1024 [ 309.980039][ T29] audit: type=1326 audit(1749369670.504:20442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.8.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07cd52e929 code=0x7ffc0000 [ 310.088703][T18497] journal_path: Non-blockdev passed as './file1' [ 310.095251][T18497] EXT4-fs: error: could not find journal device path [ 310.329890][ T29] audit: type=1326 audit(1749369670.984:20443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.353876][ T29] audit: type=1326 audit(1749369670.984:20444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.377557][ T29] audit: type=1326 audit(1749369670.984:20445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.401229][ T29] audit: type=1326 audit(1749369670.984:20446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.424885][ T29] audit: type=1326 audit(1749369670.984:20447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.448545][ T29] audit: type=1326 audit(1749369670.984:20448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18533 comm="syz.4.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21e0e929 code=0x7ffc0000 [ 310.481146][T18539] loop4: detected capacity change from 0 to 2048 [ 310.512355][T18543] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 310.534774][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4837'. [ 310.552024][T18521] lo speed is unknown, defaulting to 1000 [ 310.612557][T18546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18546 comm=syz.9.4840 [ 310.926519][T18551] futex_wake_op: syz.2.4842 tries to shift op by 32; fix this program [ 311.079617][T18560] xt_hashlimit: size too large, truncated to 1048576 [ 311.254078][T18565] loop7: detected capacity change from 0 to 1024 [ 311.319264][T18565] journal_path: Non-blockdev passed as './file1' [ 311.325811][T18565] EXT4-fs: error: could not find journal device path [ 311.359333][T18575] loop8: detected capacity change from 0 to 512 [ 311.370547][T18575] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 311.386180][T18575] EXT4-fs: error: could not find journal device path [ 311.478120][ T3433] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.501028][T18567] lo speed is unknown, defaulting to 1000 [ 311.516632][ T3433] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.537024][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4851'. [ 311.546197][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4851'. [ 311.566023][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4851'. [ 311.594268][T18585] SELinux: policydb version -1869188174 does not match my version range 15-34 [ 311.616549][T18585] SELinux: failed to load policy [ 311.617217][ T3433] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.639861][T18585] loop8: detected capacity change from 0 to 1024 [ 311.691111][T18567] chnl_net:caif_netlink_parms(): no params data found [ 311.710751][ T3433] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.783855][T18599] futex_wake_op: syz.7.4856 tries to shift op by 32; fix this program [ 311.993032][T18612] loop7: detected capacity change from 0 to 2048 [ 312.106425][ T3433] bond0 (unregistering): Released all slaves [ 312.129864][T18610] lo speed is unknown, defaulting to 1000 [ 312.162924][T18567] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.170184][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.179039][T18567] bridge_slave_0: entered allmulticast mode [ 312.185931][T18567] bridge_slave_0: entered promiscuous mode [ 312.195513][ T3433] hsr_slave_0: left promiscuous mode [ 312.201250][ T3433] hsr_slave_1: left promiscuous mode [ 312.210281][ T3433] veth1_macvtap: left promiscuous mode [ 312.216295][ T3433] veth0_macvtap: left promiscuous mode [ 312.222103][ T3433] veth1_vlan: left promiscuous mode [ 312.227555][ T3433] veth0_vlan: left promiscuous mode [ 312.347978][T18567] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.355159][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.362632][T18567] bridge_slave_1: entered allmulticast mode [ 312.394839][T18567] bridge_slave_1: entered promiscuous mode [ 312.406966][ T36] lo speed is unknown, defaulting to 1000 [ 312.412785][ T36] infiniband syz2: ib_query_port failed (-19) [ 312.437480][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.456121][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.480659][T18620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4861'. [ 312.492625][T18567] team0: Port device team_slave_0 added [ 312.500314][T18567] team0: Port device team_slave_1 added [ 312.532556][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.539793][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.565925][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.578615][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.585644][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.611765][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.644154][T18567] hsr_slave_0: entered promiscuous mode [ 312.650438][T18567] hsr_slave_1: entered promiscuous mode [ 312.777637][T18626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18626 comm=syz.9.4864 [ 312.941457][T18635] loop7: detected capacity change from 0 to 1024 [ 312.952453][T18635] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.963533][T18635] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 312.975893][T18635] JBD2: no valid journal superblock found [ 312.980619][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4862'. [ 312.981641][T18635] EXT4-fs (loop7): Could not load journal inode [ 313.006913][T18635] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4867'. [ 313.008201][T18629] bond0: entered promiscuous mode [ 313.021460][T18629] bond0: entered allmulticast mode [ 313.026907][T18629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.067998][T18639] loop7: detected capacity change from 0 to 256 [ 313.071745][T18567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.075223][T18639] FAT-fs (loop7): bogus number of FAT sectors [ 313.087238][T18639] FAT-fs (loop7): Can't find a valid FAT filesystem [ 313.100861][T18567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.114562][T18567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.126515][T18567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.183700][T18653] loop8: detected capacity change from 0 to 2048 [ 313.203708][T18653] EXT4-fs: Ignoring removed bh option [ 313.216587][T18567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.239111][T18567] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.274187][T18655] loop9: detected capacity change from 0 to 1024 [ 313.282312][T18655] journal_path: Non-blockdev passed as './file1' [ 313.288809][T18655] EXT4-fs: error: could not find journal device path [ 313.299226][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.306368][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.347847][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.354988][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.372318][T18660] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.4874'. [ 313.382900][T18657] loop7: detected capacity change from 0 to 1024 [ 313.402429][T18657] journal_path: Non-blockdev passed as './file1' [ 313.404653][T18567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.408886][T18657] EXT4-fs: error: could not find journal device path [ 313.525838][T18567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.747520][T18567] veth0_vlan: entered promiscuous mode [ 313.759476][T18567] veth1_vlan: entered promiscuous mode [ 313.777655][T18693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18693 comm=syz.2.4881 [ 313.797285][T18567] veth0_macvtap: entered promiscuous mode [ 313.808568][T18567] veth1_macvtap: entered promiscuous mode [ 313.818273][T18693] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.834448][T18567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.856281][T18567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.867543][T18567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.876431][T18567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.885244][T18567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.894039][T18567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.939942][T18693] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.996414][T18696] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.4882'. [ 314.006647][T18696] net_ratelimit: 18 callbacks suppressed [ 314.006665][T18696] netlink: zone id is out of range [ 314.019132][T18693] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.030277][T18696] netlink: zone id is out of range [ 314.035957][T18696] netlink: zone id is out of range [ 314.043226][T18696] netlink: zone id is out of range [ 314.049587][T18696] netlink: zone id is out of range [ 314.055632][T18696] netlink: zone id is out of range [ 314.061937][T18696] netlink: del zone limit has 8 unknown bytes [ 314.108680][T18693] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.185888][T18704] xt_hashlimit: size too large, truncated to 1048576 [ 314.199485][T18693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.213719][T18705] loop8: detected capacity change from 0 to 256 [ 314.223493][T18693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.235044][T18693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.245222][T18705] FAT-fs (loop8): bogus number of FAT sectors [ 314.251334][T18705] FAT-fs (loop8): Can't find a valid FAT filesystem [ 314.282467][T18701] loop4: detected capacity change from 0 to 512 [ 314.289173][T18701] EXT4-fs: Ignoring removed bh option [ 314.297957][T18693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.519090][T18711] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 314.848699][T18740] netlink: zone id is out of range [ 314.853917][T18740] netlink: zone id is out of range [ 314.860161][T18740] netlink: zone id is out of range [ 315.088633][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 315.088653][ T29] audit: type=1326 audit(1749369675.744:20970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.100301][T18753] Invalid ELF header magic: != ELF [ 315.118837][ T29] audit: type=1326 audit(1749369675.744:20971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.147502][ T29] audit: type=1326 audit(1749369675.744:20972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.171643][ T29] audit: type=1326 audit(1749369675.744:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.195374][ T29] audit: type=1326 audit(1749369675.744:20974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.219273][ T29] audit: type=1326 audit(1749369675.744:20975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.243057][ T29] audit: type=1326 audit(1749369675.744:20976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.267038][ T29] audit: type=1326 audit(1749369675.744:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.290803][ T29] audit: type=1326 audit(1749369675.744:20978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.314635][ T29] audit: type=1326 audit(1749369675.744:20979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.2.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff116f5e929 code=0x7ffc0000 [ 315.417816][T18768] loop8: detected capacity change from 0 to 1024 [ 315.425535][T18768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.432320][T18768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.486943][T18779] futex_wake_op: syz.8.4911 tries to shift op by 32; fix this program [ 315.753125][T18797] loop8: detected capacity change from 0 to 1024 [ 315.760093][T18797] journal_path: Non-blockdev passed as './file1' [ 315.766575][T18797] EXT4-fs: error: could not find journal device path [ 315.848909][T18802] loop8: detected capacity change from 0 to 256 [ 315.866252][T18802] FAT-fs (loop8): bogus number of FAT sectors [ 315.872447][T18802] FAT-fs (loop8): Can't find a valid FAT filesystem [ 315.986308][T18810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18810 comm=syz.4.4922 [ 315.998931][T18810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18810 comm=syz.4.4922 [ 316.103978][T18827] xt_hashlimit: size too large, truncated to 1048576 [ 316.388626][T18844] loop9: detected capacity change from 0 to 512 [ 316.784128][T18864] loop9: detected capacity change from 0 to 512 [ 316.791167][T18864] EXT4-fs: Ignoring removed bh option [ 316.971152][T18869] __nla_validate_parse: 3 callbacks suppressed [ 316.971175][T18869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4941'. [ 317.015239][T18869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4941'. [ 317.171794][T18878] FAULT_INJECTION: forcing a failure. [ 317.171794][T18878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.185000][T18878] CPU: 1 UID: 0 PID: 18878 Comm: syz.7.4944 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 317.185027][T18878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.185042][T18878] Call Trace: [ 317.185048][T18878] [ 317.185056][T18878] __dump_stack+0x1d/0x30 [ 317.185133][T18878] dump_stack_lvl+0xe8/0x140 [ 317.185150][T18878] dump_stack+0x15/0x1b [ 317.185165][T18878] should_fail_ex+0x265/0x280 [ 317.185184][T18878] should_fail+0xb/0x20 [ 317.185199][T18878] should_fail_usercopy+0x1a/0x20 [ 317.185219][T18878] _copy_from_user+0x1c/0xb0 [ 317.185372][T18878] memdup_user+0x5e/0xd0 [ 317.185406][T18878] autofs_dev_ioctl+0x167/0x6a0 [ 317.185497][T18878] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 317.185544][T18878] __se_sys_ioctl+0xce/0x140 [ 317.185597][T18878] __x64_sys_ioctl+0x43/0x50 [ 317.185630][T18878] x64_sys_call+0x19a8/0x2fb0 [ 317.185649][T18878] do_syscall_64+0xd2/0x200 [ 317.185669][T18878] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.185706][T18878] ? clear_bhb_loop+0x40/0x90 [ 317.185725][T18878] ? clear_bhb_loop+0x40/0x90 [ 317.185796][T18878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.185815][T18878] RIP: 0033:0x7fdac860e929 [ 317.185829][T18878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.185886][T18878] RSP: 002b:00007fdac6c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.185903][T18878] RAX: ffffffffffffffda RBX: 00007fdac8835fa0 RCX: 00007fdac860e929 [ 317.185914][T18878] RDX: 0000200000001040 RSI: 00000000c018937e RDI: 0000000000000006 [ 317.185925][T18878] RBP: 00007fdac6c77090 R08: 0000000000000000 R09: 0000000000000000 [ 317.185935][T18878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.185946][T18878] R13: 0000000000000000 R14: 00007fdac8835fa0 R15: 00007ffcb87a90b8 [ 317.185963][T18878] [ 317.487516][T18891] loop7: detected capacity change from 0 to 256 [ 317.495394][T18891] FAT-fs (loop7): bogus number of FAT sectors [ 317.501614][T18891] FAT-fs (loop7): Can't find a valid FAT filesystem [ 317.618744][T18904] loop9: detected capacity change from 0 to 2048 [ 317.738838][T18917] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4959'. [ 318.031758][T18923] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4961'. [ 318.040775][T18923] 0ªX¹¦À: renamed from caif0 [ 318.047291][T18923] 0ªX¹¦À: entered allmulticast mode [ 318.272890][T18884] ================================================================== [ 318.281032][T18884] BUG: KCSAN: data-race in isotp_sendmsg / isotp_sendmsg [ 318.288115][T18884] [ 318.290453][T18884] write to 0xffff888152db24b4 of 4 bytes by task 18892 on cpu 0: [ 318.298189][T18884] isotp_sendmsg+0x344/0xbf0 [ 318.302813][T18884] __sock_sendmsg+0x142/0x180 [ 318.307511][T18884] ____sys_sendmsg+0x31e/0x4e0 [ 318.312285][T18884] ___sys_sendmsg+0x17b/0x1d0 [ 318.316988][T18884] __x64_sys_sendmsg+0xd4/0x160 [ 318.321901][T18884] x64_sys_call+0x2999/0x2fb0 [ 318.326600][T18884] do_syscall_64+0xd2/0x200 [ 318.331115][T18884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.337037][T18884] [ 318.339366][T18884] read to 0xffff888152db24b4 of 4 bytes by task 18884 on cpu 1: [ 318.347115][T18884] isotp_sendmsg+0x1d8/0xbf0 [ 318.351722][T18884] __sock_sendmsg+0x142/0x180 [ 318.356471][T18884] ____sys_sendmsg+0x345/0x4e0 [ 318.361382][T18884] ___sys_sendmsg+0x17b/0x1d0 [ 318.366095][T18884] __sys_sendmmsg+0x178/0x300 [ 318.370787][T18884] __x64_sys_sendmmsg+0x57/0x70 [ 318.375669][T18884] x64_sys_call+0x2f2f/0x2fb0 [ 318.380379][T18884] do_syscall_64+0xd2/0x200 [ 318.384894][T18884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.390809][T18884] [ 318.393152][T18884] value changed: 0x00000001 -> 0x00000000 [ 318.398898][T18884] [ 318.401246][T18884] Reported by Kernel Concurrency Sanitizer on: [ 318.407403][T18884] CPU: 1 UID: 0 PID: 18884 Comm: syz.8.4946 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 318.419594][T18884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.429660][T18884] ==================================================================