last executing test programs: 21m31.530459425s ago: executing program 2 (id=5459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x10b, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) 21m31.512057596s ago: executing program 2 (id=5460): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="18ae000000ce0e00950000000000000075a802db1eeee43c6b490d79daf8dc785675f0b410d92fab093f0c1f7a0b8dc9ac612aece6aa968cf08d30769214f51eb1eb76d17e1c834da98fc90e610e9c840098ab1ffb898ac8ae266233ddbdcb1929f8fff7ca864352ed061d03f4f8374eb90ec8b14ce767e459f4cf0dc73a51634db459903c8d37a91893076965b293068e99fe2934b0820c8fdaa363406d92cab28c66c6bdad24a528b2eacd7b3f0f4fee5b2c8dfb223bf82c5dd1ece141514a4589c9f3af13b9175272ea6bd800c5aebb7c7aefb97422fa573889d599d381e3fe"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="296947e867935e94fb6fed7103962ae02366e61e24931c65a1095eaebff8561e5089ceb5ea7ad60e1e85281c548bdea1de0968eb61f60145a7226809fe3db6baa52f55dd2f4fb20a6bad2ff4e71ce54050896c50dfba30027854512436945d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001100)={0x200000000000006a, &(0x7f0000001200)=[{0x0, 0x96, 0x4e, 0xa}, {0x5, 0x4, 0x9, 0x7}, {0x4, 0x80, 0x9, 0xc}, {0x2, 0x3, 0x39, 0x3}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="40cf", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x20008801) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000002c0)={0x0, 0x8, 0x7}) 21m31.435949049s ago: executing program 2 (id=5461): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r6, @ANYBLOB="16cfc515847a96d5ec40aa629b29dbce89f7c103b1d93b100456ff9cbcd4dca9defbf72be3055c2589351597ee8c611a7270301fc29dec4a803902d3d55b9b4f936f9833fe9dad98335ec209b9bbfcd95ce13e3ca67791516227dda81a0bcb334fb1d8f484ca8c2cae9b2a855f53ef02b3a6421421dd4b0076b0a4c6dae57123fd808ff08334cbc239ff35cd10520955c534ce0bb76f55339a01b94be000cc745db4843d39d84202181bf65e5499b24d40fd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xffffffffffffff37) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x138, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 21m30.426087252s ago: executing program 2 (id=5468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7f}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 21m30.399461683s ago: executing program 2 (id=5470): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x10b, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) 21m30.358315974s ago: executing program 2 (id=5471): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000240012800b6700010067656e65e0476a766500001400028005000df746c3e3008295c3d3"], 0x44}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 21m14.197366087s ago: executing program 32 (id=5471): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000240012800b6700010067656e65e0476a766500001400028005000df746c3e3008295c3d3"], 0x44}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 15m8.085384685s ago: executing program 0 (id=10652): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r2, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) 15m6.54089545s ago: executing program 0 (id=10666): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f00000000c0)=0xa6, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000300)={0x9, 0x7, 0xe5, 0x7fff, 0x80000000, 0xe4, 0x6, 0x5, 0x80000001, 0x2, 0x1, 0x3, 0x7f, 0x10000, 0x3, 0x2, 0x5, 0x7, 0x4, 0x8, 0x9, 0x1569, 0x9, 0x4, 0x10, 0x6}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r2, &(0x7f0000000240)={0x0, ""/98}, 0x6a, 0x3, 0x2000) 15m5.463486826s ago: executing program 0 (id=10684): keyctl$session_to_parent(0x12) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0x0) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140), 0x4) accept(0xffffffffffffffff, 0x0, 0x0) 15m4.442684789s ago: executing program 0 (id=10701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) 15m4.016507347s ago: executing program 0 (id=10705): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0) 15m3.902483262s ago: executing program 0 (id=10709): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 14m47.835265421s ago: executing program 33 (id=10709): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 4.355498172s ago: executing program 4 (id=21499): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') r1 = epoll_create1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000002}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000019000100000008000000"], 0x24}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) 2.829547608s ago: executing program 5 (id=21514): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) request_key(&(0x7f0000000780)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.664092594s ago: executing program 5 (id=21517): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0x0, 0xe}, {0xffe0}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1b}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6e}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4091}, 0x40) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r5, 0x400, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f00000001c0)) lseek(r2, 0xffffff60, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.789753553s ago: executing program 3 (id=21526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) io_setup(0x3, &(0x7f00000002c0)=0x0) r8 = eventfd(0x3ff) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r6, &(0x7f0000000300)="e3f706520e3ac7ea6a0efa95dde19faf3d43807e5b86de87ad54c6614100ac9e6c667ed86440d0737e9a8530be415c27e7dafb676e20ff6a09024513832601a65b75dfec37c84a14fa5345dce0eb0a23e0d65333b1a16339b63faa801a36c3d65607c45656c5175fccbfd10c1a0948cf9dfea309025e14f72e7ba9bbe3ba20f73f9b77889c6eb52ca0f734ef0dac07544d6ca1a98d24790e09f0ca5c7ba6316aefae99f512706a74c423fec8b5366b29a2538cc91e8e8d76", 0xb8, 0x80000000, 0x0, 0x1, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x10, r6, &(0x7f0000000400)="8f1f3bfeda30c666edbf911c05c083ab3e5cf32e0c29ffb2ac342bfc8c80107b637a3d6dc9cc149aa984ebb7be75f8c9", 0x30, 0x81, 0x0, 0x3}]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)={0xa4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x4, 0x7, 0x5, 0x4b39, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x18, 0x5, 0x36, 0x65, 0x48, 0x12, 0x16, 0x2, 0xb, 0x60, 0x1, 0x3, 0x4, 0x4, 0xc, 0x16, 0xb, 0x30, 0x1, 0x4, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xc70, 0x6, 0x1, 0x5, 0x8001, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x36, 0x5, 0x9, 0x5, 0x18, 0x18, 0x48, 0x1b, 0x5, 0x9, 0x4, 0x12, 0x12, 0x5, 0x1, 0x6c, 0x6c, 0x48, 0x24, 0x2, 0x6c, 0x5, 0x2, 0x24, 0x48, 0x16, 0x3, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x18, 0xc, 0x1b, 0x16, 0x62, 0x30, 0x36, 0x1b, 0x1b, 0x48, 0x9, 0x1, 0x2, 0x0, 0x6c, 0x60, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xe0, 0x5, 0x3, 0x7, 0x4, 0x1000, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7, 0x100, 0x7, 0x1, 0x25ce, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x9}, {0x4, 0x8}, {}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1a}, {0x1, 0x1}, {0x7, 0x12}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x1}, {0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x1, 0xfe18, 0x101, 0x7, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x16, 0x16, 0x24, 0xc, 0x1b, 0x18, 0x16, 0x5, 0x18, 0xb, 0x0, 0x4, 0x4, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x5}, {0x6, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x4, 0x81, 0x2000, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x16, 0x36, 0x1, 0x36, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x5, 0x8, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x60, 0x12, 0x6c, 0xc, 0x5, 0x60, 0x4, 0x60, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x401, 0x3, 0x3, 0x1000, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xb922, 0x7, 0x9, 0x8, 0xe24, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0xb}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x2, 0x12, 0x1, 0x18, 0x48, 0x12, 0x3, 0x6c, 0x12, 0x30, 0x5, 0x24, 0xc, 0x16, 0x16, 0x2, 0x60, 0xb, 0x24, 0x1b, 0xc, 0xc, 0x4, 0x1, 0xb, 0x6, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x5, 0x3}, {0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x360, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x7, 0x2}, {0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x5}, {0x3, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xcd12, 0x8001, 0x1, 0x2, 0x4, 0xc449, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x4, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {}, {0x1, 0x2}, {}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc000, 0x7e7, 0x6, 0x3ff8, 0x7fff, 0x40, 0x7]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x5}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x5, 0x3, 0x4, 0x0, 0x3fc0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x7cc5, 0x3, 0x67, 0x1, 0x8f0, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6, 0x16, 0x6, 0x16, 0x30]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x404, 0x8, 0x81, 0x3, 0xca7, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xe, 0x46, 0x8, 0xe, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x2, 0xb, 0x6c, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3e0, 0x8, 0x6, 0x0, 0x2918, 0x4000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6f0, 0xa, 0x954d, 0x6, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x60, 0x12, 0x48, 0x5, 0x13, 0x2, 0x36, 0x24, 0x24, 0x5, 0x1b, 0x5, 0x5, 0x24, 0x2, 0x0, 0x5, 0x12, 0x36, 0x60, 0x12, 0x16, 0x18, 0x36, 0x1, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x3, 0x7ff, 0x2, 0x2, 0xfff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x73, 0x98e6, 0x2, 0x2, 0xf, 0x401]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x5}, {0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1f}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x18, 0x12, 0xc, 0x30, 0x1b, 0x1]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x30, 0xc, 0x48, 0x12, 0x60, 0xb, 0x36, 0x1, 0x5a, 0x6, 0x18, 0x1, 0x2, 0x24, 0x4, 0x48, 0x36, 0x12, 0x2, 0x2, 0x16, 0x3, 0x36, 0xc, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4a3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0xfffc, 0x7, 0x841, 0x4, 0x6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x2}, {0x4, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x0, 0x6, 0xfff, 0x1000, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x863b3885aa607b50}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7}, {0x4, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff, 0x4800, 0x4, 0x1a0, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1698, 0x8001, 0x9, 0x1, 0xd57, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x200, 0x7, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e6, 0x629a, 0x6, 0xfffd, 0x2, 0xd3, 0xca6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0xf704, 0x6, 0x4, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc128, 0x6, 0x6, 0xfe, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x1f}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x9, 0x5, 0x35, 0x3, 0x1, 0x1b, 0x24, 0xc, 0x36, 0x36, 0x30, 0xb, 0x6c, 0x0, 0x39, 0x60, 0x30, 0x9, 0x60, 0x3, 0x1b, 0xb, 0x9, 0xc, 0x1, 0xc, 0x6c, 0x20]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8817, 0x8, 0x0, 0x392, 0x800, 0x1, 0x1, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x6dac, 0x0, 0x2, 0x0, 0xe5c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x7}, {0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x80, 0x9, 0x100, 0x10, 0x9, 0x0, 0x3de1]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xd3ac, 0x10, 0x1, 0xf21, 0x0, 0x8000]}}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1293, 0x12a0, 0xa, 0x0, 0x5, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x4, 0x36, 0xb]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x80, 0x5, 0x5, 0xd, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xd420, 0xfa1, 0xe52e, 0x3, 0x0, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6c, 0x6c, 0x6, 0x4, 0x48, 0x1b, 0x3, 0x1b, 0x30, 0x6c, 0x36, 0x60, 0x5, 0x12, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x7b]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x8, 0x6, 0x6, 0x8, 0xbf9b, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xa4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 1.753525864s ago: executing program 5 (id=21527): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c0008800800", @ANYRES32], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5816}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='9p_client_res\x00', r8}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)="001094bd2e4935970eaef7d96780a53d81784c8823a1ee0935eeece0f6a46a41a17cec14384a0177477c2c671e5b7fc3583e3b4883", &(0x7f0000000140), 0x5, r7}, 0xffa1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc4e4268ca7a4d45a, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='security.'], 0x0, 0x0, 0x1) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, &(0x7f0000000180)=0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.646265119s ago: executing program 5 (id=21529): syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x58, 0x0, 0x0, @rand_addr=' \x01\x00', @local, {[@dstopts={0x89, 0x9, '\x00', [@generic={0x35}, @jumbo={0xc2, 0x4, 0x20000007}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfd, 0x3, [0xffffffffffff90f9, 0x80000001, 0xe6, 0x788a, 0x9]}}, @generic={0x8, 0xf, "c1f4c7e9301b2284e8de0f9f6cc785"}]}]}}}}}, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x8bfb, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r3, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f0000000000)=0xfffffffa, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000910100008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff2489000008000000b703000000000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x2e, "1cf7814fb38790015603d44ccab54f77f00c16137371e3050000000000000025a877cae408d29aa9823078dc904f"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x9) socket$kcm(0x2a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.520391734s ago: executing program 1 (id=21534): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 1.503554244s ago: executing program 1 (id=21535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="060700"/13, @ANYRES16], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080c20000fd0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/14], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)="bd335a1dca247bb3b919c91c3273d032a2e4e9654ee5a17af639338cce3981338bd3a5c97853902d6a082841d8dcd40f5cc1d584d7e12df333089a9e67b432c53b6d118442d7a7aa5aa61d83b641db338891803f8f9a9da60297a13f75bc6d", &(0x7f00000002c0)="f7b1ecf59876d753e70d0018aa1af0a75e7338cffc20d6e0543a16819f45ac0ddeea586b498b3fdb4694f480b98407851d2045edec3ba41e800ab434cecc7a349218ddb37e03e9060286cdf07bf9da7a10de4e5ce9d0d0fe2c58d34126a1b64473f3e23b97040c26038f7ddb60eb0991dc340103472e8e73e2", 0xffffd6c0, r6}, 0x38) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) read(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) read$rfkill(r8, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0043"], 0x40}}, 0x0) io_uring_enter(r7, 0x4d8a, 0xa61e, 0x40, &(0x7f0000000280)={[0x8]}, 0x8) 1.492927265s ago: executing program 4 (id=21536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x18, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR', 0x3}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) 1.454703517s ago: executing program 3 (id=21537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a00)={0xd8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00c6da38cc577000"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000100000000009926dc0f010018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 1.278755904s ago: executing program 6 (id=21538): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)) 1.250722065s ago: executing program 6 (id=21539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='block_plug\x00'}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR', 0x3}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) 1.222069677s ago: executing program 1 (id=21540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) 1.183345329s ago: executing program 3 (id=21541): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1.15257171s ago: executing program 3 (id=21542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.105557592s ago: executing program 3 (id=21543): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.015038046s ago: executing program 1 (id=21544): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x4c240, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x2, 0x4, 0xa, 0x9}, {0x731, 0x7, 0x0, 0x1}, {0xff70, 0x5, 0x1a, 0xa}, {0x1f71, 0x18, 0x7f, 0x8f}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ec0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000b000000000000003d04000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000009d2f87bc52781f651c6208803487de000000850000000c000000b7000000007b8af8ff000000008af0fe00000000bfa100400000000007010000f9ffffffbfa4090001000000070400bba303f6bb6d695cade000f0", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184700000800000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x3, 0x1, 0x983, 0xff}, 0x10, 0x1ca85, r4, 0x0, &(0x7f0000001d00)=[0xffffffffffffffff, r2], 0x0, 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000100)) 932.273669ms ago: executing program 1 (id=21545): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mm_vmscan_lru_isolate\x00', r0, 0x0, 0x7fffffffffffffff}, 0xffffffffffffff50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x4000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) unshare(0x62040200) 853.018953ms ago: executing program 3 (id=21546): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') r1 = epoll_create1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000002}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000019000100000008000000"], 0x24}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) 469.96606ms ago: executing program 5 (id=21547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) io_setup(0x3, &(0x7f00000002c0)=0x0) r8 = eventfd(0x3ff) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r6, &(0x7f0000000300)="e3f706520e3ac7ea6a0efa95dde19faf3d43807e5b86de87ad54c6614100ac9e6c667ed86440d0737e9a8530be415c27e7dafb676e20ff6a09024513832601a65b75dfec37c84a14fa5345dce0eb0a23e0d65333b1a16339b63faa801a36c3d65607c45656c5175fccbfd10c1a0948cf9dfea309025e14f72e7ba9bbe3ba20f73f9b77889c6eb52ca0f734ef0dac07544d6ca1a98d24790e09f0ca5c7ba6316aefae99f512706a74c423fec8b5366b29a2538cc91e8e8d76", 0xb8, 0x80000000, 0x0, 0x1, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x10, r6, &(0x7f0000000400)="8f1f3bfeda30c666edbf911c05c083ab3e5cf32e0c29ffb2ac342bfc8c80107b637a3d6dc9cc149aa984ebb7be75f8c9", 0x30, 0x81, 0x0, 0x3}]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)={0xb68, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x4, 0x7, 0x5, 0x4b39, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x18, 0x5, 0x36, 0x65, 0x48, 0x12, 0x16, 0x2, 0xb, 0x60, 0x1, 0x3, 0x4, 0x4, 0xc, 0x16, 0xb, 0x30, 0x1, 0x4, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xc70, 0x6, 0x1, 0x5, 0x8001, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x36, 0x5, 0x9, 0x5, 0x18, 0x18, 0x48, 0x1b, 0x5, 0x9, 0x4, 0x12, 0x12, 0x5, 0x1, 0x6c, 0x6c, 0x48, 0x24, 0x2, 0x6c, 0x5, 0x2, 0x24, 0x48, 0x16, 0x3, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x18, 0xc, 0x1b, 0x16, 0x62, 0x30, 0x36, 0x1b, 0x1b, 0x48, 0x9, 0x1, 0x2, 0x0, 0x6c, 0x60, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xe0, 0x5, 0x3, 0x7, 0x4, 0x1000, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7, 0x100, 0x7, 0x1, 0x25ce, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x9}, {0x4, 0x8}, {}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1a}, {0x1, 0x1}, {0x7, 0x12}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x1}, {0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x1, 0xfe18, 0x101, 0x7, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x16, 0x16, 0x24, 0xc, 0x1b, 0x18, 0x16, 0x5, 0x18, 0xb, 0x0, 0x4, 0x4, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x5}, {0x6, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x4, 0x81, 0x2000, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x16, 0x36, 0x1, 0x36, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x5, 0x8, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x60, 0x12, 0x6c, 0xc, 0x5, 0x60, 0x4, 0x60, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x401, 0x3, 0x3, 0x1000, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xb922, 0x7, 0x9, 0x8, 0xe24, 0x8]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0xb}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x2, 0x12, 0x1, 0x18, 0x48, 0x12, 0x3, 0x6c, 0x12, 0x30, 0x5, 0x24, 0xc, 0x16, 0x16, 0x2, 0x60, 0xb, 0x24, 0x1b, 0xc, 0xc, 0x4, 0x1, 0xb, 0x6, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x5, 0x3}, {0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x360, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x7, 0x2}, {0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x5}, {0x3, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xcd12, 0x8001, 0x1, 0x2, 0x4, 0xc449, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x4, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {}, {0x1, 0x2}, {}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc000, 0x7e7, 0x6, 0x3ff8, 0x7fff, 0x40, 0x7]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x5}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x5, 0x3, 0x4, 0x0, 0x3fc0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x7cc5, 0x3, 0x67, 0x1, 0x8f0, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6, 0x16, 0x6, 0x16, 0x30]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x404, 0x8, 0x81, 0x3, 0xca7, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xe, 0x46, 0x8, 0xe, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x2, 0xb, 0x6c, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3e0, 0x8, 0x6, 0x0, 0x2918, 0x4000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6f0, 0xa, 0x954d, 0x6, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x60, 0x12, 0x48, 0x5, 0x13, 0x2, 0x36, 0x24, 0x24, 0x5, 0x1b, 0x5, 0x5, 0x24, 0x2, 0x0, 0x5, 0x12, 0x36, 0x60, 0x12, 0x16, 0x18, 0x36, 0x1, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x3, 0x7ff, 0x2, 0x2, 0xfff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x73, 0x98e6, 0x2, 0x2, 0xf, 0x401]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x5}, {0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1f}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x18, 0x12, 0xc, 0x30, 0x1b, 0x1]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x30, 0xc, 0x48, 0x12, 0x60, 0xb, 0x36, 0x1, 0x5a, 0x6, 0x18, 0x1, 0x2, 0x24, 0x4, 0x48, 0x36, 0x12, 0x2, 0x2, 0x16, 0x3, 0x36, 0xc, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4a3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0xfffc, 0x7, 0x841, 0x4, 0x6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x2}, {0x4, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x0, 0x6, 0xfff, 0x1000, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x863b3885aa607b50}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7}, {0x4, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff, 0x4800, 0x4, 0x1a0, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1698, 0x8001, 0x9, 0x1, 0xd57, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x200, 0x7, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e6, 0x629a, 0x6, 0xfffd, 0x2, 0xd3, 0xca6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0xa, 0x0, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x1, 0xc, 0x24, 0x36, 0x48, 0x1b, 0x36, 0x30, 0x12, 0xc, 0x6c, 0x48, 0x16, 0x1, 0x4, 0x2, 0x6c, 0xb, 0x30, 0x48, 0x1, 0x6c, 0x2, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x6, 0x0, 0x1, 0x2, 0xfff1, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xf9e7, 0x6, 0xb, 0x7, 0x6, 0xb10e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0x9, 0xdc, 0x2, 0x9, 0x5, 0xc, 0x49]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x9, 0x1, 0x80, 0xd, 0x10, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x9, 0x60, 0xb, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x8, 0x977, 0xa, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0xf704, 0x6, 0x4, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc128, 0x6, 0x6, 0xfe, 0x7fff]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x2, 0x1}, {}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x1f}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x9, 0x5, 0x35, 0x3, 0x1, 0x1b, 0x24, 0xc, 0x36, 0x36, 0x30, 0xb, 0x6c, 0x0, 0x39, 0x60, 0x30, 0x9, 0x60, 0x3, 0x1b, 0xb, 0x9, 0xc, 0x1, 0xc, 0x6c, 0x20]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8817, 0x8, 0x0, 0x392, 0x800, 0x1, 0x1, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x6dac, 0x0, 0x2, 0x0, 0xe5c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x7}, {0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x80, 0x9, 0x100, 0x10, 0x9, 0x0, 0x3de1]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xd3ac, 0x10, 0x1, 0xf21, 0x0, 0x8000]}}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1293, 0x12a0, 0xa, 0x0, 0x5, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x4, 0x36, 0xb]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x80, 0x5, 0x5, 0xd, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xd420, 0xfa1, 0xe52e, 0x3, 0x0, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6c, 0x6c, 0x6, 0x4, 0x48, 0x1b, 0x3, 0x1b, 0x30, 0x6c, 0x36, 0x60, 0x5, 0x12, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x7b]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x8, 0x6, 0x6, 0x8, 0xbf9b, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xb68}, 0x1, 0x0, 0x0, 0x20000091}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 454.91365ms ago: executing program 4 (id=21548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 348.327855ms ago: executing program 4 (id=21549): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@overriderock}]}, 0x1, 0x54e, &(0x7f0000000580)="$eJzs3V1v01gawPHHpV2irNRdLSuEqgKHsisVqQQngaCIK69zkh5I7Mh2UHuFKpqiihRWlJW2vWF7w85IMx+CuZwPMd8IzUeYkV/S17wAfZ3q/4vgnNjHPs9JLT9yGx8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb232dZHFsi9A8WIfkWs+J/kcnIjXXTj73urr8f/zcls+m5WcnGRk+0/X//rk2uTE/3tRwT8VX76xj1tbm2/Xun1uu9OKpAL6ObV4esa2jOhb1pOQysT+qpaqdgPFuuhqpumDpfDSLeUG2gn8gM1795TxWq1rHRh2e94jZrT1P2Fj++XbLuinhba2glC33vwtBC6i6bZNF4jaROvjts8jg/EZyZSkXZaSq2t97rlcQOIGxW/pFFpXKOSXSoVi6VSsfKo+uixbU8eWWAfIkdanNxBiz+mEzx7A8czkeV/aYoRTzqyJGrgy5WaBOJLa8j6TD////OBHtnv/vzfz/I39lbPSJL/b6Xvbg3L/0NiObvXpmzJtryWFelJT7ry7twjOttXQ7R4YiQUX4y0xEmWqGyJkqpUpCK2vJBFqUsoSupipClaQlmWUCLRyRHlSiBaHInEl0CUzIsr90RJUapSlbIo0VKQZfGlI540pCZOspc1WU8+97Ioa1iMu42KQ4eR7x93XSmNGC35H8d3oudv4Dh+6+d/AAAAAABwaVnJb9/j6/8puZnU6qap7fMOCwAAAAAAnKDkL/+zcTEV126KxfU/AAAAAACXjZXcY2eJSF5up7U1sZLbpfglAAAAAAAAl0Ty9/9bcZHMgXJbrN3pUrj+BwAAAADgkvhu7Bz7Yfuq9cuvEgRT1k576R/WRjI3r7NxJd3uyuE9RvUZazrbSVJU0mJy0tWzVi5ttDsJ5uesWBsXh7UXgLMbwP++JoBrk/KD3Enb3FlNy9VszV/SXvJ109QF128+KYrjTE9Eein6z5v1/0oy/O+91rSVk/Vet/DybW81iWUn3svORjaB4pF5FEfE8j6ZbyG552LgiKeSGzGyfvOWrK33uvb+8U+km08c7PHD9Ig+P8pc2moum/E231+T9pmL+ywWho0+i6J4zJF/lLtpm7vzd9NiQBSlcVGU9kcx+LM4fhTlcVGUjxkFAJyXtTFZyJIjefcbznLflt3lK7P7R5lP28zPJCfWyZkBZ3R73BndPmZ2+/nIM5CG5di43x8PZdVP8QafhvYbNktW/BFeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppJhZAW5BwAwwP5n7FgD8//Yp/BYD7Or6p3DV9VZxvvb7lcKCvJS3kpPVmUhudsg+cbBwL3m930NYWHMVWs+SZPpE14WRlzV/Sm5y6G/39LItgdjKJ/FjwIAgDMzNyYPf0n+Xxhz3X0wl4++Os7ve1obAAA4HTr4bOWj/1tBYNovitVq0YkWtQp895kKTK2hlfEiHbiLjtfQqh34ke/6zbjy3NR0qMJOu+0Hkar7gWr7oVlKpg9U2aPfQ91yvMi4YbupnVAr1/cix41UzYSuanf+1TThog6SjcO2dk3duE5kfE+FfidwdUGpUOt9DU1Ne5Gpm7jqqXZgWk6QU8/9ZqelVU2HbmDakZ/usN+X8ep+0Ep2WzjvDxsAgAtic2v79Uqv1313ipWBHefOfKgAACAzJksDAAAAAAAAAAAAAAAAAAAAAIAL4Czu/6NyySv9qaAvSjxUTqAy9tTx4dRPTgBO1e8BAAD//+qOUB8=") 343.571495ms ago: executing program 4 (id=21550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000200), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x100000000000000}, 0x18) socket$inet(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 325.670865ms ago: executing program 6 (id=21551): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 196.461701ms ago: executing program 6 (id=21552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[@ANYBLOB="01a4ca630b91b55559bbbbbb86dd6745208e00183aff00000000000000000000ffffac1414aaff"], 0x0) 150.808933ms ago: executing program 6 (id=21553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 122.036414ms ago: executing program 5 (id=21554): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket(0x400000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) 91.018545ms ago: executing program 4 (id=21555): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x4c240, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x2, 0x4, 0xa, 0x9}, {0x731, 0x7, 0x0, 0x1}, {0xff70, 0x5, 0x1a, 0xa}, {0x1f71, 0x18, 0x7f, 0x8f}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002ec0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000b000000000000003d04000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000009d2f87bc52781f651c6208803487de000000850000000c000000b7000000007b8af8ff000000008af0fe00000000bfa100400000000007010000f9ffffffbfa4090001000000070400bba303f6bb6d695cade000f0", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184700000800000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x3, 0x1, 0x983, 0xff}, 0x10, 0x1ca85, r4, 0x0, &(0x7f0000001d00)=[0xffffffffffffffff, r2], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000100)) 44.309958ms ago: executing program 6 (id=21556): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00?\x84\xaf\x15\xda\xe8\xa4\x12X\xb8\xa5\xb4\xd4+\x1a\x02\xdeG\xfa\x98x\xa5\x0e)j\xc8ae\xa4Y\x18\xaa\xc6\xcd\x17t#\xf5\xd2Tw\xf6\x8c\x88\xb0^\xd8@\x1d i\xbf\x9c\xc3\xc4\x9dBR\x8a$\xa6\x860P\xb0X\xbd[\xb7:\xb7SQ\xf5\t\fS\xa8f\xe7L\xecf/&\xcd\xbc\xe0I\x84\r\x02\xa8 x') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='rxrpc_local\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b356d298b089b0708374b090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000ff000f000000708afce0e918110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000080)}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f00000003c0)=""/119, 0x77}], 0x3, 0x6, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x94) process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='fscache_access_volume\x00', r0, 0x0, 0x3fc}, 0x18) gettid() lstat(&(0x7f0000000600)='./file2\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) 0s ago: executing program 1 (id=21557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e802026f4e0e4a9446c5e70568982b4e020f698393aa0f3881f9c24561f1b26b9ba5daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b75e0e3cd7bf2645cdcc6a8a9d00b3b1a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625004f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e00579f9b9b000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400e3c2dc89e808836fda1cc175ab8b634c3090407809506b23c578ecfcfbe0d42ded1ad653af04829c892fc3b9f44da252eede547d0d22fc65eb8c3cbceab847c88372b35efdfa74c688b1b7f04fe6ddcd51432eaee06093a769d649b0c20dc15c4e4202aa523aea45b1accecbf2c3879b97cd469a67d3da9ea8a107b79e4bbd434bfc39dfd8b15b1b9bd62c8ff87bcc23c861606b9f578a0a1f1cb325d7ff247093a665a2322702559e2eee12e4a56288315c877d015fee6965"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x15023e181e334ea3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a05000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240fffffffd2c0003801400010076657468300000000000000000000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) clock_getres(0xfffffffffffffffb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x30856, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x20008090) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) memfd_secret(0x80000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004ef260a7a55a494cd2000000000000000000000000aaff01000000000000020013000200000029bd700006350000"], 0x98}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): wireguard0: entered promiscuous mode [ 1537.269868][T31520] wireguard0: entered allmulticast mode [ 1537.289883][T31517] lo speed is unknown, defaulting to 1000 [ 1537.299511][T31521] hub 2-0:1.0: USB hub found [ 1537.304300][T31521] hub 2-0:1.0: 8 ports detected [ 1537.406131][T31532] wireguard0: entered promiscuous mode [ 1537.411758][T31532] wireguard0: entered allmulticast mode [ 1537.512430][T31538] hub 2-0:1.0: USB hub found [ 1537.513047][T31541] serio: Serial port ptm0 [ 1537.517220][T31538] hub 2-0:1.0: 8 ports detected [ 1537.574075][T31545] random: crng reseeded on system resumption [ 1537.605324][T31548] 9pnet_fd: Insufficient options for proto=fd [ 1537.794531][T31558] hub 2-0:1.0: USB hub found [ 1537.799355][T31558] hub 2-0:1.0: 8 ports detected [ 1538.216843][T31565] hub 2-0:1.0: USB hub found [ 1538.221655][T31565] hub 2-0:1.0: 8 ports detected [ 1538.813284][T31587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20446'. [ 1538.856728][T31587] bridge0: entered promiscuous mode [ 1538.862346][T31587] bridge0: port 4(macvtap1) entered blocking state [ 1538.869200][T31587] bridge0: port 4(macvtap1) entered disabled state [ 1538.876098][T31587] macvtap1: entered allmulticast mode [ 1538.881504][T31587] bridge0: entered allmulticast mode [ 1538.887614][T31587] macvtap1: left allmulticast mode [ 1538.892749][T31587] bridge0: left allmulticast mode [ 1538.898699][T31587] bridge0: left promiscuous mode [ 1538.983028][T31592] 9pnet_fd: Insufficient options for proto=fd [ 1539.085692][T31595] lo speed is unknown, defaulting to 1000 [ 1539.138573][T31597] hub 2-0:1.0: USB hub found [ 1539.143553][T31597] hub 2-0:1.0: 8 ports detected [ 1539.185140][T31602] IPv6: Can't replace route, no match found [ 1539.216251][T31603] wireguard0: entered promiscuous mode [ 1539.221891][T31603] wireguard0: entered allmulticast mode [ 1539.246092][T31606] serio: Serial port ptm0 [ 1539.406659][T31611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20455'. [ 1539.937027][T31623] hub 2-0:1.0: USB hub found [ 1539.942820][T31623] hub 2-0:1.0: 8 ports detected [ 1539.983745][T31625] 9pnet_fd: Insufficient options for proto=fd [ 1540.023490][T31627] 9p: Unknown access argument ¿: -22 [ 1540.124421][T31631] IPv6: Can't replace route, no match found [ 1540.178633][T31634] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1540.244749][T31634] SELinux: failed to load policy [ 1540.278478][T31640] loop4: detected capacity change from 0 to 512 [ 1540.294856][T31640] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1540.315691][T31640] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1540.489775][T31650] IPv6: Can't replace route, no match found [ 1540.547767][T31654] 9pnet_fd: Insufficient options for proto=fd [ 1540.737285][T31665] IPv6: Can't replace route, no match found [ 1540.815587][T31667] serio: Serial port ptm0 [ 1540.884515][T31672] random: crng reseeded on system resumption [ 1540.890603][T31671] wireguard0: entered promiscuous mode [ 1540.896216][T31671] wireguard0: entered allmulticast mode [ 1541.300364][T31691] hub 2-0:1.0: USB hub found [ 1541.305279][T31691] hub 2-0:1.0: 8 ports detected [ 1541.385512][ T29] kauditd_printk_skb: 1070 callbacks suppressed [ 1541.385529][ T29] audit: type=1400 audit(1764536941.700:241705): avc: denied { write } for pid=31694 comm="syz.1.20485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1541.422926][ T29] audit: type=1400 audit(1764536941.728:241706): avc: denied { create } for pid=31694 comm="syz.1.20485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1541.423607][T31695] tipc: Enabled bearer , priority 0 [ 1541.443770][ T29] audit: type=1400 audit(1764536941.728:241707): avc: denied { write } for pid=31694 comm="syz.1.20485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1541.471581][ T29] audit: type=1400 audit(1764536941.728:241708): avc: denied { read } for pid=31694 comm="syz.1.20485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1541.497430][ T29] audit: type=1400 audit(1764536941.802:241709): avc: denied { ioctl } for pid=31694 comm="syz.1.20485" path="socket:[366997]" dev="sockfs" ino=366997 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1541.531938][T31695] syzkaller0: entered promiscuous mode [ 1541.537499][T31695] syzkaller0: entered allmulticast mode [ 1541.543406][ T29] audit: type=1326 audit(1764536941.831:241710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31683 comm="syz.3.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1541.567653][ T29] audit: type=1326 audit(1764536941.831:241711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31683 comm="syz.3.20481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1541.591570][ T29] audit: type=1400 audit(1764536941.831:241712): avc: denied { prog_load } for pid=31683 comm="syz.3.20481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1541.611219][ T29] audit: type=1400 audit(1764536941.831:241713): avc: denied { bpf } for pid=31683 comm="syz.3.20481" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1541.632178][ T29] audit: type=1400 audit(1764536941.831:241714): avc: denied { perfmon } for pid=31683 comm="syz.3.20481" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1541.633349][T31702] IPv6: Can't replace route, no match found [ 1541.675781][T31703] 9pnet_fd: Insufficient options for proto=fd [ 1541.675900][T31695] tipc: Resetting bearer [ 1541.756495][T31694] tipc: Resetting bearer [ 1541.787561][T31694] tipc: Disabling bearer [ 1541.824470][T31710] hub 2-0:1.0: USB hub found [ 1541.829306][T31710] hub 2-0:1.0: 8 ports detected [ 1541.968120][T31717] hub 2-0:1.0: USB hub found [ 1541.972880][T31717] hub 2-0:1.0: 8 ports detected [ 1541.986201][T31720] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20494'. [ 1541.989547][T31721] 9pnet_fd: Insufficient options for proto=fd [ 1542.079580][T31726] 9pnet_fd: Insufficient options for proto=fd [ 1542.114983][T31728] net_ratelimit: 224 callbacks suppressed [ 1542.115000][T31728] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1542.173638][T31735] 9pnet_fd: Insufficient options for proto=fd [ 1542.238424][T31739] hub 2-0:1.0: USB hub found [ 1542.243175][T31739] hub 2-0:1.0: 8 ports detected [ 1542.394032][T31755] lo speed is unknown, defaulting to 1000 [ 1542.769263][T31767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20510'. [ 1542.823550][T31771] loop4: detected capacity change from 0 to 512 [ 1542.839268][T31771] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1542.848207][T31771] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1542.949274][T31776] lo speed is unknown, defaulting to 1000 [ 1543.004176][T31776] lo speed is unknown, defaulting to 1000 [ 1543.184007][T31788] hub 2-0:1.0: USB hub found [ 1543.224683][T31788] hub 2-0:1.0: 8 ports detected [ 1543.643766][T31813] FAULT_INJECTION: forcing a failure. [ 1543.643766][T31813] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.656459][T31813] CPU: 1 UID: 0 PID: 31813 Comm: syz.1.20526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1543.656515][T31813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1543.656528][T31813] Call Trace: [ 1543.656535][T31813] [ 1543.656542][T31813] __dump_stack+0x1d/0x30 [ 1543.656566][T31813] dump_stack_lvl+0xe8/0x140 [ 1543.656634][T31813] dump_stack+0x15/0x1b [ 1543.656671][T31813] should_fail_ex+0x265/0x280 [ 1543.656690][T31813] should_failslab+0x8c/0xb0 [ 1543.656778][T31813] kmem_cache_alloc_noprof+0x50/0x480 [ 1543.656807][T31813] ? skb_clone+0x151/0x1f0 [ 1543.656829][T31813] skb_clone+0x151/0x1f0 [ 1543.656911][T31813] __netlink_deliver_tap+0x2c9/0x500 [ 1543.656937][T31813] netlink_unicast+0x66b/0x690 [ 1543.656965][T31813] netlink_sendmsg+0x58b/0x6b0 [ 1543.656992][T31813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.657013][T31813] __sock_sendmsg+0x145/0x180 [ 1543.657039][T31813] ____sys_sendmsg+0x31e/0x4e0 [ 1543.657059][T31813] ___sys_sendmsg+0x17b/0x1d0 [ 1543.657090][T31813] __x64_sys_sendmsg+0xd4/0x160 [ 1543.657144][T31813] x64_sys_call+0x191e/0x3000 [ 1543.657167][T31813] do_syscall_64+0xd2/0x200 [ 1543.657188][T31813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1543.657214][T31813] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1543.657247][T31813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.657269][T31813] RIP: 0033:0x7f775b65f749 [ 1543.657286][T31813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.657306][T31813] RSP: 002b:00007f775a0bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1543.657420][T31813] RAX: ffffffffffffffda RBX: 00007f775b8b5fa0 RCX: 00007f775b65f749 [ 1543.657435][T31813] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 1543.657448][T31813] RBP: 00007f775a0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.657463][T31813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.657475][T31813] R13: 00007f775b8b6038 R14: 00007f775b8b5fa0 R15: 00007ffe2fb74768 [ 1543.657500][T31813] [ 1543.711188][T31811] hub 2-0:1.0: USB hub found [ 1543.873072][T31811] hub 2-0:1.0: 8 ports detected [ 1543.888602][T31819] hub 2-0:1.0: USB hub found [ 1543.894120][T31819] hub 2-0:1.0: 8 ports detected [ 1543.927621][T31821] 9pnet_fd: Insufficient options for proto=fd [ 1543.963355][T32516] Bluetooth: hci0: Frame reassembly failed (-84) [ 1544.347608][T31838] veth0_to_batadv: entered promiscuous mode [ 1544.353649][T31838] macvtap1: entered allmulticast mode [ 1544.359198][T31838] veth0_to_batadv: entered allmulticast mode [ 1544.366915][T31838] batman_adv: batadv0: Adding interface: macvtap1 [ 1544.373439][T31838] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.401879][T31838] batman_adv: batadv0: Interface activated: macvtap1 [ 1544.444385][T31842] loop6: detected capacity change from 0 to 512 [ 1544.451904][T31842] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1544.460717][T31842] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1544.597194][T31854] hub 2-0:1.0: USB hub found [ 1544.602039][T31854] hub 2-0:1.0: 8 ports detected [ 1544.654836][T31860] 9pnet_fd: Insufficient options for proto=fd [ 1544.962095][T31874] loop4: detected capacity change from 0 to 512 [ 1544.969994][T31874] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1544.979375][T31874] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1545.150133][T31883] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1545.154008][T31881] hub 2-0:1.0: USB hub found [ 1545.162317][T31883] SELinux: failed to load policy [ 1545.165797][T31881] hub 2-0:1.0: 8 ports detected [ 1545.267947][T31889] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1545.278087][T31889] SELinux: failed to load policy [ 1545.308013][T31891] wireguard0: entered promiscuous mode [ 1545.313582][T31891] wireguard0: entered allmulticast mode [ 1545.491412][T31903] loop6: detected capacity change from 0 to 512 [ 1545.522786][T31903] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1545.553149][T31903] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1545.627716][T31911] pimreg: entered allmulticast mode [ 1545.637395][T31911] pimreg: left allmulticast mode [ 1545.737377][T31921] IPv6: NLM_F_CREATE should be specified when creating new route [ 1545.753425][T31919] hub 2-0:1.0: USB hub found [ 1545.758639][T31919] hub 2-0:1.0: 8 ports detected [ 1545.775842][T31921] lo speed is unknown, defaulting to 1000 [ 1545.782843][T31921] lo speed is unknown, defaulting to 1000 [ 1545.789122][T31921] lo speed is unknown, defaulting to 1000 [ 1545.824455][T31921] infiniband sz1: set active [ 1545.829206][T31921] infiniband sz1: added lo [ 1545.837200][T22319] lo speed is unknown, defaulting to 1000 [ 1545.847169][T31921] RDS/IB: sz1: added [ 1545.851255][T31921] smc: adding ib device sz1 with port count 1 [ 1545.857652][T31921] smc: ib device sz1 port 1 has no pnetid [ 1545.863937][ T3394] lo speed is unknown, defaulting to 1000 [ 1545.870436][T31921] lo speed is unknown, defaulting to 1000 [ 1545.912550][T31921] lo speed is unknown, defaulting to 1000 [ 1545.941315][T31921] lo speed is unknown, defaulting to 1000 [ 1545.971167][T31921] lo speed is unknown, defaulting to 1000 [ 1546.000436][T31921] lo speed is unknown, defaulting to 1000 [ 1546.029105][T31921] lo speed is unknown, defaulting to 1000 [ 1546.057494][T31921] lo speed is unknown, defaulting to 1000 [ 1546.127906][T31933] serio: Serial port ptm1 [ 1546.173398][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1546.173423][T13781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1546.247782][T31938] random: crng reseeded on system resumption [ 1546.562236][T31944] loop6: detected capacity change from 0 to 512 [ 1546.571446][T31944] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1546.582471][T31944] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1546.633688][T31945] wireguard0: entered promiscuous mode [ 1546.639309][T31945] wireguard0: entered allmulticast mode [ 1546.779405][ T29] kauditd_printk_skb: 1338 callbacks suppressed [ 1546.779445][ T29] audit: type=1400 audit(1764536946.742:243053): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1546.812587][ T29] audit: type=1400 audit(1764536946.751:243054): avc: denied { read write } for pid=24490 comm="syz-executor" name="loop4" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1546.837080][ T29] audit: type=1400 audit(1764536946.751:243055): avc: denied { open } for pid=24490 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1546.861853][ T29] audit: type=1400 audit(1764536946.751:243056): avc: denied { ioctl } for pid=24490 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=975 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1546.898589][ T29] audit: type=1400 audit(1764536946.798:243057): avc: denied { write } for pid=31951 comm="syz.4.20577" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1546.902281][T31952] hub 2-0:1.0: USB hub found [ 1546.921851][ T29] audit: type=1400 audit(1764536946.854:243058): avc: denied { recv } for pid=31822 comm="syz.3.20530" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1546.952709][ T29] audit: type=1400 audit(1764536946.854:243059): avc: denied { prog_load } for pid=31951 comm="syz.4.20577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1546.953021][T31952] hub 2-0:1.0: 8 ports detected [ 1546.972271][ T29] audit: type=1400 audit(1764536946.854:243060): avc: denied { bpf } for pid=31951 comm="syz.4.20577" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1546.998254][ T29] audit: type=1400 audit(1764536946.854:243061): avc: denied { perfmon } for pid=31951 comm="syz.4.20577" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1547.019566][ T29] audit: type=1400 audit(1764536946.854:243062): avc: denied { map_create } for pid=31951 comm="syz.4.20577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1547.113111][T31960] 9pnet_fd: Insufficient options for proto=fd [ 1547.162951][T31972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20584'. [ 1547.175321][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20584'. [ 1547.313341][T31984] hub 2-0:1.0: USB hub found [ 1547.318126][T31984] hub 2-0:1.0: 8 ports detected [ 1547.352567][T31986] serio: Serial port ptm0 [ 1547.361944][T31990] loop4: detected capacity change from 0 to 512 [ 1547.369992][T31990] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1547.394143][T31990] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1547.409112][T31990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.20591: bg 0: block 248: padding at end of block bitmap is not set [ 1547.425112][T31990] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.20591: Failed to acquire dquot type 1 [ 1547.437069][T31990] EXT4-fs (loop4): 1 truncate cleaned up [ 1547.443089][T31990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1547.481545][T31995] random: crng reseeded on system resumption [ 1548.078325][T24490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1548.172010][T32008] loop4: detected capacity change from 0 to 512 [ 1548.181033][T32008] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1548.190895][T32008] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1548.210545][T32008] netlink: 'syz.4.20596': attribute type 29 has an invalid length. [ 1548.246013][T32010] 9pnet_fd: Insufficient options for proto=fd [ 1548.353493][T32019] hub 2-0:1.0: USB hub found [ 1548.358897][T32019] hub 2-0:1.0: 8 ports detected [ 1548.443353][T32027] hub 2-0:1.0: USB hub found [ 1548.449440][T32027] hub 2-0:1.0: 8 ports detected [ 1548.482265][T32035] pimreg: entered allmulticast mode [ 1548.488233][T32035] pimreg: left allmulticast mode [ 1548.560444][T32038] serio: Serial port ptm0 [ 1548.626909][T32040] random: crng reseeded on system resumption [ 1549.087482][T32054] hub 2-0:1.0: USB hub found [ 1549.092325][T32054] hub 2-0:1.0: 8 ports detected [ 1549.505549][T32085] hub 2-0:1.0: USB hub found [ 1549.510596][T32085] hub 2-0:1.0: 8 ports detected [ 1549.568563][T32090] IPv6: NLM_F_CREATE should be specified when creating new route [ 1549.618193][T32090] rdma_rxe: rxe_newlink: failed to add lo [ 1549.724250][T32111] serio: Serial port ptm0 [ 1549.805380][T32116] random: crng reseeded on system resumption [ 1549.881156][T32126] hub 2-0:1.0: USB hub found [ 1549.885969][T32126] hub 2-0:1.0: 8 ports detected [ 1550.015177][T32136] loop6: detected capacity change from 0 to 512 [ 1550.024239][T32136] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1550.033341][T32136] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1550.043252][T32136] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1550.051488][T32136] System zones: 0-2, 18-18, 34-35 [ 1550.057552][T32136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1550.153541][T32144] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1550.510911][T32147] hub 2-0:1.0: USB hub found [ 1550.515758][T32147] hub 2-0:1.0: 8 ports detected [ 1550.550099][T32149] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1550.560586][T32149] SELinux: failed to load policy [ 1550.592163][T32151] pimreg: entered allmulticast mode [ 1550.599672][T32151] pimreg: left allmulticast mode [ 1550.703787][T32156] wireguard0: entered promiscuous mode [ 1550.710308][T32156] wireguard0: entered allmulticast mode [ 1550.720642][T32155] hub 2-0:1.0: USB hub found [ 1550.725477][T32155] hub 2-0:1.0: 8 ports detected [ 1550.849967][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.106744][T32181] serio: Serial port ptm0 [ 1551.128228][T32179] hub 2-0:1.0: USB hub found [ 1551.132967][T32179] hub 2-0:1.0: 8 ports detected [ 1551.175827][T32187] random: crng reseeded on system resumption [ 1552.022513][T32208] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1552.033633][T32208] SELinux: failed to load policy [ 1552.128420][ T29] kauditd_printk_skb: 1490 callbacks suppressed [ 1552.128435][ T29] audit: type=1326 audit(1764536951.747:244549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.3.20674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1552.161495][ T29] audit: type=1400 audit(1764536951.747:244550): avc: denied { prog_load } for pid=32219 comm="syz.4.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1552.181113][ T29] audit: type=1400 audit(1764536951.747:244551): avc: denied { bpf } for pid=32219 comm="syz.4.20675" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1552.202386][ T29] audit: type=1400 audit(1764536951.747:244552): avc: denied { perfmon } for pid=32219 comm="syz.4.20675" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1552.223747][ T29] audit: type=1400 audit(1764536951.747:244553): avc: denied { create } for pid=32219 comm="syz.4.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1552.244329][ T29] audit: type=1400 audit(1764536951.747:244554): avc: denied { map_create } for pid=32219 comm="syz.4.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1552.263838][ T29] audit: type=1400 audit(1764536951.747:244555): avc: denied { map_read map_write } for pid=32219 comm="syz.4.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1552.284243][ T29] audit: type=1400 audit(1764536951.747:244556): avc: denied { create } for pid=32219 comm="syz.4.20675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1552.304025][ T29] audit: type=1400 audit(1764536951.747:244557): avc: denied { map } for pid=32219 comm="syz.4.20675" path="socket:[368343]" dev="sockfs" ino=368343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1552.328222][ T29] audit: type=1400 audit(1764536951.747:244558): avc: denied { read accept } for pid=32219 comm="syz.4.20675" path="socket:[368343]" dev="sockfs" ino=368343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1552.413190][T32231] loop4: detected capacity change from 0 to 512 [ 1552.421978][T32231] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1552.431306][T32231] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1552.474018][T32231] netlink: 'syz.4.20677': attribute type 29 has an invalid length. [ 1552.533733][T32239] 9pnet_fd: Insufficient options for proto=fd [ 1552.572309][T32242] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 1552.582564][T32242] SELinux: failed to load policy [ 1552.726340][T32253] wireguard0: entered promiscuous mode [ 1552.731935][T32253] wireguard0: entered allmulticast mode [ 1552.749054][T32251] lo speed is unknown, defaulting to 1000 [ 1552.755072][T32251] lo speed is unknown, defaulting to 1000 [ 1552.990908][T32262] 9pnet_fd: Insufficient options for proto=fd [ 1553.242679][T32278] 9pnet_fd: Insufficient options for proto=fd [ 1553.420287][T32285] lo speed is unknown, defaulting to 1000 [ 1553.426857][T32285] lo speed is unknown, defaulting to 1000 [ 1553.455211][T32289] hub 2-0:1.0: USB hub found [ 1553.474249][T32289] hub 2-0:1.0: 8 ports detected [ 1553.564008][T21332] Bluetooth: hci0: Frame reassembly failed (-84) [ 1553.713906][T32308] 9pnet_fd: Insufficient options for proto=fd [ 1554.015016][T32319] FAULT_INJECTION: forcing a failure. [ 1554.015016][T32319] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.027924][T32319] CPU: 0 UID: 0 PID: 32319 Comm: syz.5.20710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1554.027955][T32319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1554.028045][T32319] Call Trace: [ 1554.028054][T32319] [ 1554.028063][T32319] __dump_stack+0x1d/0x30 [ 1554.028088][T32319] dump_stack_lvl+0xe8/0x140 [ 1554.028107][T32319] dump_stack+0x15/0x1b [ 1554.028123][T32319] should_fail_ex+0x265/0x280 [ 1554.028140][T32319] ? __scm_send+0x3dd/0xb30 [ 1554.028164][T32319] should_failslab+0x8c/0xb0 [ 1554.028213][T32319] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1554.028241][T32319] __scm_send+0x3dd/0xb30 [ 1554.028261][T32319] ? selinux_socket_getpeersec_dgram+0x206/0x280 [ 1554.028353][T32319] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1554.028377][T32319] unix_dgram_sendmsg+0xbb/0xfd0 [ 1554.028418][T32319] ? selinux_socket_sendmsg+0x175/0x1b0 [ 1554.028445][T32319] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1554.028526][T32319] __sock_sendmsg+0x145/0x180 [ 1554.028587][T32319] ____sys_sendmsg+0x31e/0x4e0 [ 1554.028611][T32319] __sys_sendmsg_sock+0x28/0x40 [ 1554.028630][T32319] io_sendmsg+0x163/0x490 [ 1554.028696][T32319] __io_issue_sqe+0xfe/0x2e0 [ 1554.028721][T32319] ? io_assign_file+0x29/0x200 [ 1554.028753][T32319] io_issue_sqe+0x56/0xa80 [ 1554.028780][T32319] ? refill_obj_stock+0x254/0x2e0 [ 1554.028851][T32319] ? __rcu_read_unlock+0x4f/0x70 [ 1554.028977][T32319] io_req_task_submit+0xa1/0x100 [ 1554.029117][T32319] io_poll_task_func+0x5fc/0x7c0 [ 1554.029143][T32319] ? __pfx_io_poll_task_func+0x10/0x10 [ 1554.029167][T32319] io_handle_tw_list+0xcc/0x1c0 [ 1554.029199][T32319] tctx_task_work_run+0x6d/0x1a0 [ 1554.029282][T32319] tctx_task_work+0x3f/0x80 [ 1554.029306][T32319] task_work_run+0x131/0x1a0 [ 1554.029334][T32319] exit_to_user_mode_loop+0xed/0x110 [ 1554.029417][T32319] do_syscall_64+0x1d6/0x200 [ 1554.029442][T32319] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1554.029473][T32319] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1554.029567][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.029591][T32319] RIP: 0033:0x7fed683df749 [ 1554.029610][T32319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.029660][T32319] RSP: 002b:00007fed66e3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1554.029679][T32319] RAX: 0000000000000000 RBX: 00007fed68635fa0 RCX: 00007fed683df749 [ 1554.029694][T32319] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1554.029707][T32319] RBP: 00007fed66e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.029720][T32319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.029732][T32319] R13: 00007fed68636038 R14: 00007fed68635fa0 R15: 00007ffd3a581a78 [ 1554.029757][T32319] [ 1554.516940][T21332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.566084][T21332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.615196][T32324] lo speed is unknown, defaulting to 1000 [ 1554.621647][T32336] pimreg: entered allmulticast mode [ 1554.627404][T32324] lo speed is unknown, defaulting to 1000 [ 1554.634570][T21332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.645775][T32336] pimreg: left allmulticast mode [ 1554.683694][T21332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.732486][T32324] chnl_net:caif_netlink_parms(): no params data found [ 1554.787772][T32343] loop4: detected capacity change from 0 to 164 [ 1554.797169][T32324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.804659][T32324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.812864][T32324] bridge_slave_0: entered allmulticast mode [ 1554.813531][T32343] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1554.826577][T32324] bridge_slave_0: entered promiscuous mode [ 1554.834510][T32345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20715'. [ 1554.834925][T32324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.850788][T32324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.853272][T32345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20715'. [ 1554.858997][T32324] bridge_slave_1: entered allmulticast mode [ 1554.873638][T32324] bridge_slave_1: entered promiscuous mode [ 1554.905738][T32324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.927454][T32324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.944888][T21332] vlan2: left promiscuous mode [ 1554.950175][T21332] bridge0: port 3(vlan2) entered disabled state [ 1554.966256][T21332] bridge_slave_1: left allmulticast mode [ 1554.972066][T21332] bridge_slave_1: left promiscuous mode [ 1554.977799][T21332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.986093][T21332] bridge_slave_0: left promiscuous mode [ 1554.991858][T21332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.048526][T32353] 9pnet_fd: Insufficient options for proto=fd [ 1555.112706][T21332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.123362][T21332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.134218][T21332] bond0 (unregistering): Released all slaves [ 1555.172154][T32324] team0: Port device team_slave_0 added [ 1555.201982][T32324] team0: Port device team_slave_1 added [ 1555.207909][T21332] tipc: Left network mode [ 1555.240164][T32324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.247230][T32324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.273276][T32324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.297331][T21332] hsr_slave_0: left promiscuous mode [ 1555.304865][T21332] hsr_slave_1: left promiscuous mode [ 1555.310701][T21332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.318309][T21332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.336621][T21332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.344498][T21332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.353013][T21332] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1555.360056][T21332] batman_adv: batadv0: Removing interface: macvtap1 [ 1555.376006][T32360] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1555.390748][T32360] SELinux: failed to load policy [ 1555.395874][T21332] veth0_to_batadv: left allmulticast mode [ 1555.401771][T21332] veth0_to_batadv: left promiscuous mode [ 1555.408115][T21332] veth1_macvtap: left promiscuous mode [ 1555.414572][T21332] veth0_macvtap: left promiscuous mode [ 1555.420180][T21332] veth1_vlan: left promiscuous mode [ 1555.425445][T21332] veth0_vlan: left promiscuous mode [ 1555.564037][T21332] team0 (unregistering): Port device team_slave_1 removed [ 1555.586741][T21332] team0 (unregistering): Port device team_slave_0 removed [ 1555.654088][T32499] smc: removing ib device sz1 [ 1555.661006][T32324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.668311][T32324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.694758][T32324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.743224][ T4077] lo speed is unknown, defaulting to 1000 [ 1555.749052][ T4077] sz1: Port: 1 Link DOWN [ 1555.754404][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1555.759572][T13781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1555.823607][T32324] hsr_slave_0: entered promiscuous mode [ 1555.829868][T32324] hsr_slave_1: entered promiscuous mode [ 1556.186420][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20723'. [ 1556.399429][T32383] loop6: detected capacity change from 0 to 512 [ 1556.430595][T32383] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1556.448481][T32383] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1556.463515][T32383] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.20725: bg 0: block 248: padding at end of block bitmap is not set [ 1556.479402][T32383] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.20725: Failed to acquire dquot type 1 [ 1556.491396][T32383] EXT4-fs (loop6): 1 truncate cleaned up [ 1556.497561][T32383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1556.700125][T32389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20726'. [ 1556.709330][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20726'. [ 1556.762450][T32324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1556.784719][T32324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1556.796524][T32324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1556.808277][T32324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1556.846908][T32324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.865145][T32324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.874670][T32516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.882040][T32516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.897728][T32525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.904867][T32525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1556.994982][T32410] hub 2-0:1.0: USB hub found [ 1557.000435][T32410] hub 2-0:1.0: 8 ports detected [ 1557.006802][T32324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.121926][T32324] veth0_vlan: entered promiscuous mode [ 1557.129735][T32324] veth1_vlan: entered promiscuous mode [ 1557.147769][T32324] veth0_macvtap: entered promiscuous mode [ 1557.155703][T32324] veth1_macvtap: entered promiscuous mode [ 1557.166141][T32324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.176931][T32324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.191543][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1557.202999][T32499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.213369][T32499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.224988][T32499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.234239][T32499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.255449][T32426] loop6: detected capacity change from 0 to 512 [ 1557.267030][T32426] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1557.276508][T32426] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1557.293702][T32426] netlink: 'syz.6.20733': attribute type 29 has an invalid length. [ 1557.359921][T32429] hub 2-0:1.0: USB hub found [ 1557.364645][T32429] hub 2-0:1.0: 8 ports detected [ 1557.418002][T32436] netlink: 72 bytes leftover after parsing attributes in process `syz.1.20736'. [ 1557.427334][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20736'. [ 1557.484962][ T29] kauditd_printk_skb: 1155 callbacks suppressed [ 1557.484980][ T29] audit: type=1400 audit(1764536956.761:245712): avc: denied { create } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1557.513797][ T29] audit: type=1400 audit(1764536956.780:245713): avc: denied { prog_load } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.533579][ T29] audit: type=1400 audit(1764536956.780:245714): avc: denied { bpf } for pid=32439 comm="syz.1.20738" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1557.554759][ T29] audit: type=1400 audit(1764536956.780:245715): avc: denied { perfmon } for pid=32439 comm="syz.1.20738" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1557.576027][ T29] audit: type=1400 audit(1764536956.789:245716): avc: denied { create } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1557.576611][T32440] IPv6: NLM_F_CREATE should be specified when creating new route [ 1557.595908][ T29] audit: type=1400 audit(1764536956.789:245717): avc: denied { map_create } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.623288][ T29] audit: type=1400 audit(1764536956.789:245718): avc: denied { map_read map_write } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.643605][ T29] audit: type=1400 audit(1764536956.789:245719): avc: denied { prog_load } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.663633][ T29] audit: type=1400 audit(1764536956.789:245720): avc: denied { prog_run } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.684248][ T29] audit: type=1400 audit(1764536956.874:245721): avc: denied { setopt } for pid=32439 comm="syz.1.20738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1557.696137][T32440] lo speed is unknown, defaulting to 1000 [ 1557.745238][T32440] lo speed is unknown, defaulting to 1000 [ 1557.759932][T32440] lo speed is unknown, defaulting to 1000 [ 1557.775789][T32447] serio: Serial port ptm0 [ 1557.794730][T32440] infiniband sz1: set active [ 1557.799444][T32440] infiniband sz1: added lo [ 1557.804205][ T23] lo speed is unknown, defaulting to 1000 [ 1557.820114][T32440] RDS/IB: sz1: added [ 1557.824235][T32440] smc: adding ib device sz1 with port count 1 [ 1557.830555][T32440] smc: ib device sz1 port 1 has no pnetid [ 1557.836840][ T10] lo speed is unknown, defaulting to 1000 [ 1557.842936][T32440] lo speed is unknown, defaulting to 1000 [ 1557.871528][T32440] lo speed is unknown, defaulting to 1000 [ 1557.904000][T32440] lo speed is unknown, defaulting to 1000 [ 1557.913958][T32452] random: crng reseeded on system resumption [ 1557.952957][T32440] lo speed is unknown, defaulting to 1000 [ 1557.998749][T32455] 9pnet_fd: Insufficient options for proto=fd [ 1558.012276][T32440] lo speed is unknown, defaulting to 1000 [ 1558.070474][T32440] lo speed is unknown, defaulting to 1000 [ 1558.129520][T32458] loop6: detected capacity change from 0 to 512 [ 1558.140072][T32440] lo speed is unknown, defaulting to 1000 [ 1558.151931][T32458] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1558.178671][T32458] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1558.216679][T32458] netlink: 'syz.6.20744': attribute type 29 has an invalid length. [ 1558.300586][T32463] loop6: detected capacity change from 0 to 164 [ 1558.309284][T32463] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1558.492985][T32482] 9pnet_fd: Insufficient options for proto=fd [ 1558.534825][T32488] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1558.552359][T32486] hub 2-0:1.0: USB hub found [ 1558.562528][T32486] hub 2-0:1.0: 8 ports detected [ 1558.603736][T32490] loop4: detected capacity change from 0 to 512 [ 1558.612897][T32490] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1558.622313][T32490] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1558.635655][T32490] netlink: 'syz.4.20756': attribute type 29 has an invalid length. [ 1558.734924][T32493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20757'. [ 1558.763255][T32500] IPv6: NLM_F_CREATE should be specified when creating new route [ 1558.804145][T32500] rdma_rxe: rxe_newlink: failed to add lo [ 1559.380321][T32521] lo speed is unknown, defaulting to 1000 [ 1559.386957][T32521] lo speed is unknown, defaulting to 1000 [ 1559.523193][T32529] hub 2-0:1.0: USB hub found [ 1559.545054][T32529] hub 2-0:1.0: 8 ports detected [ 1559.641649][T32537] loop6: detected capacity change from 0 to 512 [ 1559.650496][T32537] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1559.659860][T32537] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1559.677122][T32537] netlink: 'syz.6.20769': attribute type 29 has an invalid length. [ 1559.778260][T32542] 9pnet_fd: Insufficient options for proto=fd [ 1559.836157][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20772'. [ 1559.945675][T32552] FAULT_INJECTION: forcing a failure. [ 1559.945675][T32552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.958993][T32552] CPU: 0 UID: 0 PID: 32552 Comm: syz.5.20774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1559.959023][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1559.959035][T32552] Call Trace: [ 1559.959043][T32552] [ 1559.959052][T32552] __dump_stack+0x1d/0x30 [ 1559.959077][T32552] dump_stack_lvl+0xe8/0x140 [ 1559.959095][T32552] dump_stack+0x15/0x1b [ 1559.959127][T32552] should_fail_ex+0x265/0x280 [ 1559.959190][T32552] should_fail+0xb/0x20 [ 1559.959234][T32552] should_fail_usercopy+0x1a/0x20 [ 1559.959248][T32552] _copy_from_user+0x1c/0xb0 [ 1559.959310][T32552] ___sys_recvmsg+0xaa/0x370 [ 1559.959324][T32552] ? 0xffffffff81000000 [ 1559.959333][T32552] ? __rcu_read_unlock+0x4f/0x70 [ 1559.959400][T32552] __x64_sys_recvmsg+0xd1/0x160 [ 1559.959425][T32552] x64_sys_call+0x2b46/0x3000 [ 1559.959447][T32552] do_syscall_64+0xd2/0x200 [ 1559.959461][T32552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1559.959536][T32552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1559.959612][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.959626][T32552] RIP: 0033:0x7fed683df749 [ 1559.959637][T32552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.959649][T32552] RSP: 002b:00007fed66e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1559.959664][T32552] RAX: ffffffffffffffda RBX: 00007fed68635fa0 RCX: 00007fed683df749 [ 1559.959673][T32552] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1559.959704][T32552] RBP: 00007fed66e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.959712][T32552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.959772][T32552] R13: 00007fed68636038 R14: 00007fed68635fa0 R15: 00007ffd3a581a78 [ 1559.959784][T32552] [ 1560.187278][T32556] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1560.207633][T32556] loop6: detected capacity change from 0 to 1024 [ 1560.230679][T32556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 1560.245028][T32556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.269074][T32556] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1560.479352][T32566] hub 2-0:1.0: USB hub found [ 1560.484167][T32566] hub 2-0:1.0: 8 ports detected [ 1560.532991][T32570] netlink: 'syz.1.20780': attribute type 29 has an invalid length. [ 1560.547299][T32572] pimreg: entered allmulticast mode [ 1560.561923][T32572] pimreg: left allmulticast mode [ 1560.764337][T32584] wireguard0: entered promiscuous mode [ 1560.769861][T32584] wireguard0: entered allmulticast mode [ 1560.918565][T32592] rdma_rxe: rxe_newlink: failed to add lo [ 1561.004916][T32594] sz1: rxe_newlink: already configured on lo [ 1561.086506][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.119192][T32604] loop6: detected capacity change from 0 to 512 [ 1561.127409][T32604] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1561.136698][T32604] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1561.159400][T32604] netlink: 'syz.6.20792': attribute type 29 has an invalid length. [ 1561.333913][T32612] pimreg: entered allmulticast mode [ 1561.341146][T32612] pimreg: left allmulticast mode [ 1561.464223][T32601] Set syz1 is full, maxelem 65536 reached [ 1561.513724][T32615] loop6: detected capacity change from 0 to 164 [ 1561.524422][T32615] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1561.706337][T32623] wireguard0: entered promiscuous mode [ 1561.711932][T32623] wireguard0: entered allmulticast mode [ 1561.778861][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20798'. [ 1561.954476][T32627] rdma_rxe: rxe_newlink: failed to add lo [ 1562.473199][T32634] netlink: 'syz.3.20804': attribute type 29 has an invalid length. [ 1562.495127][T32653] pimreg: entered allmulticast mode [ 1562.502140][T32658] pimreg: left allmulticast mode [ 1562.818952][T32662] netlink: 182 bytes leftover after parsing attributes in process `syz.3.20810'. [ 1562.844131][ T29] kauditd_printk_skb: 1734 callbacks suppressed [ 1562.844149][ T29] audit: type=1326 audit(1764536961.766:247456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32685 comm="syz.5.20818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed683df749 code=0x7ffc0000 [ 1562.902336][ T29] audit: type=1326 audit(1764536961.766:247457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32685 comm="syz.5.20818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed683df749 code=0x7ffc0000 [ 1562.926673][ T29] audit: type=1400 audit(1764536961.766:247458): avc: denied { map_create } for pid=32685 comm="syz.5.20818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1562.946503][ T29] audit: type=1400 audit(1764536961.785:247459): avc: denied { map_read map_write } for pid=32685 comm="syz.5.20818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1562.966930][ T29] audit: type=1326 audit(1764536961.785:247460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32685 comm="syz.5.20818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed683df749 code=0x7ffc0000 [ 1562.990755][ T29] audit: type=1326 audit(1764536961.785:247461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32685 comm="syz.5.20818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed683df749 code=0x7ffc0000 [ 1563.014751][ T29] audit: type=1400 audit(1764536961.785:247462): avc: denied { prog_load } for pid=32685 comm="syz.5.20818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1563.034601][ T29] audit: type=1400 audit(1764536961.785:247463): avc: denied { bpf } for pid=32685 comm="syz.5.20818" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1563.055636][ T29] audit: type=1400 audit(1764536961.785:247464): avc: denied { perfmon } for pid=32685 comm="syz.5.20818" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1563.077165][ T29] audit: type=1400 audit(1764536961.785:247465): avc: denied { prog_run } for pid=32685 comm="syz.5.20818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1563.100830][T32697] loop6: detected capacity change from 0 to 512 [ 1563.111204][T32697] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1563.120857][T32697] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1563.140985][T32697] netlink: 'syz.6.20820': attribute type 29 has an invalid length. [ 1563.189048][T32704] lo speed is unknown, defaulting to 1000 [ 1563.195298][T32704] lo speed is unknown, defaulting to 1000 [ 1563.693312][T32732] wireguard0: entered promiscuous mode [ 1563.698825][T32732] wireguard0: entered allmulticast mode [ 1563.746783][T32735] 9pnet_fd: Insufficient options for proto=fd [ 1563.844163][T32739] loop4: detected capacity change from 0 to 512 [ 1563.852044][T32739] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1563.860806][T32739] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1563.872856][T32739] netlink: 'syz.4.20834': attribute type 29 has an invalid length. [ 1563.910545][T32741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20835'. [ 1564.012000][T32744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20836'. [ 1564.021283][T32744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20836'. [ 1564.484471][ T301] netlink: 'syz.5.20845': attribute type 29 has an invalid length. [ 1564.569003][ T306] hub 2-0:1.0: USB hub found [ 1564.573897][ T306] hub 2-0:1.0: 8 ports detected [ 1564.620904][ T308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20847'. [ 1564.634256][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20847'. [ 1565.139638][ T321] pimreg: entered allmulticast mode [ 1565.150984][ T321] pimreg: left allmulticast mode [ 1565.220647][ T330] wireguard0: entered promiscuous mode [ 1565.226662][ T330] wireguard0: entered allmulticast mode [ 1565.390422][ T341] netlink: 'syz.1.20856': attribute type 29 has an invalid length. [ 1565.511388][ T345] serio: Serial port ptm0 [ 1565.577688][ T346] random: crng reseeded on system resumption [ 1566.057599][ T359] 9pnet_fd: Insufficient options for proto=fd [ 1566.218414][ T369] loop4: detected capacity change from 0 to 512 [ 1566.226595][ T369] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1566.235499][ T369] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1566.249287][ T369] netlink: 'syz.4.20867': attribute type 29 has an invalid length. [ 1566.401071][T21332] Bluetooth: hci0: Frame reassembly failed (-84) [ 1566.517984][ T380] lo speed is unknown, defaulting to 1000 [ 1566.543936][T32499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.555455][ T380] lo speed is unknown, defaulting to 1000 [ 1566.569252][ T397] serio: Serial port ptm1 [ 1566.598542][T32499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.669016][T32499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.687532][ T380] chnl_net:caif_netlink_parms(): no params data found [ 1566.722847][T32499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.754611][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.761978][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.770115][ T380] bridge_slave_0: entered allmulticast mode [ 1566.776520][ T380] bridge_slave_0: entered promiscuous mode [ 1566.785191][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.792346][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.800499][ T380] bridge_slave_1: entered allmulticast mode [ 1566.807066][ T380] bridge_slave_1: entered promiscuous mode [ 1566.831337][ T380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.842009][ T380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.858758][T32499] vlan2: left promiscuous mode [ 1566.863694][T32499] bridge0: port 3(vlan2) entered disabled state [ 1566.870536][T32499] bridge_slave_1: left allmulticast mode [ 1566.876174][T32499] bridge_slave_1: left promiscuous mode [ 1566.882040][T32499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.890171][T32499] bridge_slave_0: left promiscuous mode [ 1566.895991][T32499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.966188][T32499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.976061][T32499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.985596][T32499] bond0 (unregistering): Released all slaves [ 1567.005100][ T380] team0: Port device team_slave_0 added [ 1567.012004][ T380] team0: Port device team_slave_1 added [ 1567.022896][T32499] tipc: Left network mode [ 1567.028657][ T380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.035718][ T380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.061675][ T380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.074237][T32499] hsr_slave_0: left promiscuous mode [ 1567.080054][T32499] hsr_slave_1: left promiscuous mode [ 1567.085723][T32499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.093104][T32499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.100552][T32499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.108051][T32499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.117866][T32499] veth1_macvtap: left promiscuous mode [ 1567.123343][T32499] veth0_macvtap: left promiscuous mode [ 1567.169485][T32499] team0 (unregistering): Port device team_slave_1 removed [ 1567.181709][T32499] team0 (unregistering): Port device team_slave_0 removed [ 1567.210283][ T380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.217298][ T380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.243306][ T380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.280984][ T380] hsr_slave_0: entered promiscuous mode [ 1567.287283][ T380] hsr_slave_1: entered promiscuous mode [ 1567.293350][ T380] debugfs: 'hsr0' already exists in 'hsr' [ 1567.299153][ T380] Cannot create hsr debugfs directory [ 1567.362683][ T413] wireguard0: entered promiscuous mode [ 1567.368177][ T413] wireguard0: entered allmulticast mode [ 1567.662184][ T428] serio: Serial port ptm1 [ 1567.696404][ T380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1567.705502][ T380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1567.714163][ T380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1567.726308][ T380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1567.730665][ T431] random: crng reseeded on system resumption [ 1567.768414][ T380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.780064][ T380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.789870][T32504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.797046][T32504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.810857][T32499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.818049][T32499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.906194][ T380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.109102][ T380] veth0_vlan: entered promiscuous mode [ 1568.119216][ T380] veth1_vlan: entered promiscuous mode [ 1568.135293][ T380] veth0_macvtap: entered promiscuous mode [ 1568.143711][ T380] veth1_macvtap: entered promiscuous mode [ 1568.158909][ T380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.172362][ T380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.185051][T32504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.196454][T32504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.228901][T32504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.239603][T32504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.258293][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 1568.258326][ T29] audit: type=1400 audit(1764536966.837:248666): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp" dev="sda1" ino=2113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1568.291077][ T29] audit: type=1400 audit(1764536966.837:248667): avc: denied { mount } for pid=380 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1568.313501][ T29] audit: type=1400 audit(1764536966.837:248668): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1568.339095][ T29] audit: type=1400 audit(1764536966.837:248669): avc: denied { mount } for pid=380 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1568.361183][ T29] audit: type=1400 audit(1764536966.837:248670): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1568.388218][ T29] audit: type=1400 audit(1764536966.837:248671): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=371428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1568.416444][ T29] audit: type=1400 audit(1764536966.837:248672): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp/newroot/syz-inputs" dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1568.442547][ T29] audit: type=1400 audit(1764536966.837:248673): avc: denied { mounton } for pid=380 comm="syz-executor" path="/root/syzkaller.kt64Jw/syz-tmp/newroot/syzcgroup/unified" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1568.469332][ T29] audit: type=1400 audit(1764536966.837:248674): avc: denied { unmount } for pid=380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1568.489055][ T29] audit: type=1400 audit(1764536966.846:248675): avc: denied { egress } for pid=32499 comm="kworker/u8:27" daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1568.578644][T13781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1568.596103][ T474] netlink: 'syz.3.20886': attribute type 10 has an invalid length. [ 1568.612958][ T476] wireguard0: entered promiscuous mode [ 1568.618459][ T476] wireguard0: entered allmulticast mode [ 1568.626321][ T474] batadv0: entered allmulticast mode [ 1568.634302][ T474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.642554][ T474] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1568.657366][ T474] netlink: 'syz.3.20886': attribute type 10 has an invalid length. [ 1568.665411][ T474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20886'. [ 1568.674811][ T474] batadv0: entered promiscuous mode [ 1568.681591][ T474] bond0: (slave batadv0): Releasing backup interface [ 1568.702301][ T474] bridge0: port 3(batadv0) entered blocking state [ 1568.708922][ T474] bridge0: port 3(batadv0) entered disabled state [ 1568.725451][ T480] lo speed is unknown, defaulting to 1000 [ 1568.737872][ T480] lo speed is unknown, defaulting to 1000 [ 1569.198418][T21332] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1569.207698][T21332] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1569.559143][ T508] hub 2-0:1.0: USB hub found [ 1569.564325][ T508] hub 2-0:1.0: 8 ports detected [ 1569.708017][ T515] serio: Serial port ptm0 [ 1569.797722][ T520] random: crng reseeded on system resumption [ 1569.805158][ T523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20900'. [ 1569.896849][T21332] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.911633][ T532] loop4: detected capacity change from 0 to 512 [ 1569.920007][ T532] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1569.959104][T21332] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.972763][ T522] lo speed is unknown, defaulting to 1000 [ 1569.980243][ T522] lo speed is unknown, defaulting to 1000 [ 1570.001605][ T532] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1570.017663][T21332] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.031629][ T532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.20902: bg 0: block 248: padding at end of block bitmap is not set [ 1570.046841][ T532] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.20902: Failed to acquire dquot type 1 [ 1570.070445][ T532] EXT4-fs (loop4): 1 truncate cleaned up [ 1570.076561][ T532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1570.096239][ T543] wireguard0: entered promiscuous mode [ 1570.101753][ T543] wireguard0: entered allmulticast mode [ 1570.142975][T21332] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.242411][ T551] netlink: 'syz.1.20906': attribute type 29 has an invalid length. [ 1570.277401][ T522] chnl_net:caif_netlink_parms(): no params data found [ 1570.334577][T21332] vlan2: left promiscuous mode [ 1570.339593][T21332] bridge0: port 3(vlan2) entered disabled state [ 1570.346564][T21332] bridge_slave_1: left allmulticast mode [ 1570.352216][T21332] bridge_slave_1: left promiscuous mode [ 1570.357863][T21332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.365698][T21332] bridge_slave_0: left promiscuous mode [ 1570.371537][T21332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.440764][T21332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.450459][T21332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.460404][T21332] bond0 (unregistering): Released all slaves [ 1570.486206][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.493389][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.500712][ T522] bridge_slave_0: entered allmulticast mode [ 1570.507385][ T522] bridge_slave_0: entered promiscuous mode [ 1570.514170][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.521295][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.528533][ T522] bridge_slave_1: entered allmulticast mode [ 1570.535342][ T522] bridge_slave_1: entered promiscuous mode [ 1570.542741][T21332] hsr_slave_0: left promiscuous mode [ 1570.549526][T21332] hsr_slave_1: left promiscuous mode [ 1570.555140][T21332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.562736][T21332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.582765][T21332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.590241][T21332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.607746][T21332] veth1_macvtap: left promiscuous mode [ 1570.613328][T21332] veth0_macvtap: left promiscuous mode [ 1570.668757][T21332] team0 (unregistering): Port device team_slave_1 removed [ 1570.679682][T21332] team0 (unregistering): Port device team_slave_0 removed [ 1570.715435][ T3826] lo speed is unknown, defaulting to 1000 [ 1570.721485][ T3826] infiniband syz2: ib_query_port failed (-19) [ 1570.740059][ T522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.753140][ T571] lo speed is unknown, defaulting to 1000 [ 1570.756567][ T522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.785339][ T522] team0: Port device team_slave_0 added [ 1570.792533][ T522] team0: Port device team_slave_1 added [ 1570.814733][ T522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.821722][ T522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.847777][ T522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.862296][ T522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.869346][ T522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.895483][ T522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.944090][ T380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1570.959659][ T522] hsr_slave_0: entered promiscuous mode [ 1570.967364][ T522] hsr_slave_1: entered promiscuous mode [ 1570.985445][ T522] debugfs: 'hsr0' already exists in 'hsr' [ 1570.991224][ T522] Cannot create hsr debugfs directory [ 1571.024479][ T578] IPv6: NLM_F_CREATE should be specified when creating new route [ 1571.093824][ T582] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1571.135091][ T578] rdma_rxe: rxe_newlink: failed to add lo [ 1571.178381][ T582] loop6: detected capacity change from 0 to 1024 [ 1571.220444][ T582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 1571.230267][ T582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.260633][ T582] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1571.284796][ T590] loop4: detected capacity change from 0 to 512 [ 1571.292830][ T590] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1571.301648][ T590] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1571.316729][ T590] netlink: 'syz.4.20917': attribute type 29 has an invalid length. [ 1571.340556][ T591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20916'. [ 1571.425825][ T597] loop4: detected capacity change from 0 to 512 [ 1571.433442][ T597] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1571.442232][ T597] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 1571.459621][ T597] netlink: 'syz.4.20919': attribute type 29 has an invalid length. [ 1571.562260][ T607] wireguard1: entered promiscuous mode [ 1571.567867][ T607] wireguard1: entered allmulticast mode [ 1571.569936][ T605] sz1: rxe_newlink: already configured on lo [ 1571.608844][ T522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1571.627144][ T522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1571.639474][ T522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1571.652361][ T522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1571.700384][ T616] wireguard0: entered promiscuous mode [ 1571.706438][ T616] wireguard0: entered allmulticast mode [ 1571.735533][ T619] netlink: 'syz.3.20927': attribute type 29 has an invalid length. [ 1571.888186][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20929'. [ 1571.998177][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.105941][ T638] lo speed is unknown, defaulting to 1000 [ 1572.125433][ T631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20931'. [ 1572.759540][ T522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.777439][ T522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.787466][T32525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.794690][T32525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.811528][T32517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.818626][T32517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.847301][ T522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1572.857769][ T522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1572.990072][ T522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.138267][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20937'. [ 1573.275894][ T522] veth0_vlan: entered promiscuous mode [ 1573.297449][ T522] veth1_vlan: entered promiscuous mode [ 1573.315485][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20939'. [ 1573.327782][ T522] veth0_macvtap: entered promiscuous mode [ 1573.340015][ T686] 9pnet_fd: Insufficient options for proto=fd [ 1573.340331][ T522] veth1_macvtap: entered promiscuous mode [ 1573.361542][ T522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.381537][ T522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.392748][T32504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.414848][T32504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.434129][T32504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.474672][T32504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.621983][ T697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=697 comm=syz.5.20898 [ 1573.634584][ T697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=697 comm=syz.5.20898 [ 1573.647263][ T29] kauditd_printk_skb: 1193 callbacks suppressed [ 1573.647281][ T29] audit: type=1400 audit(1764536971.851:249867): avc: denied { map_create } for pid=696 comm="syz.5.20898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1573.672882][ T29] audit: type=1400 audit(1764536971.851:249868): avc: denied { map_read map_write } for pid=696 comm="syz.5.20898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1573.693190][ T29] audit: type=1400 audit(1764536971.851:249869): avc: denied { prog_load } for pid=696 comm="syz.5.20898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1573.712579][ T29] audit: type=1400 audit(1764536971.851:249870): avc: denied { bpf } for pid=696 comm="syz.5.20898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1573.733439][ T29] audit: type=1400 audit(1764536971.851:249871): avc: denied { perfmon } for pid=696 comm="syz.5.20898" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1573.754688][ T29] audit: type=1400 audit(1764536971.851:249872): avc: denied { prog_load } for pid=696 comm="syz.5.20898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1573.773975][ T29] audit: type=1400 audit(1764536971.851:249873): avc: denied { bpf } for pid=696 comm="syz.5.20898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1573.794843][ T29] audit: type=1400 audit(1764536971.851:249874): avc: denied { prog_load } for pid=694 comm="syz.1.20945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1573.814526][ T29] audit: type=1400 audit(1764536971.860:249875): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1573.815636][ T703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20944'. [ 1573.838429][ T29] audit: type=1400 audit(1764536971.860:249876): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1574.134585][ T717] 9pnet_fd: Insufficient options for proto=fd [ 1574.192931][ T721] loop6: detected capacity change from 0 to 512 [ 1574.213505][ T721] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1574.222850][ T721] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1574.276163][ T721] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1574.291268][ T721] System zones: 0-2, 18-18, 34-35 [ 1574.307530][ T721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1574.483632][ T729] pimreg: entered allmulticast mode [ 1574.495096][ T729] pimreg: left allmulticast mode [ 1574.522085][ T733] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1574.745946][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1574.746015][T13781] Bluetooth: hci0: command 0x1003 tx timeout [ 1574.925798][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.951924][ T744] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1574.972054][ T744] loop6: detected capacity change from 0 to 1024 [ 1574.982814][ T744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 1574.991483][ T744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.013568][ T744] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1575.033045][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.109092][ T751] wireguard0: entered promiscuous mode [ 1575.114663][ T751] wireguard0: entered allmulticast mode [ 1575.463395][ T759] wireguard0: entered promiscuous mode [ 1575.468937][ T759] wireguard0: entered allmulticast mode [ 1575.492547][ T757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20964'. [ 1575.917054][T32504] Bluetooth: hci0: Frame reassembly failed (-84) [ 1576.090614][ T778] 9pnet_fd: Insufficient options for proto=fd [ 1576.197437][ T780] IPv6: NLM_F_CREATE should be specified when creating new route [ 1576.227263][ T780] rdma_rxe: rxe_newlink: failed to add lo [ 1577.363519][ T810] lo speed is unknown, defaulting to 1000 [ 1577.420075][ T814] 9pnet_fd: Insufficient options for proto=fd [ 1577.448278][ T818] wireguard0: entered promiscuous mode [ 1577.453951][ T818] wireguard0: entered allmulticast mode [ 1577.596050][ T824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20987'. [ 1577.958584][ T845] pimreg: entered allmulticast mode [ 1577.966372][ T845] pimreg: left allmulticast mode [ 1578.070527][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1578.070552][T13781] Bluetooth: hci0: command 0x1003 tx timeout [ 1578.347662][ T857] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1578.636009][ T867] pimreg: entered allmulticast mode [ 1578.731227][T13781] Bluetooth: hci0: sending frame failed (-49) [ 1578.737445][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1578.853926][ T878] lo speed is unknown, defaulting to 1000 [ 1579.019983][ T29] kauditd_printk_skb: 1333 callbacks suppressed [ 1579.020002][ T29] audit: type=1326 audit(1764536976.903:251210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.051815][ T29] audit: type=1400 audit(1764536976.922:251211): avc: denied { recv } for pid=853 comm="syz.4.20998" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1579.077617][ T29] audit: type=1326 audit(1764536976.931:251212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.101371][ T29] audit: type=1400 audit(1764536976.931:251213): avc: denied { map_create } for pid=884 comm="syz.5.21009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1579.120967][ T29] audit: type=1400 audit(1764536976.931:251214): avc: denied { bpf } for pid=884 comm="syz.5.21009" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1579.141864][ T29] audit: type=1400 audit(1764536976.931:251215): avc: denied { map_read map_write } for pid=884 comm="syz.5.21009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1579.162048][ T29] audit: type=1326 audit(1764536976.931:251216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.186041][ T29] audit: type=1326 audit(1764536976.931:251217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.213270][ T29] audit: type=1326 audit(1764536976.968:251218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.237163][ T29] audit: type=1326 audit(1764536976.968:251219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=884 comm="syz.5.21009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1579.338548][ T893] lo speed is unknown, defaulting to 1000 [ 1579.602029][ T907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21016'. [ 1579.934320][ T912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21019'. [ 1579.980636][ T920] loop4: detected capacity change from 0 to 164 [ 1579.989490][ T920] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1580.034358][ T922] wireguard1: entered promiscuous mode [ 1580.039964][ T922] wireguard1: entered allmulticast mode [ 1580.242285][ T927] loop6: detected capacity change from 0 to 512 [ 1580.260667][ T927] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1580.274818][ T927] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 1580.293665][ T927] netlink: 'syz.6.21023': attribute type 29 has an invalid length. [ 1580.521002][ T945] serio: Serial port ptm0 [ 1580.523069][ T943] lo speed is unknown, defaulting to 1000 [ 1580.591798][ T949] random: crng reseeded on system resumption [ 1581.100900][ T960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21035'. [ 1581.297386][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21036'. [ 1581.378881][ T971] wireguard1: entered promiscuous mode [ 1581.384462][ T971] wireguard1: entered allmulticast mode [ 1581.567950][ T988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21044'. [ 1581.595487][ T988] team0 (unregistering): Port device team_slave_0 removed [ 1581.626234][ T988] team0 (unregistering): Port device team_slave_1 removed [ 1582.270911][ T1011] lo speed is unknown, defaulting to 1000 [ 1582.334411][ T1015] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1582.411124][ T1019] rdma_rxe: rxe_newlink: failed to add lo [ 1582.661782][ T1034] netlink: 'syz.4.21060': attribute type 4 has an invalid length. [ 1582.684379][ T1034] netlink: 'syz.4.21060': attribute type 4 has an invalid length. [ 1583.180305][ T1054] wireguard0: entered promiscuous mode [ 1583.185893][ T1054] wireguard0: entered allmulticast mode [ 1583.343216][ T1059] rdma_rxe: rxe_newlink: failed to add lo [ 1583.540167][ T1069] bond1: entered promiscuous mode [ 1583.545619][ T1069] bond1: entered allmulticast mode [ 1583.551215][ T1069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1583.566394][ T1072] netlink: 'syz.6.21073': attribute type 97 has an invalid length. [ 1583.574358][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21073'. [ 1583.583453][ T1072] netlink: 'syz.6.21073': attribute type 97 has an invalid length. [ 1583.591461][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21073'. [ 1583.728838][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21078'. [ 1583.761642][ T1084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1084 comm=syz.3.21079 [ 1583.774342][ T1084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1084 comm=syz.3.21079 [ 1583.814699][ T1086] rdma_rxe: rxe_newlink: failed to add lo [ 1583.836976][ T1087] wireguard0: entered promiscuous mode [ 1583.842965][ T1087] wireguard0: entered allmulticast mode [ 1583.978508][ T1099] FAULT_INJECTION: forcing a failure. [ 1583.978508][ T1099] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.991218][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: syz.5.21084 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1583.991315][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1583.991336][ T1099] Call Trace: [ 1583.991344][ T1099] [ 1583.991351][ T1099] __dump_stack+0x1d/0x30 [ 1583.991373][ T1099] dump_stack_lvl+0xe8/0x140 [ 1583.991406][ T1099] dump_stack+0x15/0x1b [ 1583.991421][ T1099] should_fail_ex+0x265/0x280 [ 1583.991439][ T1099] should_failslab+0x8c/0xb0 [ 1583.991464][ T1099] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1583.991554][ T1099] ? __alloc_skb+0x101/0x320 [ 1583.991598][ T1099] __alloc_skb+0x101/0x320 [ 1583.991662][ T1099] netlink_alloc_large_skb+0xbf/0xf0 [ 1583.991689][ T1099] netlink_sendmsg+0x3cf/0x6b0 [ 1583.991707][ T1099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1583.991724][ T1099] __sock_sendmsg+0x145/0x180 [ 1583.991792][ T1099] ____sys_sendmsg+0x31e/0x4e0 [ 1583.991811][ T1099] ___sys_sendmsg+0x17b/0x1d0 [ 1583.991837][ T1099] __x64_sys_sendmsg+0xd4/0x160 [ 1583.991856][ T1099] x64_sys_call+0x191e/0x3000 [ 1583.991877][ T1099] do_syscall_64+0xd2/0x200 [ 1583.991931][ T1099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1583.991955][ T1099] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1583.991997][ T1099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.992016][ T1099] RIP: 0033:0x7fe95e71f749 [ 1583.992079][ T1099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.992164][ T1099] RSP: 002b:00007fe95d187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.992183][ T1099] RAX: ffffffffffffffda RBX: 00007fe95e975fa0 RCX: 00007fe95e71f749 [ 1583.992194][ T1099] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 1583.992205][ T1099] RBP: 00007fe95d187090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.992309][ T1099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.992319][ T1099] R13: 00007fe95e976038 R14: 00007fe95e975fa0 R15: 00007ffe926162a8 [ 1583.992335][ T1099] [ 1584.370770][ T29] kauditd_printk_skb: 1598 callbacks suppressed [ 1584.370787][ T29] audit: type=1400 audit(1764536981.908:252818): avc: denied { prog_load } for pid=1113 comm="syz.6.21090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.396865][ T29] audit: type=1400 audit(1764536981.908:252819): avc: denied { bpf } for pid=1113 comm="syz.6.21090" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.417847][ T29] audit: type=1400 audit(1764536981.908:252820): avc: denied { perfmon } for pid=1113 comm="syz.6.21090" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.444018][ T29] audit: type=1400 audit(1764536981.927:252821): avc: denied { setopt } for pid=1104 comm="syz.1.21086" lport=55486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1584.464966][ T29] audit: type=1400 audit(1764536981.927:252822): avc: denied { prog_run } for pid=1113 comm="syz.6.21090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.484248][ T29] audit: type=1400 audit(1764536981.936:252823): avc: denied { map_create } for pid=1109 comm="syz.5.21088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.503699][ T29] audit: type=1400 audit(1764536981.936:252824): avc: denied { map_read map_write } for pid=1109 comm="syz.5.21088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.523856][ T29] audit: type=1400 audit(1764536981.945:252825): avc: denied { prog_load } for pid=1109 comm="syz.5.21088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.543248][ T29] audit: type=1400 audit(1764536981.945:252826): avc: denied { bpf } for pid=1109 comm="syz.5.21088" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.564078][ T29] audit: type=1400 audit(1764536981.945:252827): avc: denied { perfmon } for pid=1109 comm="syz.5.21088" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.587891][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21090'. [ 1584.635168][ T1123] loop4: detected capacity change from 0 to 128 [ 1584.688934][ T380] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1584.696948][ T380] FAT-fs (loop4): Filesystem has been set read-only [ 1584.726127][ T1129] loop4: detected capacity change from 0 to 164 [ 1584.734392][ T1129] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1584.937873][ T1137] loop6: detected capacity change from 0 to 1024 [ 1584.946774][ T1137] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1585.610129][ T1138] lo speed is unknown, defaulting to 1000 [ 1586.070157][ T1146] loop6: detected capacity change from 0 to 164 [ 1586.078884][ T1146] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1586.402697][ T1160] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1586.655934][ T1166] netlink: 'syz.1.21108': attribute type 10 has an invalid length. [ 1586.696595][ T1166] batadv0: entered allmulticast mode [ 1586.714545][ T1168] netlink: 'syz.1.21108': attribute type 10 has an invalid length. [ 1586.722541][ T1168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21108'. [ 1586.795903][ T1166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.836688][ T1166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1586.953012][ T1168] batadv0: entered promiscuous mode [ 1586.968490][ T1168] bond0: (slave batadv0): Releasing backup interface [ 1587.008037][ T1168] bridge0: port 3(batadv0) entered blocking state [ 1587.014532][ T1168] bridge0: port 3(batadv0) entered disabled state [ 1587.476963][T32504] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1587.486261][T32504] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1587.508414][ T1184] IPv6: NLM_F_CREATE should be specified when creating new route [ 1587.562995][ T1184] rdma_rxe: rxe_newlink: failed to add lo [ 1587.912178][ T1190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21117'. [ 1587.922690][ T1196] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1588.074689][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21118'. [ 1588.143929][ T1202] rdma_rxe: rxe_newlink: failed to add lo [ 1588.437146][ T1213] loop4: detected capacity change from 0 to 164 [ 1588.446221][ T1213] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1588.545784][ T1215] wireguard1: entered promiscuous mode [ 1588.551307][ T1215] wireguard1: entered allmulticast mode [ 1588.718783][ T1225] rdma_rxe: rxe_newlink: failed to add lo [ 1588.823038][ T1239] loop4: detected capacity change from 0 to 164 [ 1588.833066][ T1239] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1588.951647][ T1251] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1588.962786][ T1249] lo speed is unknown, defaulting to 1000 [ 1589.241868][ T1260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21140'. [ 1589.633498][ T1295] wireguard1: entered promiscuous mode [ 1589.639163][ T1295] wireguard1: entered allmulticast mode [ 1589.692667][ T1298] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1589.726149][ T29] kauditd_printk_skb: 1280 callbacks suppressed [ 1589.726300][ T29] audit: type=1400 audit(1764536986.922:254108): avc: denied { recv } for pid=522 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1589.758525][ T29] audit: type=1400 audit(1764536986.922:254109): avc: denied { read write } for pid=29805 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.783309][ T29] audit: type=1400 audit(1764536986.922:254110): avc: denied { open } for pid=29805 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.807974][ T29] audit: type=1400 audit(1764536986.932:254111): avc: denied { ioctl } for pid=29805 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1009 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.840541][ T29] audit: type=1400 audit(1764536987.025:254112): avc: denied { map_create } for pid=1301 comm="syz.6.21155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.860077][ T29] audit: type=1400 audit(1764536987.025:254113): avc: denied { map_read map_write } for pid=1301 comm="syz.6.21155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.889934][ T29] audit: type=1400 audit(1764536987.053:254114): avc: denied { prog_load } for pid=1301 comm="syz.6.21155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.909465][ T29] audit: type=1400 audit(1764536987.053:254115): avc: denied { bpf } for pid=1301 comm="syz.6.21155" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1589.930664][ T29] audit: type=1400 audit(1764536987.053:254116): avc: denied { perfmon } for pid=1301 comm="syz.6.21155" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1589.951930][ T29] audit: type=1400 audit(1764536987.053:254117): avc: denied { prog_run } for pid=1301 comm="syz.6.21155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1590.036754][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21157'. [ 1590.053716][ T1306] team0 (unregistering): Port device team_slave_0 removed [ 1590.082769][ T1306] team0 (unregistering): Port device team_slave_1 removed [ 1590.175313][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21155'. [ 1590.263542][ T1330] lo speed is unknown, defaulting to 1000 [ 1590.271896][ T1329] sz1: rxe_newlink: already configured on lo [ 1590.334199][ T1336] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1590.413198][ T1338] lo speed is unknown, defaulting to 1000 [ 1590.474825][ T1343] serio: Serial port ptm0 [ 1590.535101][ T1346] random: crng reseeded on system resumption [ 1590.820122][ T1354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21173'. [ 1590.833682][ T1354] team0 (unregistering): Port device team_slave_0 removed [ 1590.842687][ T1354] team0 (unregistering): Port device team_slave_1 removed [ 1591.139027][T32517] Bluetooth: hci0: Frame reassembly failed (-84) [ 1591.223396][ T1368] rdma_rxe: rxe_newlink: failed to add lo [ 1591.265546][ T1372] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1591.316204][ T1377] netlink: 272 bytes leftover after parsing attributes in process `syz.1.21182'. [ 1591.410830][ T1389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21188'. [ 1591.429383][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 1591.439602][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 1591.534989][ T1395] rdma_rxe: rxe_newlink: failed to add lo [ 1591.563558][ T1397] FAULT_INJECTION: forcing a failure. [ 1591.563558][ T1397] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.576738][ T1397] CPU: 0 UID: 0 PID: 1397 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 1591.576758][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1591.576765][ T1397] Call Trace: [ 1591.576770][ T1397] [ 1591.576777][ T1397] __dump_stack+0x1d/0x30 [ 1591.576818][ T1397] dump_stack_lvl+0xe8/0x140 [ 1591.576831][ T1397] dump_stack+0x15/0x1b [ 1591.576842][ T1397] should_fail_ex+0x265/0x280 [ 1591.576855][ T1397] should_failslab+0x8c/0xb0 [ 1591.576954][ T1397] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1591.577009][ T1397] ? alloc_vmap_area+0x236/0xe80 [ 1591.577028][ T1397] alloc_vmap_area+0x236/0xe80 [ 1591.577079][ T1397] ? avc_compute_av+0x2fc/0x3e0 [ 1591.577093][ T1397] ? should_failslab+0x8c/0xb0 [ 1591.577110][ T1397] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 1591.577129][ T1397] __get_vm_area_node+0x173/0x1d0 [ 1591.577165][ T1397] __vmalloc_node_range_noprof+0x28c/0xed0 [ 1591.577218][ T1397] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.577348][ T1397] ? __rcu_read_unlock+0x4f/0x70 [ 1591.577367][ T1397] ? cred_has_capability+0x210/0x280 [ 1591.577386][ T1397] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.577405][ T1397] __vmalloc_noprof+0x83/0xc0 [ 1591.577501][ T1397] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.577576][ T1397] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.577677][ T1397] ? bpf_prog_alloc+0x2a/0x150 [ 1591.577699][ T1397] bpf_prog_alloc+0x3c/0x150 [ 1591.577786][ T1397] bpf_prog_load+0x506/0x1100 [ 1591.577840][ T1397] ? security_bpf+0x2b/0x90 [ 1591.577857][ T1397] __sys_bpf+0x469/0x7c0 [ 1591.577900][ T1397] __x64_sys_bpf+0x41/0x50 [ 1591.577918][ T1397] x64_sys_call+0x2aee/0x3000 [ 1591.578080][ T1397] do_syscall_64+0xd2/0x200 [ 1591.578093][ T1397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1591.578110][ T1397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1591.578148][ T1397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.578162][ T1397] RIP: 0033:0x7fe95e71f749 [ 1591.578173][ T1397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.578250][ T1397] RSP: 002b:00007fe95d187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.578264][ T1397] RAX: ffffffffffffffda RBX: 00007fe95e975fa0 RCX: 00007fe95e71f749 [ 1591.578273][ T1397] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 1591.578281][ T1397] RBP: 00007fe95d187090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.578289][ T1397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.578355][ T1397] R13: 00007fe95e976038 R14: 00007fe95e975fa0 R15: 00007ffe926162a8 [ 1591.578374][ T1397] [ 1591.578386][ T1397] wÞ£ÿ: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 1591.852329][ T1397] CPU: 0 UID: 0 PID: 1397 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 1591.852352][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1591.852360][ T1397] Call Trace: [ 1591.852365][ T1397] [ 1591.852374][ T1397] __dump_stack+0x1d/0x30 [ 1591.852394][ T1397] dump_stack_lvl+0xe8/0x140 [ 1591.852453][ T1397] dump_stack+0x15/0x1b [ 1591.852477][ T1397] warn_alloc+0x12b/0x1a0 [ 1591.852518][ T1397] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 1591.852540][ T1397] ? __rcu_read_unlock+0x4f/0x70 [ 1591.852686][ T1397] ? cred_has_capability+0x210/0x280 [ 1591.852705][ T1397] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.852881][ T1397] __vmalloc_noprof+0x83/0xc0 [ 1591.852901][ T1397] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.852947][ T1397] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1591.852966][ T1397] ? bpf_prog_alloc+0x2a/0x150 [ 1591.852997][ T1397] bpf_prog_alloc+0x3c/0x150 [ 1591.853101][ T1397] bpf_prog_load+0x506/0x1100 [ 1591.853181][ T1397] ? security_bpf+0x2b/0x90 [ 1591.853248][ T1397] __sys_bpf+0x469/0x7c0 [ 1591.853271][ T1397] __x64_sys_bpf+0x41/0x50 [ 1591.853303][ T1397] x64_sys_call+0x2aee/0x3000 [ 1591.853399][ T1397] do_syscall_64+0xd2/0x200 [ 1591.853412][ T1397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1591.853493][ T1397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1591.853513][ T1397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.853527][ T1397] RIP: 0033:0x7fe95e71f749 [ 1591.853539][ T1397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.853551][ T1397] RSP: 002b:00007fe95d187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.853616][ T1397] RAX: ffffffffffffffda RBX: 00007fe95e975fa0 RCX: 00007fe95e71f749 [ 1591.853625][ T1397] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 1591.853633][ T1397] RBP: 00007fe95d187090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.853668][ T1397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.853717][ T1397] R13: 00007fe95e976038 R14: 00007fe95e975fa0 R15: 00007ffe926162a8 [ 1591.853729][ T1397] [ 1591.853734][ T1397] Mem-Info: [ 1592.069892][ T1397] active_anon:3809 inactive_anon:4719 isolated_anon:0 [ 1592.069892][ T1397] active_file:18948 inactive_file:14172 isolated_file:0 [ 1592.069892][ T1397] unevictable:0 dirty:431 writeback:0 [ 1592.069892][ T1397] slab_reclaimable:3547 slab_unreclaimable:34030 [ 1592.069892][ T1397] mapped:35130 shmem:149 pagetables:1350 [ 1592.069892][ T1397] sec_pagetables:0 bounce:0 [ 1592.069892][ T1397] kernel_misc_reclaimable:0 [ 1592.069892][ T1397] free:1838570 free_pcp:8222 free_cma:0 [ 1592.115231][ T1397] Node 0 active_anon:15236kB inactive_anon:18876kB active_file:75792kB inactive_file:56688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140520kB dirty:1724kB writeback:0kB shmem:596kB kernel_stack:5584kB pagetables:5400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1592.142903][ T1397] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.172608][ T1397] lowmem_reserve[]: 0 2881 7859 7859 [ 1592.177967][ T1397] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 1592.209529][ T1397] lowmem_reserve[]: 0 0 4978 4978 [ 1592.214683][ T1397] Node 0 Normal free:4392192kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15236kB inactive_anon:18876kB active_file:75792kB inactive_file:56688kB unevictable:0kB writepending:1724kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:29360kB local_pcp:11664kB free_cma:0kB [ 1592.248348][ T1397] lowmem_reserve[]: 0 0 0 0 [ 1592.253038][ T1397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1592.265800][ T1397] Node 0 DMA32: 6*4kB (M) 4*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 1592.282048][ T1397] Node 0 Normal: 303*4kB (UM) 155*8kB (UME) 1104*16kB (UME) 1234*32kB (UME) 1273*64kB (UME) 480*128kB (UME) 540*256kB (UM) 337*512kB (UM) 192*1024kB (UME) 86*2048kB (UM) 856*4096kB (UM) = 4392212kB [ 1592.301811][ T1397] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1592.311198][ T1397] 37985 total pagecache pages [ 1592.315946][ T1397] 4719 pages in swap cache [ 1592.320380][ T1397] Free swap = 106120kB [ 1592.324563][ T1397] Total swap = 124996kB [ 1592.328708][ T1397] 2097051 pages RAM [ 1592.332579][ T1397] 0 pages HighMem/MovableOnly [ 1592.337257][ T1397] 81087 pages reserved [ 1592.427179][ T1405] netlink: 'syz.5.21194': attribute type 97 has an invalid length. [ 1592.435513][ T1405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21194'. [ 1592.444720][ T1405] netlink: 'syz.5.21194': attribute type 97 has an invalid length. [ 1592.452673][ T1405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21194'. [ 1592.780664][ T1419] loop6: detected capacity change from 0 to 512 [ 1592.788309][ T1419] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1592.797385][ T1419] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1592.807254][ T1419] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1592.815551][ T1419] System zones: 0-2, 18-18, 34-35 [ 1592.821238][ T1419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1592.857851][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.907396][ T1424] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1593.291956][T29137] Bluetooth: hci0: command 0x1003 tx timeout [ 1593.298026][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1593.334529][ T1431] 9pnet_fd: Insufficient options for proto=fd [ 1593.501002][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21204'. [ 1593.548301][T13781] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1593.548301][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 1593.939807][ T1450] rdma_rxe: rxe_newlink: failed to add lo [ 1594.006247][ T1458] serio: Serial port ptm0 [ 1594.120744][ T1460] random: crng reseeded on system resumption [ 1594.263119][ T1465] 9pnet_fd: Insufficient options for proto=fd [ 1594.517729][ T1471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21215'. [ 1594.691311][ T1480] wireguard1: entered promiscuous mode [ 1594.697061][ T1480] wireguard1: entered allmulticast mode [ 1594.705319][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21218'. [ 1595.012106][ T1497] loop6: detected capacity change from 0 to 512 [ 1595.020140][ T1497] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1595.029280][ T1497] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1595.033175][ T1491] wireguard1: entered promiscuous mode [ 1595.043076][ T1491] wireguard1: entered allmulticast mode [ 1595.066901][ T1497] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1595.096384][ T29] kauditd_printk_skb: 1189 callbacks suppressed [ 1595.096403][ T29] audit: type=1400 audit(1764536991.937:255307): avc: denied { recv } for pid=380 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1595.128546][ T29] audit: type=1400 audit(1764536991.937:255308): avc: denied { recv } for pid=380 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1595.154232][ T29] audit: type=1400 audit(1764536991.937:255309): avc: denied { read write } for pid=380 comm="syz-executor" name="loop4" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.157792][ T1497] System zones: [ 1595.178627][ T29] audit: type=1400 audit(1764536991.937:255310): avc: denied { open } for pid=380 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.178758][ T29] audit: type=1400 audit(1764536991.937:255311): avc: denied { ioctl } for pid=380 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=975 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.182421][ T1497] 0-2, 18-18, 34-35 [ 1595.237225][ T29] audit: type=1400 audit(1764536991.946:255312): avc: denied { allowed } for pid=1503 comm="syz.4.21226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1595.256832][ T29] audit: type=1400 audit(1764536991.974:255313): avc: denied { create } for pid=1503 comm="syz.4.21226" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1595.278359][ T29] audit: type=1400 audit(1764536991.974:255314): avc: denied { map } for pid=1503 comm="syz.4.21226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=376297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1595.292961][ T1497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1595.303058][ T29] audit: type=1400 audit(1764536991.974:255315): avc: denied { read write } for pid=1503 comm="syz.4.21226" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=376297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1595.340579][ T29] audit: type=1400 audit(1764536992.049:255316): avc: denied { prog_load } for pid=1501 comm="syz.5.21225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1595.411184][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.416393][ T1502] 9pnet_fd: Insufficient options for proto=fd [ 1595.580979][ T1521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21234'. [ 1595.597877][ T1521] team0 (unregistering): Port device team_slave_0 removed [ 1595.609620][ T1522] serio: Serial port ptm0 [ 1595.610419][ T1521] team0 (unregistering): Port device team_slave_1 removed [ 1595.661112][ T1533] serio: Serial port ptm1 [ 1595.680302][ T1525] random: crng reseeded on system resumption [ 1595.736037][ T1534] random: crng reseeded on system resumption [ 1596.090811][ T1554] 9pnet_fd: Insufficient options for proto=fd [ 1596.353900][ T1578] sz1: rxe_newlink: already configured on lo [ 1596.536351][ T1594] 9pnet_fd: Insufficient options for proto=fd [ 1596.706329][ T1605] rdma_rxe: rxe_newlink: failed to add lo [ 1596.831452][ T1612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21264'. [ 1597.007586][ T1617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21266'. [ 1597.089981][ T1630] 9pnet_fd: Insufficient options for proto=fd [ 1597.200691][ T1638] rdma_rxe: rxe_newlink: failed to add lo [ 1597.381798][ T1650] lo speed is unknown, defaulting to 1000 [ 1597.470353][ T1651] lo speed is unknown, defaulting to 1000 [ 1597.562843][ T1651] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1597.928049][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21280'. [ 1598.015759][ T1655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21281'. [ 1598.167825][ T1681] wireguard1: entered promiscuous mode [ 1598.173385][ T1681] wireguard1: entered allmulticast mode [ 1598.306194][ T1697] wireguard0: entered promiscuous mode [ 1598.311719][ T1697] wireguard0: entered allmulticast mode [ 1598.672295][ T1707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21296'. [ 1599.065782][ T1726] wireguard0: entered promiscuous mode [ 1599.071361][ T1726] wireguard0: entered allmulticast mode [ 1599.206510][ T1735] wireguard0: entered promiscuous mode [ 1599.212115][ T1735] wireguard0: entered allmulticast mode [ 1599.308962][ T1741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21304'. [ 1599.348505][ T1747] loop6: detected capacity change from 0 to 164 [ 1599.369529][ T1747] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1599.518624][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21307'. [ 1599.564412][ T1763] 9pnet_fd: Insufficient options for proto=fd [ 1599.677491][ T1769] wireguard0: entered promiscuous mode [ 1599.683099][ T1769] wireguard0: entered allmulticast mode [ 1599.780376][ T1777] loop4: detected capacity change from 0 to 512 [ 1599.788737][ T1777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1599.852208][ T1777] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1599.878181][ T1777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.21323: bg 0: block 248: padding at end of block bitmap is not set [ 1599.907896][ T1788] wireguard0: entered promiscuous mode [ 1599.913433][ T1788] wireguard0: entered allmulticast mode [ 1599.920307][ T1777] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.21323: Failed to acquire dquot type 1 [ 1599.932408][ T1777] EXT4-fs (loop4): 1 truncate cleaned up [ 1599.938572][ T1777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1600.184354][ T1799] 9pnet_fd: Insufficient options for proto=fd [ 1600.443727][ T29] kauditd_printk_skb: 1953 callbacks suppressed [ 1600.443745][ T29] audit: type=1400 audit(1764536996.951:257268): avc: denied { recv } for pid=1785 comm="syz.3.21326" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1600.538506][ T29] audit: type=1400 audit(1764536997.026:257269): avc: denied { recv } for pid=3303 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1600.564419][ T29] audit: type=1400 audit(1764536997.026:257270): avc: denied { recv } for pid=3303 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1600.600296][ T29] audit: type=1400 audit(1764536997.035:257271): avc: denied { read write } for pid=29805 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1600.624927][ T29] audit: type=1400 audit(1764536997.035:257272): avc: denied { open } for pid=29805 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1600.649762][ T29] audit: type=1400 audit(1764536997.035:257273): avc: denied { ioctl } for pid=29805 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=1009 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1600.675950][ T29] audit: type=1400 audit(1764536997.054:257274): avc: denied { prog_load } for pid=1817 comm="syz.6.21338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1600.695305][ T29] audit: type=1400 audit(1764536997.054:257275): avc: denied { bpf } for pid=1817 comm="syz.6.21338" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1600.716208][ T29] audit: type=1400 audit(1764536997.054:257276): avc: denied { create } for pid=1817 comm="syz.6.21338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1600.737239][ T29] audit: type=1400 audit(1764536997.054:257277): avc: denied { map_create } for pid=1817 comm="syz.6.21338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1600.764288][ T380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1600.862815][ T1828] 9pnet_fd: Insufficient options for proto=fd [ 1600.901289][ T1832] wireguard1: entered promiscuous mode [ 1600.906900][ T1832] wireguard1: entered allmulticast mode [ 1601.013169][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21344'. [ 1601.027963][ T1842] loop4: detected capacity change from 0 to 164 [ 1601.037612][ T1842] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1601.099260][ T1848] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1601.116359][ T1846] loop4: detected capacity change from 0 to 512 [ 1601.127359][ T1846] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1601.136532][ T1846] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1601.146819][ T1846] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1601.155674][ T1846] System zones: 0-2, 18-18, 34-35 [ 1601.161505][ T1846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1601.204643][ T380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.339944][ T1865] 9pnet_fd: Insufficient options for proto=fd [ 1601.566636][ T1873] wireguard1: entered promiscuous mode [ 1601.572188][ T1873] wireguard1: entered allmulticast mode [ 1601.827118][ T1890] 9pnet_fd: Insufficient options for proto=fd [ 1602.064900][ T1899] serio: Serial port ptm0 [ 1602.124608][ T1902] random: crng reseeded on system resumption [ 1602.324494][ T1914] wireguard1: entered promiscuous mode [ 1602.330021][ T1914] wireguard1: entered allmulticast mode [ 1602.517936][ T1922] 9pnet_fd: Insufficient options for proto=fd [ 1602.987773][ T1937] loop6: detected capacity change from 0 to 512 [ 1603.004941][ T1937] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1603.014120][ T1937] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1603.030407][ T1937] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1603.049600][ T1937] System zones: 0-2, 18-18, 34-35 [ 1603.056720][ T1937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1603.096549][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.223742][ T1956] loop4: detected capacity change from 0 to 164 [ 1603.232788][ T1950] wireguard0: entered promiscuous mode [ 1603.238286][ T1950] wireguard0: entered allmulticast mode [ 1603.249731][ T1956] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1603.273490][ T1957] 9pnet_fd: Insufficient options for proto=fd [ 1603.464762][ T1971] serio: Serial port ptm0 [ 1603.484201][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21391'. [ 1603.578785][ T1980] random: crng reseeded on system resumption [ 1603.621347][ T1983] serio: Serial port ptm1 [ 1603.740023][ T1989] random: crng reseeded on system resumption [ 1603.827219][ T1993] rdma_rxe: rxe_newlink: failed to add lo [ 1604.604689][ T2015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21408'. [ 1605.302706][ T2043] serio: Serial port ptm0 [ 1605.416906][ T2045] random: crng reseeded on system resumption [ 1605.812987][ T29] kauditd_printk_skb: 1531 callbacks suppressed [ 1605.813055][ T29] audit: type=1400 audit(1764537001.966:258809): avc: denied { recv } for pid=2055 comm="syz.6.21426" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.857272][ T29] audit: type=1400 audit(1764537002.012:258810): avc: denied { recv } for pid=2055 comm="syz.6.21426" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.913098][ T29] audit: type=1326 audit(1764537002.012:258811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1605.936926][ T29] audit: type=1326 audit(1764537002.012:258812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1605.960635][ T29] audit: type=1326 audit(1764537002.012:258813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1605.984420][ T29] audit: type=1400 audit(1764537002.012:258814): avc: denied { map_create } for pid=2057 comm="syz.5.21427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1606.004021][ T29] audit: type=1400 audit(1764537002.012:258815): avc: denied { map_read map_write } for pid=2057 comm="syz.5.21427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1606.024237][ T29] audit: type=1326 audit(1764537002.012:258816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1606.048040][ T29] audit: type=1326 audit(1764537002.012:258817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1606.071940][ T29] audit: type=1326 audit(1764537002.012:258818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.5.21427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe95e71f749 code=0x7ffc0000 [ 1606.426575][ T2064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21430'. [ 1607.107383][ T2118] sz1: rxe_newlink: already configured on lo [ 1607.360531][ T2144] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1607.504262][ T2151] rdma_rxe: rxe_newlink: failed to add lo [ 1607.635096][ T2166] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1607.713754][ T2170] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1608.001527][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21472'. [ 1608.215764][ T2190] sz1: rxe_newlink: already configured on lo [ 1608.351222][ T2201] wireguard0: entered promiscuous mode [ 1608.356891][ T2201] wireguard0: entered allmulticast mode [ 1608.418983][ T2205] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1608.598208][ T2212] 9pnet_fd: Insufficient options for proto=fd [ 1608.645603][ T2213] sz1: rxe_newlink: already configured on lo [ 1608.724213][ T2217] loop6: detected capacity change from 0 to 164 [ 1608.740666][ T2217] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1608.786989][ T2200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21483'. [ 1608.832444][ T2228] sz1: rxe_newlink: already configured on lo [ 1609.113564][ T2247] wireguard0: entered promiscuous mode [ 1609.119133][ T2247] wireguard0: entered allmulticast mode [ 1609.202116][ T2251] 9pnet_fd: Insufficient options for proto=fd [ 1610.318605][ T2283] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1610.421869][ T2285] 9pnet_fd: Insufficient options for proto=fd [ 1610.494259][ T2287] lo speed is unknown, defaulting to 1000 [ 1611.164086][T13781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1611.170266][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1611.239983][ T29] kauditd_printk_skb: 1617 callbacks suppressed [ 1611.240004][ T29] audit: type=1400 audit(1764537007.045:260436): avc: denied { recv } for pid=2294 comm="syz.5.21517" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1611.359617][ T29] audit: type=1400 audit(1764537007.158:260437): avc: denied { prog_load } for pid=2317 comm="syz.1.21525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1611.379382][ T29] audit: type=1400 audit(1764537007.158:260438): avc: denied { bpf } for pid=2317 comm="syz.1.21525" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1611.400477][ T29] audit: type=1400 audit(1764537007.158:260439): avc: denied { perfmon } for pid=2317 comm="syz.1.21525" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1611.428141][ T29] audit: type=1400 audit(1764537007.223:260440): avc: denied { bpf } for pid=2317 comm="syz.1.21525" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1611.457515][ T29] audit: type=1400 audit(1764537007.251:260441): avc: denied { recv } for pid=31346 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1611.496377][ T29] audit: type=1400 audit(1764537007.279:260442): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.10.31 dest=49834 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1611.523644][ T29] audit: type=1326 audit(1764537007.289:260443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.3.21526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1611.547521][ T29] audit: type=1326 audit(1764537007.289:260444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.3.21526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1611.571769][ T29] audit: type=1326 audit(1764537007.289:260445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.3.21526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf264f749 code=0x7ffc0000 [ 1611.609577][ T2323] rdma_rxe: rxe_newlink: failed to add lo [ 1611.895769][ T2350] wireguard0: entered promiscuous mode [ 1611.901330][ T2350] wireguard0: entered allmulticast mode [ 1611.975252][ T2342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21533'. [ 1612.027275][ T2348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21537'. [ 1612.437026][T32517] Bluetooth: hci0: Frame reassembly failed (-84) [ 1612.575687][ T2383] lo speed is unknown, defaulting to 1000 [ 1612.903571][ T2391] loop4: detected capacity change from 0 to 164 [ 1612.911919][ T2391] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1612.984871][ T2396] loop6: detected capacity change from 0 to 512 [ 1612.993460][ T2396] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1613.002806][ T2396] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1613.016057][ T2396] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1613.024266][ T2396] System zones: 0-2, 18-18, 34-35 [ 1613.029898][ T2396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1613.081191][T29805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.154966][ T2394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21550'. [ 1613.261353][ T2407] ================================================================== [ 1613.261391][ T2407] BUG: KCSAN: data-race in inode_update_timestamps / inode_update_timestamps [ 1613.261447][ T2407] [ 1613.261453][ T2407] write to 0xffff888104e529a4 of 4 bytes by task 2408 on cpu 0: [ 1613.261471][ T2407] inode_update_timestamps+0x147/0x270 [ 1613.261501][ T2407] file_update_time+0x20e/0x2b0 [ 1613.261526][ T2407] fault_dirty_shared_page+0xd9/0x3c0 [ 1613.261553][ T2407] handle_mm_fault+0x165d/0x2be0 [ 1613.261572][ T2407] do_user_addr_fault+0x3fe/0x1080 [ 1613.261590][ T2407] exc_page_fault+0x62/0xa0 [ 1613.261616][ T2407] asm_exc_page_fault+0x26/0x30 [ 1613.261636][ T2407] rep_movs_alternative+0x4a/0x90 [ 1613.261663][ T2407] _copy_to_user+0x7c/0xa0 [ 1613.261685][ T2407] pagemap_read+0x379/0x5e0 [ 1613.261708][ T2407] vfs_read+0x1a8/0x770 [ 1613.261727][ T2407] __x64_sys_pread64+0xfd/0x150 [ 1613.261750][ T2407] x64_sys_call+0x29e6/0x3000 [ 1613.261774][ T2407] do_syscall_64+0xd2/0x200 [ 1613.261791][ T2407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.261809][ T2407] [ 1613.261815][ T2407] read to 0xffff888104e529a4 of 4 bytes by task 2407 on cpu 1: [ 1613.261831][ T2407] inode_update_timestamps+0x74/0x270 [ 1613.378898][ T2407] file_update_time+0x20e/0x2b0 [ 1613.383767][ T2407] fault_dirty_shared_page+0xd9/0x3c0 [ 1613.389440][ T2407] handle_mm_fault+0x165d/0x2be0 [ 1613.394384][ T2407] do_user_addr_fault+0x630/0x1080 [ 1613.399537][ T2407] exc_page_fault+0x62/0xa0 [ 1613.404059][ T2407] asm_exc_page_fault+0x26/0x30 [ 1613.408915][ T2407] [ 1613.411250][ T2407] value changed: 0x36a7a38f -> 0x37c5231d [ 1613.416966][ T2407] [ 1613.419292][ T2407] Reported by Kernel Concurrency Sanitizer on: [ 1613.425532][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.5.21554 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1613.435546][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1613.445604][ T2407] ================================================================== [ 1613.491941][ T2412] loop6: detected capacity change from 0 to 764 [ 1613.534879][ T2412] Symlink component flag not implemented [ 1613.540580][ T2412] Symlink component flag not implemented [ 1613.546858][ T2412] Symlink component flag not implemented (129) [ 1613.553080][ T2412] Symlink component flag not implemented (6) [ 1613.559799][ T2412] rock: directory entry would overflow storage [ 1613.566069][ T2412] rock: sig=0x4f50, size=4, remaining=3 [ 1613.571773][ T2412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1613.648074][ T2412] rock: directory entry would overflow storage [ 1613.654257][ T2412] rock: sig=0x4f50, size=4, remaining=3 [ 1613.659862][ T2412] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1614.584666][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1614.584666][T13781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1621.853939][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 1621.853955][ T29] audit: type=1400 audit(1764537016.981:261193): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1621.883883][ T29] audit: type=1400 audit(1764537016.981:261194): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1