last executing test programs: 3m24.085635017s ago: executing program 0 (id=143): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x0) poll(&(0x7f0000000400)=[{r0, 0x582}], 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20002, 0x32be6594536d8694) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r4 = epoll_create1(0x80000) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x30000019}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @remote}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r9, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r9, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9804, 0x2e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000004) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}}, 0x20000800) epoll_pwait2(r4, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) close(0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) 3m23.257784375s ago: executing program 0 (id=157): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3m23.257591635s ago: executing program 0 (id=158): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x2}, &(0x7f0000000280)=0x8) 3m23.189685809s ago: executing program 0 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x20048050) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1000, 0xfffffffffffffeff}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) getpgrp(0xffffffffffffffff) geteuid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!=u&00\t&&') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000002400)={&(0x7f0000000000)=@can={0x1d, r2}, 0x80, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000200)}, {&(0x7f0000001200)="7e396b3ccfb7f1cd6429123078b486af22639b09e07e8c64ff28a0a8ba295a4a769249b4c0ed5ba3de3be562621b318a04ca977719eff3c336ab7e893ebaa35ae397f70394084c0e5caf7b8c0f4ad737b1173a950cdf662c623847", 0x5b}], 0x3, &(0x7f0000001340)=[{0xee0, 0x88, 0x4, "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"}, {0x10, 0x10c, 0x7}], 0xef0}, 0x20000001) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) flistxattr(r5, &(0x7f0000000340)=""/30, 0x1e) 3m22.99881392s ago: executing program 0 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) 3m22.673911789s ago: executing program 0 (id=169): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000280)=0x8) 3m22.668446399s ago: executing program 32 (id=169): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000280)=0x8) 21.765850797s ago: executing program 3 (id=3342): unshare(0x24020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x32, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 21.754849138s ago: executing program 3 (id=3345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x0, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000001f80)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x480c0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x2}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000240)=0x10, 0x4) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES64], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.log\x00', 0x200000, 0xc2) 21.53878411s ago: executing program 3 (id=3354): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89c", 0x71}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab095", 0x9a}, {&(0x7f0000000a00)="a7c652df859e", 0x6}, {&(0x7f00000021c0)="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", 0x280}], 0x4}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x51) 21.493006273s ago: executing program 3 (id=3355): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) ioperm(0x4, 0x1, 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000a40)=0xffffffffffffff3b) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0xa40006, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8) syz_usbip_server_init(0x4) write(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "9e3777ae3cea2a6a", "7063ed0b4f04a4c050bf778424c195a19a5800", 'V/\x00['}, 0x38) 20.829358331s ago: executing program 3 (id=3367): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac47", 0x1c}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97", 0xc9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab095", 0x9a}, {&(0x7f0000000a00)="a7c652df859e", 0x6}, {&(0x7f00000021c0)="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", 0x280}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x59) 20.68979531s ago: executing program 3 (id=3372): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0xfd, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c398ff819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100"/253, 0x0, 0x8, 0x10024, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 20.68917377s ago: executing program 33 (id=3372): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0xfd, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c398ff819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100"/253, 0x0, 0x8, 0x10024, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17.208121582s ago: executing program 6 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000068000100"/22], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x42, &(0x7f0000000200)={@multicast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@hopopts={0x3c}]}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x128, 0x940c, 0x3002, 0x0, 0x2c0, 0x218, 0x3d8, 0x3d8, 0x218, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x32, 0x61, 0x0, 0x8}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x9}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x3, 0x1}, {0xffffffffffffffff, 0x1, 0xc}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x1000007, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x16, 0xffff}, &(0x7f00000001c0)=0xc) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x88800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000006020000000000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x6, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000600)=[{0x4, 0x1, 0xb, 0xa}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x1, 0x8, 0xc}, {0x0, 0x1, 0x0, 0x1}, {0x2, 0x2, 0x7, 0x4}, {0x0, 0x5, 0x5, 0x7}, {0x0, 0x5, 0xe, 0x7}, {0x2, 0x5, 0x10}, {0x2, 0x1, 0xd}], 0x10, 0xffff0000}, 0x94) 16.628944415s ago: executing program 6 (id=3435): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 16.581886628s ago: executing program 6 (id=3436): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x0) 16.531134601s ago: executing program 6 (id=3437): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x2000414, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES16], 0x1, 0x2b8, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000006c0)='./file0\x00', 0x1001, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@mcast2, 0xfe, 0x32}, @in=@private=0xa010100, {0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x80000000, 0x3}, {0x40000}, 0x70bd28, 0x3500, 0x2, 0x1, 0xfc}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x9, r4, 0x0, 0x7ffffffe) tkill(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7c2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x110480, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 16.37967947s ago: executing program 6 (id=3440): unshare(0x68040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x25) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r5) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@private1, 0x0}, &(0x7f0000000240)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="be200000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf250400000008000300030000000c00068008000700", @ANYRES32=r6, @ANYBLOB="0c000180060001000a0000000800040006000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x40800) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) unshare(0x4000000) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x702e, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x40043, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 13.002428696s ago: executing program 5 (id=3495): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 12.93814213s ago: executing program 5 (id=3497): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x6, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32], 0x44}}, 0x0) 12.76360201s ago: executing program 5 (id=3498): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="00022dbd0000fcdbdf2504000000840005800700010069620000080001007564700034080280080001000a0000000800040005000000080001000000000008000400ffffff7f080001000b000000080002009a5300003c0002800800010002000000080001001900000008006a00130000000800010001980000080001001900000008000300fbffffff0800030001000000"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) r6 = syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0x3e4e, 0x800, 0x5, 0x1003d}, &(0x7f0000000080), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4e1000000000000", @ANYRES32, @ANYBLOB="00312a79b30e2af23a7900e60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) r8 = syz_open_procfs$userns(0x0, &(0x7f00000004c0)) mount_setattr(r4, &(0x7f0000000480)='./bus\x00', 0x900, &(0x7f0000000500)={0x100064, 0x100003, 0xa0000, {r8}}, 0x20) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xab) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000013c0)=0x11) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r9, &(0x7f0000000540), 0xfffffdd8) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x70, 0x2c, 0x6a}) 12.352550014s ago: executing program 5 (id=3507): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x6, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020000) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ff"], 0x5c}}, 0x4040880) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x5, 0x3, 0x8, 0x7, 0x0, 0x6, 0x4000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xe, 0x174f}, 0x120, 0xfffffffffffffffd, 0x7, 0x0, 0x77, 0x6, 0x3b62, 0x0, 0xef, 0x0, 0x9}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x40001}}, 0x41) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12.301256736s ago: executing program 5 (id=3508): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000600)={[{@fat=@errors_continue}, {}, {@fat=@check_strict}, {@fat=@flush}]}, 0x1, 0x2a2, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000000000000000000020000"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 12.157393155s ago: executing program 6 (id=3513): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x5, 0x0, 0xf) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) 12.145094376s ago: executing program 34 (id=3513): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x5, 0x0, 0xf) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2b8, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) 12.140738936s ago: executing program 5 (id=3515): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/268, 0x10c}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) sendmmsg$unix(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a58bc94ae742e11df77c3c9fa95307503f0f5e54", 0x14}, {&(0x7f0000001740)="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", 0x6ad}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x18, 0x40000}}], 0x2, 0x80004) r5 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r7, 0x1, &(0x7f0000000340)={{r8, r9+60000000}, {0x77359400}}, &(0x7f0000000380)) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e1e, @loopback}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 12.083430219s ago: executing program 35 (id=3515): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/268, 0x10c}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) sendmmsg$unix(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="a58bc94ae742e11df77c3c9fa95307503f0f5e54", 0x14}, {&(0x7f0000001740)="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", 0x6ad}], 0x2, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x18, 0x40000}}], 0x2, 0x80004) r5 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r7, 0x1, &(0x7f0000000340)={{r8, r9+60000000}, {0x77359400}}, &(0x7f0000000380)) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e1e, @loopback}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x400002, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.13873452s ago: executing program 8 (id=3636): syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x1b1001, 0x50, 0x38}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}) r2 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f0000000500)=0x62) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x12, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x3, 0x2) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = dup3(r5, r4, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast}, &(0x7f0000000900)=0xc) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="f6feffffffffffff2900000032000000fc00"/32, @ANYRES32=r7, @ANYBLOB='\x00\b\x00\x00'], 0x28}}], 0x1, 0x810) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x14, &(0x7f0000004a40)=[{0x5, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/115, 0x73}, {&(0x7f0000000a80)=""/14, 0xe}, {&(0x7f0000000ac0)=""/99, 0x63}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/10, 0xa}], &(0x7f0000000c40)=[0x8, 0x4, 0x2, 0x3, 0x6]}, {0x5, 0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c80)=""/121, 0x79}, {&(0x7f0000000d00)=""/138, 0x8a}, {&(0x7f0000000dc0)=""/79, 0x4f}, {&(0x7f0000000e40)=""/240, 0xf0}, {&(0x7f0000000f40)=""/103, 0x67}], &(0x7f0000001040)=[0x8, 0x9, 0x5, 0x5]}, {0x0, 0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=[0x9]}, {0x3, 0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/4096, 0x1000}], &(0x7f0000003180)=[0x200]}, {0x9, 0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000031c0)=""/223, 0xdf}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/140, 0x8c}, {&(0x7f0000004380)=""/248, 0xf8}, {&(0x7f0000004480)=""/207, 0xcf}, {&(0x7f0000004580)=""/236, 0xec}, {&(0x7f0000004680)=""/162, 0xa2}, {&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/129, 0x81}], &(0x7f00000049c0)=[0x7, 0x6, 0x1, 0x9, 0x9, 0xce, 0x1, 0xe000000, 0xd]}], 0x5) syz_io_uring_submit(r0, r3, &(0x7f0000000980)=@IORING_OP_STATX={0x15, 0x4e, 0x0, r6, &(0x7f00000006c0), &(0x7f0000000000)='./file1\x00', 0x800, 0x6000, 0x0, {0x0, r8}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r11, &(0x7f00000009c0)="b6d44563a49e7f4a3ce3f1ce22", 0xd, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x1000084, 0x404f6613, 0x800007}) r12 = msgget$private(0x0, 0x14) msgctl$MSG_STAT(r12, 0xb, &(0x7f00000007c0)=""/249) 4.009704968s ago: executing program 2 (id=3641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000) r2 = socket(0x2, 0x80805, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) write$P9_RUNLINKAT(r3, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x804) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000000c0)={0x29}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x0, 0x2a, 0x0, 0x6}, 0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) 3.992450619s ago: executing program 8 (id=3642): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf251fb8d700"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x100) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="8aa6d6675c65b020b6c31b28342d5d465904080079127ce447c24443ac6fc31dbdb22836e1c6e5b4cd6111953722dbe88a3251ce080faabbba886c73adf2bc652cb1ce0162c5545fa302df53a55782f4b15ae9dac37b2873c3a29aa54d0ffd9d677d5fcd493a79f25e38a79df5a0d766f445e1b7e6c69621433cf6b6b721faf3cbda", @ANYRES16=r8, @ANYBLOB="31830000000000000000190000000c0001800800030003000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)={0x152c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10b0, 0x111, 0x0, 0x1, {0x10ac, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x254, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x244, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x8913e7b4fac2b9f4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}]}, {0x6d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x458, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x290d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfec6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xde}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe9f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x62}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}]}]}, {0x458, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff04}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1ff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x434, 0x111, 0x0, 0x1, {0x430, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x97}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x90ca}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xddaf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f33}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x66}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfe}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6eb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x168}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x274}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8}]}, 0x152c}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c054) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_IFALIASn={0x4}]}, 0x50}}, 0x0) 3.978752379s ago: executing program 2 (id=3643): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) migrate_pages(0x0, 0x0, &(0x7f00000000c0)=0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x218, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0xff0000ff, 'ip6tnl0\x00', 'pim6reg0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x148, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9, 0x100}}, @common=@addrtype={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x1, 0x0, 0x3, 0x4, 0x2], 0x2, 0x4}, {0x3, [0x2, 0x3, 0x0, 0xa, 0x2, 0x2], 0x0, 0x3}}}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x3}, {0xffffffffffffffff, 0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 3.927837902s ago: executing program 2 (id=3646): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980173, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x800000000) 3.724254434s ago: executing program 8 (id=3651): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) syz_emit_ethernet(0x52, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 3.151975187s ago: executing program 8 (id=3658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073d2956d8a5d441e13d044abcf790300686173683a6e65742c6e65740000000005000500"], 0x4c}}, 0x0) 3.101277881s ago: executing program 8 (id=3661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) (fail_nth: 1) 2.908536371s ago: executing program 8 (id=3662): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x41, @f={0x5, 0x3, 0x4, 0x2, 0x3, 0x3, 0x7, {0xfc}, 0xfd, 0x5, 0xfc, 0x5, 0x34, "bbfe527ca5935a4d495b210a33730ade277cf06268d1d547c8537ba807d1e73534a7af174beb76e880f2a2a51bd97831f2679474"}}, 0x45) 2.891522392s ago: executing program 2 (id=3663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000"], 0x60}}, 0x814) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) 2.608563069s ago: executing program 1 (id=3666): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 2.490055296s ago: executing program 1 (id=3667): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, &(0x7f0000000040)="c292df", 0x3, 0x7, 0x0, 0x2}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r3, &(0x7f00000022c0)=""/4066, 0xfe2, 0x1fb) unshare(0x40400) sendfile(r2, r2, &(0x7f0000000000)=0x9, 0x0) 2.41385125s ago: executing program 2 (id=3669): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92, 0x4000000000000000}, 0x20) 2.387474222s ago: executing program 1 (id=3671): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7b7306c040510a6}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x31}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000010000104000000000300000000000000", @ANYRES8=r3, @ANYBLOB="fab0817dbcb5f31a34001280110001006272696467655f736c617665000010001c000580050009000100000006000200010000000500010003000000140003006272696467655f736c6176655f300000"], 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x6, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x80, 0x5, 0x5b7b}}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000240)={r5, 0x1, 0x6, @multicast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) pipe2$9p(&(0x7f0000000100), 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7b7306c040510a6}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x31}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000010000104000000000300000000000000", @ANYRES8=r3, @ANYBLOB="fab0817dbcb5f31a34001280110001006272696467655f736c617665000010001c000580050009000100000006000200010000000500010003000000140003006272696467655f736c6176655f300000"], 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x4040) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x6, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x80, 0x5, 0x5b7b}}) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000240)={r5, 0x1, 0x6, @multicast}, 0x10) (async) 2.335494475s ago: executing program 1 (id=3672): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}, 0x81, 0xfffffffffffffff7, 0x1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x67, 0x1, 0x4, 0x1, 0xa, 0x82a, "c5e8feb07f09805534dd6dea5268c68c4f04a3e3633665e6af3c00588fda0ac18d6590834bbd38b213ba232447cda4d6c0a7148f9b1c7deba83b0f661d2e8d2497ffaaee28417a6802b6e1fc34fa2c58e37121c003d88401b7df9bd1297731065161fc4de0e2d6"}}, 0x17f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000004c0)) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x61, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x5, 0x7f, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xf}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x20, &(0x7f0000000b00)={&(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000a40)=""/145, 0x91}}, 0x10) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x0, r1}, 0x18) r12 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x82) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0x1, 0xffffffffffffffff}, 0x4) r15 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x2000, 0xc2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x2d, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x389}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call]}, &(0x7f0000000840)='GPL\x00', 0x81, 0x69, &(0x7f0000000880)=""/105, 0x41100, 0x20, '\x00', r8, 0x1b, r9, 0x8, &(0x7f0000000980)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0xfffffff3, 0x7}, 0x10, r10, 0x0, 0x1, &(0x7f0000000d80)=[r11, r12, r13, r14, r15], &(0x7f0000000dc0)=[{0x3, 0x3, 0xf, 0x6}]}, 0x94) r16 = syz_open_dev$vcsn(&(0x7f0000000ec0), 0xa, 0x802) sendmsg$nl_route(r12, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x24a01}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@bridge_delneigh={0x3c, 0x1d, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r8, 0x20, 0x8, 0x2}, [@NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xff}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa000}, 0x4004050) setsockopt$inet6_IPV6_PKTINFO(r16, 0x29, 0x32, &(0x7f0000001000)={@private0={0xfc, 0x0, '\x00', 0x1}, r8}, 0x14) fstat(r2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001040)='./file0\x00', 0xee01, r17) perf_event_open(&(0x7f0000001100)={0x3, 0x80, 0x40, 0xb, 0xf4, 0x7, 0x0, 0x1120a1e3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xcd0, 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x9, 0x7f3, 0x3, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 2.212769222s ago: executing program 2 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x892f, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000, 0xff}}}, 0xb8}}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x83, 0x5, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @remote, 0x0, 0x7, 0x3, 0x6}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x638, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '![{+-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/selinux/avc/hash_stats\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/selinux/avc/hash_stats\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':[)^\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x31c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\\\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/selinux/avc/hash_stats\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/selinux/avc/hash_stats\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "4edba0e4d50e8a43720c8f5725f7838327b6e4fd979b3b9623a63db4da65df89bff81104de34b03cbaaf1862735a6f9a4bf3b12b6d65febb764717dce1b8695a50788aa4f3281a756001263be8b6956d41dad71ccb5635f6fffeb904f6379b04226d40e388e4299f9ed9a0f17e151ed766fe3a892fedb75b23824f869f09d9b89e0fe6090e920df703a02a5a25432be498ac960431cf33166704e9ad7f1ba86b9c89d8957ff1988c743b7c40c79f12a4d010c7015d03bb44ac430609f1318432"}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "c51206a18eafd6b22907f4f3a0eda1343a8f38b180713b640c3c903da1beb0c072048a683c0c15effbc5d91c901c68c0966296c279c5636cdad58f916f450fde5e65d2e947584a0ed5b56d6967827e7c9f"}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "8cd1fdd97db0e192529dc154613ffd533db04ba53ed368b40c20ac57b7130a8cbf0c85df1fadb2b08ce93aa003e1451d877e21425667d746dcbaa34b095c3e5cbf71f02d3ceeff5ab43c966948db2c30ba5ff3d77cc13cccfb3a6047e2d2f699a76f9d6ce6be150ec6ca98062c174128c2c41066fc0576a7a31fade7d32c2bf04a"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "23fbd5234346ca3f699d2a2a166871cee5dd35c13a32d07e8d637d797f33270abe5bb33fe67ef0bade7697c653957214cd566812da8f1d057364bb466a2c1bac588389364b5cd536397df22dfe0dafaf862957f83a3accf0c81b71855395a7828ecfdb4c96fd17fd70e4b8b991473658707c999e61da2b06daad38633ab03671c311705d4ff1d2cea6e893e46ae2c63241e9f29f77b7e05b5fae0f2f9631e7a5c6f3ee420a1447cdfde33b3de5d0202cb0db608136df4399"}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "4b5f3da6fcb5910f441eebe8809f707c37f50f5f4445500941bb901d112c7b0c8140e01d09f9fa911d1489f0a0f89fc21980ae0e0e15e286b7a4e0514e67087ce9c5e3b3b034ac5bb62d20292824fd756ba991c4ec5339621e313ea4265917cdc394513464d5cb14eb6e8e746d8b0b8d2b2aabe8b5d88312628867747ac89587abda19b603e82d82faba8e4bfa3b3803b990e8d5c4"}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "017e5030b9525bf38c32492abf6dc3792e71fed618a7ae231c7eb1ffbf040bf110d159edccd76f0af1edd5026e16bb447b6be823acb4c0da001e854c4ab7abeb3705fba400455d"}]}]}, 0x638}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RLCREATE(r4, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x60, 0x4, 0x1}, 0xfffffffe}}, 0x18) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xdd3) close(r1) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r14, 0x29, 0x37, 0x0, 0x8) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r16 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r15, @ANYRESOCT, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 2.201841443s ago: executing program 1 (id=3676): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x10, 0x2, 0x20}, {0x1, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x200000000000000, 0x0, 0x3}, 0x7fffffff, 0x1, 0x1}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c19}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "5f944c9d2e43871a", "f402f1edccc5af5ab2d22ee876f66df2", "04039549", "dec6819fb3d7bf4c"}, 0x28) 2.131732686s ago: executing program 1 (id=3680): perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x108, 0x6}, 0xc0da3d6d5a2b71b9, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x800, 0x2000000, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x46}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb6b8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x6, 0x3, 0x0, 0xf001, 0xffffff80}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0xe2, &(0x7f0000000480)=""/226, 0x41100, 0x75, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x4, 0x2, 0xf}], 0x10, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010003000000030000002a0000000800580000003b0008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4048880) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x1, 0x4, 0x0, 0x1, 0xfffffffffffffead, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2d, r1, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x5, 0x10001, 0x1}, 0x10, r3, r4, 0x4, &(0x7f0000000740)=[r5, r6], &(0x7f0000000780)=[{0x5, 0x4, 0x6, 0x2}, {0x2, 0x2, 0xd, 0xc}, {0x1, 0x1, 0xa, 0x3}, {0x5, 0x2, 0xd, 0x4}], 0x10, 0x1}, 0x94) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x39}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xe}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x34}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x58}}, 0x4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)={0x3c, r13, 0x1, 0x70bd28, 0xfffffffe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0) recvfrom$l2tp(r9, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='!pu==0||!') 985.021793ms ago: executing program 7 (id=3692): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000400000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0xb7, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000ff851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000003000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 899.775818ms ago: executing program 7 (id=3693): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000400000000, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0xb7, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000ff851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000003000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) 776.443655ms ago: executing program 7 (id=3694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r0, 0x7041, 0x0) io_uring_enter(r0, 0x4475, 0x5cac, 0x8, &(0x7f0000000040), 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x8, 0x10001}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket(0x2, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 775.674555ms ago: executing program 7 (id=3695): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000100)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x9cf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_THP_DISABLE(0x29, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f3c00128014000180090001006c6173740000000004000280140001800c0001070000006e7465720004000280100001800800010064757000040002800800034000000106140000001000010000000000000000000084000a"], 0xc8}}, 0x20050800) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) write$P9_RWALK(r3, &(0x7f0000000200)={0x3d, 0x6f, 0x1, {0x4, [{0x1, 0x2, 0x7}, {0x2, 0x4}, {0x0, 0x1, 0x5}, {0x2, 0x4, 0x2}]}}, 0x3d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) lseek(r5, 0x1, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000001c0)=0x0) fcntl$setown(r4, 0x8, r7) io_setup(0x5, &(0x7f0000000000)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) io_submit(r8, 0x0, &(0x7f0000000580)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x109400, 0x0) 614.467905ms ago: executing program 4 (id=3696): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffe9, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), 0x5401) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 489.953602ms ago: executing program 7 (id=3697): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 489.382302ms ago: executing program 7 (id=3698): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) sendfile(r2, r1, 0x0, 0x7ffff000) 382.701058ms ago: executing program 4 (id=3699): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x970) 301.801873ms ago: executing program 4 (id=3700): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x37, "d924bad4df4b1fc500774fab8eeddc3e372eb5570e7dd5367b5ae1d09da169dd47173b4330b21a7faffc176c2425903839395b78d32c3e"}, &(0x7f0000000040)=0x3f) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r1, 0x7, 0x1, 0x7, 0x92, 0x1c6e, 0x6, 0x8, {0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x25a9601d, 0x0, 0x7ff, 0x3, 0x1}}, &(0x7f0000000140)=0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='!pu==0||!') 301.135013ms ago: executing program 4 (id=3701): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000600)={[{@fat=@errors_continue}, {}, {@fat=@check_strict}, {@fat=@flush}]}, 0x1, 0x2a2, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000200000000070000000000000803000000000000000000000d00000000008c9d00305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 63.237187ms ago: executing program 4 (id=3702): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x84, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xf, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pivot_root(0x0, 0x0) 0s ago: executing program 4 (id=3703): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) kernel console output (not intermixed with test programs): pfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 207.981476][T13097] sctp: [Deprecated]: syz.2.3068 (pid 13097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.981476][T13097] Use struct sctp_sack_info instead [ 208.071102][T13102] EXT4-fs: Ignoring removed i_version option [ 208.077535][T13102] EXT4-fs: Ignoring removed bh option [ 208.199047][T13102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.219727][T13102] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.305362][T13108] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.3069: iget: bad i_size value: 2533274857506816 [ 208.349178][T13108] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.3069: iget: bad i_size value: 2533274857506816 [ 208.434932][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.455811][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.481637][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.500830][ T31] bond0 (unregistering): Released all slaves [ 208.526206][ T31] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 208.540341][ T31] bond1 (unregistering): Released all slaves [ 208.549558][ T31] bond2 (unregistering): Released all slaves [ 208.560342][T13042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.600600][ T31] IPVS: stopping master sync thread 8058 ... [ 208.601935][T13042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.641095][T13116] set_capacity_and_notify: 5 callbacks suppressed [ 208.641115][T13116] loop5: detected capacity change from 0 to 512 [ 208.658229][ T31] hsr_slave_0: left promiscuous mode [ 208.668061][T13116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 208.679263][T13112] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3071'. [ 208.689088][ T31] hsr_slave_1: left promiscuous mode [ 208.694868][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.696065][T13116] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3073: bg 0: block 4: invalid block bitmap [ 208.714728][T13116] EXT4-fs (loop5): Remounting filesystem read-only [ 208.714889][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.722691][T13116] EXT4-fs (loop5): 1 truncate cleaned up [ 208.735819][T13116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.776227][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 208.787456][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3074'. [ 208.816499][ T31] team0 (unregistering): Port device team_slave_1 removed [ 208.871170][T13042] team0: Port device team_slave_0 added [ 208.877502][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.880358][T13042] team0: Port device team_slave_1 added [ 208.927694][T13042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.935500][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.962067][T13042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.982663][T13042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.990496][T13042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.016830][T13042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.084005][T13042] hsr_slave_0: entered promiscuous mode [ 209.125659][T13143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.136607][ T29] audit: type=1400 audit(1770266957.149:15095): avc: denied { create } for pid=13126 comm="syz.1.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 209.178308][T13042] hsr_slave_1: entered promiscuous mode [ 209.189141][T13042] debugfs: 'hsr0' already exists in 'hsr' [ 209.194924][T13042] Cannot create hsr debugfs directory [ 209.233145][T13152] xt_time: unknown flags 0xc [ 209.260664][T13152] loop3: detected capacity change from 0 to 1024 [ 209.290085][T13156] netlink: 'syz.2.3080': attribute type 39 has an invalid length. [ 209.330201][ T31] IPVS: stop unused estimator thread 0... [ 209.340105][T13152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.363985][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'. [ 209.396010][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.399156][T13145] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3076'. [ 209.411563][T13158] x_tables: duplicate underflow at hook 2 [ 209.443105][T13170] loop3: detected capacity change from 0 to 512 [ 209.559041][T13174] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3083'. [ 209.575737][T13182] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.794079][T13042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.814895][T13042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.854913][T13042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.888096][T13042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.999662][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.023870][T13235] netlink: 'syz.5.3091': attribute type 1 has an invalid length. [ 210.038706][T13042] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.045263][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3092'. [ 210.057279][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.064518][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.080359][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'. [ 210.095230][T13235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.123149][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.130433][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.158371][T13237] x_tables: duplicate underflow at hook 2 [ 210.249148][T13262] xt_time: unknown flags 0xc [ 210.276419][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3098'. [ 210.342221][T13042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.343739][T13274] loop5: detected capacity change from 0 to 512 [ 210.358066][T13274] EXT4-fs: Ignoring removed i_version option [ 210.364973][T13274] EXT4-fs: Ignoring removed bh option [ 210.413389][T13274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.442205][T13274] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.478618][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3103'. [ 210.612184][T13042] veth0_vlan: entered promiscuous mode [ 210.629463][T13042] veth1_vlan: entered promiscuous mode [ 210.642403][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 210.658157][T13042] veth0_macvtap: entered promiscuous mode [ 210.666894][T13314] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.3100: iget: bad i_size value: 2533274857506816 [ 210.691082][T13042] veth1_macvtap: entered promiscuous mode [ 210.708043][ T29] audit: type=1326 audit(1770266958.739:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3263e4aeb9 code=0x7ffc0000 [ 210.711277][T13314] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.3100: iget: bad i_size value: 2533274857506816 [ 210.732570][ T29] audit: type=1326 audit(1770266958.739:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3263e4aeb9 code=0x7ffc0000 [ 210.744989][T13042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.768130][ T29] audit: type=1326 audit(1770266958.739:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 210.768194][ T29] audit: type=1326 audit(1770266958.739:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 210.812002][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3104'. [ 210.824516][ T29] audit: type=1326 audit(1770266958.739:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 210.824548][ T29] audit: type=1326 audit(1770266958.739:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 210.863628][T13042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.882375][ T29] audit: type=1326 audit(1770266958.739:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 210.905645][T13329] xt_time: unknown flags 0xc [ 210.913467][ T29] audit: type=1326 audit(1770266958.739:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 210.993639][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 210.998595][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.047935][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.070670][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.100155][ T4084] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.109006][T13336] bridge0: entered promiscuous mode [ 211.116783][T13336] macsec1: entered promiscuous mode [ 211.158278][ T3474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.479170][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 211.479188][ T29] audit: type=1326 audit(1770266959.489:15969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 211.576891][T13360] netlink: 'syz.5.3119': attribute type 1 has an invalid length. [ 211.586117][ T29] audit: type=1326 audit(1770266959.519:15970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 211.609819][ T29] audit: type=1326 audit(1770266959.549:15971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 211.633537][ T29] audit: type=1326 audit(1770266959.549:15972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 211.657110][ T29] audit: type=1326 audit(1770266959.549:15973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 211.680851][ T29] audit: type=1326 audit(1770266959.549:15974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 211.705062][ T29] audit: type=1326 audit(1770266959.549:15975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 211.729012][ T29] audit: type=1326 audit(1770266959.549:15976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 211.753275][ T29] audit: type=1326 audit(1770266959.549:15977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3263dec2d9 code=0x7ffc0000 [ 211.777172][ T29] audit: type=1326 audit(1770266959.549:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13299 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3263e44cd7 code=0x7ffc0000 [ 211.853215][T13346] Set syz1 is full, maxelem 65536 reached [ 211.860480][T13360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.015166][T13366] tipc: Enabling of bearer rejected, failed to enable media [ 212.600191][T13433] netlink: 'syz.4.3147': attribute type 39 has an invalid length. [ 213.002186][T13461] loop3: detected capacity change from 0 to 8192 [ 213.489015][T13478] loop2: detected capacity change from 0 to 2048 [ 213.530718][ T3303] loop2: p1 < > p3 [ 213.535654][ T3303] loop2: p3 size 134217728 extends beyond EOD, truncated [ 213.546797][T13478] loop2: p1 < > p3 [ 213.555864][T13478] loop2: p3 size 134217728 extends beyond EOD, truncated [ 213.571076][ T3001] loop2: p1 < > p3 [ 213.575625][ T3001] loop2: p3 size 134217728 extends beyond EOD, truncated [ 213.631723][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.634766][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.657845][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.669827][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 213.681961][T13475] chnl_net:caif_netlink_parms(): no params data found [ 213.742408][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.749958][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.757649][T13475] bridge_slave_0: entered allmulticast mode [ 213.764873][T13475] bridge_slave_0: entered promiscuous mode [ 213.772189][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.779295][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.786573][T13475] bridge_slave_1: entered allmulticast mode [ 213.793862][T13475] bridge_slave_1: entered promiscuous mode [ 213.816563][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.828125][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.855330][T13475] team0: Port device team_slave_0 added [ 213.880218][T13475] team0: Port device team_slave_1 added [ 213.903456][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.910532][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.937105][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.948487][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.956014][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.982269][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.996455][ T31] bridge_slave_1: left allmulticast mode [ 214.002182][ T31] bridge_slave_1: left promiscuous mode [ 214.007989][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.016868][ T31] bridge_slave_0: left allmulticast mode [ 214.022585][ T31] bridge_slave_0: left promiscuous mode [ 214.028621][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.401867][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.411399][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.421287][ T31] bond0 (unregistering): Released all slaves [ 214.429295][ T31] bond1 (unregistering): Released all slaves [ 214.438137][ T31] bond2 (unregistering): Released all slaves [ 214.446804][ T31] bond3 (unregistering): Released all slaves [ 214.455684][ T31] bond4 (unregistering): Released all slaves [ 214.485733][T13475] hsr_slave_0: entered promiscuous mode [ 214.492311][T13475] hsr_slave_1: entered promiscuous mode [ 214.498406][T13475] debugfs: 'hsr0' already exists in 'hsr' [ 214.504205][T13475] Cannot create hsr debugfs directory [ 214.521260][ T31] hsr_slave_0: left promiscuous mode [ 214.527138][ T31] hsr_slave_1: left promiscuous mode [ 214.533006][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.540768][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.611308][ T31] team0 (unregistering): Port device team_slave_1 removed [ 214.620736][T13509] __nla_validate_parse: 11 callbacks suppressed [ 214.620765][T13509] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3171'. [ 214.629040][T13512] xt_TCPMSS: Only works on TCP SYN packets [ 214.643621][ T31] team0 (unregistering): Port device team_slave_0 removed [ 214.652033][T13512] loop2: detected capacity change from 0 to 512 [ 214.727545][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 214.960492][ T31] IPVS: stop unused estimator thread 0... [ 214.991702][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 215.019221][T13554] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 215.152095][T13570] xt_TCPMSS: Only works on TCP SYN packets [ 215.169968][T13570] loop2: detected capacity change from 0 to 512 [ 215.293242][T13475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.325619][T13475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.353730][T13475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.379004][T13475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.502694][T13588] FAULT_INJECTION: forcing a failure. [ 215.502694][T13588] name failslab, interval 1, probability 0, space 0, times 0 [ 215.515744][T13588] CPU: 1 UID: 0 PID: 13588 Comm: syz.2.3185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.515785][T13588] Tainted: [W]=WARN [ 215.515793][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.515819][T13588] Call Trace: [ 215.515826][T13588] [ 215.515835][T13588] __dump_stack+0x1d/0x30 [ 215.515865][T13588] dump_stack_lvl+0x95/0xd0 [ 215.515923][T13588] dump_stack+0x15/0x1b [ 215.515954][T13588] should_fail_ex+0x263/0x280 [ 215.516062][T13588] should_failslab+0x8c/0xb0 [ 215.516089][T13588] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 215.516119][T13588] ? __alloc_skb+0x2f0/0x4b0 [ 215.516167][T13588] __alloc_skb+0x2f0/0x4b0 [ 215.516199][T13588] ? __alloc_skb+0x219/0x4b0 [ 215.516282][T13588] netlink_alloc_large_skb+0xbf/0xf0 [ 215.516314][T13588] netlink_sendmsg+0x40c/0x6f0 [ 215.516337][T13588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.516384][T13588] ____sys_sendmsg+0x5af/0x600 [ 215.516409][T13588] ___sys_sendmsg+0x195/0x1e0 [ 215.516470][T13588] __x64_sys_sendmsg+0xd4/0x160 [ 215.516517][T13588] x64_sys_call+0x17ba/0x3000 [ 215.516547][T13588] do_syscall_64+0xc0/0x2a0 [ 215.516582][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.516675][T13588] RIP: 0033:0x7f4324e2aeb9 [ 215.516756][T13588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.516770][T13588] RSP: 002b:00007f4323866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.516786][T13588] RAX: ffffffffffffffda RBX: 00007f43250a6090 RCX: 00007f4324e2aeb9 [ 215.516796][T13588] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 215.516861][T13588] RBP: 00007f4323866090 R08: 0000000000000000 R09: 0000000000000000 [ 215.516870][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.516879][T13588] R13: 00007f43250a6128 R14: 00007f43250a6090 R15: 00007fff475037a8 [ 215.516892][T13588] [ 215.760933][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.781792][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.792234][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 215.804846][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.812277][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.841844][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.849029][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.987448][T13614] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 215.999071][T13617] xt_TCPMSS: Only works on TCP SYN packets [ 216.009668][T13617] loop2: detected capacity change from 0 to 512 [ 216.085372][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.134176][T13635] loop2: detected capacity change from 0 to 512 [ 216.161959][T13635] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.169513][T13633] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.169629][ T6756] IPVS: starting estimator thread 0... [ 216.201550][T13635] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3197: corrupted in-inode xattr: e_value size too large [ 216.239087][T13635] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3197: couldn't read orphan inode 15 (err -117) [ 216.284687][T13635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.297684][T13642] IPVS: using max 2448 ests per chain, 122400 per kthread [ 216.395526][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.453382][T13475] veth0_vlan: entered promiscuous mode [ 216.480393][T13475] veth1_vlan: entered promiscuous mode [ 216.502662][T13475] veth0_macvtap: entered promiscuous mode [ 216.511183][T13475] veth1_macvtap: entered promiscuous mode [ 216.520390][T13668] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 216.537857][T13475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.573046][T13475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.587473][ T871] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.597669][T13672] xt_TCPMSS: Only works on TCP SYN packets [ 216.598933][ T871] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.625976][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.679620][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.686194][T13677] FAULT_INJECTION: forcing a failure. [ 216.686194][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.701608][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.5.3162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.701696][T13677] Tainted: [W]=WARN [ 216.701704][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.701760][T13677] Call Trace: [ 216.701779][T13677] [ 216.701789][T13677] __dump_stack+0x1d/0x30 [ 216.701821][T13677] dump_stack_lvl+0x95/0xd0 [ 216.701843][T13677] dump_stack+0x15/0x1b [ 216.701863][T13677] should_fail_ex+0x263/0x280 [ 216.701916][T13677] should_fail+0xb/0x20 [ 216.701949][T13677] should_fail_usercopy+0x1a/0x20 [ 216.701984][T13677] _copy_from_user+0x1c/0xb0 [ 216.702008][T13677] ucma_write+0xd8/0x260 [ 216.702115][T13677] vfs_writev+0x42b/0x900 [ 216.702147][T13677] ? __pfx_ucma_write+0x10/0x10 [ 216.702184][T13677] do_writev+0xe9/0x210 [ 216.702214][T13677] __x64_sys_writev+0x45/0x50 [ 216.702268][T13677] x64_sys_call+0x1ba5/0x3000 [ 216.702358][T13677] do_syscall_64+0xc0/0x2a0 [ 216.702470][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.702492][T13677] RIP: 0033:0x7f490a6daeb9 [ 216.702510][T13677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.702529][T13677] RSP: 002b:00007f4909137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 216.702561][T13677] RAX: ffffffffffffffda RBX: 00007f490a955fa0 RCX: 00007f490a6daeb9 [ 216.702578][T13677] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 216.702595][T13677] RBP: 00007f4909137090 R08: 0000000000000000 R09: 0000000000000000 [ 216.702624][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.702704][T13677] R13: 00007f490a956038 R14: 00007f490a955fa0 R15: 00007fff6bbf6378 [ 216.702727][T13677] [ 216.925498][T13683] xt_time: unknown flags 0xc [ 216.946558][T13684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3209'. [ 216.955740][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3209'. [ 216.964852][T13684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3209'. [ 217.117756][T13699] lo speed is unknown, defaulting to 1000 [ 217.157474][T13699] lo speed is unknown, defaulting to 1000 [ 217.190423][T13699] lo speed is unknown, defaulting to 1000 [ 217.298541][T13699] infiniband syj0: set active [ 217.304115][T13699] infiniband syj0: added lo [ 217.309618][ T6765] lo speed is unknown, defaulting to 1000 [ 217.403151][T13699] RDS/IB: syj0: added [ 217.420414][T13699] smc: adding ib device syj0 with port count 1 [ 217.427706][T13699] smc: ib device syj0 port 1 has no pnetid [ 217.434266][ T6765] lo speed is unknown, defaulting to 1000 [ 217.453327][T13699] lo speed is unknown, defaulting to 1000 [ 217.509585][T13699] lo speed is unknown, defaulting to 1000 [ 217.554695][T13699] lo speed is unknown, defaulting to 1000 [ 217.595473][T13690] lo speed is unknown, defaulting to 1000 [ 217.647535][T13699] lo speed is unknown, defaulting to 1000 [ 217.726428][T13699] lo speed is unknown, defaulting to 1000 [ 217.753842][T13690] chnl_net:caif_netlink_parms(): no params data found [ 217.773308][T13699] lo speed is unknown, defaulting to 1000 [ 217.836307][T13699] lo speed is unknown, defaulting to 1000 [ 217.927249][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.935444][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.951052][T13690] bridge_slave_0: entered allmulticast mode [ 217.957884][T13690] bridge_slave_0: entered promiscuous mode [ 217.971417][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.978895][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.986444][T13690] bridge_slave_1: entered allmulticast mode [ 217.993922][T13690] bridge_slave_1: entered promiscuous mode [ 218.016100][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.027132][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.048448][T13690] team0: Port device team_slave_0 added [ 218.055618][T13690] team0: Port device team_slave_1 added [ 218.123953][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.131363][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.157803][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.170374][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.178279][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.204519][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.270194][T13690] hsr_slave_0: entered promiscuous mode [ 218.279972][T13690] hsr_slave_1: entered promiscuous mode [ 218.286450][T13690] debugfs: 'hsr0' already exists in 'hsr' [ 218.292870][T13690] Cannot create hsr debugfs directory [ 218.474499][T13750] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3229'. [ 218.497256][T13743] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3226'. [ 218.597578][T13759] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.605034][ T6765] IPVS: starting estimator thread 0... [ 218.700086][T13762] IPVS: using max 2448 ests per chain, 122400 per kthread [ 218.729441][T13690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.771363][T13690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.794009][T13690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.849652][T13690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.005727][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.070568][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.089339][T13791] loop4: detected capacity change from 0 to 1764 [ 219.096945][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.104180][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.119214][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.126400][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.159271][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 219.162778][T13690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.169706][T13791] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.205239][ T29] kauditd_printk_skb: 2525 callbacks suppressed [ 219.205260][ T29] audit: type=1400 audit(1770266967.239:18500): avc: denied { mounton } for pid=13790 comm="syz.4.3240" path="/25/file0" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 219.331747][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.353823][ T29] audit: type=1326 audit(1770266967.369:18501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.377546][ T29] audit: type=1326 audit(1770266967.369:18502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.401539][ T29] audit: type=1326 audit(1770266967.369:18503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.425719][ T29] audit: type=1326 audit(1770266967.369:18504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.449860][ T29] audit: type=1326 audit(1770266967.369:18505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.473694][ T29] audit: type=1326 audit(1770266967.379:18506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13790 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 219.720599][T13690] veth0_vlan: entered promiscuous mode [ 219.726387][T13836] __nla_validate_parse: 2 callbacks suppressed [ 219.726480][T13836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3252'. [ 219.745543][T13690] veth1_vlan: entered promiscuous mode [ 219.895775][T13690] veth0_macvtap: entered promiscuous mode [ 219.915527][T13690] veth1_macvtap: entered promiscuous mode [ 219.918453][T13843] loop2: detected capacity change from 0 to 512 [ 219.944829][T13690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.959712][T13690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.973356][ T3474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.021394][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.047926][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.103316][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.306126][T13843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.321942][T13843] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 220.333152][T13843] EXT4-fs (loop2): group descriptors corrupted! [ 220.431893][T13876] FAULT_INJECTION: forcing a failure. [ 220.431893][T13876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.445143][T13876] CPU: 0 UID: 0 PID: 13876 Comm: syz.3.3267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.445244][T13876] Tainted: [W]=WARN [ 220.445254][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.445268][T13876] Call Trace: [ 220.445276][T13876] [ 220.445286][T13876] __dump_stack+0x1d/0x30 [ 220.445375][T13876] dump_stack_lvl+0x95/0xd0 [ 220.445402][T13876] dump_stack+0x15/0x1b [ 220.445426][T13876] should_fail_ex+0x263/0x280 [ 220.445536][T13876] should_fail+0xb/0x20 [ 220.445575][T13876] should_fail_usercopy+0x1a/0x20 [ 220.445612][T13876] _copy_from_iter+0xcf/0xea0 [ 220.445633][T13876] ? __build_skb_around+0x164/0x1c0 [ 220.445674][T13876] ? __build_skb+0x59/0x70 [ 220.445743][T13876] ? is_vmalloc_addr+0x37/0x90 [ 220.445769][T13876] netlink_sendmsg+0x4ae/0x6f0 [ 220.445795][T13876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.445817][T13876] __sys_sendto+0x470/0x4d0 [ 220.445862][T13876] __x64_sys_sendto+0x76/0x90 [ 220.445897][T13876] x64_sys_call+0x29a7/0x3000 [ 220.445931][T13876] do_syscall_64+0xc0/0x2a0 [ 220.445999][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.446022][T13876] RIP: 0033:0x7f0bce80aeb9 [ 220.446042][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.446128][T13876] RSP: 002b:00007f0bcd267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.446151][T13876] RAX: ffffffffffffffda RBX: 00007f0bcea85fa0 RCX: 00007f0bce80aeb9 [ 220.446167][T13876] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 220.446183][T13876] RBP: 00007f0bcd267090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 220.446201][T13876] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 220.446280][T13876] R13: 00007f0bcea86038 R14: 00007f0bcea85fa0 R15: 00007ffcf4e4a278 [ 220.446302][T13876] [ 220.709752][T13885] netlink: 'syz.4.3271': attribute type 21 has an invalid length. [ 220.769205][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3274'. [ 220.778159][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3274'. [ 220.789842][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 220.824183][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 220.927838][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 220.971948][T13916] loop2: detected capacity change from 0 to 1024 [ 220.991890][T13916] EXT4-fs: Ignoring removed oldalloc option [ 220.997958][T13916] EXT4-fs: Ignoring removed bh option [ 221.022182][T13916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.402983][ T29] audit: type=1326 audit(1770266969.439:18507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.4.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 221.427651][ T29] audit: type=1326 audit(1770266969.439:18508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.4.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 221.452310][ T29] audit: type=1326 audit(1770266969.439:18509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13933 comm="syz.4.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c070caeb9 code=0x7ffc0000 [ 221.863457][T13942] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3289'. [ 221.944664][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.080647][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3295'. [ 222.183895][T13960] netlink: 'syz.2.3298': attribute type 83 has an invalid length. [ 222.364125][T13982] loop2: detected capacity change from 0 to 512 [ 222.413340][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 222.577667][ T6756] kernel write not supported for file bpf-prog (pid: 6756 comm: kworker/1:9) [ 222.862066][T13984] Set syz1 is full, maxelem 65536 reached [ 222.970620][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3312'. [ 223.075138][ T6765] lo speed is unknown, defaulting to 1000 [ 223.159034][T14013] loop2: detected capacity change from 0 to 512 [ 223.223221][T14020] netlink: 'syz.1.3319': attribute type 5 has an invalid length. [ 223.328589][T14025] program syz.5.3318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.382530][T14023] loop2: detected capacity change from 0 to 4096 [ 223.426932][T14023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.531951][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.542697][T14045] loop5: detected capacity change from 0 to 128 [ 223.559392][T14045] msdos: Unknown parameter '' [ 223.575014][T14045] loop5: detected capacity change from 0 to 512 [ 223.594881][T14045] EXT4-fs: Ignoring removed i_version option [ 223.629737][T14045] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 223.637563][T14050] loop2: detected capacity change from 0 to 512 [ 223.767418][T14042] xt_l2tp: missing protocol rule (udp|l2tpip) [ 223.937486][T14074] FAULT_INJECTION: forcing a failure. [ 223.937486][T14074] name failslab, interval 1, probability 0, space 0, times 0 [ 223.950828][T14074] CPU: 1 UID: 0 PID: 14074 Comm: syz.2.3339 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.950869][T14074] Tainted: [W]=WARN [ 223.950878][T14074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.950893][T14074] Call Trace: [ 223.950903][T14074] [ 223.950913][T14074] __dump_stack+0x1d/0x30 [ 223.950943][T14074] dump_stack_lvl+0x95/0xd0 [ 223.950970][T14074] dump_stack+0x15/0x1b [ 223.951058][T14074] should_fail_ex+0x263/0x280 [ 223.951096][T14074] should_failslab+0x8c/0xb0 [ 223.951122][T14074] __kmalloc_noprof+0xb8/0x580 [ 223.951165][T14074] ? __list_lru_init+0x72/0x2e0 [ 223.951202][T14074] __list_lru_init+0x72/0x2e0 [ 223.951297][T14074] alloc_super+0x50d/0x580 [ 223.951334][T14074] sget_fc+0x24e/0x6e0 [ 223.951366][T14074] ? __pfx_set_anon_super_fc+0x10/0x10 [ 223.951480][T14074] ? __pfx_shmem_fill_super+0x10/0x10 [ 223.951534][T14074] get_tree_nodev+0x2a/0x100 [ 223.951573][T14074] shmem_get_tree+0x1c/0x30 [ 223.951606][T14074] vfs_get_tree+0x57/0x1d0 [ 223.951652][T14074] do_new_mount+0x288/0x700 [ 223.951737][T14074] ? security_capable+0x7b/0x90 [ 223.951770][T14074] path_mount+0x4d0/0xbc0 [ 223.951797][T14074] ? user_path_at+0xbf/0x130 [ 223.951831][T14074] __se_sys_mount+0x28c/0x2e0 [ 223.951855][T14074] ? fput+0x8f/0xc0 [ 223.951907][T14074] __x64_sys_mount+0x67/0x80 [ 223.951929][T14074] x64_sys_call+0x2cca/0x3000 [ 223.951954][T14074] do_syscall_64+0xc0/0x2a0 [ 223.952023][T14074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.952130][T14074] RIP: 0033:0x7f4324e2aeb9 [ 223.952151][T14074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.952233][T14074] RSP: 002b:00007f4323887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.952259][T14074] RAX: ffffffffffffffda RBX: 00007f43250a5fa0 RCX: 00007f4324e2aeb9 [ 223.952275][T14074] RDX: 00002000000018c0 RSI: 0000200000001880 RDI: 0000000000000000 [ 223.952289][T14074] RBP: 00007f4323887090 R08: 0000000000000000 R09: 0000000000000000 [ 223.952302][T14074] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 223.952315][T14074] R13: 00007f43250a6038 R14: 00007f43250a5fa0 R15: 00007fff475037a8 [ 223.952396][T14074] [ 224.215883][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 224.215901][ T29] audit: type=1326 audit(1770266972.239:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.246302][ T29] audit: type=1326 audit(1770266972.249:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.270281][ T29] audit: type=1326 audit(1770266972.249:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.294332][ T29] audit: type=1326 audit(1770266972.269:18585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.318227][ T29] audit: type=1326 audit(1770266972.269:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.342818][ T29] audit: type=1326 audit(1770266972.269:18587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.366540][ T29] audit: type=1326 audit(1770266972.269:18588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.390503][ T29] audit: type=1326 audit(1770266972.269:18589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.427642][ T29] audit: type=1326 audit(1770266972.289:18590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.451731][ T29] audit: type=1326 audit(1770266972.339:18591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.3.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0bce80aeb9 code=0x7ffc0000 [ 224.479995][T14079] program syz.3.3340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.492372][T14083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14083 comm=syz.5.3341 [ 224.530692][T14083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.599138][T14092] loop2: detected capacity change from 0 to 1024 [ 224.672202][T14092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.692885][T14106] Driver unsupported XDP return value 0 on prog (id 646) dev N/A, expect packet loss! [ 224.730196][T14106] 9p: Bad value for 'rfdno' [ 224.800508][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.820255][T14117] loop5: detected capacity change from 0 to 128 [ 224.827230][T14117] msdos: Unknown parameter '' [ 224.877165][T14119] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 224.883844][T14119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.891939][T14119] vhci_hcd vhci_hcd.0: Device attached [ 224.909388][T14123] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.938338][T14123] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.955783][T14110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.965262][T14110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.981616][ T6769] kernel write not supported for file /ppp (pid: 6769 comm: kworker/0:12) [ 225.128600][T14136] __nla_validate_parse: 4 callbacks suppressed [ 225.128620][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'. [ 225.143987][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.151850][T14136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.160092][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.167725][T14136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.180396][T14137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14137 comm=syz.1.3359 [ 225.289503][T14139] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 225.446212][T14120] vhci_hcd: connection closed [ 225.446385][ T31] vhci_hcd vhci_hcd.3: stop threads [ 225.456518][ T31] vhci_hcd vhci_hcd.3: release socket [ 225.462070][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 225.661800][T14165] set_capacity_and_notify: 1 callbacks suppressed [ 225.661819][T14165] loop4: detected capacity change from 0 to 1024 [ 225.696134][T14162] loop5: detected capacity change from 0 to 8192 [ 225.715685][T14165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.788584][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.810535][ T2469] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.843853][T14166] lo speed is unknown, defaulting to 1000 [ 225.929603][T14184] loop4: detected capacity change from 0 to 1024 [ 225.942129][T14184] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.956076][T14184] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 225.965820][T14184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.027503][T14184] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3378: Failed to acquire dquot type 0 [ 226.040922][T14184] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3378: Failed to acquire dquot type 0 [ 226.061290][T14184] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.3378: Freeing blocks not in datazone - block = 0, count = 4096 [ 226.067967][T14166] chnl_net:caif_netlink_parms(): no params data found [ 226.083946][T14184] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3378: Failed to acquire dquot type 0 [ 226.129548][T14184] EXT4-fs (loop4): 1 orphan inode deleted [ 226.142760][T14166] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.150040][T14166] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.157489][T14166] bridge_slave_0: entered allmulticast mode [ 226.164446][T14166] bridge_slave_0: entered promiscuous mode [ 226.171847][T14166] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.179158][T14166] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.186709][T14166] bridge_slave_1: entered allmulticast mode [ 226.193608][T14166] bridge_slave_1: entered promiscuous mode [ 226.213774][T14166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.224923][T14166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.242200][T14184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.249780][T14166] team0: Port device team_slave_0 added [ 226.261838][T14166] team0: Port device team_slave_1 added [ 226.281778][T14166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.289081][T14166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.315866][T14166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.330355][T14166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.337396][T14166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.363867][T14166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.425244][T14166] hsr_slave_0: entered promiscuous mode [ 226.434676][T14166] hsr_slave_1: entered promiscuous mode [ 226.441109][T14166] debugfs: 'hsr0' already exists in 'hsr' [ 226.446881][T14166] Cannot create hsr debugfs directory [ 226.470096][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.532455][T14206] FAULT_INJECTION: forcing a failure. [ 226.532455][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 226.545260][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.4.3384 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.545298][T14206] Tainted: [W]=WARN [ 226.545306][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.545323][T14206] Call Trace: [ 226.545331][T14206] [ 226.545374][T14206] __dump_stack+0x1d/0x30 [ 226.545401][T14206] dump_stack_lvl+0x95/0xd0 [ 226.545422][T14206] dump_stack+0x15/0x1b [ 226.545446][T14206] should_fail_ex+0x263/0x280 [ 226.545522][T14206] should_failslab+0x8c/0xb0 [ 226.545545][T14206] kmem_cache_alloc_noprof+0x68/0x490 [ 226.545576][T14206] ? audit_log_start+0x34c/0x730 [ 226.545607][T14206] audit_log_start+0x34c/0x730 [ 226.545703][T14206] ? kstrtouint+0x76/0xc0 [ 226.545731][T14206] audit_seccomp+0x47/0x100 [ 226.545759][T14206] ? __seccomp_filter+0x8db/0x1350 [ 226.545780][T14206] __seccomp_filter+0x8ec/0x1350 [ 226.545842][T14206] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.545876][T14206] ? vfs_write+0x86e/0x9f0 [ 226.545901][T14206] __secure_computing+0x81/0x150 [ 226.545932][T14206] syscall_trace_enter+0xce/0x1e0 [ 226.546003][T14206] do_syscall_64+0x9a/0x2a0 [ 226.546060][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.546082][T14206] RIP: 0033:0x7f8c070caeb9 [ 226.546101][T14206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.546123][T14206] RSP: 002b:00007f8c05b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000051 [ 226.546148][T14206] RAX: ffffffffffffffda RBX: 00007f8c07345fa0 RCX: 00007f8c070caeb9 [ 226.546232][T14206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.546247][T14206] RBP: 00007f8c05b27090 R08: 0000000000000000 R09: 0000000000000000 [ 226.546261][T14206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.546274][T14206] R13: 00007f8c07346038 R14: 00007f8c07345fa0 R15: 00007ffce0acfc88 [ 226.546293][T14206] [ 226.797818][T14166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.803991][T14213] 9p: Bad value for 'rfdno' [ 226.814125][T14166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.824750][T14166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.845307][T14166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.914887][T14166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.931530][T14166] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.944012][ T2469] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.951161][ T2469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.957163][T14230] loop4: detected capacity change from 0 to 512 [ 226.983196][ T2469] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.990454][ T2469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.013615][T14166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.021510][T14230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.062571][T14230] EXT4-fs (loop4): 1 truncate cleaned up [ 227.092440][T14230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.151091][T14166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.189826][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 227.704303][T14260] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3395'. [ 227.724204][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.729167][T14244] Set syz1 is full, maxelem 65536 reached [ 227.746593][T14166] veth0_vlan: entered promiscuous mode [ 227.755480][T14166] veth1_vlan: entered promiscuous mode [ 227.771958][T14166] veth0_macvtap: entered promiscuous mode [ 227.793306][T14166] veth1_macvtap: entered promiscuous mode [ 227.816162][T14166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.831849][T14166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.846959][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.865554][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.877719][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.892287][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.024553][T14289] loop4: detected capacity change from 0 to 512 [ 228.187625][T14300] loop6: detected capacity change from 0 to 128 [ 228.202307][T14300] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.234950][T14306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3406'. [ 228.253547][T14303] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3407'. [ 228.269282][T14300] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.279502][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'. [ 228.371174][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14316 comm=syz.4.3409 [ 228.396282][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 228.413254][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14316 comm=syz.4.3409 [ 228.428185][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 228.508954][T14319] xt_hashlimit: size too large, truncated to 1048576 [ 228.600691][T14325] loop4: detected capacity change from 0 to 128 [ 228.635135][T14325] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.650273][T14325] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.761889][T14335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3416'. [ 228.772813][T14335] sctp: [Deprecated]: syz.1.3416 (pid 14335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.772813][T14335] Use struct sctp_sack_info instead [ 228.861166][T14344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3420'. [ 229.081029][T14359] loop2: detected capacity change from 0 to 256 [ 229.114955][ T3474] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.216632][T14368] sctp: [Deprecated]: syz.6.3429 (pid 14368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.216632][T14368] Use struct sctp_sack_info instead [ 229.247177][T14366] FAULT_INJECTION: forcing a failure. [ 229.247177][T14366] name failslab, interval 1, probability 0, space 0, times 0 [ 229.288828][T14366] CPU: 1 UID: 0 PID: 14366 Comm: syz.4.3430 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.288909][T14366] Tainted: [W]=WARN [ 229.288918][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.288944][T14366] Call Trace: [ 229.289030][T14366] [ 229.289040][T14366] __dump_stack+0x1d/0x30 [ 229.289072][T14366] dump_stack_lvl+0x95/0xd0 [ 229.289094][T14366] dump_stack+0x15/0x1b [ 229.289117][T14366] should_fail_ex+0x263/0x280 [ 229.289160][T14366] should_failslab+0x8c/0xb0 [ 229.289190][T14366] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 229.289287][T14366] ? __get_vm_area_node+0x106/0x1d0 [ 229.289317][T14366] __get_vm_area_node+0x106/0x1d0 [ 229.289386][T14366] __vmalloc_node_range_noprof+0x291/0x12b0 [ 229.289416][T14366] ? n_tty_open+0x1b/0xd0 [ 229.289528][T14366] ? _prb_read_valid+0x8f5/0x950 [ 229.289639][T14366] ? n_tty_open+0x1b/0xd0 [ 229.289678][T14366] vzalloc_noprof+0x82/0xb0 [ 229.289708][T14366] ? n_tty_open+0x1b/0xd0 [ 229.289744][T14366] n_tty_open+0x1b/0xd0 [ 229.289857][T14366] tty_ldisc_setup+0x83/0x220 [ 229.289887][T14366] tty_init_dev+0x183/0x320 [ 229.289916][T14366] tty_open+0x6c6/0xaf0 [ 229.290007][T14366] chrdev_open+0x2eb/0x3a0 [ 229.290044][T14366] ? __pfx_chrdev_open+0x10/0x10 [ 229.290186][T14366] do_dentry_open+0x54b/0xa60 [ 229.290222][T14366] vfs_open+0x37/0x1e0 [ 229.290251][T14366] path_openat+0x1de9/0x23c0 [ 229.290302][T14366] do_filp_open+0x15d/0x280 [ 229.290345][T14366] do_sys_openat2+0xa6/0x150 [ 229.290381][T14366] __x64_sys_openat+0xf2/0x120 [ 229.290433][T14366] x64_sys_call+0x2b07/0x3000 [ 229.290459][T14366] do_syscall_64+0xc0/0x2a0 [ 229.290491][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.290518][T14366] RIP: 0033:0x7f8c0708b78e [ 229.290592][T14366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.290615][T14366] RSP: 002b:00007f8c05b26b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.290641][T14366] RAX: ffffffffffffffda RBX: 00007f8c05b276c0 RCX: 00007f8c0708b78e [ 229.290659][T14366] RDX: 0000000000000002 RSI: 00007f8c05b26c00 RDI: ffffffffffffff9c [ 229.290675][T14366] RBP: 00007f8c05b27090 R08: 0000000000000000 R09: 0000000000000000 [ 229.290691][T14366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.290751][T14366] R13: 00007f8c07346038 R14: 00007f8c07345fa0 R15: 00007ffce0acfc88 [ 229.290775][T14366] [ 229.298803][T14366] syz.4.3430: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 229.612714][T14366] CPU: 1 UID: 0 PID: 14366 Comm: syz.4.3430 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.612749][T14366] Tainted: [W]=WARN [ 229.612756][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.612769][T14366] Call Trace: [ 229.612805][T14366] [ 229.612815][T14366] __dump_stack+0x1d/0x30 [ 229.612846][T14366] dump_stack_lvl+0x95/0xd0 [ 229.612874][T14366] dump_stack+0x15/0x1b [ 229.612960][T14366] warn_alloc+0x145/0x1c0 [ 229.612999][T14366] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 229.613078][T14366] ? _prb_read_valid+0x8f5/0x950 [ 229.613187][T14366] ? n_tty_open+0x1b/0xd0 [ 229.613218][T14366] vzalloc_noprof+0x82/0xb0 [ 229.613322][T14366] ? n_tty_open+0x1b/0xd0 [ 229.613358][T14366] n_tty_open+0x1b/0xd0 [ 229.613446][T14366] tty_ldisc_setup+0x83/0x220 [ 229.613479][T14366] tty_init_dev+0x183/0x320 [ 229.613576][T14366] tty_open+0x6c6/0xaf0 [ 229.613615][T14366] chrdev_open+0x2eb/0x3a0 [ 229.613644][T14366] ? __pfx_chrdev_open+0x10/0x10 [ 229.613704][T14366] do_dentry_open+0x54b/0xa60 [ 229.613734][T14366] vfs_open+0x37/0x1e0 [ 229.613844][T14366] path_openat+0x1de9/0x23c0 [ 229.613951][T14366] do_filp_open+0x15d/0x280 [ 229.613996][T14366] do_sys_openat2+0xa6/0x150 [ 229.614040][T14366] __x64_sys_openat+0xf2/0x120 [ 229.614074][T14366] x64_sys_call+0x2b07/0x3000 [ 229.614157][T14366] do_syscall_64+0xc0/0x2a0 [ 229.614191][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.614218][T14366] RIP: 0033:0x7f8c0708b78e [ 229.614239][T14366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.614283][T14366] RSP: 002b:00007f8c05b26b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.614309][T14366] RAX: ffffffffffffffda RBX: 00007f8c05b276c0 RCX: 00007f8c0708b78e [ 229.614326][T14366] RDX: 0000000000000002 RSI: 00007f8c05b26c00 RDI: ffffffffffffff9c [ 229.614414][T14366] RBP: 00007f8c05b27090 R08: 0000000000000000 R09: 0000000000000000 [ 229.614429][T14366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.614507][T14366] R13: 00007f8c07346038 R14: 00007f8c07345fa0 R15: 00007ffce0acfc88 [ 229.614530][T14366] [ 229.614591][T14366] Mem-Info: [ 229.825633][T14391] loop6: detected capacity change from 0 to 128 [ 229.828078][T14391] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.830485][T14391] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.833250][T14391] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 229.833337][T14391] FAT-fs (loop6): Filesystem has been set read-only [ 229.955194][T14166] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 229.955314][T14166] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 230.101334][T14366] active_anon:8554 inactive_anon:32 isolated_anon:0 [ 230.101334][T14366] active_file:24424 inactive_file:4845 isolated_file:0 [ 230.101334][T14366] unevictable:4 dirty:315 writeback:0 [ 230.101334][T14366] slab_reclaimable:3760 slab_unreclaimable:28728 [ 230.101334][T14366] mapped:30139 shmem:473 pagetables:1685 [ 230.101334][T14366] sec_pagetables:0 bounce:0 [ 230.101334][T14366] kernel_misc_reclaimable:0 [ 230.101334][T14366] free:1852815 free_pcp:9551 free_cma:0 [ 230.147156][T14366] Node 0 active_anon:34448kB inactive_anon:128kB active_file:97696kB inactive_file:19380kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:120556kB dirty:1260kB writeback:0kB shmem:1892kB kernel_stack:4576kB pagetables:6856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.175826][T14366] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.206220][T14366] lowmem_reserve[]: 0 2879 7858 7858 [ 230.211674][T14366] Node 0 DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 230.244537][T14366] lowmem_reserve[]: 0 0 4978 4978 [ 230.249745][T14366] Node 0 Normal free:4451036kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34448kB inactive_anon:128kB active_file:97696kB inactive_file:19380kB unevictable:16kB writepending:1260kB zspages:0kB present:5242880kB managed:5098240kB mlocked:16kB bounce:0kB free_pcp:33960kB local_pcp:8236kB free_cma:0kB [ 230.283790][T14366] lowmem_reserve[]: 0 0 0 0 [ 230.288439][T14366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.301784][T14366] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 230.318669][T14366] Node 0 Normal: 877*4kB (UM) 1643*8kB (UM) 921*16kB (UME) 773*32kB (M) 305*64kB (ME) 222*128kB (UM) 70*256kB (UME) 39*512kB (UM) 36*1024kB (UM) 37*2048kB (UM) 1024*4096kB (UM) = 4448892kB [ 230.337594][T14366] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 230.347722][T14366] 29762 total pagecache pages [ 230.352505][T14366] 32 pages in swap cache [ 230.356874][T14366] Free swap = 124868kB [ 230.361311][T14366] Total swap = 124996kB [ 230.365508][T14366] 2097051 pages RAM [ 230.369958][T14366] 0 pages HighMem/MovableOnly [ 230.374832][T14366] 81557 pages reserved [ 230.378970][T14366] tty tty28: ldisc open failed (-12), clearing slot 27 [ 230.534171][T14417] __nla_validate_parse: 4 callbacks suppressed [ 230.534266][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 230.910771][T14444] FAULT_INJECTION: forcing a failure. [ 230.910771][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 230.923780][T14444] CPU: 0 UID: 0 PID: 14444 Comm: syz.4.3457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.923823][T14444] Tainted: [W]=WARN [ 230.923831][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.923844][T14444] Call Trace: [ 230.923851][T14444] [ 230.923859][T14444] __dump_stack+0x1d/0x30 [ 230.923908][T14444] dump_stack_lvl+0x95/0xd0 [ 230.923930][T14444] dump_stack+0x15/0x1b [ 230.923952][T14444] should_fail_ex+0x263/0x280 [ 230.924025][T14444] should_failslab+0x8c/0xb0 [ 230.924052][T14444] __kvmalloc_node_noprof+0x148/0x680 [ 230.924086][T14444] ? do_semtimedop+0xef/0x220 [ 230.924124][T14444] do_semtimedop+0xef/0x220 [ 230.924196][T14444] __x64_sys_semop+0x41/0x50 [ 230.924226][T14444] x64_sys_call+0x2d17/0x3000 [ 230.924312][T14444] do_syscall_64+0xc0/0x2a0 [ 230.924344][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.924368][T14444] RIP: 0033:0x7f8c070caeb9 [ 230.924389][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.924420][T14444] RSP: 002b:00007f8c05b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 230.924446][T14444] RAX: ffffffffffffffda RBX: 00007f8c07345fa0 RCX: 00007f8c070caeb9 [ 230.924463][T14444] RDX: 00000000000001f4 RSI: 00002000000000c0 RDI: 0000000000000000 [ 230.924477][T14444] RBP: 00007f8c05b27090 R08: 0000000000000000 R09: 0000000000000000 [ 230.924490][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.924505][T14444] R13: 00007f8c07346038 R14: 00007f8c07345fa0 R15: 00007ffce0acfc88 [ 230.924528][T14444] [ 231.192413][T14459] FAULT_INJECTION: forcing a failure. [ 231.192413][T14459] name failslab, interval 1, probability 0, space 0, times 0 [ 231.205178][T14459] CPU: 1 UID: 0 PID: 14459 Comm: syz.4.3464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.205214][T14459] Tainted: [W]=WARN [ 231.205223][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.205238][T14459] Call Trace: [ 231.205247][T14459] [ 231.205257][T14459] __dump_stack+0x1d/0x30 [ 231.205304][T14459] dump_stack_lvl+0x95/0xd0 [ 231.205331][T14459] dump_stack+0x15/0x1b [ 231.205381][T14459] should_fail_ex+0x263/0x280 [ 231.205414][T14459] should_failslab+0x8c/0xb0 [ 231.205444][T14459] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 231.205524][T14459] ? __alloc_skb+0x2f0/0x4b0 [ 231.205553][T14459] __alloc_skb+0x2f0/0x4b0 [ 231.205583][T14459] ? __alloc_skb+0x219/0x4b0 [ 231.205618][T14459] netlink_alloc_large_skb+0xbf/0xf0 [ 231.205751][T14459] netlink_sendmsg+0x40c/0x6f0 [ 231.205841][T14459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.205860][T14459] ____sys_sendmsg+0x5af/0x600 [ 231.205881][T14459] ___sys_sendmsg+0x195/0x1e0 [ 231.205935][T14459] __x64_sys_sendmsg+0xd4/0x160 [ 231.205972][T14459] x64_sys_call+0x17ba/0x3000 [ 231.206003][T14459] do_syscall_64+0xc0/0x2a0 [ 231.206032][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.206186][T14459] RIP: 0033:0x7f8c070caeb9 [ 231.206203][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.206222][T14459] RSP: 002b:00007f8c05b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.206246][T14459] RAX: ffffffffffffffda RBX: 00007f8c07345fa0 RCX: 00007f8c070caeb9 [ 231.206264][T14459] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 231.206281][T14459] RBP: 00007f8c05b27090 R08: 0000000000000000 R09: 0000000000000000 [ 231.206352][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.206367][T14459] R13: 00007f8c07346038 R14: 00007f8c07345fa0 R15: 00007ffce0acfc88 [ 231.206386][T14459] [ 231.438948][T14464] loop4: detected capacity change from 0 to 1024 [ 231.498250][T14464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.513771][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 231.513824][ T29] audit: type=1400 audit(1770266979.549:18657): avc: denied { map } for pid=14469 comm="syz.2.3468" path="socket:[44806]" dev="sockfs" ino=44806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.513856][ T29] audit: type=1400 audit(1770266979.549:18658): avc: denied { read } for pid=14469 comm="syz.2.3468" path="socket:[44806]" dev="sockfs" ino=44806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.524930][T14464] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 231.526144][ T29] audit: type=1400 audit(1770266979.559:18659): avc: denied { append } for pid=14463 comm="syz.4.3466" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.526563][T14464] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 231.526590][T14464] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.526590][T14464] [ 231.526604][T14464] EXT4-fs (loop4): Total free blocks count 0 [ 231.526658][T14464] EXT4-fs (loop4): Free/Dirty block details [ 231.526674][T14464] EXT4-fs (loop4): free_blocks=20480 [ 231.526691][T14464] EXT4-fs (loop4): dirty_blocks=16 [ 231.526707][T14464] EXT4-fs (loop4): Block reservation details [ 231.526722][T14464] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 231.583361][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.618314][ T29] audit: type=1400 audit(1770266979.649:18660): avc: denied { create } for pid=14469 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 231.621541][ T29] audit: type=1400 audit(1770266979.649:18661): avc: denied { create } for pid=14469 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=kcm_socket permissive=1 [ 231.621636][ T29] audit: type=1400 audit(1770266979.659:18662): avc: denied { create } for pid=14469 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 231.621721][ T29] audit: type=1400 audit(1770266979.659:18663): avc: denied { write } for pid=14469 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 231.621748][ T29] audit: type=1400 audit(1770266979.659:18664): avc: denied { read } for pid=14469 comm="syz.2.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 231.630233][T14461] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3463'. [ 231.641805][T14479] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3468'. [ 231.779820][ T29] audit: type=1400 audit(1770266979.819:18665): avc: denied { ioctl } for pid=14469 comm="syz.2.3468" path="socket:[43885]" dev="sockfs" ino=43885 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 231.785075][T14479] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 231.960661][T14487] loop2: detected capacity change from 0 to 1024 [ 232.003544][T14487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.049152][ T29] audit: type=1326 audit(1770266980.069:18666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14492 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6a95aeb9 code=0x7ffc0000 [ 232.078433][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.131940][T14497] lo speed is unknown, defaulting to 1000 [ 232.248539][T14509] FAULT_INJECTION: forcing a failure. [ 232.248539][T14509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.261998][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.2.3480 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.262040][T14509] Tainted: [W]=WARN [ 232.262048][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.262064][T14509] Call Trace: [ 232.262072][T14509] [ 232.262083][T14509] __dump_stack+0x1d/0x30 [ 232.262114][T14509] dump_stack_lvl+0x95/0xd0 [ 232.262179][T14509] dump_stack+0x15/0x1b [ 232.262203][T14509] should_fail_ex+0x263/0x280 [ 232.262239][T14509] should_fail+0xb/0x20 [ 232.262301][T14509] should_fail_usercopy+0x1a/0x20 [ 232.262406][T14509] _copy_to_user+0x20/0xa0 [ 232.262433][T14509] simple_read_from_buffer+0xb5/0x130 [ 232.262470][T14509] proc_fail_nth_read+0x10e/0x150 [ 232.262528][T14509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.262561][T14509] vfs_read+0x1ab/0x7f0 [ 232.262584][T14509] ? __rcu_read_unlock+0x4e/0x70 [ 232.262696][T14509] ? __fget_files+0x184/0x1c0 [ 232.262719][T14509] ? mutex_lock+0x57/0x90 [ 232.262743][T14509] ksys_read+0xdc/0x1a0 [ 232.262762][T14509] __x64_sys_read+0x40/0x50 [ 232.262782][T14509] x64_sys_call+0x2889/0x3000 [ 232.262843][T14509] do_syscall_64+0xc0/0x2a0 [ 232.262872][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.262974][T14509] RIP: 0033:0x7f4324deb78e [ 232.262994][T14509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.263012][T14509] RSP: 002b:00007f4323886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.263041][T14509] RAX: ffffffffffffffda RBX: 00007f43238876c0 RCX: 00007f4324deb78e [ 232.263061][T14509] RDX: 000000000000000f RSI: 00007f43238870a0 RDI: 0000000000000005 [ 232.263091][T14509] RBP: 00007f4323887090 R08: 0000000000000000 R09: 0000000000000000 [ 232.263106][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.263119][T14509] R13: 00007f43250a6038 R14: 00007f43250a5fa0 R15: 00007fff475037a8 [ 232.263175][T14509] [ 232.481639][T14512] 9p: Unknown Cache mode or invalid value l 0 0 0 0 1872 30 0 1 0 0 0 0 [ 232.481639][T14512] ip6gretap0: 0 0 0 0 0 0 0 0 0 0 16 16 0 0 0 0 [ 232.481639][T14512] bridge0: 2712 33 0 0 0 0 0 33 4904 20 0 1 0 0 0 0 [ 232.481639][T14512] vcan0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 232.481639][T14512] bond0: 3284 34 0 0 0 0 0 0 1442 15 0 1 0 0 0 0 [ 232.481639][T14512] team0: 2884 35 0 0 0 0 0 35 0 0 0 17 0 0 0 0 [ 232.481639][T14512] dummy0: 0 0 0 0 0 0 0 0 210 3 0 1 0 0 0 0 [ 232.481639][T14512] nlmon0: 73642 448 0 0 0 0 0 0 0 0 0 1 0 0 0 0 [ 232.481639][T14512] caif0: 0 0 [ 233.071738][T14524] Set syz1 is full, maxelem 65536 reached [ 233.243781][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 233.781908][T14570] loop2: detected capacity change from 0 to 1024 [ 233.797256][T14570] EXT4-fs: Ignoring removed oldalloc option [ 233.803347][T14570] EXT4-fs: Ignoring removed bh option [ 233.851669][T14570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.991802][T14581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14581 comm=syz.5.3507 [ 234.198565][T13502] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.273091][T13502] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.335930][T13502] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.349889][T14598] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3517'. [ 234.411999][T13502] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.473929][T14593] lo speed is unknown, defaulting to 1000 [ 234.569281][T13502] bridge_slave_1: left allmulticast mode [ 234.575007][T13502] bridge_slave_1: left promiscuous mode [ 234.581549][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.624696][T13502] bridge_slave_0: left allmulticast mode [ 234.630960][T13502] bridge_slave_0: left promiscuous mode [ 234.636690][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.652518][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.713113][T14639] loop4: detected capacity change from 0 to 512 [ 234.811738][T13502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.822189][T13502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.832811][T13502] bond0 (unregistering): Released all slaves [ 234.851028][T14601] lo speed is unknown, defaulting to 1000 [ 234.899820][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 234.908832][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 234.971676][T14593] chnl_net:caif_netlink_parms(): no params data found [ 235.007035][T13502] hsr_slave_0: left promiscuous mode [ 235.013578][T13502] hsr_slave_1: left promiscuous mode [ 235.020648][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.028237][T13502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.036559][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.044503][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.057576][T13502] veth1_macvtap: left promiscuous mode [ 235.063804][T13502] veth0_macvtap: left promiscuous mode [ 235.069561][T13502] veth1_vlan: left promiscuous mode [ 235.075047][T13502] veth0_vlan: left promiscuous mode [ 235.143963][T13502] team0 (unregistering): Port device team_slave_1 removed [ 235.154273][T13502] team0 (unregistering): Port device team_slave_0 removed [ 235.221660][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.228817][T14593] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.236312][T14593] bridge_slave_0: entered allmulticast mode [ 235.243109][T14593] bridge_slave_0: entered promiscuous mode [ 235.250198][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.257279][T14593] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.264825][T14593] bridge_slave_1: entered allmulticast mode [ 235.272384][T14593] bridge_slave_1: entered promiscuous mode [ 235.293213][T14593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.303845][T14593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.329412][T14593] team0: Port device team_slave_0 added [ 235.339762][T14593] team0: Port device team_slave_1 added [ 235.368075][T14593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.375548][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.402588][T14593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.416868][T14593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.423926][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.450509][T14593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.464689][T14601] chnl_net:caif_netlink_parms(): no params data found [ 235.528561][T14601] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.535876][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.544840][T14601] bridge_slave_0: entered allmulticast mode [ 235.554301][T14601] bridge_slave_0: entered promiscuous mode [ 235.561791][T14601] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.569645][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.578414][T14601] bridge_slave_1: entered allmulticast mode [ 235.585874][T14601] bridge_slave_1: entered promiscuous mode [ 235.591939][T14699] loop2: detected capacity change from 0 to 512 [ 235.611712][T14593] hsr_slave_0: entered promiscuous mode [ 235.618055][T14593] hsr_slave_1: entered promiscuous mode [ 235.625439][T14593] debugfs: 'hsr0' already exists in 'hsr' [ 235.631533][T14593] Cannot create hsr debugfs directory [ 235.648015][T14701] loop2: detected capacity change from 0 to 256 [ 235.675460][T14601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.706114][T14601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.743347][T14709] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3530'. [ 235.767299][T14601] team0: Port device team_slave_0 added [ 235.798404][T14601] team0: Port device team_slave_1 added [ 235.869243][T14601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.876479][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.903579][T14601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.915335][T14601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.922445][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.949464][T14601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.964632][T14727] loop4: detected capacity change from 0 to 512 [ 236.011231][T14601] hsr_slave_0: entered promiscuous mode [ 236.017722][T14601] hsr_slave_1: entered promiscuous mode [ 236.024112][T14601] debugfs: 'hsr0' already exists in 'hsr' [ 236.030244][T14601] Cannot create hsr debugfs directory [ 236.147234][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 236.167673][T14593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.180117][T14593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.205689][T14593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.215995][T14593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.275693][T14756] FAULT_INJECTION: forcing a failure. [ 236.275693][T14756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.289185][T14756] CPU: 0 UID: 0 PID: 14756 Comm: syz.1.3541 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.289222][T14756] Tainted: [W]=WARN [ 236.289231][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.289247][T14756] Call Trace: [ 236.289256][T14756] [ 236.289266][T14756] __dump_stack+0x1d/0x30 [ 236.289355][T14756] dump_stack_lvl+0x95/0xd0 [ 236.289457][T14756] dump_stack+0x15/0x1b [ 236.289477][T14756] should_fail_ex+0x263/0x280 [ 236.289510][T14756] should_fail+0xb/0x20 [ 236.289538][T14756] should_fail_usercopy+0x1a/0x20 [ 236.289636][T14756] _copy_from_user+0x1c/0xb0 [ 236.289683][T14756] ___sys_sendmsg+0xc1/0x1e0 [ 236.289713][T14756] __x64_sys_sendmsg+0xd4/0x160 [ 236.289736][T14756] x64_sys_call+0x17ba/0x3000 [ 236.289832][T14756] do_syscall_64+0xc0/0x2a0 [ 236.289866][T14756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.289890][T14756] RIP: 0033:0x7f7f6a95aeb9 [ 236.289977][T14756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.290000][T14756] RSP: 002b:00007f7f693b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.290027][T14756] RAX: ffffffffffffffda RBX: 00007f7f6abd5fa0 RCX: 00007f7f6a95aeb9 [ 236.290044][T14756] RDX: 0000000000044080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 236.290060][T14756] RBP: 00007f7f693b7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.290153][T14756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.290229][T14756] R13: 00007f7f6abd6038 R14: 00007f7f6abd5fa0 R15: 00007ffe260d5288 [ 236.290249][T14756] [ 236.466251][T14762] loop2: detected capacity change from 0 to 1024 [ 236.478100][T14762] EXT4-fs: Ignoring removed nobh option [ 236.486886][T14601] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.494570][T14762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.510396][T14601] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.534247][T14601] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.550810][T14601] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.611470][T14593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.634771][T14593] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.656781][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.664094][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.674200][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.681636][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.713438][T14601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.743420][T14601] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.763616][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.770929][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.788349][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.795716][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.837928][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3549'. [ 236.902875][T14593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.912103][T14793] FAULT_INJECTION: forcing a failure. [ 236.912103][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 236.925131][T14793] CPU: 1 UID: 0 PID: 14793 Comm: syz.1.3551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.925200][T14793] Tainted: [W]=WARN [ 236.925210][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.925226][T14793] Call Trace: [ 236.925234][T14793] [ 236.925244][T14793] __dump_stack+0x1d/0x30 [ 236.925314][T14793] dump_stack_lvl+0x95/0xd0 [ 236.925397][T14793] dump_stack+0x15/0x1b [ 236.925422][T14793] should_fail_ex+0x263/0x280 [ 236.925482][T14793] should_failslab+0x8c/0xb0 [ 236.925513][T14793] __kmalloc_noprof+0xb8/0x580 [ 236.925584][T14793] ? process_preds+0x323/0x2bd0 [ 236.925607][T14793] process_preds+0x323/0x2bd0 [ 236.925714][T14793] ? perf_trace_run_bpf_submit+0xac/0x110 [ 236.925783][T14793] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 236.925847][T14793] ? perf_trace_kmalloc+0xe4/0x110 [ 236.925875][T14793] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 236.925906][T14793] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 236.926026][T14793] ftrace_profile_set_filter+0xff/0x1b0 [ 236.926094][T14793] perf_ioctl+0x9ed/0x15d0 [ 236.926122][T14793] ? do_vfs_ioctl+0x84f/0xe70 [ 236.926161][T14793] ? selinux_file_ioctl+0x5f7/0xcb0 [ 236.926213][T14793] ? __rcu_read_unlock+0x4e/0x70 [ 236.926270][T14793] ? __rcu_read_unlock+0x4e/0x70 [ 236.926306][T14793] ? __fget_files+0x184/0x1c0 [ 236.926337][T14793] ? mutex_lock+0x57/0x90 [ 236.926366][T14793] ? __pfx_perf_ioctl+0x10/0x10 [ 236.926442][T14793] __se_sys_ioctl+0xce/0x140 [ 236.926480][T14793] __x64_sys_ioctl+0x43/0x50 [ 236.926516][T14793] x64_sys_call+0x14b0/0x3000 [ 236.926577][T14793] do_syscall_64+0xc0/0x2a0 [ 236.926611][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.926639][T14793] RIP: 0033:0x7f7f6a95aeb9 [ 236.926691][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.926714][T14793] RSP: 002b:00007f7f693b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.926738][T14793] RAX: ffffffffffffffda RBX: 00007f7f6abd5fa0 RCX: 00007f7f6a95aeb9 [ 236.926756][T14793] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000004 [ 236.926816][T14793] RBP: 00007f7f693b7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.926830][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.926843][T14793] R13: 00007f7f6abd6038 R14: 00007f7f6abd5fa0 R15: 00007ffe260d5288 [ 236.926865][T14793] [ 236.966539][T14601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.230701][T12782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.291870][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 237.291901][ T29] audit: type=1400 audit(1770266985.329:18709): avc: denied { append } for pid=14812 comm="syz.2.3553" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 237.325335][T14815] 9pnet_fd: Insufficient options for proto=fd [ 237.330192][ T29] audit: type=1400 audit(1770266985.329:18710): avc: denied { write } for pid=14812 comm="syz.2.3553" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 237.355466][ T29] audit: type=1400 audit(1770266985.349:18711): avc: denied { map } for pid=14813 comm="syz.4.3554" path="socket:[46713]" dev="sockfs" ino=46713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.382021][ T29] audit: type=1400 audit(1770266985.419:18712): avc: denied { read } for pid=14812 comm="syz.2.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 237.444158][T14593] veth0_vlan: entered promiscuous mode [ 237.462830][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 237.470778][T14593] veth1_vlan: entered promiscuous mode [ 237.472711][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 237.489743][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 237.500890][ T29] audit: type=1400 audit(1770266985.539:18713): avc: denied { create } for pid=14816 comm="syz.1.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 237.516780][T14601] veth0_vlan: entered promiscuous mode [ 237.537470][T14593] veth0_macvtap: entered promiscuous mode [ 237.553920][T14601] veth1_vlan: entered promiscuous mode [ 237.562735][T14593] veth1_macvtap: entered promiscuous mode [ 237.585895][T14601] veth0_macvtap: entered promiscuous mode [ 237.604822][T14601] veth1_macvtap: entered promiscuous mode [ 237.605730][ T29] audit: type=1400 audit(1770266985.639:18714): avc: denied { create } for pid=14835 comm="syz.4.3559" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 237.610621][ T29] audit: type=1400 audit(1770266985.639:18715): avc: denied { associate } for pid=14835 comm="syz.4.3559" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 237.711395][T14601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.804739][ T29] audit: type=1400 audit(1770266985.749:18716): avc: denied { read append open } for pid=14835 comm="syz.4.3559" path="/100/bus" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 237.814963][T14593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.842679][ T29] audit: type=1400 audit(1770266985.859:18717): avc: denied { unlink } for pid=13042 comm="syz-executor" name="bus" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 237.937445][T14601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.043309][T14593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.053335][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 238.063896][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.097094][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.106213][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.115486][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.137274][ T871] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.163714][ T871] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.190625][ T871] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.236512][ T871] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.325967][ T29] audit: type=1326 audit(1770266986.359:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.8.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e58eaeb9 code=0x7ffc0000 [ 238.365374][T14865] syzkaller0: entered promiscuous mode [ 238.370967][T14865] syzkaller0: entered allmulticast mode [ 238.432321][T14872] syzkaller0: left promiscuous mode [ 238.437799][T14872] syzkaller0: left allmulticast mode [ 238.827181][T14896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3577'. [ 238.982632][T14909] loop2: detected capacity change from 0 to 512 [ 238.996398][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3582'. [ 239.073706][T14918] loop8: detected capacity change from 0 to 128 [ 239.155237][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 239.591798][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 239.601648][ T12] bond1 (unregistering): Released all slaves [ 239.652069][ T12] tipc: Left network mode [ 239.698904][T14925] delete_channel: no stack [ 239.823908][T14954] loop4: detected capacity change from 0 to 1024 [ 239.844310][T14954] EXT4-fs: Ignoring removed nobh option [ 239.850481][T14959] loop7: detected capacity change from 0 to 512 [ 239.874141][ T12] hsr_slave_0: left promiscuous mode [ 239.874740][T14954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.892176][ T12] hsr_slave_1: left promiscuous mode [ 239.918886][ T12] veth1_macvtap: left promiscuous mode [ 239.928034][ T12] veth0_macvtap: left promiscuous mode [ 239.934202][ T12] veth1_vlan: left promiscuous mode [ 239.944814][ T12] veth0_vlan: left promiscuous mode [ 240.166968][T14966] : renamed from veth0_to_bond (while UP) [ 240.252881][T14986] program syz.8.3606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.306823][T14990] loop7: detected capacity change from 0 to 1024 [ 240.313829][T14990] EXT4-fs: Ignoring removed bh option [ 240.335869][T14990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.368428][T14593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.488713][ T12] IPVS: stop unused estimator thread 0... [ 240.615374][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.654384][T15013] loop2: detected capacity change from 0 to 128 [ 240.750980][T15013] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.784356][T15029] xt_hashlimit: size too large, truncated to 1048576 [ 240.876489][T15031] loop8: detected capacity change from 0 to 512 [ 240.902330][T15034] syzkaller0: entered promiscuous mode [ 240.907921][T15034] syzkaller0: entered allmulticast mode [ 240.913765][T15013] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.926966][T15013] __nla_validate_parse: 9 callbacks suppressed [ 240.926986][T15013] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3617'. [ 240.935049][T15031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.942674][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3617'. [ 240.957369][T15034] loop7: detected capacity change from 0 to 512 [ 240.980415][T15031] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.019277][T15034] EXT4-fs: journaled quota format not specified [ 241.106167][T15031] SELinux: failed to load policy [ 241.143390][T14601] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.185758][T15042] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3625'. [ 241.197247][T15043] loop7: detected capacity change from 0 to 128 [ 241.226090][T15043] msdos: Unknown parameter '' [ 241.246727][T15045] FAULT_INJECTION: forcing a failure. [ 241.246727][T15045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.260551][T15045] CPU: 1 UID: 0 PID: 15045 Comm: syz.1.3626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.260593][T15045] Tainted: [W]=WARN [ 241.260602][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.260614][T15045] Call Trace: [ 241.260630][T15045] [ 241.260639][T15045] __dump_stack+0x1d/0x30 [ 241.260680][T15045] dump_stack_lvl+0x95/0xd0 [ 241.260709][T15045] dump_stack+0x15/0x1b [ 241.260729][T15045] should_fail_ex+0x263/0x280 [ 241.260842][T15045] should_fail+0xb/0x20 [ 241.260869][T15045] should_fail_usercopy+0x1a/0x20 [ 241.260902][T15045] _copy_to_user+0x20/0xa0 [ 241.260928][T15045] simple_read_from_buffer+0xb5/0x130 [ 241.260968][T15045] proc_fail_nth_read+0x10e/0x150 [ 241.261047][T15045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.261095][T15045] vfs_read+0x1ab/0x7f0 [ 241.261120][T15045] ? tty_ioctl+0x450/0xb80 [ 241.261161][T15045] ? __get_user_nocheck_8+0x20/0x20 [ 241.261189][T15045] ksys_read+0xdc/0x1a0 [ 241.261214][T15045] __x64_sys_read+0x40/0x50 [ 241.261237][T15045] x64_sys_call+0x2889/0x3000 [ 241.261379][T15045] do_syscall_64+0xc0/0x2a0 [ 241.261411][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.261478][T15045] RIP: 0033:0x7f7f6a91b78e [ 241.261499][T15045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.261586][T15045] RSP: 002b:00007f7f693b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.261613][T15045] RAX: ffffffffffffffda RBX: 00007f7f693b76c0 RCX: 00007f7f6a91b78e [ 241.261639][T15045] RDX: 000000000000000f RSI: 00007f7f693b70a0 RDI: 0000000000000004 [ 241.261652][T15045] RBP: 00007f7f693b7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.261666][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.261679][T15045] R13: 00007f7f6abd6038 R14: 00007f7f6abd5fa0 R15: 00007ffe260d5288 [ 241.261778][T15045] [ 241.482698][T15043] loop7: detected capacity change from 0 to 512 [ 241.500416][T15043] EXT4-fs: Ignoring removed i_version option [ 241.566272][T15043] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 241.599099][T15057] FAULT_INJECTION: forcing a failure. [ 241.599099][T15057] name failslab, interval 1, probability 0, space 0, times 0 [ 241.612222][T15057] CPU: 0 UID: 0 PID: 15057 Comm: syz.8.3629 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.612260][T15057] Tainted: [W]=WARN [ 241.612268][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.612283][T15057] Call Trace: [ 241.612341][T15057] [ 241.612352][T15057] __dump_stack+0x1d/0x30 [ 241.612378][T15057] dump_stack_lvl+0x95/0xd0 [ 241.612400][T15057] dump_stack+0x15/0x1b [ 241.612506][T15057] should_fail_ex+0x263/0x280 [ 241.612543][T15057] should_failslab+0x8c/0xb0 [ 241.612619][T15057] kmem_cache_alloc_noprof+0x68/0x490 [ 241.612643][T15057] ? alloc_empty_file+0x76/0x200 [ 241.612671][T15057] alloc_empty_file+0x76/0x200 [ 241.612704][T15057] path_openat+0x62/0x23c0 [ 241.612830][T15057] ? xas_load+0x413/0x430 [ 241.612855][T15057] ? xas_load+0x413/0x430 [ 241.612880][T15057] ? __rcu_read_unlock+0x4e/0x70 [ 241.612908][T15057] ? xa_load+0xb1/0xe0 [ 241.612983][T15057] ? __account_obj_stock+0x211/0x350 [ 241.613014][T15057] ? try_charge_memcg+0x215/0xa10 [ 241.613035][T15057] do_filp_open+0x15d/0x280 [ 241.613147][T15057] io_openat2+0x287/0x3b0 [ 241.613179][T15057] io_openat+0x1b/0x30 [ 241.613200][T15057] __io_issue_sqe+0xfd/0x2d0 [ 241.613229][T15057] io_issue_sqe+0x20b/0xc20 [ 241.613324][T15057] ? io_openat_prep+0x270/0x2c0 [ 241.613363][T15057] io_submit_sqes+0x78a/0x11b0 [ 241.613397][T15057] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 241.613492][T15057] ? __rcu_read_unlock+0x4e/0x70 [ 241.613523][T15057] ? get_pid_task+0x96/0xd0 [ 241.613717][T15057] ? proc_fail_nth_write+0x13b/0x160 [ 241.613821][T15057] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.613852][T15057] ? vfs_write+0x86e/0x9f0 [ 241.613871][T15057] ? __rcu_read_unlock+0x4e/0x70 [ 241.613900][T15057] ? __fget_files+0x184/0x1c0 [ 241.613931][T15057] ? mutex_lock+0x57/0x90 [ 241.613954][T15057] ? mutex_unlock+0x4e/0x90 [ 241.613979][T15057] ? fput+0x8f/0xc0 [ 241.614009][T15057] __x64_sys_io_uring_enter+0x78/0x90 [ 241.614095][T15057] x64_sys_call+0x27e4/0x3000 [ 241.614123][T15057] do_syscall_64+0xc0/0x2a0 [ 241.614163][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.614188][T15057] RIP: 0033:0x7fb7e58eaeb9 [ 241.614206][T15057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.614277][T15057] RSP: 002b:00007fb7e4347028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 241.614303][T15057] RAX: ffffffffffffffda RBX: 00007fb7e5b65fa0 RCX: 00007fb7e58eaeb9 [ 241.614322][T15057] RDX: 0000000000000003 RSI: 00000000000043f6 RDI: 0000000000000006 [ 241.614339][T15057] RBP: 00007fb7e4347090 R08: 0000000000000000 R09: 0000000000000000 [ 241.614400][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.614413][T15057] R13: 00007fb7e5b66038 R14: 00007fb7e5b65fa0 R15: 00007fff54726db8 [ 241.614432][T15057] [ 241.669387][T15053] loop4: detected capacity change from 0 to 1024 [ 241.822685][T12782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.864382][T15053] EXT4-fs: Ignoring removed nobh option [ 241.972036][T15053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.111065][T15069] 9p: Bad value for 'wfdno' [ 242.252260][T15078] loop8: detected capacity change from 0 to 1024 [ 242.270508][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3640'. [ 242.294175][T15078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.295167][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 242.307562][T15086] team_slave_1: entered promiscuous mode [ 242.362849][T14601] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.372414][T15085] team_slave_1: left promiscuous mode [ 242.388298][T15094] Cannot find add_set index 1 as target [ 242.408633][T15098] sctp: [Deprecated]: syz.7.3645 (pid 15098) Use of int in max_burst socket option. [ 242.408633][T15098] Use struct sctp_assoc_value instead [ 242.454361][T15098] loop7: detected capacity change from 0 to 128 [ 242.474790][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.487013][T15100] lo speed is unknown, defaulting to 1000 [ 242.514377][T15098] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.535297][T15098] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.544996][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3642'. [ 242.565960][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'. [ 242.607743][T14593] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.610859][T15108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=15108 comm=syz.1.3649 [ 242.638707][T15120] syzkaller0: entered promiscuous mode [ 242.644268][T15120] syzkaller0: entered allmulticast mode [ 242.653186][T15120] tipc: Started in network mode [ 242.658161][T15120] tipc: Node identity 42d4dde16138, cluster identity 4711 [ 242.666095][T15120] tipc: Enabled bearer , priority 0 [ 242.679667][T15119] tipc: Resetting bearer [ 242.688616][T15119] tipc: Disabling bearer [ 242.725093][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 242.725115][ T29] audit: type=1326 audit(1770266990.759:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.807521][ T29] audit: type=1326 audit(1770266990.789:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.832245][ T29] audit: type=1326 audit(1770266990.789:18805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.856144][ T29] audit: type=1326 audit(1770266990.789:18806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.880724][ T29] audit: type=1326 audit(1770266990.789:18807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.904867][ T29] audit: type=1326 audit(1770266990.789:18808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.929538][ T29] audit: type=1326 audit(1770266990.789:18809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.953155][ T29] audit: type=1326 audit(1770266990.809:18810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.967209][T15136] tmpfs: Bad value for 'mpol' [ 242.977558][ T29] audit: type=1326 audit(1770266990.809:18811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 242.977648][ T29] audit: type=1326 audit(1770266990.809:18812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.7.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38fc0daeb9 code=0x7ffc0000 [ 243.100039][T15140] netlink: 'syz.1.3653': attribute type 2 has an invalid length. [ 243.108013][T15140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3653'. [ 243.125170][T15124] 9pnet_fd: Insufficient options for proto=fd [ 243.211133][T15152] FAULT_INJECTION: forcing a failure. [ 243.211133][T15152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.224390][T15152] CPU: 1 UID: 0 PID: 15152 Comm: syz.8.3661 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.224493][T15152] Tainted: [W]=WARN [ 243.224501][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.224516][T15152] Call Trace: [ 243.224524][T15152] [ 243.224570][T15152] __dump_stack+0x1d/0x30 [ 243.224600][T15152] dump_stack_lvl+0x95/0xd0 [ 243.224626][T15152] dump_stack+0x15/0x1b [ 243.224703][T15152] should_fail_ex+0x263/0x280 [ 243.224739][T15152] should_fail+0xb/0x20 [ 243.224771][T15152] should_fail_usercopy+0x1a/0x20 [ 243.224807][T15152] _copy_from_user+0x1c/0xb0 [ 243.224832][T15152] ___sys_sendmsg+0xc1/0x1e0 [ 243.224939][T15152] __x64_sys_sendmsg+0xd4/0x160 [ 243.224994][T15152] x64_sys_call+0x17ba/0x3000 [ 243.225024][T15152] do_syscall_64+0xc0/0x2a0 [ 243.225059][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.225085][T15152] RIP: 0033:0x7fb7e58eaeb9 [ 243.225125][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.225147][T15152] RSP: 002b:00007fb7e4347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.225171][T15152] RAX: ffffffffffffffda RBX: 00007fb7e5b65fa0 RCX: 00007fb7e58eaeb9 [ 243.225189][T15152] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 243.225205][T15152] RBP: 00007fb7e4347090 R08: 0000000000000000 R09: 0000000000000000 [ 243.225220][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.225294][T15152] R13: 00007fb7e5b66038 R14: 00007fb7e5b65fa0 R15: 00007fff54726db8 [ 243.225317][T15152] [ 243.455500][T15153] loop4: detected capacity change from 0 to 1024 [ 243.489549][T15166] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3664'. [ 243.506681][T15153] EXT4-fs: Ignoring removed nobh option [ 243.538519][T15166] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3664'. [ 243.550395][T15153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.638056][T15171] FAULT_INJECTION: forcing a failure. [ 243.638056][T15171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.652035][T15171] CPU: 1 UID: 0 PID: 15171 Comm: syz.2.3663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.652079][T15171] Tainted: [W]=WARN [ 243.652088][T15171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.652104][T15171] Call Trace: [ 243.652114][T15171] [ 243.652202][T15171] __dump_stack+0x1d/0x30 [ 243.652232][T15171] dump_stack_lvl+0x95/0xd0 [ 243.652284][T15171] dump_stack+0x15/0x1b [ 243.652308][T15171] should_fail_ex+0x263/0x280 [ 243.652342][T15171] should_fail+0xb/0x20 [ 243.652372][T15171] should_fail_usercopy+0x1a/0x20 [ 243.652475][T15171] _copy_from_user+0x1c/0xb0 [ 243.652500][T15171] ___sys_sendmsg+0xc1/0x1e0 [ 243.652534][T15171] __sys_sendmmsg+0x185/0x320 [ 243.652560][T15171] __x64_sys_sendmmsg+0x57/0x70 [ 243.652619][T15171] x64_sys_call+0x1e28/0x3000 [ 243.652699][T15171] do_syscall_64+0xc0/0x2a0 [ 243.652736][T15171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.652812][T15171] RIP: 0033:0x7f4324e2aeb9 [ 243.652833][T15171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.652854][T15171] RSP: 002b:00007f4323887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.652881][T15171] RAX: ffffffffffffffda RBX: 00007f43250a5fa0 RCX: 00007f4324e2aeb9 [ 243.653041][T15171] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 243.653061][T15171] RBP: 00007f4323887090 R08: 0000000000000000 R09: 0000000000000000 [ 243.653078][T15171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.653171][T15171] R13: 00007f43250a6038 R14: 00007f43250a5fa0 R15: 00007fff475037a8 [ 243.653194][T15171] [ 244.014691][ T6765] hid (null): unknown global tag 0xc [ 244.022707][ T6765] hid-generic 0001:0004:0001.0002: unknown global tag 0xc [ 244.030007][ T6765] hid-generic 0001:0004:0001.0002: item 0 1 1 12 parsing failed [ 244.096164][ T6765] hid-generic 0001:0004:0001.0002: probe with driver hid-generic failed with error -22 [ 244.120614][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.216842][T15215] loop4: detected capacity change from 0 to 512 [ 244.283352][T15215] EXT4-fs: Ignoring removed i_version option [ 244.289677][T15215] EXT4-fs: Ignoring removed bh option [ 244.331333][T15215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.344417][T15215] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.435445][T15230] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.3679: iget: bad i_size value: 2533274857506816 [ 244.470135][T15215] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.3679: iget: bad i_size value: 2533274857506816 [ 244.487434][T15233] loop7: detected capacity change from 0 to 128 [ 244.562280][T15233] FAULT_INJECTION: forcing a failure. [ 244.562280][T15233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.575561][T15233] CPU: 1 UID: 0 PID: 15233 Comm: syz.7.3684 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.575667][T15233] Tainted: [W]=WARN [ 244.575677][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.575760][T15233] Call Trace: [ 244.575770][T15233] [ 244.575780][T15233] __dump_stack+0x1d/0x30 [ 244.575812][T15233] dump_stack_lvl+0x95/0xd0 [ 244.575834][T15233] dump_stack+0x15/0x1b [ 244.575936][T15233] should_fail_ex+0x263/0x280 [ 244.575975][T15233] should_fail+0xb/0x20 [ 244.576003][T15233] should_fail_usercopy+0x1a/0x20 [ 244.576037][T15233] _copy_from_user+0x1c/0xb0 [ 244.576063][T15233] ___sys_sendmsg+0xc1/0x1e0 [ 244.576106][T15233] __x64_sys_sendmsg+0xd4/0x160 [ 244.576129][T15233] x64_sys_call+0x17ba/0x3000 [ 244.576154][T15233] do_syscall_64+0xc0/0x2a0 [ 244.576184][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.576225][T15233] RIP: 0033:0x7f38fc0daeb9 [ 244.576282][T15233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.576308][T15233] RSP: 002b:00007f38fab37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.576391][T15233] RAX: ffffffffffffffda RBX: 00007f38fc355fa0 RCX: 00007f38fc0daeb9 [ 244.576405][T15233] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 244.576419][T15233] RBP: 00007f38fab37090 R08: 0000000000000000 R09: 0000000000000000 [ 244.576435][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.576555][T15233] R13: 00007f38fc356038 R14: 00007f38fc355fa0 R15: 00007ffefc98a6e8 [ 244.576574][T15233] [ 244.784882][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.932508][T15243] loop7: detected capacity change from 0 to 512 [ 244.954008][T15244] loop4: detected capacity change from 0 to 1024 [ 244.957413][T15243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.960898][T15244] EXT4-fs: Ignoring removed nobh option [ 244.987006][T15243] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.002697][T15243] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 245.014071][T15243] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3688: corrupted xattr block 33: invalid checksum [ 245.028284][T15243] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 245.039480][T15244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.057683][T15243] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3688: corrupted xattr block 33: invalid checksum [ 245.079365][T15243] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 245.099650][T15243] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3688: corrupted xattr block 33: invalid checksum [ 245.122864][T15243] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 245.248297][T14593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.579280][T15264] loop7: detected capacity change from 0 to 4096 [ 245.589095][T15264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.718427][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.739360][T15267] EXT4-fs: Ignoring removed i_version option [ 245.745498][T15267] EXT4-fs: Ignoring removed bh option [ 245.760630][T15267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.773727][T15267] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.805264][T14593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.846863][T15272] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.3696: iget: bad i_size value: 2533274857506816 [ 245.884280][T15274] EXT4-fs: Ignoring removed oldalloc option [ 245.890306][T15274] EXT4-fs: Ignoring removed bh option [ 245.897447][T15267] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.3696: iget: bad i_size value: 2533274857506816 [ 245.911693][T15274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.951367][T13042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.348179][ T37] ================================================================== [ 246.356398][ T37] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 246.365886][ T37] [ 246.368231][ T37] write to 0xffff8881435a4802 of 2 bytes by task 15279 on cpu 1: [ 246.375949][ T37] copy_folio_from_iter_atomic+0x75f/0x1170 [ 246.381850][ T37] generic_perform_write+0x2c1/0x490 [ 246.387162][ T37] ext4_buffered_write_iter+0x1ee/0x3c0 [ 246.392738][ T37] ext4_file_write_iter+0x380/0xf70 [ 246.398046][ T37] iter_file_splice_write+0x6bc/0xa80 [ 246.403430][ T37] direct_splice_actor+0x156/0x2a0 [ 246.408565][ T37] splice_direct_to_actor+0x311/0x670 [ 246.413967][ T37] do_splice_direct+0x119/0x1a0 [ 246.418828][ T37] do_sendfile+0x382/0x650 [ 246.423257][ T37] __x64_sys_sendfile64+0x105/0x150 [ 246.428564][ T37] x64_sys_call+0x2db1/0x3000 [ 246.433262][ T37] do_syscall_64+0xc0/0x2a0 [ 246.437871][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.443791][ T37] [ 246.446132][ T37] read to 0xffff8881435a4800 of 1024 bytes by task 37 on cpu 0: [ 246.453766][ T37] copy_folio_from_iter_atomic+0x75f/0x1170 [ 246.459666][ T37] generic_perform_write+0x2c1/0x490 [ 246.465053][ T37] shmem_file_write_iter+0xc5/0xf0 [ 246.470184][ T37] lo_rw_aio+0x67d/0x730 [ 246.474430][ T37] loop_process_work+0x56c/0xac0 [ 246.479459][ T37] loop_workfn+0x31/0x40 [ 246.483741][ T37] process_scheduled_works+0x4cd/0x9d0 [ 246.489210][ T37] worker_thread+0x6bc/0x8b0 [ 246.493825][ T37] kthread+0x488/0x510 [ 246.497946][ T37] ret_from_fork+0x148/0x280 [ 246.502547][ T37] ret_from_fork_asm+0x1a/0x30 [ 246.507326][ T37] [ 246.509649][ T37] Reported by Kernel Concurrency Sanitizer on: [ 246.515804][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.527102][ T37] Tainted: [W]=WARN [ 246.530906][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.540977][ T37] Workqueue: loop7 loop_workfn [ 246.545842][ T37] ================================================================== [ 246.558897][T15160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.818642][T14593] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.