last executing test programs: 5.066725818s ago: executing program 0 (id=522): syz_emit_ethernet(0x3a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000eeffff049078ac1414000a0101008303400000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00'], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @local, 0x1}, {0xa, 0x0, 0x7, @mcast2}, r5}}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 4.208630649s ago: executing program 0 (id=527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d4c271ce000000000000fee5d8f0d763f543aa6e24807552e982180d4840e4c9b7eb7c39a02bb1584dcab77843f1c979cf60da76752f121b709aab1ebf465244972977bf094a36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='^+&\xab\x00']}, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r8}, 0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000200)=r8, 0x4) r11 = dup(r5) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0100000206050000000000fffff00c00000000050001000600000005000500020000000900020073797a320000000005000400000000000c000780080006000000000016000300686173683a6e65262c706f72742c6e657400000085d6cdfd85d4ac39c6cbba478621a2f6dc91a13779424576472488"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x371, 0x4, 0x7}) 3.980966743s ago: executing program 0 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 3.549580399s ago: executing program 0 (id=533): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={0x2, 0x7, 0x1, 0x9, 0x7, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e21, 0xfffffffa, @local}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0xf9efffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x148}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000e52e63cc8d9cb126a1c7e68604000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.702099119s ago: executing program 2 (id=547): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="ffff000000000006000000009036000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x0, @isdn={0x22, 0x4, 0x40, 0x10, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000080)='veth0_vlan\x00', 0x5, 0x9, 0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 2.667623051s ago: executing program 4 (id=548): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.555549738s ago: executing program 0 (id=551): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f0000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) getgid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.423947536s ago: executing program 2 (id=553): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f0000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.369487129s ago: executing program 4 (id=556): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) gettid() (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) (async) 1.956100864s ago: executing program 4 (id=560): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={0x2, 0x7, 0x1, 0x9, 0x7, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e21, 0xfffffffa, @local}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0xf9efffff, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x148}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000e52e63cc8d9cb126a1c7e68604000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.931965615s ago: executing program 0 (id=562): syz_usb_connect(0x1, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x478, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapgJL60tLzIwYtGDQdNTPSA8VTbQiqFGloTIUSrBzwaEu/G/8J40otRL5p41bshIYYLqJc1szNT2mW37NJtF7qfTzLt88xM+zzffebZeWae3Qmgaw1lP5KI/0XE7xExkGeX7zCU/7p5/dLE39cvTSRRqbz1V1Ld78b1SxPlruXfbcszlUqR31Sn3MvvRozPzEydL/Ij82c/GJm7cPH56bPjp6dOT50bO378yOG9/cfGjrYlziyuG7s/nt2z68Q7V96YOHnlvZ+SNPK4oyaO9qjkPqm/9an2FtZx26NnMZ30Lt2y75db6XpHAp2UtVrWXH3V/j8QPbFlcdtAvPpZRysHrKnsFLXCu/JCBdjAkuh0DYDOKE/02fVvuazT0OOecO2l/AIoi/tmseRbeiPNE/v6qte3a2MoIk4u/PNVtsSa3IcAAFjuu2z881y98V8aD+eJ/uzH/4s5lMGIeCAidkTEgxGxMyIeiqju+0hEPNpi+UM1+dvHP+nVuw6uCdn478Vibmv5+C8tdxnsKXLbq/H3JaemZ6YOFa/JwejbdGo6mRpdoYzvX/nti0bblo7/siUrvxwLFvW42ltzg25yfH58NTEvde3TiN299eJPopzGSSJiV0Tsvssypp/pbbjtzvGvoPG/bVrl64in8/ZfiJr4S0nD+cnRF46NHR3ZHDNTh0bKo+J2P/96+c1G5a8q/jbI2n9r3eN/Mf7BZHPE3IWLZ6rztXOtl3H5j88bXtO0ePyf2F4c//3J29UV/cWGj8bn58+PRvQnr9++fuzWfyvz5f5Z/Af31+//O+LWK/FYROyJiL0R8Xh2UVjU/YmIeDIi9q8Q/48vH3i/9fjXZ640i3/yTu0fS9u/9UTPmR++vXP8myOiUfsfqaYOFmuaef9rtoKree0AAADgfpF/Bj5JhxfTaTo8nH+Gf2dsTWdm5+afPTX74bnJ/LPyg9GXlne6BpbcDx0t7g2X+bGa/OHivvGXPVuq+eGJ2ZnJTgcPXW5bg/6f+bOn07UD1lwb5tGA+5T+D92rtv/3dagewPpKnP+hq+n/0L3q9f9lz6068NqSzPA3a18jYL04/0P3aqL/L+S/GjzNErhvOf9D99L/oSs1/G58uqqv/K974t/ieYb3Sn02fiLSe6IaGz/R2/TDLFpIVAby/p+t2VR3n06/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTHfwEAAP//jkztZQ==") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e23, 0x8, @private0, 0x35}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="ec", 0x1}], 0x1}, 0x20000804) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) kexec_load(0xf, 0x0, 0x0, 0x2) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008b0c115ec43c4109f5907b8efad0e281ba91848ff005c5ff5e08d144e2d81575256bfc12e189a0b0525badd1a5f01f9be1dc9b43e9c2358b0fe09dd71899d3237890eb5e69f3686954d96f51948bafce3dc273263314d1cd2838cfc5aacfee5bfc570b500"/124], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="23601d21f4f302c7b466b3f59b0bcc595221ad224b00d599a10cf4f652b7ea16d56e349b4d7f8aa1763d75717728e57207114c33cdc5fa6aef8a3e0aa8cf8e469fee5cfe6369cdae79d3233068dd287760512512ad8a5959e7c46c64803e0d9d9919fb94a2dc6045dd2baadc7e1f7c51e43c359f4ff1ce2112722426391912a43aa0711ecdd389aeab96", 0x8a}, {&(0x7f0000000180)="3aaceaac041d072634c27d367383251e2bbd245a11ef431c98dc5d0864d72e88feb913b3950b0c19935c1d5e851e989b5322d73f72b468796c46ab8a356f77", 0x3f}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="38000000000080000801000001040000615ea98125c355b837d2a421c10b2ab62c120b76b37a197e86a87e71b62b62078800000000000000200000000000000012010000010000006ee57ec9a1c218f71e000000000000008800000000000000010100000500000046b46b8891b6b0d05194482bd87def62b59118a1bbc412ae32eb2a6a14d7e28ecd19e6f1de2ef602b8fa411836a767ebb9daae5156da53e7974dbb237e3283003b201302ad32d2d967adaaa114ad603a52e00fd5daa4c2f7145130377476054f9e28302146e89cc1f44ee31ede5e5c54cbb312475e4d805d5acf9fbd2e55c41d554c11ff00003f00f00000000000000029000000000000009d489266b90edbe61193705b57d7b6f42fc0fc3fd770a29e94adae7008738ba9162d1a13ef2e8ecd41be1b7e15ab72cedf2ea758a93bb614965ec36d27ec7c101a7252fa12c052ae3d3caa7faf6be283ab3237e11d79a7108cd7acf8d06c93863056d956e80bb5ae65cce1bf801d6b6f73c383563ce7f1041f7ee0f17bac0ca0d2f29e04c38e0149e71bdb8d948895ca28ea2dc96836ee8b107b76afbae9f0eaed3d89a7ab79278ee6a74248d47dba7ce1b32e966c5887fe9f568aeda1dcbd993cd494d2e1fdb304b842ae2646e7e9b4"], 0x1d0}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000180)) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4c, 0x0) 1.813477942s ago: executing program 3 (id=563): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="ffff000000000006000000009036000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x0, @isdn={0x22, 0x4, 0x40, 0x10, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000080)='veth0_vlan\x00', 0x5, 0x9, 0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 1.766887005s ago: executing program 3 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d4c271ce000000000000fee5d8f0d763f543aa6e24807552e982180d4840e4c9b7eb7c39a02bb1584dcab77843f1c979cf60da76752f121b709aab1ebf465244972977bf094a36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='^+&\xab\x00']}, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r8}, 0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000200)=r8, 0x4) r11 = dup(r5) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0100000206050000000000fffff00c00000000050001000600000005000500020000000900020073797a320000000005000400000000000c000780080006000000000016000300686173683a6e65262c706f72742c6e657400000085d6cdfd85d4ac39c6cbba478621a2f6dc91a13779424576472488"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x371, 0x4, 0x7}) 1.650713392s ago: executing program 3 (id=565): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sync() bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r5], 0x44}}, 0x0) 1.485435112s ago: executing program 3 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) socket(0x10, 0x803, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x2004, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 1.483683582s ago: executing program 2 (id=568): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c00)={0x1510, r11, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x68a8, 0x44}}}}, [@NL80211_ATTR_TID_CONFIG={0x7e4, 0x11d, 0x0, 0x1, [{0x388, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1f37bb357513b1eb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x36c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1000, 0x1, 0x4b, 0x7, 0x7, 0x9887, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0x6, 0xa, 0xe, 0x40, 0x0, 0x8, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0x81, 0xc, 0xe7c7, 0x4, 0x2ff0, 0x5]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x6, 0x3}, {0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x6, 0x9}, {0x5, 0x2}, {}, {0x2, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x7}, {0x7, 0xa}, {}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x32, 0xa135, 0x0, 0x100, 0x7f, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3234, 0x7, 0xe01, 0x6, 0x7, 0x934d, 0x9bf6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x1}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x4}, {0x6}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x1}, {}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x400, 0xa0be, 0xcf, 0x3, 0x8000, 0x32, 0x7]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x8}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0xc}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x1}, {0x5, 0x9}, {0x3}, {0x6, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0xa}, {}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x4}, {0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x8c66, 0x4314, 0xfff, 0x0, 0xe7d4]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {0x2, 0x7}, {0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x4}, {0x4, 0x3}, {0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x8}, {0x1}, {0x3, 0x3}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x5}]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x16, 0xc, 0x18, 0x18, 0x6c, 0x5, 0x18, 0x60, 0x4, 0x24, 0x24, 0x12, 0x1b, 0xb, 0x1, 0x6c, 0x16, 0x0, 0x60, 0x4, 0xc, 0x18, 0x4e, 0x1, 0x12, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x6}, {0x6, 0x6}, {0x3}, {}, {0x4, 0x8}, {0x7, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x6}, {0x7}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x4}, {0x4, 0xa}, {0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x1}, {0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x2, 0x9, 0x8001, 0x75f4, 0x2, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x3}, {0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x6}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8, 0x7ff, 0x3, 0x8, 0x1, 0xea8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x9bea, 0x2, 0x6, 0x8, 0xa7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0xa}, {0x3}, {0x7, 0x5}, {0x0, 0x8}, {0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x5, 0x16}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0xa}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x1}, {0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x3, 0x5}, {0x2, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3b4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x6, 0x7, 0x0, 0x7, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xfae, 0x8, 0x5a23, 0x1, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x4, 0x5, 0x5, 0x200, 0x8, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x4}, {0x5, 0x5}, {0x5}, {0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {}, {0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0xa}, {}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x4}, {0x6, 0xa}, {0x6, 0x8}, {0x5, 0x7}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x50, 0x100, 0x2, 0xb, 0xbf7, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x2]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x24, 0x18, 0x2, 0x16, 0x9, 0x1, 0x24, 0x0, 0xb, 0x5, 0x6c, 0x4, 0x5, 0x24, 0xb, 0x67, 0x48, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x0, 0x4, 0x1ff, 0x5, 0x200, 0x9]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x1}, {0x3, 0x6}, {0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xa, 0xa, 0x7, 0x0, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e, 0x0, 0x1800, 0x0, 0x3, 0x9, 0x86a3, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0xa}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x6, 0x2}, {0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x9}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x7}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x8}, {0x1}, {0x5, 0x6}, {0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x6}, {0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x3}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x6}, {0x1}, {0x3}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x1}, {0x7}, {0x0, 0x3}, {0x4}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xd, 0x4, 0x3, 0x8, 0x3, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4d, 0xa0, 0xfffd, 0x593, 0x8000, 0x3ff, 0x7]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x4, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x8}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x5, 0xa}, {0x7}, {0x1}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x5}, {0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x4}, {0x6, 0x7}, {0x6, 0x7}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5c4, 0xff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x9}, {0x7}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0xa}, {0x4, 0x17}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x2}, {0x0, 0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x24, 0x70, 0x9000, 0x5, 0xa5, 0xe4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x16e, 0xb247, 0x8, 0x1, 0x3, 0x9, 0x3, 0xff]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x4}, {0x2, 0x9}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x1f}, {0x0, 0xa}, {0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x7}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4}, {0x1, 0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x21, 0x6c, 0x9, 0x16, 0x12, 0x6c, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x6c, 0x1, 0x9, 0x60, 0x4, 0x1, 0x24, 0x60, 0x60, 0x24, 0x36, 0x3, 0x60, 0xc, 0xc, 0x2, 0x9]}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5de}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x5dc, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x401, 0x3ff, 0x184f, 0x2, 0x13b, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xec, 0x582, 0x9, 0x2, 0x1, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x5, 0x1}, {0x2, 0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x2}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x9}, {0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x18}, {0x6, 0x9}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x3, 0x6, 0x3, 0x5e8, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x92, 0x1, 0xe, 0x0, 0x3ff, 0x0, 0x44e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x8, 0x5, 0x6, 0x1, 0x8001, 0x3]}}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc4b7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x9, 0x9, 0x7, 0xe, 0x0, 0x5b15]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x5, 0xb, 0xb, 0x2, 0x18, 0x30, 0x36, 0xc, 0x30, 0xb, 0x4, 0x30, 0x21, 0x30, 0x18, 0x1, 0x6c, 0xc, 0x1b, 0x12, 0x1, 0x1, 0x6, 0x36]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x2, 0x80, 0x2, 0x2, 0x8001, 0x1000, 0x400]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x2, 0x5, 0x5, 0xe, 0x9, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3e8, 0x3, 0x81, 0x3, 0x8, 0x0, 0x3, 0x6]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x4}, {0x5, 0x2}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0xa}, {0x1}, {0x6, 0x8}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x2}, {0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x7}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x7, 0x8}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x2}, {0x7, 0x2}, {0x4}, {0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x1}, {0x7}, {0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0xffff, 0x9, 0x3, 0xc, 0x2, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x2, 0x0, 0x10, 0x40, 0xfffd, 0x1da, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x8001, 0x3, 0xe8, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xa25, 0x391e, 0x5, 0x65, 0x1, 0x7, 0x7cab]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x101, 0x3, 0x9, 0x0, 0x8, 0x371b, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e0, 0x7, 0x30, 0x2, 0x7, 0x8c, 0x2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb609, 0x3, 0xac, 0xd998, 0x8, 0xffff, 0xaf9, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x7}, {0x0, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x1}, {0x1, 0x6}, {0x1, 0xa}, {}, {0x2, 0xa}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x6}, {0x6, 0x3}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {}, {0x3, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x9}, {0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0x3}, {0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x52}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0xffff, 0xf, 0x6, 0x100, 0x2]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc4e6, 0x8, 0x3667, 0x8, 0x5, 0x3, 0x3ff, 0x7]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x3, 0xc, 0x6c, 0x48, 0x36, 0x12, 0x4, 0x2, 0x30, 0x1b, 0x2, 0x1b, 0x6c, 0x6c, 0x18, 0x48, 0x6c, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x3}, {0x5, 0x11}, {0x7, 0x5}, {0x4, 0x5}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x3}, {0x5}, {0x0, 0x2}, {0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x1}, {0x4}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x3}, {0x3, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x4d, 0x800, 0x9b, 0xff68, 0x81, 0x100, 0x4]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {}, {0x5, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x7}, {}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x5}, {0x7}, {}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x3, 0x1}, {0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x7}, {0x3, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x23}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x7, 0xea, 0x7fff, 0xa0, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x3}, {0x7, 0x7}, {0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x9, 0x18, 0x9, 0x9, 0x30, 0x12, 0x18, 0x2, 0x3, 0xb, 0x60, 0xc, 0x30, 0x6, 0xb, 0x30, 0x6c, 0x18, 0x3, 0x18, 0x4, 0x12, 0x60, 0x24, 0x4, 0x1b, 0x24, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9aa, 0x7, 0xcd, 0xf, 0xc, 0x5, 0x5b16, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x174, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4b83, 0x0, 0x8, 0x6, 0xf, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x71df, 0x6, 0x7, 0x101, 0x3, 0x847, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe4, 0xe60, 0xb, 0x3, 0x8, 0xcb, 0x63f1]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x60, 0x24, 0x6, 0x1b, 0x30, 0x6c, 0x16, 0x6c, 0xc, 0x1b, 0xb, 0xb, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x6, 0xb, 0x9, 0x16, 0x2a, 0x16, 0x2, 0xb, 0x12, 0x4, 0x5, 0x9, 0x18, 0x24, 0x6c, 0xb, 0x6c, 0x1, 0x2, 0x1b, 0x16, 0x3, 0x24, 0x36, 0x4, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xa9, 0x3, 0x1, 0x3ff, 0x80, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x3}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x3, 0x2}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x2, 0x8}, {0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x5, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x450, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x7ff, 0x1, 0xad1, 0xfff7, 0x18e, 0x200]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0x9}, {0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {}, {0x1, 0xa}, {0x7, 0x1}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x6, 0x8}, {0x7}, {0x7, 0x1}, {0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x8}, {0x1}, {0x4, 0x2}, {0x0, 0x4}, {0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x2}, {0x6, 0x6}, {0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x6, 0x5}, {0x5}, {0x6, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x4, 0xba8f4460cbb8783, 0x18, 0x16, 0x18, 0x18, 0x48, 0x2, 0x6, 0x23, 0x48, 0x36, 0x20, 0x574d178ddeff01c4, 0xc, 0x48, 0x2, 0xd, 0x9, 0x1b, 0xc, 0x18, 0x60, 0x30, 0x6c, 0x0, 0x36, 0x16, 0x24, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x7, 0x7, 0x9, 0x1, 0x7, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0x0, 0x8, 0x0, 0xa5, 0x10, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffc, 0x2, 0x5, 0xee8, 0x4, 0x2, 0xbc]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x2}, {0x1, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xa2, 0xa, 0x5, 0x6, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x9, 0x30, 0x12, 0x60, 0x3, 0x12, 0x48, 0x13, 0x6, 0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0xd, 0x5c6, 0x8000, 0x81, 0x3, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8e, 0x5, 0x5, 0x3ff, 0x2, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1ff, 0x7, 0x1, 0x10, 0xff69]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x92, 0x7fff, 0x5, 0x7, 0xffff, 0x101, 0xf071, 0xe]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x5}, {0x4, 0x8}, {0x1}, {0x7, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x3, 0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x8}, {0x2, 0x3}, {0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x3}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x5}, {0x6, 0x7}, {0x2, 0x9}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x9, 0x5, 0x4, 0xeb, 0x1, 0x80]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xb, 0xd73, 0x3ff, 0x8, 0x100, 0x6, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa7, 0x5, 0x1, 0xfff, 0x1ff, 0x3, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x60, 0x6c, 0x1, 0x16, 0x5, 0xc, 0x6, 0xb, 0x36, 0x30, 0x16, 0x30, 0xb, 0x0, 0xb, 0x36, 0x1b, 0x5a, 0xe, 0x2, 0x12, 0x60, 0x6, 0x48, 0x30, 0x48, 0x3, 0x0, 0x5, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x79, 0x6, 0x9, 0x6, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x84c0, 0x0, 0x9, 0x4, 0x200, 0x0, 0x101]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe00, 0x20, 0x0, 0x7, 0x1, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x0, 0x8, 0x5, 0x4, 0x5, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x36a0, 0xed, 0xff81, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x1, 0x10, 0x5, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xd, 0x4, 0x8, 0x5, 0x2, 0x5, 0x4]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x24, 0x36, 0x2, 0x36, 0x12, 0x19, 0x46, 0x36, 0x48, 0x3, 0x36, 0x6c, 0x3, 0x6, 0x4, 0x6c, 0x2, 0x24, 0x18, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x7, 0x3, 0x89, 0x1, 0xfffb, 0x8, 0x23]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf3, 0x2, 0x4, 0xd, 0x6, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x48, 0x30, 0x18, 0x24, 0x9, 0x36, 0x48, 0x18, 0x24, 0x36, 0x3, 0x12, 0x1b, 0x6c, 0x16, 0xb, 0xb, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}]}]}, 0x1510}, 0x1, 0x0, 0x0, 0x4000010}, 0x864d36bd693d5d0a) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="021200000200000000000000000000004068cf74e4e6d49319df66a162"], 0x10}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 1.361941179s ago: executing program 1 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(r1, r1, 0x0) 1.228096967s ago: executing program 1 (id=571): rt_sigprocmask(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.162118061s ago: executing program 1 (id=572): rt_sigprocmask(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 312.765391ms ago: executing program 1 (id=573): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 311.659571ms ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="ffff000000000006000000009036000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)=""/138, 0x8a}], 0xd, 0x100, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x0, @isdn={0x22, 0x4, 0x40, 0x10, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000080)='veth0_vlan\x00', 0x5, 0x9, 0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 304.893211ms ago: executing program 4 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d4c271ce000000000000fee5d8f0d763f543aa6e24807552e982180d4840e4c9b7eb7c39a02bb1584dcab77843f1c979cf60da76752f121b709aab1ebf465244972977bf094a36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='^+&\xab\x00']}, &(0x7f0000000580)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x24411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r8}, 0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000200)=r8, 0x4) r11 = dup(r5) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0100000206050000000000fffff00c00000000050001000600000005000500020000000900020073797a320000000005000400000000000c000780080006000000000016000300686173683a6e65262c706f72742c6e657400000085d6cdfd85d4ac39c6cbba478621a2f6dc91a13779424576472488"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x371, 0x4, 0x7}) 249.914215ms ago: executing program 2 (id=576): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 249.637385ms ago: executing program 1 (id=577): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sync() bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r6], 0x44}}, 0x0) 249.433075ms ago: executing program 2 (id=578): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f0000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 132.148082ms ago: executing program 4 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 114.556493ms ago: executing program 4 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast2, @remote}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r2, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000016c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001700)=[0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0], 0x0, 0x62, &(0x7f0000001780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x36, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004480)={'syztnl0\x00', &(0x7f0000004400)={'ip6_vti0\x00', 0x0, 0x2f, 0x20, 0xff, 0x7, 0x4, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x1ff, 0x2}}) sendmmsg$inet(r0, &(0x7f0000004640)=[{{&(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000580)="cb83f2b7150b9eaae87894f7af565ad0cd916a51218746bd1053d784af13417c3b0d4cab83e21a85b85ef350ca27e23e2cf6471577f4b43b8af51af1278d88f4e133d5e73d73981d691fb4a6fe979f2bd85095", 0x53}, {&(0x7f0000000680)="6899f75c83b6a4162aedb3294dce878273247154307313f81dd1c016e712ad312d1240971388c797d98a16b472379e703fa009ac9746f620cb74023f3aa6414899ddcb47b6edd04ec6b939b7b4ab4cffaec3ce3f480a5cb30c0959f86fa3771903bd136e408848b5273761707a195477d1dd77f003dd631cdfbf8dff33b13f5905161dc3aa", 0x85}, {&(0x7f0000000740)="e3f2cff19d0daa024be41ac93d659f168ec6700dd6ff904bec033af7f18b76e159ad0ec7023f251c7d7bbf5dd7586138fed7cf2d4daf52076a4a3e2a3c7f69b125c57e1514babbb442855a26f9344386f7092cd89ed3472366cb70654c50477c1d94de6595eab2a1c6ba533b3af39b2a4e52e973fb82a8366b9185f2142f73e211fab22a4fbbda860b13f3749009bd1751f4d1a71545ee94cdeecc5c1acb710f1f4140bff89d86755ab3d40721e7451cc5d5bd976aead2587c6dc94b986f40df", 0xc0}, {&(0x7f0000000800)}, {&(0x7f0000000840)="158d8ea7d354d2ac073425edb2196d9283e953fb48cb2a86264000f9b44ab11b1c665b50b82a25f6e6673b3147f57675aab0a11f8f4abfe6bb38dbc575cf703a5c587604fbc00496985cf1e15808694f92cac8af77222b0ca6792ca7d9ac02d806066e7ca3c4c8d9e5097c87b642cc", 0x6f}, {&(0x7f00000008c0)="07de72289ead7db7722f6e8c97bc4559e8fcc01b416afae64b83d5a8ce4753462cb21b95a12a230dbc49d21cf6129d006a9578e3b48db3310f2b8675b7b8cfa22e010b4cc4a0badf7e19d5dc2b118e47e0540a19eac386cdb3de8c1d7b704220431c67cbf93f1cfe948d011e529827081a864dc0ade5f3534d4b3788d570913bb1e5a8eef84875ce11a609927ea75e6b76e58c7df29707df0b5e87b3c4edf47d278604570a76c23122d816ffe8f514f70dc450783e3e7e4311c00f9c5c5f4d49789be8cbb3ed8dbff252e6", 0xcb}, {&(0x7f0000000a00)="e5e951abcc2790b60786acde04b075b183f63541", 0x14}], 0x7}}, {{&(0x7f0000000ac0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000c00)="97efbf2d88bfb382859f494f79f20ac482ebe34d108e0c40ddf7315b20bab3a97ecf750502c95d77002ea23dd7154b7006bf6b37a82bded91b7572b579499f2a467c59fb4141b1d32d57a81b875e8a03a58d696e2a6f0dde1df389b5dcd44d1dee5fe2a526d9b8b74d47238b7d19f8911f7f46985375ac9231f3a0d8372585a69d4260ff3cc61408c0659ff19abc", 0x8e}, {&(0x7f0000000cc0)="eb9a10f56110e82bb1cc72871258f60421e3e19473c321fb1a041527decafcfbd8a0ad657a18dabd88d76e9e7400911afa9461c88e1426f4802c45d689e2e6da216b44b04d9d8552800839e3d5a7fc4da209b3f9095295afea50a4ff6d62561bf66596d0958cbeca9f89208a3f129d09961e5fb6090b4cc744059f37a0a23cd6621a4554c9bfac37d051", 0x8a}], 0x2, &(0x7f0000000e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x70, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@local, 0x1000}]}, @end, @timestamp={0x44, 0x10, 0xe5, 0x0, 0x8, [0x8001, 0xc, 0x7]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x68}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb8}}, {{&(0x7f0000000f00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f40)="bcd32db1b2b458e8424960fe66f46a1d244200828cef2307a05f58446347e783269d4551609065ce9b1e7599e8301a47583fd8951188d2a93e61963025553cf3f9f628d2732b524ef18ab766d26174c88cc6bbdf874b505afa051b005980554b16c818b6f61d4707b5be7169dd7113dca5da8f3b31cba898b31a2e24cdd41db0", 0x80}, {&(0x7f0000000fc0)="e3101a9eccb1b6ddca96d2058f2ff75744598f482fb9e5f60c5c542b3f241a63c42f9c00dd9d4ead16d9e0c65feb06b33b6c3664555e59e52f9a92cee307c7046c81fbb32e54cdabc3b248ebc79a884dde8c24158aae881c30c6ebe91514a35790d6cd67e02083464e77b6895e731dec03ea1499819236c26923360e20648f0c028496158887f79451a5611d2d01c50d108659b1a58b4cfc5907b989190775e7fff0ee453efe05f629d9ef06b123afbdcf90732e6e64b97d2ba2f37ce28b5ede1035b3c4a90c58a7eaf9e50174c34b5b94b2c086cffb0264ecde9c9ffc9bfa6dc1b1e31f89238861dc3affa3421bb5a5b2e5826cb3ce79c1", 0xf8}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f00000010c0)="15e15f4b71ee5fe6077d44b8e6f4641211460103", 0x14}, {&(0x7f0000001100)="1b5a08a813c398145c29db9bb2c955b39c340e36c7843b29e48b28195b73ac4bbe9baeaf2852c8de06d60bee81177b126407105c23584b96aefae094a7f9546cef", 0x41}, {&(0x7f0000001180)="36b12c8c68bf228ed3073993b4f9a6668b70c31e56d9d9aa575b612239219a0498224d0de9e63c56bf7aaf44425b68a1aa090b308dab68", 0x37}, {&(0x7f00000011c0)="60388e0f301bf1788653db5952292f3d5f73381f54b576a53cfac5a80a15e8aa2a1e9a508b9c501cf4ec49d8d6facb2293892b18eba4016947add7fc9dafcab697df233e687ddf66b44f18bca02ab787af59dc3c8d892323112d3b7053f447e7bef668c96c6ef51a3b638c8e153cf88b985810a8d6bd402f89f30a89b3f5c319036d13647b836fe8c1ca0908f388fd05f46bcc25b8aa974b5f5fdf62fb4fcbb51af08181b7ce708ab05413d224a1d6e9027d1c8d780c5926a4e1c7d59b742b2e8e28d819670fa02e2cbb986811673af2b0dcc53b7d5c8765da912129a9b2ec73c84069b4308f1493c5e333c4", 0xec}, {&(0x7f00000012c0)="abd1f0ce566e6160ee5ba4522f463589c3900dd3180665bcfd24144702c09ececd8646a48f3f55bb747e1a86cb45c9471909daf3", 0x34}], 0x8, &(0x7f0000001400)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @rand_addr=0x64010101}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x83, 0x6, "7c82d265"}, @timestamp_prespec={0x44, 0x4, 0x63, 0x3, 0x6}, @cipso={0x86, 0x37, 0x2, [{0x1, 0x12, "a4589a8f087075251ba805ab5a1c20d1"}, {0x2, 0x8, "26c0c7951531"}, {0x1, 0x8, "4b8ce24adc0d"}, {0x0, 0xf, "f37a4fbb8ca692e77a4b35cb9c"}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14}}], 0x140}}, {{&(0x7f0000001540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001580)="f68f8c7d0697b328cc617a5d1dc84c05d5f415e47429be0794d30e279767982239759c6ac77607e801e6d9a85919d181adbdd39a2c59b3bfdcea0e976c5c58d1718dc452fdc69bf6dd9cb11d37ee393aeb9c6435f7381e22745c2865eca07dee40c3fa059d10fbd3f36ed5d4fb95aca622304dcc7b3ef8ae7e811974c1e1052cd67d45d4db25b69844e367de6a4147af3230c346c0213ab03df49c1cf4dadc57a6b8549901ad69c54d961bebb699d18b67ce06caf83474f820b6bf0f80ed79a570b4fe370b3918d4c7e3e9881f2741a51e0ba625e27ef3dbd23943ab9ef901e9", 0xe0}], 0x1, &(0x7f00000019c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7545}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010100}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xee, [@multicast1, @multicast1, @private=0xa010102, @empty]}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x9, [{@rand_addr=0x64010101, 0x8}]}, @generic={0x83, 0x10, "9ac11671042941ed78a30fafe2d9"}, @rr={0x7, 0x17, 0x66, [@remote, @local, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}], 0x130}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001b40)="1c69b8306a8a61b86981a65c9ab9f3d4d2af91b363cf535fad3bcf46507927c7f64a0e107b517d52d15ec096ffb826a8aeeacb8615aa28290b43750c1b326e01405f6e57ce3be64049340b5dcbfe452a2adfbfd91f16b3ac4a097a13b7ac365bc7db3eec12023c6cfeb76286515e046c9de9aaeb298f0ca536eb5b8d1536ce94abe66f5519341fd5dfd789b3ff368e5cfc3d92ab22126b8d118f82fdb94dbde9ca67868258158deac0a0c686be5da3299459baca1545e3f6519cdda77ad1501ab062418660c722943470c45c7354b0", 0xcf}, {&(0x7f0000001c40)="38d976f2d3b17aca03a1e592e07338e97bd3061343fc85d72fd23e1b347d8979f9da66569f18ab2b6f24d53d80d8841821416b18a4641607a46bfa06ab100d141737b283fe229a6fad7cd9df8ecefa8848d696cbaebea0f4ea027714bfe8e930fa4b04186e712daeb6664f5352275617b0191d3196dfc3ddcfdcdb22fc6636b5588f0d8e4a662ec3d97b11c935506443b386bd099ed3d38bae991f5ed118dabbb7102555addb65ffa1e9282b09dd39a6a00a877150730c513d508c0626470f8766ef", 0xc2}, {&(0x7f0000001d40)="6b65f16dbc5be762d5b87e01367c9fa768422a48e010d752464988bf9116902c5f33b87cf434ccda973fed447df7516672c8abe5dda72beb17698b44bba9704b7ddac20a8572e458da65633adbe926d4ac5282f4c5e2c9c593d1ede11603d20b96bd36a07891f386cf30bebb3096c640a2d31930a4092978db310a920ebca53343a7c5bc2582f122ba890ba0fb73f7a26f54cac87c0a5052dc53f0f2abfc5b624cb38796a201fd651abf4f3a288431231cf310c0f8e28ac76f75a414f2e886b2f0dd0ca789bb70f119d0efe6c2196e47b4e8d41f7435059d0800f5f6175511684b0ea3d2ff124625c762e8cb", 0xec}, {&(0x7f0000002ec0)="a77f3a2595a0a14ed3b8c8052db6b4b09b5bb7825e5983fb0867a77ede342b95f535a0714e38baa1128db47858214d304cf172bd3eff8d47321a228874d19352fc2a16963ecd5238387781e9d86e0d03f69c5e2338fa1375c097fdd9e15ef0c8452b5564750abc01415517f70f5dee55b4e63bd57fad139fb28ffa586f3a2c91bdcc3784bd5ed5351d1b29eb89d17579bc913fb1c0ab765a44293e7391f2d6de3968b3", 0xa3}], 0x4, &(0x7f0000002f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x46f7}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x8d, [@private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0x5f, 0x1, 0x0, [{@multicast1, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x41, 0x1, 0x8, [{@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x9}, {@remote}]}, @timestamp_prespec={0x44, 0x24, 0x6f, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x5}]}, @cipso={0x86, 0x35, 0x0, [{0x5, 0xc, "cf1e63c89012dc34ab1c"}, {0x5, 0xf, "d4192e8bfd95bdf61183b69085"}, {0x5, 0x9, "ca59f0f085b379"}, {0x2, 0xb, "688022dbec853c248e"}]}, @lsrr={0x83, 0x17, 0x15, [@loopback, @loopback, @local, @rand_addr=0x64010102, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x0, 0x4, "a224"}, {0x5, 0x8, "93b2200a0acf"}, {0x1, 0xf, "ec125c49a5a0278883f3c7e846"}, {0x1, 0xb, "79edee5e3386b8026e"}]}]}}}], 0x158}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003100)="6fbb63ebcee46b07d1993b6d6be00f19a96c99312e03c2275a0a2ae3f818ed2265a0f8f16bc77f5427923811c3502169a48327c2f5a10cfa3dcfc06887bf5821b4cc15df774bd8a8107bb92e854cf4f7c00aa2634efd98f4250811d41c6bfbdb7204ac8a722c3a7cbb4a8730b44f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f00000031c0)="8c8c7ed8c6830687c480cc2a62274e45e1dc758319784aa9741fa2dc97f96f8796e01e03a84cb178a0c9ad95562724710a148c24f2a92ed01edb2fed296379eee8e1125889970d9adb233121e5602e9636205e39235006cfa8247d9804d77c07e60d7b805da784feb1e4202ca84a9cccefe7d0e03906c13d189a21460d3066f74b7bb207", 0x84}, {&(0x7f0000003280)="66eaab59ddc36880a688d405dc4c3d346b19851fd1d206eb82b4637694bd6333eee3829f7f2a6bc719549c093feceb4e7a491141e63938893a37546358f69a790a699a353cd3922020287158ca52a3ee5814a54c152af7e5589596bff3a0d9f1b5e48670772249bf635ce95b6a212c0a4e09ccfecb647a7cf271436568be6904510bade0a337c454e21d27b3bf0628adbe062b792841d445703942bcd3fa1c66e61d3a20dd996717d35026f3fa385468749972bbcc6b50fc3d9f961222e1e9bab286af6095d3267b33d96eac6c48791dc013cd4de1ee41699cffb6423a25a98d2a5e0ffbdf0ab28cff35216f9cdd72d142f045f9f33922465369be2593d235a5ef5a6711f5c5a3a90edd13477edd564c38c2d6739ee36f16d08f483bc5a26b24ad735745cd10665c05285687b46550f2e895dd1551a0347597fcee2df2c7d2973b8ca65be78761c00c2efe3ca9a9792a50a510e2af29c1f053a6e074c6b65b89dc418215077816c5c9c49d68592f0e44d1c5fd2fdc115377c326844466950424233c2b329fc356e64472c66af7a1d02d5472745264caf9b9f6ef186582806eb06d1628e0463e204c9148e153378c28a2b2db15fa2b7ffdb5156b444cfc0c0d70d47074e5bf78f6c328781c515ca9119d0a35ca861814dcaa08bf574773f04f01e141dff8b0093c864b79753a5cb27052024900ec92d8793923e0532418e88eea720c9dda4f1b5d935068f6e2183c0106c4cb8a553b593e9291f0f06cd016ebf0285bf3f759ff11064df0ed815f16a83accd1f1f049a58d6d4312a4d7e55be94ea3ccb60abd9c3c00657ecdce67f98810b0d5aded6818ee580c88e1067dd81ddf15fcffeea618aa687927abbcc104ebc6a2616054e70e64997a2d3a3125bc63fd2854647d5a47d86dcc6030c33152e47e6e357e126cd74c901d98d51f60921ada96eea8b125f6eb19e16847e2b7266fc7c412623d0b3d2379e22707d5f4117ede86384b8d1c753f6111ffc7af6d28175c79a06e3f4939f5e9346bde8410c6ad63a8b8166ebddd69bec82f73174d9b9d0e070cbb083a854facc08d354934781856703c6add86faf04c8a49d44e5c6c510383e4c76946a0179b33e67b18c401f7b38c732c1f2961d5716b009c5cb54a33ab04f6a9d5e59a69ae05043327a708a3d399dccdd1fafb328da2648240b4572d2c3ee9c6a943dfe2906a24a460a19c9e786b18e6a2b20bc1fc3520cf5fe3d32555a1eb709ed1152e7af7c162705f2c28983afaa72e654d6a69c2d1b5ee9675af4b920569b61e8fbd706abb8d228a04ea1f0b14906599cd9858be1cd57fc8d9bd6b7fa7d157dae7e73ebfc2dc0e9912af4c0847286ab62103ed3d7f906104025650a38468279e70ec028795442d44724d3a98a5d20d039f1f395bfbd6d626e0f402d61d0a7a38b7975fade094f698bc4c0b2430ec01465bd1e0f4a1e16cd65d1bcb318537965d83af06b8ce95d05a6add2573f8ca87e23c6340144f38d8c2d69f01e957fa4533050cdd31c3470f4c044b14ede4ef5ade2221b5277a3e8fda175aa61d99c860aa7435556df6889b2943429f38dcc416c4a17333f86106bc9da2a26244f56d21fcf09d53ed268ca075cec44eb095e3c99de31b7c6be542c1860867f5692bebf0d3f3bbad7c66a89a4a80c45218481027535b9023ef3889f41b13149af4b801f87d8826a5e19f225357e5b9d2677f967770844f60666b7e9d1285d952ad699c0f781abb7d1a78b0b51e68ff7ea40802c36f77ddb962b759758028f1bc6f17b83ee550303dd2311a366841ba8bf17fce307124d079c8f4c34c1d0784101e876df73f6ad4b308fc77d57d543ca2047c13540b9ce4c0057f7d02f871c657c6e23813c0d72598acf2d4489f6f3a48baffc5b7239dc4d40da5da95abea135321a8ed29df2dcee1425dc47308f36dcae288774e5a9bc0bf9f4144e5087b47c684ff460ab6db3da61a747acbbe94562fd570149782d1620953898241eaa87ac944596ac964069120809f0de9ca2adb00d237fce6ec05805d11ffa75df277ac033bdef2530735ebfa4793982b90ba8c7fb3db5bb4043f855bc5b0ff05267d3b5bbdd71d678c9fff4722c9dbddc93b1d134d5497015de3847d4fd067472bcdb392830ebe21522de84875f0dae4796a48fcd1ff7d520c7ea9ef59a7b1e31025ac3a32c2d6a9185962903ba4035d5fcd538c5746f2241942571233985d7cd8d3a5df266da4b2c4f89f6c5649adc27446ac5ffd98f03bb3e010819382c9fa2993721066c47afe6fbafc71b4a29b7352f7f537830daa3484b10ec38324c99ad123be9e501a1ed5d209a1788e34119f4fe5a1babe4e872847191b52f5534c3ca15d963f86cfb6479c8eae94cc9b99ce4636bd68ae34b448eb85bbb99bbf2fe80024d0f99a9a97a75a215bee549a9ad1a13417e4dffff4b6f57a69e35c4e5036ce331cd07521fc58a4a2927281515174d4ebcbebf0a1a1ba4aa81b6a2d648b62e53130873f39456af5189000e4f76ab1c7ef20cbdb9336117ce250d780ffe5f6f88e053cb5d3f8fada32238a8f7bfa09c9caf714b9c93a462e67b9c8fbb94215e2391f01f5f4566a3ed5c0728ae44d7ce4d85149e729301329a2b20124b0bf2deb66021b76b5d7d68ce41de2b3adb9313ce31e638f35f5eb224033c46678eeb87bd60814bff105e99e596516bffaf947ee0ec6c31b636e2972b7caa7f80c370a11163c679df66248ff6db1c845c99bebacdba6503f4c87d9e56163bc39a73045b9598ade119b5e9376ba66fe165f3337db6eeeb38112e9f1421be1fa2f9980a24ce8fa9ce4250aab9233218357d6190ecb2462f14189b87f2907abe6fc04923c1d4fb510455a6a05c1dcc89c0a3b4e558cc13103be3c1f31707676a2008b555d2974f25caacde73d4767dd976a192a76b0840eb8171187fd395f8ee83b8e8121860425b5ebd730c6e62dafdc91d7970b50ff4c6d568cf6b34dc2520f42f12b7849976ad558a64a834011eb27f2ff9438973362d31bf307e45435d3778a6490ca57e81e512566de0d4485d06f6969d54e86ce62605bb1151f2cf66b99ae1d76d21b94eded30bf163322112421f1a5ceac50bd7539008d32162810ee454a0ec4c47f1eec0c15b94bf693e1d2175ed51a823caf910eecbbd0e245847dea23e0f9055b990c3fcda0e7bbfae3946f2e4139d088eda3b9ea6b4d51c5ae8517d6a412bb6c6164e9c1f8d1550ed89b778195d3d872dab86344f9a2558a7d96645c39234f795cbacc9d55e37a52cb64ca3d9b5cf6914059d15c9f84ddb8b04b39e5ba4ff8a9cc5583d914692c9fccd110398c03560d51f015568d927b6f0198dd401d397c3d81878ca79cf7ebcbdec33707ada3f368696346698eb8c66590e96b26d7f58cc79c6f17a613eee21677c063f2856d59944ffcd81a60ad0c75fe4ecc28ab7eb787a5d05854b11c53f4ed68f67dfc995aaa6dddd51660d340d6d41348d1b0d3b91253d9ecefd863befa46f3a2f2044000a89d817c410ba46d36c7a639904d8e955945c350fff2a56e3cab9a3de41d28e813225c28a33cc95973c58a8c7b664b4ae6c45441b04db34cbf7676cae1728fbe9712b2a33548d1b6b67194d51fb2da8c32fdb9c9ffa28d1910f17cacc49071febd68103bde8747259633c69364bd3ea8df8cdc3df7664a1610da34a30fffc81a1d0bbe970c919392334ab2cd14ccc820a5c261366fc0925357379da2188f72c63d6e8445c8c6cd68614281c3c25c0acc685ac50d1351cb002e43285384514ea611d55587292d112842a45ffbf174a7f45eba04e8af4b27933a25dae0a4c0b7cfb7d41327e54a64691647fcabe8a875e3f21443367b61e41452c1fb054765e86bec7526f4e0f7bcb7f4cebe7d0683ce97e9c7efa7e32018e9f3073610a3659b1464bca51e011511d265a844495a5aef437c010f8de7b96fec6a97e67c324a139c085cfe55cee263dc5daebcc1d8a5370edd831fc85d803e65988989f3aa3935173bc30ba585cf85d39d8ddb9f8dbe95cd98caa7dddbc64342092aa3f5d59d8dc6968346c7a944b80fc596f10b4721ba357c82f4808fdde7a26bcfc23463e7a53bfa5e25a63012161dd1ed9cfadc3bdeeb23f83b229bab412034c50dbe5e1e539c0cc12c21ad982f84b0797c0e0dd449f77366582e9c925ab0f414b59988f5cab4454ecf5b7541c69695d3021bfddd3cf4503e60bac3dd353048d97e04598b9cdd4c555badc434284aa43b2d22dd3df2af075c8dcd08ced9d32fb531b00374dd63e7e59f0a07902c8ee741d35fbc221d22ba3514f9cf1e6805bfce9ec146f4b599b15ad625eebbf946c07ddfb72c050426efe148ee2d32a15d235050aec518a6dfac5e0060d302ee752c3fc2194039cf8e5cfe130a982a3ec17f38cac0bcb6a6a9eff5f24a19a51fb60794b61f5b21e8738beac4f6145d9177863b60d27dd7e052482f252ac860949d1400a4e1e63d74d738b3272548be2b260f4e9a608a4e399b54333319a9e2d1d754fa59717b9dc73329e9fe2388f7ae405ee51c8b0dd6ef670332fd65c030258dfba7e1c96550157076a7853f1c08951dcd33751aaa6fa47a63d484288190459772c99d40616458043812636fff9034568dcd8eb2732be403855de4b6fa19f71c778fb02325aa693b1decce4f552f2467b3c121771f73f1d5f6ce5cfa4434877f4cbc79876abbd7a7adf4915287d2cf4b08bc83271d1570f19b16d628e5e9ea962be2ce573293b08fa79c06e381ecebe27c624f657fdb4d344a011d151fa9fda36ac481251babf923abfe82da0389918a4dee10e9696fbdf0cf893f93d8773aee2642fc3978b4e5bdd567f783ab07c52c269df34f1b1b55af9a4359acf5ce91c9b4ebee281e201bd266fb110fdfec25da02f7ef2e0f08635db66fb0a868410773d650f063adc80c6be9f7b28c43a7d2905cbedb45b10b8b0fce9c4db5523326670b6a2d5255895bc7729ef620d4c3b17a5d7f87fc5fb40064c5643410072e14e5cf09dc9c86bc235769dd8b804955caec302d283818ef5faf8aec4744911bc5b93ab5dd1e555c684114568920d77a65d059cac0d312079924fd09a15587af1c748635de60640fc5784e28e3dff7bfbc194b5d93d1cb0ff6977546a60e74ae7ad32350c20b879cfd08695ffbec3388afbc710886c71ad045ab7e81247095fdd052082da53cef6d95add218776dc57ad55e3e76f1c1521f94921cd6c8cb859a7cf16ce9b73388eaaab1aeae4ef1d7339011017fababdec5ca0ac758462bb5ffa32c6eb9164b4ff77cee487a65c506fab98eaf37226e3a8e1a549a0f227aedd745e690009fc28326e2c4c3f6c296737d5935b5a6cbb8a08f25affba6b8a003a59b0575b6f1039926e72a4ec488bd08b56f73cbeb95e9737524268967434cb06ee2c59312f78e892d60d6560f2c634c263993edb0cf878efad6cc16987f0ab11d11d89af70b21376a0bd1376078a0e5bc06a94115e7518c49124ad532dedef9eedb34a9fb80b87c344b13834395fc3d99152e9544c7e17f7971f4d6c6593f21bb08fb79eb90f083f278f39f0fd4ab426448d80e8c54c3515f5f30c3a9405d56b01001400dcd235503ae3b2e23ba49b8717cf954bc4f360ed61ef4b3cbc46d9ad4d6fad583a4c657d8e9750949324ab44789f01a7fa280ba0de84c78880d3e3d40e9dfd0ac719b23204bf0bb9292cd82b2046c848450bbded8d57d071ca2b76505470e20a4cee9d8bb618bab0cb6978d28809dfc65e5000cfd849d99ff6cf1", 0x1000}, {&(0x7f0000004280)="46c3bb4f43b27fe10d1e3bf486f483ff3f846f57a899153d2e73a4c47e96728e45fd1a022510e9c149", 0x29}, {&(0x7f00000042c0)}, {&(0x7f0000004300)="976e5721f36ad638cfd1366c717fcff9a1d5b31db16e0eafa07c2861b32733c4da0b61d13499a8dce3d500cb88271802534fe372631d3de8ba854b5fe630ba868c61c63abea3f71c1675fc41655b5b5fd9cf0eecedb9d216d8ad58a689381c13c95b", 0x62}], 0x5, &(0x7f00000044c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}], 0x38}}, {{&(0x7f0000004500)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000004580)=[{&(0x7f0000004540)="e3f1376c963055ef5613b035f888ebcc18ffc572ecb79ed87ee62a8ad1cdd47c1d40b6e15d396990", 0x28}], 0x1, &(0x7f00000045c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x58, [@multicast1]}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x5, [0x6]}, @ssrr={0x89, 0xf, 0x7a, [@local, @multicast2, @multicast2]}, @cipso={0x86, 0x6, 0x2}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9a7}}], 0x68}}], 0x8, 0xc00c090) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 56.918677ms ago: executing program 3 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(r1, r1, 0x0) 307.14µs ago: executing program 1 (id=582): socket$inet(0x2, 0x4000000000000001, 0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x3, 0x3}, 0x20) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='k', 0x1, 0x20000820, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x34) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000)=0x9, 0x4) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) setreuid(0x0, 0x0) setreuid(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="00000000b16842a9b705000008000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7, 0x0, 0x4}, 0x18) 0s ago: executing program 3 (id=583): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) dup(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write(r0, &(0x7f0000000040)="05000000010001", 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x6, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): [ 20.889073][ T29] audit: type=1400 audit(1740316165.098:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 25.986443][ T29] audit: type=1400 audit(1740316170.198:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.987419][ T3286] cgroup: Unknown subsys name 'net' [ 26.009261][ T29] audit: type=1400 audit(1740316170.198:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.036682][ T29] audit: type=1400 audit(1740316170.228:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.175557][ T3286] cgroup: Unknown subsys name 'cpuset' [ 26.181771][ T3286] cgroup: Unknown subsys name 'rlimit' [ 26.333070][ T29] audit: type=1400 audit(1740316170.538:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.356419][ T29] audit: type=1400 audit(1740316170.538:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.376962][ T29] audit: type=1400 audit(1740316170.538:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.397346][ T29] audit: type=1400 audit(1740316170.538:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.417692][ T29] audit: type=1400 audit(1740316170.568:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.424655][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.442513][ T29] audit: type=1400 audit(1740316170.568:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.474423][ T29] audit: type=1400 audit(1740316170.668:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.546288][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.564195][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 27.622977][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.687918][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.695062][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.702297][ T3296] bridge_slave_0: entered allmulticast mode [ 27.708771][ T3296] bridge_slave_0: entered promiscuous mode [ 27.715437][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.722522][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.729727][ T3296] bridge_slave_1: entered allmulticast mode [ 27.736150][ T3296] bridge_slave_1: entered promiscuous mode [ 27.746371][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.785233][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.792343][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.799501][ T3297] bridge_slave_0: entered allmulticast mode [ 27.805909][ T3297] bridge_slave_0: entered promiscuous mode [ 27.821679][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.839345][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.846478][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.853701][ T3297] bridge_slave_1: entered allmulticast mode [ 27.860132][ T3297] bridge_slave_1: entered promiscuous mode [ 27.874162][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.897471][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.919461][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.928721][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.942458][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.951757][ T3296] team0: Port device team_slave_0 added [ 27.969984][ T3296] team0: Port device team_slave_1 added [ 27.987687][ T3297] team0: Port device team_slave_0 added [ 28.005044][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.012128][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.019397][ T3300] bridge_slave_0: entered allmulticast mode [ 28.025993][ T3300] bridge_slave_0: entered promiscuous mode [ 28.033088][ T3297] team0: Port device team_slave_1 added [ 28.052964][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.060089][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.067302][ T3300] bridge_slave_1: entered allmulticast mode [ 28.073586][ T3300] bridge_slave_1: entered promiscuous mode [ 28.097298][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.104269][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.130281][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.159291][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.166271][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.192176][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.212036][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.219054][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.245090][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.256332][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.263279][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.289296][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.305500][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.312603][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.319819][ T3305] bridge_slave_0: entered allmulticast mode [ 28.326235][ T3305] bridge_slave_0: entered promiscuous mode [ 28.333511][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.343889][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.367017][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.374146][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.381348][ T3305] bridge_slave_1: entered allmulticast mode [ 28.387724][ T3305] bridge_slave_1: entered promiscuous mode [ 28.407688][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.414866][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.421986][ T3307] bridge_slave_0: entered allmulticast mode [ 28.428601][ T3307] bridge_slave_0: entered promiscuous mode [ 28.435282][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.442331][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.449581][ T3307] bridge_slave_1: entered allmulticast mode [ 28.456118][ T3307] bridge_slave_1: entered promiscuous mode [ 28.494342][ T3300] team0: Port device team_slave_0 added [ 28.500939][ T3300] team0: Port device team_slave_1 added [ 28.508521][ T3297] hsr_slave_0: entered promiscuous mode [ 28.514401][ T3297] hsr_slave_1: entered promiscuous mode [ 28.522558][ T3296] hsr_slave_0: entered promiscuous mode [ 28.528713][ T3296] hsr_slave_1: entered promiscuous mode [ 28.534515][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.542101][ T3296] Cannot create hsr debugfs directory [ 28.554214][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.564735][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.575242][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.599053][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.613989][ T3307] team0: Port device team_slave_0 added [ 28.627003][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.633966][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.659939][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.681606][ T3307] team0: Port device team_slave_1 added [ 28.697362][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.704400][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.730429][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.755067][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.762039][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.787994][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.801369][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.808343][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.834258][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.845739][ T3305] team0: Port device team_slave_0 added [ 28.854687][ T3305] team0: Port device team_slave_1 added [ 28.886916][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.893891][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.919842][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.944961][ T3300] hsr_slave_0: entered promiscuous mode [ 28.950878][ T3300] hsr_slave_1: entered promiscuous mode [ 28.956852][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.964465][ T3300] Cannot create hsr debugfs directory [ 28.970243][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.977323][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.003249][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.065013][ T3307] hsr_slave_0: entered promiscuous mode [ 29.070997][ T3307] hsr_slave_1: entered promiscuous mode [ 29.076872][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.084447][ T3307] Cannot create hsr debugfs directory [ 29.121393][ T3305] hsr_slave_0: entered promiscuous mode [ 29.127513][ T3305] hsr_slave_1: entered promiscuous mode [ 29.133412][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.141033][ T3305] Cannot create hsr debugfs directory [ 29.209247][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.223078][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.243634][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.263801][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.288744][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.299687][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.310381][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.321819][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.352229][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.362588][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.380579][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.390789][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.425697][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.443371][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.452224][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.461236][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.479110][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.501160][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.514891][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.533364][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.540455][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.549135][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.565253][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.587669][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.603010][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.613413][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.627032][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.634088][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.642917][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.649992][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.674576][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.681725][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.695915][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.714373][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.732261][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.739523][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.755319][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.762419][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.775859][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.787100][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.794176][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.822833][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.842770][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.849880][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.868574][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.880838][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.898572][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.905766][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.931058][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.942079][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.981377][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.024556][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.048446][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.073319][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.080512][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.104297][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.122595][ T3297] veth0_vlan: entered promiscuous mode [ 30.134336][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.141500][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.163892][ T3297] veth1_vlan: entered promiscuous mode [ 30.173622][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.184130][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.210377][ T3297] veth0_macvtap: entered promiscuous mode [ 30.229907][ T3300] veth0_vlan: entered promiscuous mode [ 30.241526][ T3297] veth1_macvtap: entered promiscuous mode [ 30.250420][ T3296] veth0_vlan: entered promiscuous mode [ 30.261088][ T3300] veth1_vlan: entered promiscuous mode [ 30.273567][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.285474][ T3296] veth1_vlan: entered promiscuous mode [ 30.306144][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.315690][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.324431][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.333199][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.342093][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.358322][ T3300] veth0_macvtap: entered promiscuous mode [ 30.365901][ T3300] veth1_macvtap: entered promiscuous mode [ 30.380848][ T3296] veth0_macvtap: entered promiscuous mode [ 30.396068][ T3296] veth1_macvtap: entered promiscuous mode [ 30.408132][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.418699][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.430636][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.445781][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.456300][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.470167][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.474629][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.493741][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.504228][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.514204][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.524702][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.535562][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.543920][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.554452][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.564319][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.574836][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.585629][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.593954][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602756][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.612034][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.620805][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.643389][ T3430] loop3: detected capacity change from 0 to 128 [ 30.656277][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.664234][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.673200][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.681960][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.690686][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.703137][ T3305] veth0_vlan: entered promiscuous mode [ 30.711114][ T3305] veth1_vlan: entered promiscuous mode [ 30.742902][ T3430] syz.3.4: attempt to access beyond end of device [ 30.742902][ T3430] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 30.779261][ T3305] veth0_macvtap: entered promiscuous mode [ 30.797149][ T3305] veth1_macvtap: entered promiscuous mode [ 30.816183][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.826738][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.836632][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.847107][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.856944][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.867419][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.878649][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.894175][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.904768][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.914594][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.925216][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.935111][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.945610][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.959353][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.979706][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.988793][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.996447][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 30.996465][ T29] audit: type=1400 audit(1740316175.208:132): avc: denied { write } for pid=3439 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.997584][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.017233][ T3443] loop0: detected capacity change from 0 to 128 [ 31.023813][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036413][ T29] audit: type=1400 audit(1740316175.228:133): avc: denied { read write } for pid=3442 comm="syz.0.1" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.070474][ T29] audit: type=1400 audit(1740316175.228:134): avc: denied { open } for pid=3442 comm="syz.0.1" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.204416][ T3307] veth0_vlan: entered promiscuous mode [ 31.212401][ T3307] veth1_vlan: entered promiscuous mode [ 31.222447][ T29] audit: type=1400 audit(1740316175.428:135): avc: denied { prog_load } for pid=3442 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.227937][ T3307] veth0_macvtap: entered promiscuous mode [ 31.241205][ T29] audit: type=1400 audit(1740316175.428:136): avc: denied { bpf } for pid=3442 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.248938][ T3307] veth1_macvtap: entered promiscuous mode [ 31.267072][ T29] audit: type=1400 audit(1740316175.428:137): avc: denied { perfmon } for pid=3442 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.293397][ T29] audit: type=1400 audit(1740316175.428:138): avc: denied { prog_run } for pid=3442 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.322316][ T29] audit: type=1400 audit(1740316175.428:139): avc: denied { create } for pid=3442 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.341701][ T29] audit: type=1400 audit(1740316175.478:140): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.364414][ T29] audit: type=1400 audit(1740316175.528:141): avc: denied { connect } for pid=3442 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.448647][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.459235][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.469140][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.479600][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.489462][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.499922][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.502634][ T3438] syz.3.6: attempt to access beyond end of device [ 31.502634][ T3438] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 31.509745][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.509802][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.521466][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.553247][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.563798][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.573658][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.584138][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.594122][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.604904][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.614797][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.622215][ T3438] FAT-fs (loop7): unable to read boot sector [ 31.625245][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.633959][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.663486][ T3454] ref_ctr_offset mismatch. inode: 0x1d offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 31.718550][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.727438][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.732882][ T3457] ref_ctr_offset mismatch. inode: 0x1d offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 31.736200][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.756274][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.824894][ T3464] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 33.095737][ T3488] ref_ctr_offset mismatch. inode: 0x18 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 33.102920][ T3489] SELinux: Context Ü is not valid (left unmapped). [ 33.137289][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.144595][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.311369][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.357940][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.431041][ T3487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.440317][ T3487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.449461][ T3487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.458462][ T3487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.522235][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 33.541050][ T3470] ref_ctr_offset mismatch. inode: 0x18 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 33.550873][ T3493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.618386][ T3475] uprobe: syz.0.15:3475 failed to unregister, leaking uprobe [ 33.638569][ T3487] +}[@ (3487) used greatest stack depth: 10968 bytes left [ 33.657420][ T3493] syz.3.20 (3493) used greatest stack depth: 10296 bytes left [ 33.735430][ T3491] uprobe: syz.0.15:3491 failed to unregister, leaking uprobe [ 34.106926][ T3515] ref_ctr_offset mismatch. inode: 0x29 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 34.141610][ T3516] ref_ctr_offset mismatch. inode: 0x29 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 34.717240][ T3531] loop2: detected capacity change from 0 to 128 [ 35.714317][ T3557] loop3: detected capacity change from 0 to 128 [ 35.727258][ T3556] ref_ctr_offset mismatch. inode: 0x2c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 35.808021][ T3560] bridge1: entered promiscuous mode [ 35.813314][ T3560] bridge1: entered allmulticast mode [ 35.880085][ T3559] ref_ctr_offset mismatch. inode: 0x2c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 36.004713][ T3560] team0: Port device bridge1 added [ 36.013604][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 36.013618][ T29] audit: type=1400 audit(1740316180.218:373): avc: denied { mount } for pid=3553 comm="syz.3.35" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.095015][ T29] audit: type=1400 audit(1740316180.228:374): avc: denied { module_request } for pid=3550 comm="syz.0.34" kmod="crypto-hmac(sha384)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.117284][ T29] audit: type=1400 audit(1740316180.228:375): avc: denied { prog_run } for pid=3550 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.136058][ T29] audit: type=1400 audit(1740316180.258:376): avc: denied { map_read map_write } for pid=3553 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.155884][ T29] audit: type=1400 audit(1740316180.278:377): avc: denied { write } for pid=3570 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.176248][ T29] audit: type=1400 audit(1740316180.278:378): avc: denied { create } for pid=3570 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.195615][ T29] audit: type=1400 audit(1740316180.278:379): avc: denied { setopt } for pid=3570 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.214947][ T29] audit: type=1400 audit(1740316180.278:380): avc: denied { setopt } for pid=3570 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.234338][ T29] audit: type=1400 audit(1740316180.288:381): avc: denied { remove_name } for pid=3580 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=639 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.247335][ T3557] syz.3.35: attempt to access beyond end of device [ 36.247335][ T3557] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 36.257864][ T29] audit: type=1400 audit(1740316180.288:382): avc: denied { unlink } for pid=3580 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=639 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.963630][ T3655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.39' sets config #1 [ 37.046298][ T3664] netlink: 9 bytes leftover after parsing attributes in process `syz.0.41'. [ 37.108120][ T3664] gretap0: entered promiscuous mode [ 37.269431][ T3684] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 37.373988][ T3690] loop4: detected capacity change from 0 to 128 [ 37.572741][ T3678] ref_ctr_offset mismatch. inode: 0x40 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 37.639586][ T3678] ref_ctr_offset mismatch. inode: 0x40 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 37.856006][ T3710] ref_ctr_offset mismatch. inode: 0x47 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 37.909362][ T3712] ref_ctr_offset mismatch. inode: 0x4e offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 37.963906][ T3716] ref_ctr_offset mismatch. inode: 0x47 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 38.192043][ T3729] syzkaller0: entered promiscuous mode [ 38.197633][ T3729] syzkaller0: entered allmulticast mode [ 38.225155][ T3697] ref_ctr_offset mismatch. inode: 0x4e offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 38.272483][ T3745] capability: warning: `syz.4.52' uses deprecated v2 capabilities in a way that may be insecure [ 38.560349][ T3755] syz.4.53: attempt to access beyond end of device [ 38.560349][ T3755] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 38.573166][ T3755] FAT-fs (loop9): unable to read boot sector [ 38.791179][ T3772] loop3: detected capacity change from 0 to 256 [ 38.926264][ T3781] ref_ctr_offset mismatch. inode: 0x55 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 39.018044][ T3766] ref_ctr_offset mismatch. inode: 0x55 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 39.067923][ T3791] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 39.265162][ T3794] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 39.345233][ T3794] veth3: entered promiscuous mode [ 39.699760][ T3826] ref_ctr_offset mismatch. inode: 0x5c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 40.519566][ T3847] loop1: detected capacity change from 0 to 8192 [ 40.565980][ T3847] ======================================================= [ 40.565980][ T3847] WARNING: The mand mount option has been deprecated and [ 40.565980][ T3847] and is ignored by this kernel. Remove the mand [ 40.565980][ T3847] option from the mount to silence this warning. [ 40.565980][ T3847] ======================================================= [ 40.818235][ T3847] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 40.826177][ T3847] FAT-fs (loop1): Filesystem has been set read-only [ 41.017132][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 41.026456][ T3889] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.061403][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 41.061418][ T29] audit: type=1400 audit(1740316185.228:555): avc: denied { create } for pid=3888 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.087906][ T29] audit: type=1400 audit(1740316185.228:556): avc: denied { write } for pid=3888 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.108433][ T29] audit: type=1400 audit(1740316185.228:557): avc: denied { read } for pid=3888 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.128542][ T29] audit: type=1400 audit(1740316185.248:558): avc: denied { write } for pid=3888 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.147630][ T29] audit: type=1400 audit(1740316185.248:559): avc: denied { setopt } for pid=3888 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.166930][ T29] audit: type=1400 audit(1740316185.258:560): avc: denied { setopt } for pid=3886 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.186315][ T29] audit: type=1400 audit(1740316185.258:561): avc: denied { write } for pid=3886 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.205481][ T29] audit: type=1400 audit(1740316185.258:562): avc: denied { connect } for pid=3886 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.224813][ T29] audit: type=1400 audit(1740316185.258:563): avc: denied { name_connect } for pid=3886 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 41.280291][ T29] audit: type=1400 audit(1740316185.488:564): avc: denied { open } for pid=3892 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.387535][ T3893] loop2: detected capacity change from 0 to 8192 [ 42.289433][ T3906] syz.0.72: attempt to access beyond end of device [ 42.289433][ T3906] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 42.308548][ T3923] loop3: detected capacity change from 0 to 128 [ 42.319315][ T3906] FAT-fs (loop1): unable to read boot sector [ 42.985299][ T3934] ref_ctr_offset mismatch. inode: 0x77 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 43.118570][ T3936] Zero length message leads to an empty skb [ 44.846575][ T3969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.96'. [ 45.098103][ T3977] loop2: detected capacity change from 0 to 8192 [ 45.208451][ T3965] syz.0.92: attempt to access beyond end of device [ 45.208451][ T3965] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 45.247949][ T3965] FAT-fs (loop1): unable to read boot sector [ 45.258780][ T3986] syz.3.102: attempt to access beyond end of device [ 45.258780][ T3986] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 45.271552][ T3986] FAT-fs (loop7): unable to read boot sector [ 45.520941][ T4006] loop1: detected capacity change from 0 to 128 [ 45.787910][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.795145][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.899485][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 46.015991][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.056306][ T4022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.068251][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 46.068273][ T29] audit: type=1400 audit(1740316190.278:700): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.113193][ T29] audit: type=1400 audit(1740316190.278:701): avc: denied { create } for pid=4042 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.134357][ T29] audit: type=1400 audit(1740316190.338:702): avc: denied { read } for pid=4041 comm="syz.4.129" dev="nsfs" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.155500][ T29] audit: type=1400 audit(1740316190.338:703): avc: denied { open } for pid=4041 comm="syz.4.129" path="net:[4026532758]" dev="nsfs" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.178796][ T29] audit: type=1400 audit(1740316190.338:704): avc: denied { create } for pid=4041 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.198897][ T29] audit: type=1400 audit(1740316190.348:705): avc: denied { bind } for pid=4041 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.218550][ T29] audit: type=1400 audit(1740316190.408:706): avc: denied { execmem } for pid=4041 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.277926][ T4022] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.286901][ T4022] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.295895][ T4022] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.304850][ T4022] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.316701][ T29] audit: type=1400 audit(1740316190.528:707): avc: denied { open } for pid=4047 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.335970][ T29] audit: type=1400 audit(1740316190.528:708): avc: denied { perfmon } for pid=4047 comm="syz.3.132" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.356888][ T29] audit: type=1400 audit(1740316190.528:709): avc: denied { kernel } for pid=4047 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.457309][ T4006] 9pnet_fd: p9_fd_create_tcp (4006): problem connecting socket to 127.0.0.1 [ 46.551586][ T4029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.607413][ T4058] netlink: 'syz.3.135': attribute type 3 has an invalid length. [ 46.615169][ T4058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 46.863255][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 46.872399][ T4088] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.945901][ T4126] syz.4.163: attempt to access beyond end of device [ 47.945901][ T4126] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 47.958730][ T4126] FAT-fs (loop9): unable to read boot sector [ 48.079275][ T4139] loop2: detected capacity change from 0 to 128 [ 48.283169][ T4077] syz.1.143 (4077) used greatest stack depth: 7160 bytes left [ 48.875832][ T4171] ref_ctr_offset mismatch. inode: 0xf1 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 48.888251][ T4169] ref_ctr_offset mismatch. inode: 0xf1 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 49.076762][ T4177] ref_ctr_offset mismatch. inode: 0xcd offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 49.232542][ T4187] bridge1: entered promiscuous mode [ 49.237829][ T4187] bridge1: entered allmulticast mode [ 49.264643][ T4187] team0: Port device bridge1 added [ 49.271039][ T4188] syz.4.186: attempt to access beyond end of device [ 49.271039][ T4188] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.283971][ T4188] FAT-fs (loop9): unable to read boot sector [ 49.515511][ T4224] loop2: detected capacity change from 0 to 128 [ 49.528780][ T4228] loop1: detected capacity change from 0 to 128 [ 50.546336][ T4304] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 50.675112][ T4278] syz.2.195: attempt to access beyond end of device [ 50.675112][ T4278] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 50.755004][ T4278] FAT-fs (loop5): unable to read boot sector [ 50.936289][ T4332] netlink: 88 bytes leftover after parsing attributes in process `syz.3.209'. [ 50.949971][ T4332] bridge2: entered promiscuous mode [ 50.955277][ T4332] bridge2: entered allmulticast mode [ 50.975410][ T4331] ref_ctr_offset mismatch. inode: 0xf5 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 50.976113][ T4332] team0: Port device bridge2 added [ 50.997557][ T4329] loop0: detected capacity change from 0 to 8192 [ 51.074960][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 51.074979][ T29] audit: type=1400 audit(1740316195.278:985): avc: denied { setopt } for pid=4328 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.099831][ T4333] bridge1: entered promiscuous mode [ 51.105817][ T4333] bridge1: entered allmulticast mode [ 51.114075][ T4333] team0: Port device bridge1 added [ 51.220229][ T4356] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 51.308823][ T29] audit: type=1400 audit(1740316195.518:986): avc: denied { create } for pid=4369 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.428400][ T29] audit: type=1400 audit(1740316195.538:987): avc: denied { bind } for pid=4369 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.569197][ T29] audit: type=1400 audit(1740316195.748:988): avc: denied { write } for pid=4369 comm="syz.0.217" path="socket:[6509]" dev="sockfs" ino=6509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.954308][ T4425] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 51.979156][ T4413] loop4: detected capacity change from 0 to 8192 [ 52.102032][ T29] audit: type=1400 audit(1740316196.308:989): avc: denied { mac_admin } for pid=4426 comm="syz.2.223" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.156154][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.163399][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.173296][ T29] audit: type=1400 audit(1740316196.358:990): avc: denied { name_connect } for pid=4431 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 52.257304][ T4437] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 52.296334][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.316429][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.326733][ T29] audit: type=1400 audit(1740316196.538:991): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.381819][ T4427] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.390889][ T4427] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.399847][ T4427] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.408862][ T4427] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.456744][ T29] audit: type=1400 audit(1740316196.648:992): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.481116][ T29] audit: type=1400 audit(1740316196.648:993): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.505279][ T29] audit: type=1400 audit(1740316196.648:994): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.653066][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 52.807081][ T4453] loop2: detected capacity change from 0 to 8192 [ 52.876644][ T4462] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 53.286601][ T4470] syz.4.242: attempt to access beyond end of device [ 53.286601][ T4470] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.310142][ T4470] FAT-fs (loop9): unable to read boot sector [ 53.876275][ T4451] syz.3.233 (4451) used greatest stack depth: 6168 bytes left [ 54.036147][ T4488] netlink: 'syz.4.250': attribute type 1 has an invalid length. [ 54.163143][ T4504] bridge2: entered promiscuous mode [ 54.168544][ T4504] bridge2: entered allmulticast mode [ 54.199921][ T4504] team0: Port device bridge2 added [ 54.219477][ T4513] loop2: detected capacity change from 0 to 128 [ 55.745044][ T4573] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 56.097868][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 56.097883][ T29] audit: type=1400 audit(1740316200.308:1138): avc: denied { read write } for pid=4587 comm="syz.1.268" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.135159][ T4588] loop1: detected capacity change from 0 to 128 [ 56.199546][ T29] audit: type=1400 audit(1740316200.338:1139): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 56.221677][ T29] audit: type=1400 audit(1740316200.338:1140): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.243385][ T29] audit: type=1400 audit(1740316200.338:1141): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.265763][ T29] audit: type=1400 audit(1740316200.338:1142): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.288404][ T29] audit: type=1400 audit(1740316200.338:1143): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.311289][ T29] audit: type=1400 audit(1740316200.338:1144): avc: denied { open } for pid=4587 comm="syz.1.268" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.335475][ T29] audit: type=1400 audit(1740316200.348:1145): avc: denied { mounton } for pid=4587 comm="syz.1.268" path="/48/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.357860][ T29] audit: type=1400 audit(1740316200.348:1146): avc: denied { mount } for pid=4587 comm="syz.1.268" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.379792][ T29] audit: type=1400 audit(1740316200.358:1147): avc: denied { execmem } for pid=4587 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.502963][ T4601] bridge3: entered promiscuous mode [ 56.508295][ T4601] bridge3: entered allmulticast mode [ 56.523168][ T4601] team0: Port device bridge3 added [ 57.379721][ C0] hrtimer: interrupt took 47309 ns [ 57.428578][ T4694] loop3: detected capacity change from 0 to 128 [ 57.530790][ T4689] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.127909][ T4704] ref_ctr_offset mismatch. inode: 0x168 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 58.166091][ T4705] ref_ctr_offset mismatch. inode: 0x168 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 58.636485][ T4731] loop3: detected capacity change from 0 to 512 [ 58.644192][ T4731] journal_path: Non-blockdev passed as './file2' [ 58.650698][ T4731] EXT4-fs: error: could not find journal device path [ 59.059806][ T4739] syz.2.296: attempt to access beyond end of device [ 59.059806][ T4739] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.072623][ T4739] FAT-fs (loop5): unable to read boot sector [ 59.237594][ T4741] syz.0.285: attempt to access beyond end of device [ 59.237594][ T4741] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 59.256129][ T4741] FAT-fs (loop1): unable to read boot sector [ 59.284994][ T4749] loop3: detected capacity change from 0 to 128 [ 59.308029][ T4749] 9pnet_fd: p9_fd_create_tcp (4749): problem connecting socket to 127.0.0.1 [ 59.586663][ T4757] loop0: detected capacity change from 0 to 8192 [ 60.506616][ T4774] ref_ctr_offset mismatch. inode: 0x188 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 60.549375][ T4786] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.556667][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.613732][ T4776] ref_ctr_offset mismatch. inode: 0x188 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 60.660576][ T4786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.670924][ T4786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.679222][ T4790] syz.0.315: attempt to access beyond end of device [ 60.679222][ T4790] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 60.691984][ T4790] FAT-fs (loop1): unable to read boot sector [ 60.706929][ T4786] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.715901][ T4786] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.724816][ T4786] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.733811][ T4786] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.950690][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 60.970822][ T4802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.030644][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 61.040251][ T4808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.141020][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 61.141034][ T29] audit: type=1400 audit(1740316205.348:1410): avc: denied { create } for pid=4818 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.211830][ T29] audit: type=1400 audit(1740316205.388:1411): avc: denied { connect } for pid=4818 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.231502][ T29] audit: type=1400 audit(1740316205.388:1412): avc: denied { write } for pid=4818 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.272112][ T29] audit: type=1400 audit(1740316205.478:1413): avc: denied { mac_admin } for pid=4821 comm="syz.4.330" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.332007][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.339289][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.396433][ T29] audit: type=1400 audit(1740316205.598:1414): avc: denied { unlink } for pid=3296 comm="syz-executor" name="file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 61.437940][ T4833] FAULT_INJECTION: forcing a failure. [ 61.437940][ T4833] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.451142][ T4833] CPU: 1 UID: 0 PID: 4833 Comm: syz.0.333 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 61.451251][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.451266][ T4833] Call Trace: [ 61.451272][ T4833] [ 61.451279][ T4833] dump_stack_lvl+0xf2/0x150 [ 61.451312][ T4833] dump_stack+0x15/0x1a [ 61.451334][ T4833] should_fail_ex+0x24a/0x260 [ 61.451369][ T4833] should_fail+0xb/0x10 [ 61.451427][ T4833] should_fail_usercopy+0x1a/0x20 [ 61.451520][ T4833] strncpy_from_user+0x25/0x210 [ 61.451563][ T4833] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 61.451587][ T4833] ? getname_flags+0x81/0x3b0 [ 61.451626][ T4833] getname_flags+0xb0/0x3b0 [ 61.451659][ T4833] user_path_at+0x26/0x120 [ 61.451703][ T4833] __se_sys_mount+0x24b/0x2d0 [ 61.451780][ T4833] ? fput+0x1c4/0x200 [ 61.451806][ T4833] __x64_sys_mount+0x67/0x80 [ 61.451838][ T4833] x64_sys_call+0x2c84/0x2dc0 [ 61.451866][ T4833] do_syscall_64+0xc9/0x1c0 [ 61.451948][ T4833] ? clear_bhb_loop+0x55/0xb0 [ 61.451980][ T4833] ? clear_bhb_loop+0x55/0xb0 [ 61.452010][ T4833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.452072][ T4833] RIP: 0033:0x7f77a6c2d169 [ 61.452097][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.452118][ T4833] RSP: 002b:00007f77a5297038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.452203][ T4833] RAX: ffffffffffffffda RBX: 00007f77a6e45fa0 RCX: 00007f77a6c2d169 [ 61.452218][ T4833] RDX: 0000000000000000 RSI: 0000400000000440 RDI: 0000000000000000 [ 61.452232][ T4833] RBP: 00007f77a5297090 R08: 0000000000000000 R09: 0000000000000000 [ 61.452246][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.452259][ T4833] R13: 0000000000000000 R14: 00007f77a6e45fa0 R15: 00007ffd52670f98 [ 61.452280][ T4833] [ 61.453905][ T4829] ref_ctr_offset mismatch. inode: 0x1a3 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 61.653456][ T29] audit: type=1400 audit(1740316205.688:1415): avc: denied { create } for pid=4828 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.673193][ T29] audit: type=1400 audit(1740316205.688:1416): avc: denied { setopt } for pid=4828 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.692952][ T29] audit: type=1400 audit(1740316205.798:1417): avc: denied { create } for pid=4828 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.709310][ T4831] ref_ctr_offset mismatch. inode: 0x1a3 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 61.713476][ T29] audit: type=1400 audit(1740316205.798:1418): avc: denied { map } for pid=4828 comm="syz.1.332" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.748583][ T29] audit: type=1400 audit(1740316205.798:1419): avc: denied { read write } for pid=4828 comm="syz.1.332" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.804117][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.827632][ T4822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.867058][ T4839] ref_ctr_offset mismatch. inode: 0x11b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 61.890826][ T4840] ref_ctr_offset mismatch. inode: 0x11b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 61.902096][ T4822] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.911299][ T4822] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.920350][ T4822] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.929311][ T4822] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.019533][ T4842] loop4: detected capacity change from 0 to 128 [ 62.617114][ T4861] ref_ctr_offset mismatch. inode: 0x127 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 62.840438][ T4891] netlink: 172 bytes leftover after parsing attributes in process `syz.3.352'. [ 62.852558][ T4842] 9pnet_fd: p9_fd_create_tcp (4842): problem connecting socket to 127.0.0.1 [ 63.075686][ T4882] ref_ctr_offset mismatch. inode: 0x127 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 63.195565][ T4908] loop1: detected capacity change from 0 to 2048 [ 63.226482][ T4908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.241810][ T4908] FAULT_INJECTION: forcing a failure. [ 63.241810][ T4908] name failslab, interval 1, probability 0, space 0, times 0 [ 63.254482][ T4908] CPU: 0 UID: 0 PID: 4908 Comm: syz.1.359 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 63.254571][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.254584][ T4908] Call Trace: [ 63.254591][ T4908] [ 63.254601][ T4908] dump_stack_lvl+0xf2/0x150 [ 63.254698][ T4908] dump_stack+0x15/0x1a [ 63.254721][ T4908] should_fail_ex+0x24a/0x260 [ 63.254839][ T4908] should_failslab+0x8f/0xb0 [ 63.254879][ T4908] __kmalloc_noprof+0xab/0x3f0 [ 63.254899][ T4908] ? ext4_find_extent+0x172/0x7c0 [ 63.254960][ T4908] ext4_find_extent+0x172/0x7c0 [ 63.254990][ T4908] ext4_ext_map_blocks+0x11f/0x35c0 [ 63.255020][ T4908] ? __list_add_valid_or_report+0x38/0xe0 [ 63.255163][ T4908] ? x86_call_depth_emit_accounting+0xe1/0x2e0 [ 63.255193][ T4908] ? xas_load+0x3ae/0x3d0 [ 63.255220][ T4908] ? xas_load+0x3ae/0x3d0 [ 63.255251][ T4908] ? __rcu_read_unlock+0x4e/0x70 [ 63.255355][ T4908] ? down_read+0x171/0x4b0 [ 63.255389][ T4908] ext4_map_query_blocks+0x71/0x180 [ 63.255424][ T4908] ext4_map_blocks+0x23c/0xd20 [ 63.255457][ T4908] ? __rcu_read_unlock+0x4e/0x70 [ 63.255514][ T4908] ext4_getblk+0x11f/0x530 [ 63.255549][ T4908] ext4_bread_batch+0x5b/0x360 [ 63.255585][ T4908] __ext4_find_entry+0x822/0xef0 [ 63.255621][ T4908] ? d_alloc_parallel+0xbe4/0xc80 [ 63.255674][ T4908] ext4_lookup+0xba/0x390 [ 63.255697][ T4908] __lookup_slow+0x18a/0x250 [ 63.255721][ T4908] lookup_slow+0x3c/0x60 [ 63.255747][ T4908] walk_component+0x1f5/0x230 [ 63.255898][ T4908] ? path_lookupat+0xfd/0x2b0 [ 63.255920][ T4908] path_lookupat+0x10a/0x2b0 [ 63.255944][ T4908] filename_lookup+0x150/0x340 [ 63.255980][ T4908] user_path_at+0x3c/0x120 [ 63.256062][ T4908] __x64_sys_chmod+0x68/0x110 [ 63.256094][ T4908] x64_sys_call+0x1487/0x2dc0 [ 63.256125][ T4908] do_syscall_64+0xc9/0x1c0 [ 63.256162][ T4908] ? clear_bhb_loop+0x55/0xb0 [ 63.256194][ T4908] ? clear_bhb_loop+0x55/0xb0 [ 63.256224][ T4908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.256254][ T4908] RIP: 0033:0x7efdcfc0d169 [ 63.256271][ T4908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.256358][ T4908] RSP: 002b:00007efdce271038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 63.256380][ T4908] RAX: ffffffffffffffda RBX: 00007efdcfe25fa0 RCX: 00007efdcfc0d169 [ 63.256395][ T4908] RDX: 0000000000000000 RSI: 0000000000000038 RDI: 0000400000000200 [ 63.256410][ T4908] RBP: 00007efdce271090 R08: 0000000000000000 R09: 0000000000000000 [ 63.256455][ T4908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.256470][ T4908] R13: 0000000000000000 R14: 00007efdcfe25fa0 R15: 00007ffe7d2b43b8 [ 63.256567][ T4908] [ 63.539108][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.877202][ T4918] syz.3.362: attempt to access beyond end of device [ 63.877202][ T4918] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 63.890030][ T4918] FAT-fs (loop7): unable to read boot sector [ 63.925470][ T4928] loop4: detected capacity change from 0 to 512 [ 63.932224][ T4928] journal_path: Non-blockdev passed as './file2' [ 63.938683][ T4928] EXT4-fs: error: could not find journal device path [ 63.992745][ T4925] ref_ctr_offset mismatch. inode: 0x12e offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 64.356320][ T4938] ref_ctr_offset mismatch. inode: 0x1e5 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 64.380106][ T4944] ref_ctr_offset mismatch. inode: 0x1e5 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 64.425749][ T4951] hub 9-0:1.0: USB hub found [ 64.441567][ T4951] hub 9-0:1.0: 8 ports detected [ 64.496071][ T4946] ref_ctr_offset mismatch. inode: 0x1d8 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 64.521192][ T4949] ref_ctr_offset mismatch. inode: 0x1d8 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 65.013977][ T4968] loop0: detected capacity change from 0 to 128 [ 65.051176][ T4973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.382'. [ 65.442566][ T4981] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.667155][ T4982] bond1 (unregistering): Released all slaves [ 65.890194][ T4986] syz.2.384: attempt to access beyond end of device [ 65.890194][ T4986] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 65.902951][ T4986] FAT-fs (loop5): unable to read boot sector [ 66.195056][ T5010] ref_ctr_offset mismatch. inode: 0x21c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 66.220036][ T5011] ref_ctr_offset mismatch. inode: 0x154 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 66.315444][ T5013] ref_ctr_offset mismatch. inode: 0x21c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 66.634833][ T5024] loop1: detected capacity change from 0 to 128 [ 66.648588][ T5025] loop2: detected capacity change from 0 to 128 [ 67.359688][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 67.359702][ T29] audit: type=1400 audit(1740316211.568:1540): avc: denied { map_read map_write } for pid=5053 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.407937][ T29] audit: type=1400 audit(1740316211.578:1541): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.430034][ T29] audit: type=1400 audit(1740316211.578:1542): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.451850][ T29] audit: type=1400 audit(1740316211.578:1543): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.474242][ T29] audit: type=1400 audit(1740316211.578:1544): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.496876][ T29] audit: type=1400 audit(1740316211.578:1545): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.497488][ T5024] 9pnet_fd: p9_fd_create_tcp (5024): problem connecting socket to 127.0.0.1 [ 67.519673][ T29] audit: type=1400 audit(1740316211.588:1546): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.519751][ T29] audit: type=1400 audit(1740316211.588:1547): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.576782][ T29] audit: type=1400 audit(1740316211.588:1548): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.602458][ T29] audit: type=1400 audit(1740316211.598:1549): avc: denied { prog_load } for pid=5055 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.665155][ T5060] loop1: detected capacity change from 0 to 512 [ 67.681543][ T5062] syz.3.407: attempt to access beyond end of device [ 67.681543][ T5062] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 67.694567][ T5062] FAT-fs (loop7): unable to read boot sector [ 67.774104][ T5060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.874495][ T5060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.905297][ T5075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.916576][ T5060] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.916793][ T5075] bond1 (unregistering): Released all slaves [ 67.979747][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.097958][ T5090] loop1: detected capacity change from 0 to 128 [ 68.124195][ T5092] loop4: detected capacity change from 0 to 128 [ 68.932189][ T5090] 9pnet_fd: p9_fd_create_tcp (5090): problem connecting socket to 127.0.0.1 [ 69.227122][ T5135] ref_ctr_offset mismatch. inode: 0x260 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 69.302770][ T5143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 69.318306][ T5129] ref_ctr_offset mismatch. inode: 0x260 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 69.377588][ T5151] bridge1: entered promiscuous mode [ 69.382866][ T5151] bridge1: entered allmulticast mode [ 69.417127][ T5151] team0: Port device bridge1 added [ 69.911083][ T5207] netlink: 268 bytes leftover after parsing attributes in process `syz.3.444'. [ 70.133610][ T5247] loop1: detected capacity change from 0 to 512 [ 70.162670][ T5247] journal_path: Non-blockdev passed as './file2' [ 70.169083][ T5247] EXT4-fs: error: could not find journal device path [ 70.346635][ T5160] syz.0.438: attempt to access beyond end of device [ 70.346635][ T5160] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 70.369719][ T5160] FAT-fs (loop1): unable to read boot sector [ 70.425305][ T5266] ref_ctr_offset mismatch. inode: 0x282 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 70.522868][ T5267] ref_ctr_offset mismatch. inode: 0x282 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 70.896372][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 70.910116][ T5278] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.303297][ T5294] ref_ctr_offset mismatch. inode: 0x1aa offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 71.326655][ T5292] loop4: detected capacity change from 0 to 512 [ 71.352975][ T5290] ref_ctr_offset mismatch. inode: 0x1aa offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 71.379482][ T5292] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.392697][ T5292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.467078][ T5292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.461: invalid indirect mapped block 4294967295 (level 0) [ 71.506018][ T5292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.461: invalid indirect mapped block 4294967295 (level 1) [ 71.686277][ T5292] EXT4-fs (loop4): 1 orphan inode deleted [ 71.692129][ T5292] EXT4-fs (loop4): 1 truncate cleaned up [ 71.791113][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.941368][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.221811][ T5328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 72.366537][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 72.366553][ T29] audit: type=1400 audit(1740316216.578:1927): avc: denied { read write } for pid=5333 comm="syz.3.475" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.396673][ T5335] bond1 (unregistering): Released all slaves [ 72.401246][ T5338] loop3: detected capacity change from 0 to 128 [ 72.552045][ T29] audit: type=1400 audit(1740316216.608:1928): avc: denied { open } for pid=5333 comm="syz.3.475" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.576292][ T29] audit: type=1400 audit(1740316216.628:1929): avc: denied { shutdown } for pid=5340 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.596089][ T29] audit: type=1400 audit(1740316216.628:1930): avc: denied { name_connect } for pid=5340 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.616258][ T29] audit: type=1400 audit(1740316216.668:1931): avc: denied { mount } for pid=5333 comm="syz.3.475" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 72.638152][ T29] audit: type=1400 audit(1740316216.668:1932): avc: denied { execmem } for pid=5333 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.657388][ T29] audit: type=1400 audit(1740316216.758:1933): avc: denied { audit_write } for pid=5340 comm="syz.2.477" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.678501][ T29] audit: type=1107 audit(1740316216.758:1934): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 72.691972][ T29] audit: type=1400 audit(1740316216.758:1935): avc: denied { accept } for pid=5340 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.714589][ T29] audit: type=1400 audit(1740316216.918:1936): avc: denied { connect } for pid=5333 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.795287][ T5339] ref_ctr_offset mismatch. inode: 0x2a7 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 72.815076][ T5344] ref_ctr_offset mismatch. inode: 0x2a7 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 73.205223][ T5353] ref_ctr_offset mismatch. inode: 0x23a offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 73.264709][ T5365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 73.318241][ T5350] ref_ctr_offset mismatch. inode: 0x23a offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 73.381703][ T5373] loop2: detected capacity change from 0 to 128 [ 74.097095][ T5385] FAULT_INJECTION: forcing a failure. [ 74.097095][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 74.110475][ T5385] CPU: 1 UID: 0 PID: 5385 Comm: syz.1.490 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 74.110499][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.110513][ T5385] Call Trace: [ 74.110521][ T5385] [ 74.110530][ T5385] dump_stack_lvl+0xf2/0x150 [ 74.110577][ T5385] dump_stack+0x15/0x1a [ 74.110596][ T5385] should_fail_ex+0x24a/0x260 [ 74.110631][ T5385] should_failslab+0x8f/0xb0 [ 74.110667][ T5385] kmem_cache_alloc_noprof+0x52/0x320 [ 74.110724][ T5385] ? audit_log_start+0x34c/0x6b0 [ 74.110804][ T5385] audit_log_start+0x34c/0x6b0 [ 74.110843][ T5385] audit_seccomp+0x4b/0x130 [ 74.110878][ T5385] __seccomp_filter+0x6fa/0x1180 [ 74.110917][ T5385] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.110953][ T5385] ? vfs_write+0x644/0x920 [ 74.110979][ T5385] ? __schedule+0x75b/0x990 [ 74.111003][ T5385] __secure_computing+0x9f/0x1c0 [ 74.111069][ T5385] syscall_trace_enter+0xd1/0x1f0 [ 74.111095][ T5385] do_syscall_64+0xaa/0x1c0 [ 74.111122][ T5385] ? clear_bhb_loop+0x55/0xb0 [ 74.111226][ T5385] ? clear_bhb_loop+0x55/0xb0 [ 74.111259][ T5385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.111290][ T5385] RIP: 0033:0x7efdcfc0d169 [ 74.111304][ T5385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.111374][ T5385] RSP: 002b:00007efdce271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.111391][ T5385] RAX: ffffffffffffffda RBX: 00007efdcfe25fa0 RCX: 00007efdcfc0d169 [ 74.111403][ T5385] RDX: 000000000000fc13 RSI: 0000400000000280 RDI: 0000000000000009 [ 74.111415][ T5385] RBP: 00007efdce271090 R08: 0000000000000000 R09: 000000000000002f [ 74.111428][ T5385] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 74.111476][ T5385] R13: 0000000000000000 R14: 00007efdcfe25fa0 R15: 00007ffe7d2b43b8 [ 74.111493][ T5385] [ 74.551772][ T5404] bridge1: entered promiscuous mode [ 74.551793][ T5404] bridge1: entered allmulticast mode [ 74.552686][ T5404] team0: Port device bridge1 added [ 74.575691][ T5412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 74.897899][ T5448] loop4: detected capacity change from 0 to 512 [ 74.939886][ T5448] journal_path: Non-blockdev passed as './file2' [ 74.946495][ T5448] EXT4-fs: error: could not find journal device path [ 75.052625][ T5461] loop0: detected capacity change from 0 to 128 [ 75.194514][ T5396] netlink: 88 bytes leftover after parsing attributes in process `syz.2.493'. [ 75.483052][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'. [ 75.802406][ T5504] bridge2: entered promiscuous mode [ 75.807712][ T5504] bridge2: entered allmulticast mode [ 75.824582][ T5504] team0: Port device bridge2 added [ 75.925198][ T5436] syz.3.499: attempt to access beyond end of device [ 75.925198][ T5436] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 75.966524][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.975727][ T5436] FAT-fs (loop7): unable to read boot sector [ 76.050239][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.129427][ T5526] FAULT_INJECTION: forcing a failure. [ 76.129427][ T5526] name failslab, interval 1, probability 0, space 0, times 0 [ 76.142199][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.0.510 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 76.142229][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.142255][ T5526] Call Trace: [ 76.142285][ T5526] [ 76.142293][ T5526] dump_stack_lvl+0xf2/0x150 [ 76.142373][ T5526] dump_stack+0x15/0x1a [ 76.142398][ T5526] should_fail_ex+0x24a/0x260 [ 76.142466][ T5526] should_failslab+0x8f/0xb0 [ 76.142578][ T5526] __kmalloc_node_noprof+0xad/0x410 [ 76.142623][ T5526] ? __kvmalloc_node_noprof+0x72/0x170 [ 76.142720][ T5526] __kvmalloc_node_noprof+0x72/0x170 [ 76.142753][ T5526] traverse+0x9f/0x3c0 [ 76.142773][ T5526] ? terminate_walk+0x260/0x280 [ 76.142868][ T5526] seq_read_iter+0x854/0x930 [ 76.142896][ T5526] ? _parse_integer+0x27/0x30 [ 76.142927][ T5526] seq_read+0x1ed/0x230 [ 76.143015][ T5526] ? __pfx_seq_read+0x10/0x10 [ 76.143039][ T5526] proc_reg_read+0x13f/0x1d0 [ 76.143081][ T5526] vfs_readv+0x3e2/0x660 [ 76.143143][ T5526] ? __pfx_proc_reg_read+0x10/0x10 [ 76.143194][ T5526] __x64_sys_preadv+0xf4/0x1c0 [ 76.143236][ T5526] x64_sys_call+0x2680/0x2dc0 [ 76.143311][ T5526] do_syscall_64+0xc9/0x1c0 [ 76.143429][ T5526] ? clear_bhb_loop+0x55/0xb0 [ 76.143463][ T5526] ? clear_bhb_loop+0x55/0xb0 [ 76.143491][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.143593][ T5526] RIP: 0033:0x7f77a6c2d169 [ 76.143611][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.143632][ T5526] RSP: 002b:00007f77a5297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 76.143654][ T5526] RAX: ffffffffffffffda RBX: 00007f77a6e45fa0 RCX: 00007f77a6c2d169 [ 76.143679][ T5526] RDX: 0000000000000001 RSI: 0000400000000000 RDI: 0000000000000009 [ 76.143694][ T5526] RBP: 00007f77a5297090 R08: 0000000000000000 R09: 0000000000000000 [ 76.143748][ T5526] R10: 000000000000004c R11: 0000000000000246 R12: 0000000000000001 [ 76.143759][ T5526] R13: 0000000000000000 R14: 00007f77a6e45fa0 R15: 00007ffd52670f98 [ 76.143777][ T5526] [ 76.353507][ T5501] netlink: 88 bytes leftover after parsing attributes in process `syz.2.506'. [ 76.592330][ T5597] veth0_to_bond: entered promiscuous mode [ 76.659449][ T5600] bridge3: entered promiscuous mode [ 76.664784][ T5600] bridge3: entered allmulticast mode [ 76.672334][ T5600] team0: Port device bridge3 added [ 76.678852][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 76.696837][ T5605] veth0_to_bond (unregistering): left promiscuous mode [ 76.714107][ T5605] bond0: (slave bond_slave_0): Releasing backup interface [ 77.012346][ T5632] loop1: detected capacity change from 0 to 512 [ 77.030319][ T5632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.085312][ T5632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.128571][ T5648] loop0: detected capacity change from 0 to 128 [ 77.145183][ T5632] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.291078][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.315741][ T5654] ref_ctr_offset mismatch. inode: 0x25c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 77.384833][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 77.384852][ T29] audit: type=1400 audit(1740316221.588:2077): avc: denied { create } for pid=5646 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.410729][ T29] audit: type=1400 audit(1740316221.588:2078): avc: denied { connect } for pid=5646 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.430356][ T29] audit: type=1400 audit(1740316221.588:2079): avc: denied { write } for pid=5646 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.449778][ T29] audit: type=1400 audit(1740316221.588:2080): avc: denied { getopt } for pid=5646 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.477708][ T5645] ref_ctr_offset mismatch. inode: 0x25c offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 77.489692][ T5598] netlink: 88 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.722527][ T5690] loop2: detected capacity change from 0 to 128 [ 77.780645][ T29] audit: type=1400 audit(1740316221.928:2081): avc: denied { create } for pid=5688 comm="syz.1.526" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.801902][ T29] audit: type=1400 audit(1740316221.978:2082): avc: denied { map } for pid=5688 comm="syz.1.526" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.826050][ T29] audit: type=1400 audit(1740316221.978:2083): avc: denied { read write } for pid=5688 comm="syz.1.526" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.866005][ T29] audit: type=1400 audit(1740316222.078:2084): avc: denied { create } for pid=5688 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.886648][ T29] audit: type=1400 audit(1740316222.078:2085): avc: denied { write } for pid=5688 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.907539][ T29] audit: type=1400 audit(1740316222.078:2086): avc: denied { read } for pid=5688 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.297557][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 78.462072][ T5711] loop4: detected capacity change from 0 to 512 [ 78.655208][ T5711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.691760][ T5711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.741598][ T5711] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.753149][ T5722] loop1: detected capacity change from 0 to 128 [ 78.774811][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 78.839547][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.917283][ T5742] ref_ctr_offset mismatch. inode: 0x27b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 78.935439][ T5739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21071 sclass=netlink_route_socket pid=5739 comm=syz.4.539 [ 78.947224][ T5732] ref_ctr_offset mismatch. inode: 0x27b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 78.952833][ T5735] bridge2: entered promiscuous mode [ 78.964359][ T5735] bridge2: entered allmulticast mode [ 78.983216][ T5735] team0: Port device bridge2 added [ 79.055752][ T5754] netlink: 88 bytes leftover after parsing attributes in process `syz.3.536'. [ 79.059139][ T5754] bridge3: entered promiscuous mode [ 79.059222][ T5754] bridge3: entered allmulticast mode [ 79.060254][ T5754] team0: Port device bridge3 added [ 79.377002][ T5779] ref_ctr_offset mismatch. inode: 0x2e8 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 79.397353][ T5780] ref_ctr_offset mismatch. inode: 0x2e8 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 79.439881][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 79.576615][ T5722] 9pnet_fd: p9_fd_create_tcp (5722): problem connecting socket to 127.0.0.1 [ 79.714964][ T5829] __nla_validate_parse: 1 callbacks suppressed [ 79.714978][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 79.758716][ T5835] bond1 (unregistering): Released all slaves [ 79.890675][ T5846] $Hÿ: renamed from bond0 [ 79.926341][ T5846] $Hÿ: entered promiscuous mode [ 79.931421][ T5846] bond_slave_1: entered promiscuous mode [ 79.938680][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 80.056012][ T5855] syz.2.553: attempt to access beyond end of device [ 80.056012][ T5855] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.068868][ T5855] FAT-fs (loop5): unable to read boot sector [ 80.082100][ T5832] syz.0.551: attempt to access beyond end of device [ 80.082100][ T5832] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 80.114822][ T5832] FAT-fs (loop1): unable to read boot sector [ 80.317153][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.356325][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.402852][ T5869] loop0: detected capacity change from 0 to 512 [ 80.446226][ T5869] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.463073][ T5886] bridge4: entered promiscuous mode [ 80.468500][ T5886] bridge4: entered allmulticast mode [ 80.488572][ T5886] team0: Port device bridge4 added [ 80.497828][ T5869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 80.509118][ T5869] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.562: corrupted in-inode xattr: e_value size too large [ 80.531550][ T5869] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.562: couldn't read orphan inode 15 (err -117) [ 80.553977][ T5869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.572091][ T5869] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 80.810011][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 81.083368][ T5957] FAULT_INJECTION: forcing a failure. [ 81.083368][ T5957] name failslab, interval 1, probability 0, space 0, times 0 [ 81.096304][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.1.572 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 81.096328][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.096339][ T5957] Call Trace: [ 81.096344][ T5957] [ 81.096351][ T5957] dump_stack_lvl+0xf2/0x150 [ 81.096382][ T5957] dump_stack+0x15/0x1a [ 81.096407][ T5957] should_fail_ex+0x24a/0x260 [ 81.096445][ T5957] should_failslab+0x8f/0xb0 [ 81.096500][ T5957] kmem_cache_alloc_node_noprof+0x59/0x320 [ 81.096565][ T5957] ? alloc_vmap_area+0x1e1/0x1830 [ 81.096598][ T5957] alloc_vmap_area+0x1e1/0x1830 [ 81.096678][ T5957] ? should_fail_ex+0xd7/0x260 [ 81.096710][ T5957] ? should_failslab+0x8f/0xb0 [ 81.096744][ T5957] ? __kmalloc_cache_node_noprof+0x18c/0x320 [ 81.096855][ T5957] __get_vm_area_node+0x162/0x1c0 [ 81.096886][ T5957] __vmalloc_node_range_noprof+0x280/0xe70 [ 81.096926][ T5957] ? copy_process+0x3a9/0x1f50 [ 81.096958][ T5957] ? mod_objcg_state+0x3a7/0x4f0 [ 81.097014][ T5957] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 81.097125][ T5957] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 81.097198][ T5957] dup_task_struct+0x4a2/0x710 [ 81.097232][ T5957] ? copy_process+0x3a9/0x1f50 [ 81.097281][ T5957] ? kstrtoull+0x110/0x140 [ 81.097308][ T5957] copy_process+0x3a9/0x1f50 [ 81.097343][ T5957] ? bpf_get_stack_raw_tp+0xfe/0x140 [ 81.097374][ T5957] ? 0xffffffff81000000 [ 81.097426][ T5957] ? selinux_file_permission+0x22a/0x360 [ 81.097468][ T5957] kernel_clone+0x167/0x5e0 [ 81.097554][ T5957] ? vfs_write+0x644/0x920 [ 81.097588][ T5957] __x64_sys_clone+0xe7/0x120 [ 81.097634][ T5957] x64_sys_call+0x2d7e/0x2dc0 [ 81.097667][ T5957] do_syscall_64+0xc9/0x1c0 [ 81.097785][ T5957] ? clear_bhb_loop+0x55/0xb0 [ 81.097819][ T5957] ? clear_bhb_loop+0x55/0xb0 [ 81.097850][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.097882][ T5957] RIP: 0033:0x7efdcfc0d169 [ 81.097978][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.098000][ T5957] RSP: 002b:00007efdce270fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.098021][ T5957] RAX: ffffffffffffffda RBX: 00007efdcfe25fa0 RCX: 00007efdcfc0d169 [ 81.098033][ T5957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 81.098047][ T5957] RBP: 00007efdce271090 R08: 0000000000000000 R09: 0000000000000000 [ 81.098061][ T5957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 81.098133][ T5957] R13: 0000000000000000 R14: 00007efdcfe25fa0 R15: 00007ffe7d2b43b8 [ 81.098152][ T5957] [ 81.098161][ T5957] syz.1.572: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 81.356129][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.1.572 Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 81.356154][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.356166][ T5957] Call Trace: [ 81.356171][ T5957] [ 81.356178][ T5957] dump_stack_lvl+0xf2/0x150 [ 81.356301][ T5957] dump_stack+0x15/0x1a [ 81.356326][ T5957] warn_alloc+0x145/0x1b0 [ 81.356362][ T5957] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 81.356395][ T5957] ? mod_objcg_state+0x3a7/0x4f0 [ 81.356425][ T5957] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 81.356504][ T5957] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 81.356591][ T5957] dup_task_struct+0x4a2/0x710 [ 81.356624][ T5957] ? copy_process+0x3a9/0x1f50 [ 81.356657][ T5957] ? kstrtoull+0x110/0x140 [ 81.356686][ T5957] copy_process+0x3a9/0x1f50 [ 81.356719][ T5957] ? bpf_get_stack_raw_tp+0xfe/0x140 [ 81.356789][ T5957] ? 0xffffffff81000000 [ 81.356804][ T5957] ? selinux_file_permission+0x22a/0x360 [ 81.356845][ T5957] kernel_clone+0x167/0x5e0 [ 81.356879][ T5957] ? vfs_write+0x644/0x920 [ 81.356917][ T5957] __x64_sys_clone+0xe7/0x120 [ 81.356958][ T5957] x64_sys_call+0x2d7e/0x2dc0 [ 81.356989][ T5957] do_syscall_64+0xc9/0x1c0 [ 81.357025][ T5957] ? clear_bhb_loop+0x55/0xb0 [ 81.357128][ T5957] ? clear_bhb_loop+0x55/0xb0 [ 81.357159][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.357192][ T5957] RIP: 0033:0x7efdcfc0d169 [ 81.357208][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.357229][ T5957] RSP: 002b:00007efdce270fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.357251][ T5957] RAX: ffffffffffffffda RBX: 00007efdcfe25fa0 RCX: 00007efdcfc0d169 [ 81.357299][ T5957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 81.357314][ T5957] RBP: 00007efdce271090 R08: 0000000000000000 R09: 0000000000000000 [ 81.357328][ T5957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 81.357342][ T5957] R13: 0000000000000000 R14: 00007efdcfe25fa0 R15: 00007ffe7d2b43b8 [ 81.357363][ T5957] [ 81.357371][ T5957] Mem-Info: [ 81.408941][ T5874] netlink: 88 bytes leftover after parsing attributes in process `syz.4.560'. [ 81.411453][ T5957] active_anon:11162 inactive_anon:21 isolated_anon:0 [ 81.411453][ T5957] active_file:24792 inactive_file:2077 isolated_file:0 [ 81.411453][ T5957] unevictable:0 dirty:125 writeback:0 [ 81.411453][ T5957] slab_reclaimable:2845 slab_unreclaimable:13690 [ 81.411453][ T5957] mapped:29768 shmem:6902 pagetables:1133 [ 81.411453][ T5957] sec_pagetables:0 bounce:0 [ 81.411453][ T5957] kernel_misc_reclaimable:0 [ 81.411453][ T5957] free:1840271 free_pcp:46082 free_cma:0 [ 81.639870][ T5957] Node 0 active_anon:36568kB inactive_anon:76kB active_file:99168kB inactive_file:8308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118976kB dirty:472kB writeback:0kB shmem:19544kB writeback_tmp:0kB kernel_stack:3360kB pagetables:5488kB sec_pagetables:0kB all_unreclaimable? no [ 81.667870][ T5957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.694883][ T5957] lowmem_reserve[]: 0 2885 7863 0 [ 81.700054][ T5957] Node 0 DMA32 free:2950848kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 81.728798][ T5957] lowmem_reserve[]: 0 0 4978 0 [ 81.733719][ T5957] Node 0 Normal free:4415828kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:28564kB inactive_anon:76kB active_file:99168kB inactive_file:8308kB unevictable:0kB writepending:472kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:173808kB local_pcp:87136kB free_cma:0kB [ 81.764308][ T5957] lowmem_reserve[]: 0 0 0 0 [ 81.768923][ T5957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.781694][ T5957] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950848kB [ 81.798056][ T5957] Node 0 Normal: 2561*4kB (UM) 2562*8kB (UME) 1801*16kB (UME) 1146*32kB (UME) 951*64kB (UME) 295*128kB (UME) 131*256kB (UME) 42*512kB (UME) 23*1024kB (UME) 36*2048kB (UME) 995*4096kB (UM) = 4422692kB [ 81.817915][ T5957] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 81.827266][ T5957] 27231 total pagecache pages [ 81.831998][ T5957] 0 pages in swap cache [ 81.836213][ T5957] Free swap = 124912kB [ 81.840370][ T5957] Total swap = 124996kB [ 81.844516][ T5957] 2097051 pages RAM [ 81.848337][ T5957] 0 pages HighMem/MovableOnly [ 81.853520][ T5957] 80064 pages reserved [ 81.954245][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 82.073265][ T6014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.081556][ T6014] bond0: (slave bond1): Enslaving as an active interface with an up link [ 82.131642][ T6021] syz.2.578: attempt to access beyond end of device [ 82.131642][ T6021] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 82.144561][ T6021] FAT-fs (loop5): unable to read boot sector [ 82.293853][ T6024] ref_ctr_offset mismatch. inode: 0x30f offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 82.311150][ T6031] ref_ctr_offset mismatch. inode: 0x30f offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 82.397709][ T3305] ================================================================== [ 82.405846][ T3305] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 82.413772][ T3305] [ 82.416143][ T3305] read-write to 0xffff888118ae2810 of 8 bytes by task 6020 on cpu 1: [ 82.424231][ T3305] shmem_add_to_page_cache+0x3b9/0x4b0 [ 82.429711][ T3305] shmem_get_folio_gfp+0x4f6/0xd90 [ 82.434867][ T3305] shmem_write_begin+0xa2/0x180 [ 82.439749][ T3305] generic_perform_write+0x1a8/0x4a0 [ 82.445072][ T3305] shmem_file_write_iter+0xc2/0xe0 [ 82.450214][ T3305] __kernel_write_iter+0x247/0x4c0 [ 82.455361][ T3305] dump_user_range+0x3ac/0x550 [ 82.460157][ T3305] elf_core_dump+0x1d17/0x1ea0 [ 82.464953][ T3305] do_coredump+0x17fe/0x1f40 [ 82.469596][ T3305] get_signal+0xd4f/0x1000 [ 82.474121][ T3305] arch_do_signal_or_restart+0x95/0x4b0 [ 82.479710][ T3305] irqentry_exit_to_user_mode+0xa7/0x120 [ 82.485378][ T3305] irqentry_exit+0x12/0x50 [ 82.489833][ T3305] asm_exc_page_fault+0x26/0x30 [ 82.494722][ T3305] [ 82.497055][ T3305] read to 0xffff888118ae2810 of 8 bytes by task 3305 on cpu 0: [ 82.504607][ T3305] shmem_getattr+0x69/0x200 [ 82.509159][ T3305] vfs_getattr+0x172/0x1b0 [ 82.513621][ T3305] vfs_statx+0x12d/0x320 [ 82.517945][ T3305] vfs_fstatat+0xe4/0x130 [ 82.522313][ T3305] __se_sys_newfstatat+0x58/0x260 [ 82.527357][ T3305] __x64_sys_newfstatat+0x55/0x70 [ 82.532476][ T3305] x64_sys_call+0x236d/0x2dc0 [ 82.537204][ T3305] do_syscall_64+0xc9/0x1c0 [ 82.541745][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.547670][ T3305] [ 82.550021][ T3305] value changed: 0x0000000000001eb2 -> 0x0000000000001eb5 [ 82.557143][ T3305] [ 82.559481][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 82.565649][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00295-g27102b38b8ca #0 [ 82.576954][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.587035][ T3305] ================================================================== [ 82.613738][ T6036] loop4: detected capacity change from 0 to 512 [ 82.623729][ T6036] journal_path: Non-blockdev passed as './file2' [ 82.630175][ T6036] EXT4-fs: error: could not find journal device path [ 83.325745][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 83.325853][ T29] audit: type=1400 audit(1740316227.538:2316): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.326726][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.