last executing test programs:

7m4.35481955s ago: executing program 1 (id=2):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x819}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x930}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x77, 0x5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

7m4.012993395s ago: executing program 1 (id=12):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)

7m1.939334646s ago: executing program 1 (id=24):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x819}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x930}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x77, 0x5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

7m1.934867296s ago: executing program 32 (id=24):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x819}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x930}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x77, 0x5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

7m1.764736559s ago: executing program 3 (id=26):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x9f, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

7m1.67893844s ago: executing program 3 (id=27):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
truncate(&(0x7f00000001c0)='./file0/file0\x00', 0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42908}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYBLOB="a7f910f34c4f49bae9978b3511fcbaafe0d86e051b440811bc3150b9cee365ed65ded6c3ac52a4b61e79921f44177a31c736d0314d929299c2916e76a2657664f9d26eceb02aa8d50270afdda084b63eb7103656239f317cc9e6db2bab3c7bb61a955e6e0cc694f763633e5ee3bdfe58aa26a97d2c31d434819b27916246c5627810e5e969665588ba44d92fd99fa12023da3c04b60a844b792ca33fae04fb231375bb12ef491f8d732ae071c7d67f9c7b45e183805aa348859b52ea26f397ad2f06268988dc2be57c7979c07f4fdb80ee4f11db715845d92ad5d685b4a7c7c8b541dc2d17be96df94", @ANYBLOB="000000000000000014001280090001207663616e000000000400028008000a"], 0x3c}, 0x1, 0x0, 0x0, 0x24000840}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x332b, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x2, {0x1, 0xff, 0x3}, 0xfe}, 0x18)
sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f00000003c0)="de8177420508f60198a16b573c57c7f47f21c94e2106764badc5cb32bbd67b66d496aedbbe7cf673d24cca1dbd5653d208d2431c1fb86a3e758dc50b1d174354bf26b5", 0x43}], 0x2}}], 0x1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x7200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)={0x14, r4, 0x1}, 0x14}}, 0x0)

7m0.004142475s ago: executing program 3 (id=36):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, 0x0, 0x20004080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x19, &(0x7f0000000780)=@raw=[@map_fd={0x18, 0x9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5be6ad16}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0xb2}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x7, 0xa, 0x80, 0x1}, @map_idx={0x18, 0x7}], &(0x7f0000000980)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0xf, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[0xffffffffffffffff], &(0x7f0000000d40)=[{0x1, 0x5, 0xd, 0x7}], 0x10, 0xd, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000ed8e25b0997bb6e82238d4c5144cbf86669044511f7a0fedb929e5910eeb7bb3906b0d48d0bd550c46b850aa33dbfeed5890d3965e893bdd"], 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020007000000000000010000000900010073797a300000000040000000160a01000000000000d48707de0000000900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a31000000000900000073797a30000000001c000380180003801400010076657468315f746f5f626f6e64000000140000001000010000000000000000000000000a"], 0xd0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x12a0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000200)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r10, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)

6m59.918454556s ago: executing program 3 (id=37):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1], 0x30}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x819}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x930}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x77, 0x5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

6m59.627165291s ago: executing program 3 (id=38):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28)
sendto$inet6(r2, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd24998a40", 0x18, 0x4000, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

6m58.952055691s ago: executing program 3 (id=41):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28)
sendto$inet6(r2, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd24998a40", 0x18, 0x4000, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

6m58.912271381s ago: executing program 33 (id=41):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28)
sendto$inet6(r2, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd24998a40", 0x18, 0x4000, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

6m41.860890607s ago: executing program 5 (id=277):
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x14)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
acct(0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10)
removexattr(0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/67)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='sys_enter\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], <r5=>0x0, 0xbc, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000640)=[{&(0x7f0000000c80)=""/4105, 0x1009}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x85, 0x5, 0x8})

6m41.764314489s ago: executing program 5 (id=279):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)

6m41.741056669s ago: executing program 5 (id=280):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, 0x0)
r2 = eventfd2(0x9, 0x0)
io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
io_destroy(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xaa75fbb4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x7, 0xf7, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16c0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
io_uring_setup(0x4dd0, &(0x7f0000000580)={0x0, 0x1670, 0x0, 0x0, 0x3d3})
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0)

6m41.714984489s ago: executing program 5 (id=282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x819}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x930}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4d0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x77, 0x5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

6m41.552785441s ago: executing program 5 (id=285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380"], 0x150}}, 0x0)

6m41.084347318s ago: executing program 5 (id=290):
statx(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x800, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@resuid={'resuid', 0x3d, r0}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
r3 = socket(0x11, 0x800000003, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004d9000000000094f60000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = memfd_create(0x0, 0x5)
fsetxattr$security_selinux(r5, &(0x7f0000000480), 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nombcache}, {@abort}, {@mblk_io_submit}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001bc0)={0x0, 0x100000000})
setgroups(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
openat(r10, &(0x7f0000000340)='.\x00', 0x0, 0x0)

6m41.065853529s ago: executing program 34 (id=290):
statx(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x800, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@resuid={'resuid', 0x3d, r0}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
r3 = socket(0x11, 0x800000003, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004d9000000000094f60000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = memfd_create(0x0, 0x5)
fsetxattr$security_selinux(r5, &(0x7f0000000480), 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@nombcache}, {@abort}, {@mblk_io_submit}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001bc0)={0x0, 0x100000000})
setgroups(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
openat(r10, &(0x7f0000000340)='.\x00', 0x0, 0x0)

5m28.604910924s ago: executing program 6 (id=1722):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

5m28.558904054s ago: executing program 6 (id=1725):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0xee05, 0x11000000}, 0x0)

5m28.491656795s ago: executing program 6 (id=1728):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, 0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

5m28.372426137s ago: executing program 6 (id=1735):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r5}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r3, 0x0, r6, 0x0, 0x88000cc, 0x0)
write$eventfd(r4, &(0x7f0000000240), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfef8, 0x0, 0x43, 0x0, 0x8}, 0x0, 0x0, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_process_fork\x00', r7, 0x0, 0x7}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000400)={<r8=>0x0, 0x24, "ef753408b22143d299c5ab46ecbda8f740ef4dd04bfe9e93dbacd10c998462f4cbc54bb4"}, &(0x7f0000000540)=0x2c)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000600)={r8, 0x20, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}]}, &(0x7f0000000640)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='ext4_read_block_bitmap_load\x00', r1, 0x0, 0x8}, 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
setrlimit(0x9, 0x0)
io_setup(0x2004, &(0x7f0000000680))
syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5m28.092555271s ago: executing program 6 (id=1743):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0)

5m27.715429227s ago: executing program 6 (id=1754):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0x1f, {"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", 0x1010}}, 0x1b7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_access(0xffffffffffffffff, 0x0, 0x56)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
unshare(0x60000480)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
close_range(r2, 0xffffffffffffffff, 0x0)

5m27.695406197s ago: executing program 35 (id=1754):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0x1f, {"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", 0x1010}}, 0x1b7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_access(0xffffffffffffffff, 0x0, 0x56)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
unshare(0x60000480)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
close_range(r2, 0xffffffffffffffff, 0x0)

35.403014383s ago: executing program 8 (id=6016):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000"], 0x140}}, 0x0)

35.360875314s ago: executing program 8 (id=6017):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000000, 0xffffff6a)
r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x45, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0)
socket(0x2, 0x80805, 0x0)

34.179188422s ago: executing program 8 (id=6026):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0xa6, &(0x7f0000008000/0x2000)=nil, 0x2)

34.108341603s ago: executing program 8 (id=6028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3000404, &(0x7f00000000c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4090, 0xffa}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r4}, 0x10)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

33.739350788s ago: executing program 8 (id=6034):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x80000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000900000000000000002000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x18)
gettid()
timer_create(0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

33.288352745s ago: executing program 8 (id=6035):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

33.249117185s ago: executing program 36 (id=6035):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

3.904901127s ago: executing program 2 (id=6421):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
lseek(0xffffffffffffffff, 0x4, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0)

3.683021711s ago: executing program 9 (id=6425):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
memfd_create(&(0x7f0000000040)='[\x05\x134*RG\\m\xdf\xef\x04_\x80\xb0;\xb9N\xeb\x83\x90\x95R\x1d\xa0r+se\x80\xf6\xef\xa8\x88{\xa6\x1dgf\xcfz\xd2\xa6LaP\t\x8c\xaf\xee\x903\x8d=\x97\x8b\x02\x88\x11f\xc3Kn\xed^\x98 \xab\xa4 (B\xd1\x01\x85e\xc3\xbc\xf3O\xd4\xb6\xc6', 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000004000085000000860000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
unshare(0x64000600)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)={0x0, r7})
futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000800650000000000000018000000000000000000000000000000950000000000000074030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$igmp(0x2, 0x3, 0x2)

2.185477145s ago: executing program 7 (id=6428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0xa6, &(0x7f0000008000/0x2000)=nil, 0x2)

2.146408836s ago: executing program 7 (id=6430):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x1, 0x840)

2.092906546s ago: executing program 0 (id=6432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000080)={0x196c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8b8, 0x111, 0x0, 0x1, {0x8b4, 0x5, 0x0, 0x1, [{0x1e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfa6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2c1c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x6cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x238, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x220, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x107c, 0x111, 0x0, 0x1, {0x1078, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x20c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x29b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdffe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x150, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x41}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3ee94e52234c5044}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x6e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1b2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x54c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x170, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x196c}, 0x1, 0x0, 0x0, 0xc00}, 0x8005)
r2 = signalfd4(r0, &(0x7f0000001a80)={[0x86ea]}, 0x8, 0x80000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa52}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x30000080)
pipe2$watch_queue(&(0x7f0000001c00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000001c40)=0x200, 0x4) (async)
setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000001c40)=0x200, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c80)={'sit0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, r3, 0x20, 0x70bd27, 0x3, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x330c0898}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x457}]}, 0x54}, 0x1, 0x0, 0x0, 0x808}, 0x4c800)
fsopen(&(0x7f0000001e00)='hfs\x00', 0x1) (async)
r9 = fsopen(&(0x7f0000001e00)='hfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0)
write$P9_RUNLINKAT(r5, &(0x7f0000001e40)={0x7, 0x4d, 0x1}, 0x7)
socket$key(0xf, 0x3, 0x2)
readlinkat(r2, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=""/29, 0x1d) (async)
readlinkat(r2, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=""/29, 0x1d)
r10 = syz_open_procfs(0x0, &(0x7f0000001f40)='io\x00')
syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002040)={r4, &(0x7f0000001f80)="063f51bae0f8275a59ec745f44fe3a6fc74d8e275a37f057ab7c7657", &(0x7f0000001fc0)=""/108}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002040)={r4, &(0x7f0000001f80)="063f51bae0f8275a59ec745f44fe3a6fc74d8e275a37f057ab7c7657", &(0x7f0000001fc0)=""/108}, 0x20)
bind$inet6(r5, &(0x7f0000002080)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7e8ef273}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000020c0)={0x8, 'macsec0\x00', {'wlan1\x00'}, 0x7}) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000020c0)={0x8, 'macsec0\x00', {'wlan1\x00'}, 0x7})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000002100)=0x4, 0x4)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000002140)={'bond_slave_0\x00', {0x2, 0x4e24, @multicast1}}) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000002140)={'bond_slave_0\x00', {0x2, 0x4e24, @multicast1}})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002200)={'pimreg1\x00', &(0x7f0000002180)=@ethtool_test={0x1a, 0x3, 0x6, 0x9, [0xe7, 0x65dd087e, 0xffffffff80000001, 0x3, 0x6, 0x8, 0x8001, 0x7ff, 0x3]}}) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002200)={'pimreg1\x00', &(0x7f0000002180)=@ethtool_test={0x1a, 0x3, 0x6, 0x9, [0xe7, 0x65dd087e, 0xffffffff80000001, 0x3, 0x6, 0x8, 0x8001, 0x7ff, 0x3]}})
bpf$MAP_CREATE(0x0, &(0x7f0000002240)=@base={0x1d, 0x7, 0x7fff, 0x9, 0x60, r2, 0x4e, '\x00', r7, r6, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
renameat2(0xffffffffffffffff, &(0x7f0000002340)='./file0\x00', r10, &(0x7f0000002380)='./file0/file0\x00', 0x0)

2.091926456s ago: executing program 7 (id=6433):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10000000}, 0x800, 0xc8, 0xffff, 0x7, 0xf9, 0xfffffffc, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40480e0}, 0x20008014)
socket$inet(0x2, 0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r6 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
pipe2$9p(&(0x7f0000000040), 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)

1.933714239s ago: executing program 2 (id=6436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x0, 0x82, 0x1e)
r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000d00)=ANY=[@ANYBLOB='overriderockperm,nocompress,hide,session=0x000000000000005a,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x544, &(0x7f0000001000)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000030000000000000000000096109bd86aaa787113f9a3916e2d0cf8bdd1c025e48e2798b84276f5f06f5342c3ae28537a077da42163e583b390e5d2ef1169070663c399ccba55fc1f3c4cc575de61a781a39b116785db80b1c089dfdde853db1f8b77c300a30d187ac98c202692f070dd910b023627ba9d5f928e549e52547c8bcfc6f3e23ff18238945437f892c9f666ff1f704b916689bb13fbfaf981faaeb31a24be5ddbdfb62ceb5c71520a492287593aa095ec4ebdb12a3810d3f2560b5f0f86871707176d8bc8119b2ea50d960a0d7efeabbace56b282528f665e2b73ecea35714cb8bd92d4"], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="31a806dc791516a452a391d78b564405e52f9fbbd61bb59ae4a54a8f4a067e3e84f6391703ad4d24f50eb7a6a840fd4742c6b4bbb394c7dec569434eecb6200e23d8cccfd4e1cd87c5afe3ce8295a2c4f0d1b88243f2cb4d9cf2cf1d7b0c8489cc0702ff49699769a9dcc8eba57426a6971b03decdb674dc868e735bdf7b1f94c4900a7f3e58a43c841a90ab6cf9c139cd6dd378fb46903f21aa2c31379f4296c8f1320afb7e50df072f89e1ea924fd6a23c3b73f366e13a6b4ae45a5e13fc52ca4f176022be9be2a6", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
openat(r2, &(0x7f0000000240)='./file0\x00', 0x140, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0400000000000000000000ac1414aa000000008251835d157f000000001400020002000000ca10140600000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="759f8bddf7467dfceb37fef664e54aad668543893f3c26c3dc0271c7cfb2ec82d2e0caff180801105c0a2be162139b044cc5eb85a99194a2c719f510221a58082fb6b2ff396fbbd127fe", 0x4a}, {&(0x7f0000000200)="18c1bee962649e8bd1afb52557a90443352c3913de052302f6bf62f3c43102b4440e9fadd9e076c807aa2550fb7a30f485d1a5e776ea9c5535d8bcbc106617f7b53cbd1c905b66a417a94ae1ef7da8fdfc947c5945b038ef715c0bbf2828b922d361", 0x62}, {&(0x7f0000000000)="53a85d4086d9a069805f76322fa9467e25a9b530201ece5415b0e97aee13459341764a63c2e06f", 0x27}, {&(0x7f0000000380)="3f49b14dd32205715aeec2652b1e7bd445404850d8f0f3c70a6b92befa8f809f3c6acbc61d7e965c789f79d605810494c51f92e1969d01cb533e65e92dce6fbce36d55bdeb8e06deb3b29db1e29459cd56e57bc927ffa73bb54bef54351613904e19eaea21891bc8970edba26ecb04dbeb332c", 0x73}, {&(0x7f0000000400)="3794f266b7b1dc034927c601950ca9437032f68283205f3ca30b68796820bd926931f9304723000ec6f7b918bea5295efcce3f22db865c78285deba9ab8c09ce34d6eb0da3fa93636148058c40e7453307a82016ec5bdd54a849711da9dd52844ad4f86c8c9dabf6447ac30da2d3c7198b10b7b389b4ee7354d8a422c0d6e3420bb77a3ea7abbee9287ee720d90e44fb967f58ed49e765c0feb0cc7d0b91dd22cd40752d757f2cdabbf261d2d4e8f291571fc2f8", 0xb4}, {&(0x7f00000004c0)="0242870e891bc8c66ce4b38a664e689c07b1821e5d59b9e47b579d5d380dcb2af95aad6b222d05c8cf1e44fe6b4268587ea39e6383747d56b84be5b0121151d11e094e4d40fd6265fdef93b32fb8bd", 0x4f}, {&(0x7f0000000540)="c9a6047da1f50c922fdb7063a2e9daf9ae0d11aefc92ecccb06e1c456022d10373be55fb3a0087928139fa41a42e2cf0280b551d0b6a14e3a65fd3c4a39f52884a7844b2db42bccd6e45a6dfcbf9fd63c361c74b2a4aa9d1927ad0cb12b386", 0x5f}], 0x7, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x10}}], 0xd8}, 0x40)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f00000002c0)={[{@sysvgroups}, {@data_err_abort}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@lazytime}, {@acl}, {@data_writeback}, {@resuid}, {@i_version}, {@mblk_io_submit}]}, 0x6, 0x50d, &(0x7f00000006c0)="$eJzs3U1vI3cZAPBnHLubbQNOWw6lEtvQF2URrJM0fYk4lEbi5VQJUe7ZkDhRFCdeJU67iVaQfgIQqgCJC5y4IPEBkFA/AkKqBDcOnEAVZOmBCzIae9xNHDs4Wsezm/x+0mT+8//Hfp7HiSfzFk8AV9ZURLwdEWMR8UpElLP+QjbFYXtKv+/+0b2VdEqi2Xz3n0kkWV/3cz6VPSz1ve9E/CA5HXd3/2BzuVar7pzsPri1sbW8Xl2vbs/Pz72x8ObC6wuzA1aSFM8afToi3vrmpz/78W++/dYfvvb+35b+cfOHaVq3s/FedQxDu/RSjJ9YvjzS35tiq0IAAB4Hz0bEMxHxYkR8JcoxFmduRgMAAACPoeY3Jq51mgAAAMDlVIiIiUgKlex634koFCqV9jW8X4gnC7X6buOra/W97dV0LGIySoW1jVp1NrtWeDJKSbo812o/WH61a3k+uwb3w/L1dLk1BgAAAIzGYtf+/6fl9v4/AAAAcMn0Phk/NvI8AAAAgIvjYnwAAAC4/Oz/AwAAwKX23XfeSafm/aN7rfsArL63v7dZf+/WanV3s7K1t1JZqe/cqazX6+u1amWA/wio1et3XovtvbszjeJuY2Z3/2Bpq7633Vhq3dd7qfrMCGoCAAAATnr6hY/+kkTE4devt6bUE9lYKdfMgEdIUuzquP3lnDIBhuLcH/IztXcxiQAj1/03Hbg67OMDSXdH14bBeL9NhT92d9z4v7FscwAAQD6mv+j8P1xVhbwTAHLzk7wTAHIz8LH4qYvNAxi9ktv8wZV36vx/l/F+A6fO//fTbJ4rIQAAYOgm2rPDyM4FTkShUKl8dlowWduoVWcj4vMR8edy6Vq6PJdjvgAAAAAAAAAAAAAAAAAAAAAAAADwOGo2k2gCAAAAl1pE4e9Jdv+v6fLLE93HB55I/lNuzSPi/V+++/O7y43Gzlza/6/P+hu/yPpfzeMIBgAAAFxFpTNHO/vpnf14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABim+0f3VjrTKON+shjXY7JX/GKMt+bjUYqIJ/+dRPHY45KIGBtC/MMPIuK5XvGTNK2YzLLojl+IiOs5x39qCPHhKvtoMSLe7vX+K8RUa977/VfMpof1yWLrTd4zfmf9N9Zn/fe5AWM8//HvZvrG/yDi+WLv9U8nftIn/ksDxr/9/YODfmPNX0dM9/z7k7RnhewbG1t3Znb3D25tbC2vV9er2/Pzc28svLnw+sLszNpGrZp97Rnjp1/6/eGHfetvBzgev1PnZDvDH/Wr/+UB6//vx3ePnm03S6fjR9x8qffP/7nWvPfrn/5OvJK9POn4dKd92G4fd+O3f7rRL7c0/mqf17/98y83H8Qvnqj/5mDlH6/5V4M9BAC4SLv7B5vLtVp1ZwSNF18b3hMmrUa6FTSi5PNudA52PCr5jOcT/VrkW/u3Hvp5OpvDD/M8fx1aXek+Q++hHFdKAADAhXiw0Z93JgAAAAAAAAAAAAAAAAAAAHB1tf7/f+ycHwT4wvk+aaw75mE+pQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOl/AQAA//9DhsFC")

1.87525688s ago: executing program 0 (id=6437):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000120, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r4, 0x8}, &(0x7f00000003c0)=0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c000400026a000100c28000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x88}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket$kcm(0x10, 0x2, 0x0)
close(r7)

1.84562847s ago: executing program 0 (id=6438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0xa6, &(0x7f0000008000/0x2000)=nil, 0x2)

1.784031121s ago: executing program 0 (id=6440):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x21, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x38, r4, 0x803, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'})

1.513457376s ago: executing program 0 (id=6444):
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280))
openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000001a4c0)={0x11, 0x14, &(0x7f000001a240)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000a78ae1520000d4080000000000007b8a0007020000f8ffffffb703000008000000b7040000000000008500000001000000", @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="ca2d79b954a04fffcd01c097fdf6c92b794e75ba2b8ffee3b7f279769e052f5e5c9de149cf3414ff06363f698435b54b6563d1290e80cb306a50292348f7"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000002c0)={0x1, 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getresgid(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.387611538s ago: executing program 9 (id=6446):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x300, 0x5, {0x77359400}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x0, 0x1, 0x0, 0x0, "2b784cc8f76d7d76"}}, 0x48}, 0x1, 0x0, 0x0, 0x20048090}, 0x8000)
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)

1.377908018s ago: executing program 4 (id=6447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

1.22551164s ago: executing program 4 (id=6448):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$selinux_user(r4, &(0x7f00000001c0)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u\x00'}, 0x2c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001a0001000800906dff4300000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@remote, <r6=>0x0}, &(0x7f0000000100)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r7}, 0x10)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x24000420)
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)

1.129270992s ago: executing program 7 (id=6449):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x7, 0x0)
shutdown(r1, 0x2)

1.057712163s ago: executing program 2 (id=6450):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0xa6, &(0x7f0000008000/0x2000)=nil, 0x2)

979.441134ms ago: executing program 4 (id=6451):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x1, 0x840)

977.893344ms ago: executing program 7 (id=6452):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x7, 'Cr\a\x00\x00\x00\x00'}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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")
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
close_range(r5, 0xffffffffffffffff, 0x0)
connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10)

968.461094ms ago: executing program 4 (id=6453):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}])

717.899408ms ago: executing program 9 (id=6454):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/11, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00e7ff00000040000200000000008a3027aa000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x58510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x108, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x18)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000007c0)='G<P\xf2e>^\x9d\"&?\xd2,\x7f\xfe\xf8\x90\x12/\xf8o\xd1u\xb9\xe1\x93\x12&\x94\x00a\xd8\xce\xe0\xbd)\n\xdci\\\xfa\xb8\xce\x9e\x81\xe0\xe3\x98s\x11Bg\xe2\xc9\x94@M}F\x94\xdc\xcbA\x98o\x1d&*\xa5\x15\xc8%<\xe7\xe5\x93\xe8n\xb6&\xe0\x17\xdc\x89\xf5h2\xeaGU\x15\xca\xce\xaatc\xce\x06\xd4\xcc\x987\xe2\x89\x12}&\xab!B\xe5/\xa5\xdd\x05_\x96\x15\xc7\xe4\x96Z\a\x00\x00\x00\x00\x00\x00\x00i\xe0la\xd9\x97O\'e\xb0\xf0\xd0\x13\x86\xc6\xf2\x97\x9c\x14\xb6\xa5E\x8c_\xdf\x1f1\x9aB\xfdX\x7f\xed1\xb0\x0e\xfeO\xef\x118\xe0\xbc\xa8M#NW\x15\x99\xf3}\x11\xc8\xca\x82\x86\x87\n\xadE\xb7(u\x7f\xf9\x8b\xe8\xf1\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\xc7m\xd2:\xdcr\x99\xd0.O\x83\x8c\x8c\x97P\x18\xac\x99\xe5\v\xf3\xc0^\xb1\xd9\x87N\xd2\x88\x8f\xec\x8f\x10\xff\xe6u\x88\xf4o\xf4\xf1\x0f\xb0\xa9\\\xd7>\xa9\xcf\x00\x0f#\xf8\xad\xa6\x17\xd6o\xe0\x14|\x01\xf2\xa7<:$\x01\f.{\xf9\xaf\xee5}\xa2\xba#\xa2\xf5\xa9\xa0\x16Pv\xdf\xdb\xfe\xb9\xd1\xf4,q\xa9\xa1\x97\xc4\f!y\xa4B\xf0\xe3\x06>t\x1a\xeeZLuV\x9e\x7f\x81\xc3\xcdg\x89\xdcj(\x7f4E\x8e\xb6\xac\xcdO:\x90\xcc\xc2\xe2[\x82\xa2\x7f\x1b\x9f\xd8W?\x1f\x1b XRf.`Q[\xe3\x89\xfe\xb9Sg\xc5\xd1g\x18\xf6', &(0x7f00000003c0)='mm_page_alloc\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r4 = inotify_init1(0x80000)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x500082c)
dup2(r3, r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r7=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

673.656129ms ago: executing program 4 (id=6455):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone3(&(0x7f0000000740)={0x28180080, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=<r2=>0x0, {0x39}, 0x0, 0x0, &(0x7f00000004c0)=""/221, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0xd9}, 0x58)
timer_create(0x7, &(0x7f0000000600)={0x0, 0x2f, 0x4, @tid=r2}, &(0x7f00000007c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x9, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="c02950000400000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018230000", @ANYRES32=r3, @ANYBLOB="00000000059a5080be25f815499845304c0e1100000000", @ANYRES32, @ANYBLOB="00000000f9ffffff18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000018400000fdffffff0000000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x1, 0x5, &(0x7f00000008c0)=""/5, 0x41100, 0x14, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0x7, 0x3, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001040)=[0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r3, r1, r3, r3, r3], &(0x7f0000001080)=[{0x2, 0x2, 0x9, 0xa}, {0x4, 0x4, 0x1, 0x4}, {0x4, 0x3, 0xf, 0x8}, {0x4, 0x4, 0x9, 0x3}], 0x10, 0x8, @void, @value}, 0x94)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2086421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
unshare(0x2040400)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = timerfd_create(0x6, 0x80000)
timerfd_gettime(r6, &(0x7f0000000840))
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0)

598.45758ms ago: executing program 7 (id=6456):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]})
ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1e, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES16, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000240)=0x8)
r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
close_range(r10, 0xffffffffffffffff, 0x0)

519.885411ms ago: executing program 0 (id=6457):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x8, 0xdd183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x200000000006, 0x4, 0x0, 0x9, 0x800001, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x10b, &(0x7f0000001800)={0x0, 0xa71c, 0x1008, 0x8003, 0x1000003}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r1, 0x6a4f, 0x4053, 0x22, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0)
write$binfmt_register(r8, &(0x7f0000001380)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8000000000000002, 0x3a, 'wgj&\r\xec\xe0\x95\x06\x12\x99.\x0eBb\x1a]\vW\xcc\xf8\xea\x95\xa6|h>\x1a\xa1\x00\x0f3{\x94=\xfc \x8f\xa9\x8d\xb7\x17\x02K$\xfc\x96\xd2\xe7\xd6\x1f\x06\x00+,^\x0fZ\xc6\xcb&\xa6X\x95\fLM\xe7\x1e\x05\x04[\f\xfc\x1e\x1a\xe0=\xca\x1d\xd1\x12\xb7q\x057\xec\x05\x91\x17\xf5l\'q\xb3sc\x10`\x86|b\x9f\xbd\xd2\xca\xf5NX\xf3\xaa\x89\vl\xc1\xeb\x01X\x1d\xed\x9c\x80\x16\x87=\xaa\x15\x92E\xd1\x82\xf9|\xcb\xfc\xc7l0q\x03\x80\xb2\xfe\aq\x99=\x15n\xb6\xa2\x96h\xdam\xd3\xe1\xae\x84\xfa\xdd\\\x14A\xac\x88\xc1\x06t\xa8\x187\xef@H\xb8\x0eUR\x8f\x1f\xd5]2\x02\xd2\x0e\xab\xbf\xf0\x14O\xa0\x8d\x06\"\xd7X\x96(\x17\x87/\xc2\xa3A;\x01\xd9\xee\x06C\xff\x7f\x96\x14\xb8\xd6\xc7\x0f\xf4\xfd5\xe4\a\x13(\x9f\x9d\xf2w\x87K\xeeS\xd6\xf0\x140*q\x9d\x14hj\xf8D\xa9\xb9\xb3\xb4\xefs\x90#y&,d\x98\x9f\t\xdf\x8dY\x17z\xa0[\xa2\xa3V\xd1\x95rvV\x18\x92\x1e\x91\x9f\r\xaa\xe4\xe7\x7fr-|;\xba)\x19p+o\xdc\xb3!d+\x8aO\x8b\xf2\x9c\x87\xb5yu6y!G\xcf\xdb\xf9{\xe9\x92[\xae25*3\xe3\xdc\xb3g\x87J\xd1iH\xe2\xef\xeaa\xe5\x95\x0f?F1\xb9\xfe\xa5%#1\xa8\x02\x92\xdbK\x8e\xd2h\xe9TF\xcd\x13\xbfIZJ\xb4\x98\xfc\x94\x03M|-\xbe\x9b\xdf\xad;0\xc0-\x13\x83', 0x3a, '\x17\xc9\x8f\xae\'\\!\x1d,x\xa6\xf3\x98\x85\xdan\x97k\v\xdc\x82\xd1\x18C=\xd5~\xbe\xda\xd0a\x9e\xe7\x12\x93\xb1\xff\x03}b\x8bp\"\x1a\xcfo\x8fBk\xa1o\xb1\v\x00\x00\x02<\xe6\x9f\xceb\x16\xc7\xf3;\xe9\x87\x97N{\v\x98\bb\x8c\xdf$\xfc\x80;\xfd\xcbH\xde\xf6>3\xfa\x12\xc8\xe7\x81\x91!\xac\xaf\xb1\x8e\xa3an4M\xec\x14\x8b^m:<\n\xdd\xde\xa2\x9b6\xe3M~W\xebB\xb5)\xbd\xb4O\xae\'O\xe0\xd86\x14\xa7\xa6[\a\xf8A\x92\xc8\xb49(\xa5\xa75[\xa9\xd8E<\x15\xf8\xe5<l\xa4)|\x8c\xee\x976\bz\x82c\xce\xc0k\x1a.\xea\xaf\xe9Lnu\x06Q\n\xd8Z\xe7~2R\xff\x00\x18\xc3\xf5\x9c\xf4\xdb\n\xabN\a\x1bGC\xa3\x98\x88B$4\xab:i\x92\x01\x1a\xb5\xdf\x1a\x18B\xecI\fQQh#;%\x99\xac(:$\x92\x17\xa2_\x84bS\xda\x1e\x18\xd7%$\xe8\b\xc4\x95\xbc\xf0\xe7\x0ec\x8b\xeaNW{\xd0\x18\xc8\x86\x89\xec\xfe\xb2<\x8fU\xcf\xd0\x80h\xf7/=N\x88\x93\xd4]\xb1|\xf0*\x93\x979X\xb4\xcc\xec\n\xeadzH\xa7\xfcFz\xda]&\xb3\xab\x05\x99\xa0)Un\xc6\x83Z7\xc1X@\xe1\t\x1a\xc32x\xbc\xdb#\xa9lfN\xc1S\xc9\xdf<\xc8\xbd\v\xc8\xa6\xd3\xf7\x879\x17a\x13\x9f)\xe2~\xba\xe8\xf90gAm\xed\x92p\x8au\f=\a\xa0\b)\x96*\xc2\xcb\nD^\x1fO\xf3~a\x83\x95\r\xed\xcf\xf2\'\xd4\b\xc2\xcf\x84F\xf1\x05\xf7S\xea\xe3\xe4\xeb\xd8\xa17\x1f\xc4\xbez\xeb\x8b\x99\xc2\xa0\xad\xa7F`\xe3\"\xa9g+\tb1\x89\x86]\xfe\xcb\x8e\xf0\xec\xce[\xf6\xa5\x1fR\xb99\x92\xd8\x05\xba\x18-\f\xee\xcab\x0f\x188\x83\x19r\x1aH\xc0', 0x3a, './file0'}, 0x37d)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="02202aba2a20e200"], 0x8)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
r12 = eventfd(0x1)
splice(r11, &(0x7f0000000040)=0x1, r12, &(0x7f0000000080)=0x47, 0x3, 0x5)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=f'])

508.573892ms ago: executing program 2 (id=6458):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

491.501952ms ago: executing program 9 (id=6459):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac)
mknodat$null(r0, &(0x7f0000000380)='./file0\x00', 0x2, 0x103)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0xe7e47000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c00014000000000000000003400"], 0x118}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@broadcast, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

478.470612ms ago: executing program 4 (id=6460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioperm(0x0, 0x82, 0x1e)
r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000d00)=ANY=[@ANYBLOB='overriderockperm,nocompress,hide,session=0x000000000000005a,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703433372c6e6f6a6f6c6965742c626c6f636b3d3078303030303030303030303030303430302c0035a85593ddc5c3074c0f453ab55f49d13adccf62b9b93e326146ec1699e3aa851cbcb1b89bfd0d719e4d26f2a1001f197d86456d9af71c700128ce417933c0d06d86d352e9dfabd44d6d4980555143d00ce151bd46b818071ae1fb5967332c06bd3e4f9a24e938e6143ff7d7e56d415990715997dd1b63ce9a8a98ca7f620cce28f47c9f5a58391e233aa8c248cd294e76ba42bd3e41f53f3f9586dc7bb43b76336ea32d737da49a338f7a50c0d4fc58bbcf432529c4f7d4f46dbbdcc715fef02b4e5791c264e7be144f2489a17d12dbcf8e27"], 0x1, 0x544, &(0x7f0000001000)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000030000000000000000000096109bd86aaa787113f9a3916e2d0cf8bdd1c025e48e2798b84276f5f06f5342c3ae28537a077da42163e583b390e5d2ef1169070663c399ccba55fc1f3c4cc575de61a781a39b116785db80b1c089dfdde853db1f8b77c300a30d187ac98c202692f070dd910b023627ba9d5f928e549e52547c8bcfc6f3e23ff18238945437f892c9f666ff1f704b916689bb13fbfaf981faaeb31a24be5ddbdfb62ceb5c71520a492287593aa095ec4ebdb12a3810d3f2560b5f0f86871707176d8bc8119b2ea50d960a0d7efeabbace56b282528f665e2b73ecea35714cb8bd92d4"], 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="31a806dc791516a452a391d78b564405e52f9fbbd61bb59ae4a54a8f4a067e3e84f6391703ad4d24f50eb7a6a840fd4742c6b4bbb394c7dec569434eecb6200e23d8cccfd4e1cd87c5afe3ce8295a2c4f0d1b88243f2cb4d9cf2cf1d7b0c8489cc0702ff49699769a9dcc8eba57426a6971b03decdb674dc868e735bdf7b1f94c4900a7f3e58a43c841a90ab6cf9c139cd6dd378fb46903f21aa2c31379f4296c8f1320afb7e50df072f89e1ea924fd6a23c3b73f366e13a6b4ae45a5e13fc52ca4f176022be9be2a6", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
openat(r2, &(0x7f0000000240)='./file0\x00', 0x140, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0400000000000000000000ac1414aa000000008251835d157f000000001400020002000000ca10140600000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="759f8bddf7467dfceb37fef664e54aad668543893f3c26c3dc0271c7cfb2ec82d2e0caff180801105c0a2be162139b044cc5eb85a99194a2c719f510221a58082fb6b2ff396fbbd127fe", 0x4a}, {&(0x7f0000000200)="18c1bee962649e8bd1afb52557a90443352c3913de052302f6bf62f3c43102b4440e9fadd9e076c807aa2550fb7a30f485d1a5e776ea9c5535d8bcbc106617f7b53cbd1c905b66a417a94ae1ef7da8fdfc947c5945b038ef715c0bbf2828b922d361", 0x62}, {&(0x7f0000000000)="53a85d4086d9a069805f76322fa9467e25a9b530201ece5415b0e97aee13459341764a63c2e06f", 0x27}, {&(0x7f0000000380)="3f49b14dd32205715aeec2652b1e7bd445404850d8f0f3c70a6b92befa8f809f3c6acbc61d7e965c789f79d605810494c51f92e1969d01cb533e65e92dce6fbce36d55bdeb8e06deb3b29db1e29459cd56e57bc927ffa73bb54bef54351613904e19eaea21891bc8970edba26ecb04dbeb332c", 0x73}, {&(0x7f0000000400)="3794f266b7b1dc034927c601950ca9437032f68283205f3ca30b68796820bd926931f9304723000ec6f7b918bea5295efcce3f22db865c78285deba9ab8c09ce34d6eb0da3fa93636148058c40e7453307a82016ec5bdd54a849711da9dd52844ad4f86c8c9dabf6447ac30da2d3c7198b10b7b389b4ee7354d8a422c0d6e3420bb77a3ea7abbee9287ee720d90e44fb967f58ed49e765c0feb0cc7d0b91dd22cd40752d757f2cdabbf261d2d4e8f291571fc2f8", 0xb4}, {&(0x7f00000004c0)="0242870e891bc8c66ce4b38a664e689c07b1821e5d59b9e47b579d5d380dcb2af95aad6b222d05c8cf1e44fe6b4268587ea39e6383747d56b84be5b0121151d11e094e4d40fd6265fdef93b32fb8bd", 0x4f}, {&(0x7f0000000540)="c9a6047da1f50c922fdb7063a2e9daf9ae0d11aefc92ecccb06e1c456022d10373be55fb3a0087928139fa41a42e2cf0280b551d0b6a14e3a65fd3c4a39f52884a7844b2db42bccd6e45a6dfcbf9fd63c361c74b2a4aa9d1927ad0cb12b386", 0x5f}], 0x7, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x10}}], 0xd8}, 0x40)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f00000002c0)={[{@sysvgroups}, {@data_err_abort}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@lazytime}, {@acl}, {@data_writeback}, {@resuid}, {@i_version}, {@mblk_io_submit}]}, 0x6, 0x50d, &(0x7f00000006c0)="$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")

415.937103ms ago: executing program 2 (id=6461):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd"], 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x4000, 0x11ac3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc000)

339.193325ms ago: executing program 9 (id=6462):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x7, 0x0)
shutdown(r1, 0x2)

235.354246ms ago: executing program 2 (id=6463):
socket(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3e8}, [], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) (fail_nth: 2)

0s ago: executing program 9 (id=6464):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x300, 0x5, {0x77359400}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x0, 0x1, 0x0, 0x0, "2b784cc8f76d7d76"}}, 0x48}, 0x1, 0x0, 0x0, 0x20048090}, 0x8000)
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)

kernel console output (not intermixed with test programs):

512
[  418.549959][T20813] EXT4-fs: Ignoring removed i_version option
[  418.556082][T20813] EXT4-fs: Ignoring removed mblk_io_submit option
[  418.589492][T20813] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  418.613418][T20813] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.5968: iget: bad i_size value: -6917529027641081756
[  418.650761][ T8037] bond0 (unregistering): Released all slaves
[  418.664563][T20813] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5968: couldn't read orphan inode 17 (err -117)
[  418.685620][T20805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5968'.
[  418.718619][ T8037] veth1_macvtap: left promiscuous mode
[  418.725918][ T8037] veth0_macvtap: left promiscuous mode
[  418.745143][ T8037] veth1_vlan: left promiscuous mode
[  418.750539][ T8037] veth0_vlan: left promiscuous mode
[  418.929405][T20819] bridge0: port 3(vlan2) entered blocking state
[  418.935809][T20819] bridge0: port 3(vlan2) entered disabled state
[  418.945382][T20819] vlan2: entered allmulticast mode
[  418.950545][T20819] bridge0: entered allmulticast mode
[  418.966377][T20827] netlink: 'syz.8.5972': attribute type 10 has an invalid length.
[  418.969616][T20819] vlan2: left allmulticast mode
[  418.979468][T20819] bridge0: left allmulticast mode
[  419.006909][T20786] chnl_net:caif_netlink_parms(): no params data found
[  419.049041][T20821] loop4: detected capacity change from 0 to 1024
[  419.076167][T20821] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  419.211012][T20821] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  419.221573][T20821] EXT4-fs (loop4): orphan cleanup on readonly fs
[  419.230677][T20821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  419.248283][T20821] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  419.280746][T20821] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  419.291758][T20821] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  419.305347][T20821] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  419.316486][T20821] EXT4-fs (loop4): 1 orphan inode deleted
[  419.323026][T20786] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.329524][T20821] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  419.330206][T20786] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.363300][T20821] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  419.393012][T20821] random: crng reseeded on system resumption
[  419.426339][T20846] netlink: 'syz.8.5977': attribute type 10 has an invalid length.
[  419.446800][T20786] bridge_slave_0: entered allmulticast mode
[  419.462059][T20786] bridge_slave_0: entered promiscuous mode
[  419.483693][T20786] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.490830][T20786] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.508538][T20786] bridge_slave_1: entered allmulticast mode
[  419.515907][T20786] bridge_slave_1: entered promiscuous mode
[  419.577870][T20786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.594276][T20786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.627312][T20786] team0: Port device team_slave_0 added
[  419.642669][T20786] team0: Port device team_slave_1 added
[  419.670214][T20786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.677287][T20786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.704169][T20786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.715648][T20786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.722670][T20786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.748827][T20786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.794247][T20786] hsr_slave_0: entered promiscuous mode
[  419.800543][T20786] hsr_slave_1: entered promiscuous mode
[  419.806549][T20786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  419.814742][T20786] Cannot create hsr debugfs directory
[  420.038682][T20881] loop8: detected capacity change from 0 to 164
[  420.058304][T20881] isofs_fill_super: root inode is not a directory. Corrupted media?
[  420.208905][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5987'.
[  420.238274][T20887] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5987'.
[  420.265479][T20786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  420.290903][T20786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  420.319763][T20786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  420.332512][T20888] loop8: detected capacity change from 0 to 512
[  420.356869][T20888] EXT4-fs: Ignoring removed i_version option
[  420.358812][T20786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  420.362918][T20888] EXT4-fs: Ignoring removed mblk_io_submit option
[  420.400937][T20888] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  420.436122][T20888] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #17: comm syz.8.5987: iget: bad i_size value: -6917529027641081756
[  420.456094][T20786] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.463497][T20888] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5987: couldn't read orphan inode 17 (err -117)
[  420.485091][T20786] 8021q: adding VLAN 0 to HW filter on device team0
[  420.513968][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.521229][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.546504][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.553702][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.712134][T20786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.733728][T20906] random: crng reseeded on system resumption
[  420.763841][T20912] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5989'.
[  420.806920][T20914] random: crng reseeded on system resumption
[  420.865489][T20786] veth0_vlan: entered promiscuous mode
[  420.885991][T20786] veth1_vlan: entered promiscuous mode
[  420.916489][T20786] veth0_macvtap: entered promiscuous mode
[  420.930942][T20786] veth1_macvtap: entered promiscuous mode
[  420.954866][T20786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.975429][T20786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.994139][T20786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.003011][T20786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.011942][T20786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.020755][T20786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.244879][T20940] bridge0: port 3(vlan2) entered blocking state
[  421.251236][T20940] bridge0: port 3(vlan2) entered disabled state
[  421.270905][T20940] vlan2: entered allmulticast mode
[  421.276231][T20940] bridge0: entered allmulticast mode
[  421.300787][T20940] vlan2: left allmulticast mode
[  421.305739][T20940] bridge0: left allmulticast mode
[  421.646427][T20956] netlink: 'syz.8.6001': attribute type 10 has an invalid length.
[  421.773191][T20962] netlink: 'syz.8.6005': attribute type 10 has an invalid length.
[  422.180154][T20981] random: crng reseeded on system resumption
[  422.245558][T20991] bridge0: port 3(vlan2) entered blocking state
[  422.251961][T20991] bridge0: port 3(vlan2) entered disabled state
[  422.261675][T20991] vlan2: entered allmulticast mode
[  422.266865][T20991] bridge0: entered allmulticast mode
[  422.348374][T20991] vlan2: left allmulticast mode
[  422.353369][T20991] bridge0: left allmulticast mode
[  422.391879][T20994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6012'.
[  422.844679][T21003] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6016'.
[  422.856499][T21001] loop4: detected capacity change from 0 to 2048
[  422.880447][T21001] EXT4-fs mount: 38 callbacks suppressed
[  422.880468][T21001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.971208][T21007] loop8: detected capacity change from 0 to 8192
[  423.100382][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.194417][   T29] kauditd_printk_skb: 387 callbacks suppressed
[  423.194441][   T29] audit: type=1326 audit(1749561880.592:35843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21010 comm="syz.7.6020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe1de7058e7 code=0x0
[  423.372522][T21026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6022'.
[  423.484437][T21029] random: crng reseeded on system resumption
[  423.631010][T21031] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6024'.
[  423.961490][   T29] audit: type=1326 audit(1749561881.331:35844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.0.6025" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f767f7558e7 code=0x0
[  424.094757][T21037] netlink: 'syz.7.6027': attribute type 10 has an invalid length.
[  424.147486][T21041] loop8: detected capacity change from 0 to 512
[  424.162494][T21041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  424.185759][T21041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.238400][   T29] audit: type=1400 audit(1749561881.593:35845): avc:  denied  { getopt } for  pid=21048 comm="syz.4.6031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  424.269275][T21041] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.284224][T21050] netlink: 'syz.2.6030': attribute type 10 has an invalid length.
[  424.300548][T21050] syz_tun: entered promiscuous mode
[  424.428669][T21050] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  424.502341][   T29] audit: type=1400 audit(1749561881.836:35846): avc:  denied  { unlink } for  pid=18324 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  424.728619][   T29] audit: type=1400 audit(1749561881.864:35847): avc:  denied  { unlink } for  pid=18324 comm="syz-executor" name="file1" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  424.835040][T21055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.941352][T21058] loop2: detected capacity change from 0 to 8192
[  424.973578][ T8004] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.036494][ T8004] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.085538][ T8004] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.105669][   T29] audit: type=1326 audit(1749561882.407:35848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.7.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1de70e929 code=0x7ffc0000
[  425.130204][   T29] audit: type=1326 audit(1749561882.416:35849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.7.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe1de70e929 code=0x7ffc0000
[  425.154110][   T29] audit: type=1326 audit(1749561882.416:35850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.7.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1de70e929 code=0x7ffc0000
[  425.177808][   T29] audit: type=1326 audit(1749561882.416:35851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.7.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1de70e929 code=0x7ffc0000
[  425.201543][   T29] audit: type=1326 audit(1749561882.416:35852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.7.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1de70e929 code=0x7ffc0000
[  425.280790][ T8004] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.378192][T21083] loop4: detected capacity change from 0 to 1024
[  425.437801][T21083] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  425.456661][T21083] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  425.498725][T21083] EXT4-fs (loop4): orphan cleanup on readonly fs
[  425.516800][T21065] chnl_net:caif_netlink_parms(): no params data found
[  425.531720][T21083] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  425.547982][T21090] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6042'.
[  425.561863][T21083] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  425.562032][ T8004] bridge_slave_1: left allmulticast mode
[  425.579481][ T8004] bridge_slave_1: left promiscuous mode
[  425.585512][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.604341][T21083] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  425.616144][ T8004] bridge_slave_0: left allmulticast mode
[  425.621844][ T8004] bridge_slave_0: left promiscuous mode
[  425.627667][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.661066][T21083] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  425.696243][T21083] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  425.718879][T21083] EXT4-fs (loop4): 1 orphan inode deleted
[  425.752520][T21083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  425.788316][T21081] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.6040: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  425.809237][ T8004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.810224][T21081] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.6040: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  425.837763][ T8004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.843681][T21081] random: crng reseeded on system resumption
[  425.853731][ T8004] bond0 (unregistering): Released all slaves
[  425.901474][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.942122][ T8004] hsr_slave_0: left promiscuous mode
[  425.961469][ T8004] hsr_slave_1: left promiscuous mode
[  425.969415][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.976905][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.984872][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.992615][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.007483][ T8004] veth1_macvtap: left promiscuous mode
[  426.013174][ T8004] veth0_macvtap: left promiscuous mode
[  426.018813][ T8004] veth1_vlan: left promiscuous mode
[  426.027825][ T8004] veth0_vlan: left promiscuous mode
[  426.132782][ T8004] team0 (unregistering): Port device team_slave_1 removed
[  426.159496][ T8004] team0 (unregistering): Port device team_slave_0 removed
[  426.222868][T21065] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.230184][T21065] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.268301][T21065] bridge_slave_0: entered allmulticast mode
[  426.285734][T21065] bridge_slave_0: entered promiscuous mode
[  426.299245][T21065] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.306452][T21065] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.338648][T21065] bridge_slave_1: entered allmulticast mode
[  426.352220][T21065] bridge_slave_1: entered promiscuous mode
[  426.406546][T21065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.429701][T21065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.474141][T21065] team0: Port device team_slave_0 added
[  426.488039][T21065] team0: Port device team_slave_1 added
[  426.512403][T21065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.519729][T21065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.545863][T21065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.589062][T21065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.596249][T21065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.622276][T21065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.699779][T21065] hsr_slave_0: entered promiscuous mode
[  426.713267][T21065] hsr_slave_1: entered promiscuous mode
[  426.886946][T21065] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  426.911106][T21132] lo speed is unknown, defaulting to 1000
[  426.917035][T21132] lo speed is unknown, defaulting to 1000
[  426.923574][T21132] lo speed is unknown, defaulting to 1000
[  426.930303][T21132] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  426.938966][T21065] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  426.949140][T21065] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  426.959128][T21065] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  426.973049][T21133] loop4: detected capacity change from 0 to 256
[  427.005405][T21132] lo speed is unknown, defaulting to 1000
[  427.017914][T21132] lo speed is unknown, defaulting to 1000
[  427.024284][T21132] lo speed is unknown, defaulting to 1000
[  427.030616][T21132] lo speed is unknown, defaulting to 1000
[  427.038387][T21132] lo speed is unknown, defaulting to 1000
[  427.081492][T21065] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.104672][T21065] 8021q: adding VLAN 0 to HW filter on device team0
[  427.122541][T21146] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  427.154287][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.161521][ T8399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.177033][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.184293][ T8399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.238377][T21152] random: crng reseeded on system resumption
[  427.279527][T21158] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6057'.
[  427.289961][T21065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.303592][T21160] loop4: detected capacity change from 0 to 512
[  427.312442][T21158] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6057'.
[  427.349133][T21160] EXT4-fs (loop4): too many log groups per flexible block group
[  427.356981][T21160] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  427.374493][T21160] EXT4-fs (loop4): mount failed
[  427.421322][T21170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23824 sclass=netlink_route_socket pid=21170 comm=syz.2.6060
[  427.485656][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6063'.
[  427.495621][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6063'.
[  427.505500][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6063'.
[  427.590657][T21065] veth0_vlan: entered promiscuous mode
[  427.619892][T21065] veth1_vlan: entered promiscuous mode
[  427.660014][T21065] veth0_macvtap: entered promiscuous mode
[  427.694786][T21065] veth1_macvtap: entered promiscuous mode
[  427.717156][T21065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.729656][T21065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.744901][T21065] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.753904][T21065] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.762912][T21065] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.771809][T21065] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.876746][T21195] FAULT_INJECTION: forcing a failure.
[  427.876746][T21195] name failslab, interval 1, probability 0, space 0, times 0
[  427.889660][T21195] CPU: 0 UID: 0 PID: 21195 Comm: syz.9.6037 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  427.889701][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  427.889718][T21195] Call Trace:
[  427.889727][T21195]  <TASK>
[  427.889739][T21195]  __dump_stack+0x1d/0x30
[  427.889771][T21195]  dump_stack_lvl+0xe8/0x140
[  427.889799][T21195]  dump_stack+0x15/0x1b
[  427.889838][T21195]  should_fail_ex+0x265/0x280
[  427.889887][T21195]  should_failslab+0x8c/0xb0
[  427.889917][T21195]  __kmalloc_noprof+0xa5/0x3e0
[  427.889946][T21195]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  427.889991][T21195]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  427.890035][T21195]  ? selinux_capable+0x1f9/0x270
[  427.890083][T21195]  genl_family_rcv_msg_doit+0x48/0x1b0
[  427.890127][T21195]  ? security_capable+0x83/0x90
[  427.890169][T21195]  ? ns_capable+0x7d/0xb0
[  427.890197][T21195]  genl_rcv_msg+0x422/0x460
[  427.890231][T21195]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  427.890259][T21195]  ? __pfx_nl802154_wpan_phy_netns+0x10/0x10
[  427.890347][T21195]  ? __pfx_nl802154_post_doit+0x10/0x10
[  427.890387][T21195]  netlink_rcv_skb+0x120/0x220
[  427.890416][T21195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  427.890463][T21195]  genl_rcv+0x28/0x40
[  427.890520][T21195]  netlink_unicast+0x5a1/0x670
[  427.890564][T21195]  netlink_sendmsg+0x58b/0x6b0
[  427.890599][T21195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.890631][T21195]  __sock_sendmsg+0x142/0x180
[  427.890740][T21195]  ____sys_sendmsg+0x31e/0x4e0
[  427.890775][T21195]  ___sys_sendmsg+0x17b/0x1d0
[  427.890826][T21195]  __x64_sys_sendmsg+0xd4/0x160
[  427.890866][T21195]  x64_sys_call+0x2999/0x2fb0
[  427.890890][T21195]  do_syscall_64+0xd2/0x200
[  427.890979][T21195]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  427.891006][T21195]  ? clear_bhb_loop+0x40/0x90
[  427.891028][T21195]  ? clear_bhb_loop+0x40/0x90
[  427.891124][T21195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.891148][T21195] RIP: 0033:0x7f1cd5dae929
[  427.891166][T21195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.891264][T21195] RSP: 002b:00007f1cd4417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.891285][T21195] RAX: ffffffffffffffda RBX: 00007f1cd5fd5fa0 RCX: 00007f1cd5dae929
[  427.891299][T21195] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000000000000004
[  427.891312][T21195] RBP: 00007f1cd4417090 R08: 0000000000000000 R09: 0000000000000000
[  427.891326][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.891378][T21195] R13: 0000000000000000 R14: 00007f1cd5fd5fa0 R15: 00007ffedf5c5b48
[  427.891401][T21195]  </TASK>
[  428.158714][T21196] loop2: detected capacity change from 0 to 2048
[  428.196768][T21196] EXT4-fs (loop2): failed to initialize system zone (-117)
[  428.267566][T21196] EXT4-fs (loop2): mount failed
[  428.397237][T21207] netlink: 'syz.0.6069': attribute type 10 has an invalid length.
[  428.454494][T21213] FAULT_INJECTION: forcing a failure.
[  428.454494][T21213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.459125][T21204] lo speed is unknown, defaulting to 1000
[  428.467726][T21213] CPU: 0 UID: 0 PID: 21213 Comm: syz.0.6071 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  428.467822][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  428.467842][T21213] Call Trace:
[  428.467851][T21213]  <TASK>
[  428.467863][T21213]  __dump_stack+0x1d/0x30
[  428.467943][T21213]  dump_stack_lvl+0xe8/0x140
[  428.467972][T21213]  dump_stack+0x15/0x1b
[  428.467997][T21213]  should_fail_ex+0x265/0x280
[  428.468048][T21213]  should_fail+0xb/0x20
[  428.468171][T21213]  should_fail_usercopy+0x1a/0x20
[  428.468194][T21213]  strncpy_from_user+0x25/0x230
[  428.468225][T21213]  path_setxattrat+0xeb/0x310
[  428.468389][T21213]  __x64_sys_lsetxattr+0x71/0x90
[  428.468423][T21213]  x64_sys_call+0x1e36/0x2fb0
[  428.468455][T21213]  do_syscall_64+0xd2/0x200
[  428.468511][T21213]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  428.468558][T21213]  ? clear_bhb_loop+0x40/0x90
[  428.468633][T21213]  ? clear_bhb_loop+0x40/0x90
[  428.468667][T21213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.468714][T21213] RIP: 0033:0x7f767f75e929
[  428.468731][T21213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.468751][T21213] RSP: 002b:00007f767ddc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  428.468778][T21213] RAX: ffffffffffffffda RBX: 00007f767f985fa0 RCX: 00007f767f75e929
[  428.468797][T21213] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000000
[  428.468815][T21213] RBP: 00007f767ddc7090 R08: 0000000000000000 R09: 0000000000000000
[  428.468833][T21213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.468851][T21213] R13: 0000000000000000 R14: 00007f767f985fa0 R15: 00007fffb8f94ba8
[  428.468961][T21213]  </TASK>
[  428.598900][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  428.598927][   T29] audit: type=1326 audit(1749561885.559:35931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681396][   T29] audit: type=1326 audit(1749561885.559:35932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681446][   T29] audit: type=1326 audit(1749561885.559:35933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681475][   T29] audit: type=1326 audit(1749561885.559:35934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681572][   T29] audit: type=1326 audit(1749561885.559:35935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681615][   T29] audit: type=1326 audit(1749561885.559:35936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681644][   T29] audit: type=1326 audit(1749561885.559:35937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681682][   T29] audit: type=1326 audit(1749561885.559:35938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681791][   T29] audit: type=1326 audit(1749561885.559:35939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.681821][   T29] audit: type=1326 audit(1749561885.559:35940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21214 comm="syz.4.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6f5d73e929 code=0x7ffc0000
[  428.873402][T21225] random: crng reseeded on system resumption
[  429.042655][T21229] random: crng reseeded on system resumption
[  429.050410][T21231] loop4: detected capacity change from 0 to 1024
[  429.054367][T21231] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  429.056783][T21231] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  429.056918][T21231] EXT4-fs (loop4): orphan cleanup on readonly fs
[  429.089006][T21231] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  429.089188][T21231] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  429.089535][T21231] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  429.089646][T21231] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  429.089925][T21231] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  429.090027][T21231] EXT4-fs (loop4): 1 orphan inode deleted
[  429.091205][T21231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.093115][T21231] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  429.093632][T21231] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  429.094161][T21231] random: crng reseeded on system resumption
[  429.119239][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.223798][T21239] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6080'.
[  429.240787][T21239] lo speed is unknown, defaulting to 1000
[  429.670662][T21253] Invalid ELF header magic: != ELF
[  429.785668][T21260] random: crng reseeded on system resumption
[  429.854247][T21262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6088'.
[  430.103262][T21268] loop9: detected capacity change from 0 to 1024
[  430.121978][T21268] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  430.222569][T21268] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  430.250687][T21268] EXT4-fs (loop9): orphan cleanup on readonly fs
[  430.283767][T21268] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  430.337211][T21268] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  430.384628][T21268] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  430.418085][T21268] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  430.436996][T21268] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  430.459751][T21268] EXT4-fs (loop9): 1 orphan inode deleted
[  430.471086][T21268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  430.496652][T21268] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  430.526413][T21268] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  430.556645][T21268] random: crng reseeded on system resumption
[  430.617230][T21287] netlink: 'syz.2.6095': attribute type 10 has an invalid length.
[  430.619665][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.775412][T21306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6100'.
[  430.791682][T21308] FAULT_INJECTION: forcing a failure.
[  430.791682][T21308] name failslab, interval 1, probability 0, space 0, times 0
[  430.804404][T21308] CPU: 0 UID: 0 PID: 21308 Comm: syz.9.6101 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  430.804435][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  430.804530][T21308] Call Trace:
[  430.804537][T21308]  <TASK>
[  430.804545][T21308]  __dump_stack+0x1d/0x30
[  430.804638][T21308]  dump_stack_lvl+0xe8/0x140
[  430.804664][T21308]  dump_stack+0x15/0x1b
[  430.804686][T21308]  should_fail_ex+0x265/0x280
[  430.804733][T21308]  should_failslab+0x8c/0xb0
[  430.804818][T21308]  kmem_cache_alloc_noprof+0x50/0x310
[  430.804894][T21308]  ? skb_clone+0x151/0x1f0
[  430.804924][T21308]  skb_clone+0x151/0x1f0
[  430.805042][T21308]  __netlink_deliver_tap+0x2c9/0x500
[  430.805126][T21308]  netlink_unicast+0x64c/0x670
[  430.805167][T21308]  netlink_sendmsg+0x58b/0x6b0
[  430.805194][T21308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  430.805217][T21308]  __sock_sendmsg+0x142/0x180
[  430.805401][T21308]  ____sys_sendmsg+0x31e/0x4e0
[  430.805426][T21308]  ___sys_sendmsg+0x17b/0x1d0
[  430.805466][T21308]  __x64_sys_sendmsg+0xd4/0x160
[  430.805560][T21308]  x64_sys_call+0x2999/0x2fb0
[  430.805588][T21308]  do_syscall_64+0xd2/0x200
[  430.805664][T21308]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  430.805690][T21308]  ? clear_bhb_loop+0x40/0x90
[  430.805774][T21308]  ? clear_bhb_loop+0x40/0x90
[  430.805882][T21308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.805910][T21308] RIP: 0033:0x7f1cd5dae929
[  430.805945][T21308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.805968][T21308] RSP: 002b:00007f1cd4417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.805992][T21308] RAX: ffffffffffffffda RBX: 00007f1cd5fd5fa0 RCX: 00007f1cd5dae929
[  430.806050][T21308] RDX: 0000000000001004 RSI: 0000200000000100 RDI: 0000000000000006
[  430.806065][T21308] RBP: 00007f1cd4417090 R08: 0000000000000000 R09: 0000000000000000
[  430.806077][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.806154][T21308] R13: 0000000000000000 R14: 00007f1cd5fd5fa0 R15: 00007ffedf5c5b48
[  430.806179][T21308]  </TASK>
[  431.033084][T21306] loop2: detected capacity change from 0 to 512
[  431.049997][T21311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6102'.
[  431.080179][T21306] EXT4-fs: Ignoring removed i_version option
[  431.086287][T21306] EXT4-fs: Ignoring removed mblk_io_submit option
[  431.099689][T21306] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  431.125727][T21313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6103'.
[  431.150758][T21315] loop9: detected capacity change from 0 to 1024
[  431.158073][T21306] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.6100: iget: bad i_size value: -6917529027641081756
[  431.172204][T21315] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  431.183258][T21306] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6100: couldn't read orphan inode 17 (err -117)
[  431.207800][T21306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.221180][T21315] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  431.249394][T21315] EXT4-fs (loop9): orphan cleanup on readonly fs
[  431.283544][T21315] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  431.314648][T21315] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  431.332024][T21334] loop4: detected capacity change from 0 to 512
[  431.339781][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.350775][T21334] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  431.359986][T21334] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  431.369986][T21315] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  431.383629][T21315] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  431.407579][T21334] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  431.418673][T21315] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  431.438667][T21315] EXT4-fs (loop9): 1 orphan inode deleted
[  431.444580][T21334] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  431.453357][T21315] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  431.466007][T21334] System zones: 0-2, 18-18, 34-35
[  431.471772][T21334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.501649][T21315] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  431.520717][T21315] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  431.541703][T21315] random: crng reseeded on system resumption
[  431.543225][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.556390][T21342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6112'.
[  431.607107][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.624363][T21346] loop4: detected capacity change from 0 to 512
[  431.631116][T21346] EXT4-fs: Ignoring removed orlov option
[  431.659410][T21350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6117'.
[  431.693025][T21346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  431.715192][T21346] EXT4-fs (loop4): orphan cleanup on readonly fs
[  431.729953][T21346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6113: bg 0: block 248: padding at end of block bitmap is not set
[  431.746146][T21346] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6113: Failed to acquire dquot type 1
[  431.764977][T21346] EXT4-fs (loop4): 1 truncate cleaned up
[  431.781758][T21346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  431.804573][T21355] smc: net device bond0 applied user defined pnetid SYZ2
[  431.817597][T21355] smc: net device bond0 erased user defined pnetid SYZ2
[  431.882363][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.977141][T21373] netlink: 'syz.9.6124': attribute type 10 has an invalid length.
[  431.985319][T21373] syz_tun: entered promiscuous mode
[  431.995262][T21373] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  432.409079][T21387] loop9: detected capacity change from 0 to 512
[  432.455449][T21387] EXT4-fs (loop9): 1 orphan inode deleted
[  432.480783][T21387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.494529][T21387] ext4 filesystem being mounted at /syzcgroup/cpu/syz9/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[  432.500977][ T8043] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1
[  432.542853][T21387] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.561545][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6128'.
[  432.570928][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6128'.
[  432.599071][T21387] openvswitch: netlink: Message has 6 unknown bytes.
[  432.643355][T21391] FAULT_INJECTION: forcing a failure.
[  432.643355][T21391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.656511][T21391] CPU: 1 UID: 0 PID: 21391 Comm: syz.9.6129 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  432.656591][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  432.656626][T21391] Call Trace:
[  432.656669][T21391]  <TASK>
[  432.656679][T21391]  __dump_stack+0x1d/0x30
[  432.656704][T21391]  dump_stack_lvl+0xe8/0x140
[  432.656724][T21391]  dump_stack+0x15/0x1b
[  432.656764][T21391]  should_fail_ex+0x265/0x280
[  432.656808][T21391]  should_fail+0xb/0x20
[  432.656846][T21391]  should_fail_usercopy+0x1a/0x20
[  432.656932][T21391]  _copy_from_iter+0xcf/0xe40
[  432.656963][T21391]  ? alloc_pages_mpol+0x201/0x250
[  432.657059][T21391]  copy_page_from_iter+0x178/0x2a0
[  432.657084][T21391]  tun_get_user+0x5f0/0x2500
[  432.657165][T21391]  ? ref_tracker_alloc+0x1f2/0x2f0
[  432.657256][T21391]  tun_chr_write_iter+0x15e/0x210
[  432.657291][T21391]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  432.657324][T21391]  vfs_write+0x49d/0x8e0
[  432.657370][T21391]  ksys_write+0xda/0x1a0
[  432.657391][T21391]  __x64_sys_write+0x40/0x50
[  432.657418][T21391]  x64_sys_call+0x2cdd/0x2fb0
[  432.657519][T21391]  do_syscall_64+0xd2/0x200
[  432.657545][T21391]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  432.657580][T21391]  ? clear_bhb_loop+0x40/0x90
[  432.657607][T21391]  ? clear_bhb_loop+0x40/0x90
[  432.657629][T21391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.657709][T21391] RIP: 0033:0x7f1cd5dad3df
[  432.657728][T21391] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  432.657753][T21391] RSP: 002b:00007f1cd4417000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  432.657778][T21391] RAX: ffffffffffffffda RBX: 00007f1cd5fd5fa0 RCX: 00007f1cd5dad3df
[  432.657794][T21391] RDX: 000000000000000e RSI: 0000200000001980 RDI: 00000000000000c8
[  432.657824][T21391] RBP: 00007f1cd4417090 R08: 0000000000000000 R09: 0000000000000000
[  432.657839][T21391] R10: 000000000000000e R11: 0000000000000293 R12: 0000000000000001
[  432.657851][T21391] R13: 0000000000000000 R14: 00007f1cd5fd5fa0 R15: 00007ffedf5c5b48
[  432.657870][T21391]  </TASK>
[  432.923565][T21393] loop9: detected capacity change from 0 to 2048
[  432.960011][T21393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.987762][T21397] FAULT_INJECTION: forcing a failure.
[  432.987762][T21397] name failslab, interval 1, probability 0, space 0, times 0
[  433.000630][T21397] CPU: 1 UID: 0 PID: 21397 Comm: syz.0.6131 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  433.000669][T21397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  433.000687][T21397] Call Trace:
[  433.000695][T21397]  <TASK>
[  433.000772][T21397]  __dump_stack+0x1d/0x30
[  433.000794][T21397]  dump_stack_lvl+0xe8/0x140
[  433.000813][T21397]  dump_stack+0x15/0x1b
[  433.000829][T21397]  should_fail_ex+0x265/0x280
[  433.000873][T21397]  should_failslab+0x8c/0xb0
[  433.000931][T21397]  kmem_cache_alloc_noprof+0x50/0x310
[  433.000960][T21397]  ? skb_clone+0x151/0x1f0
[  433.000991][T21397]  skb_clone+0x151/0x1f0
[  433.001066][T21397]  __netlink_deliver_tap+0x2c9/0x500
[  433.001129][T21397]  netlink_unicast+0x64c/0x670
[  433.001175][T21397]  netlink_sendmsg+0x58b/0x6b0
[  433.001205][T21397]  ? __pfx_netlink_sendmsg+0x10/0x10
[  433.001229][T21397]  __sock_sendmsg+0x142/0x180
[  433.001263][T21397]  ____sys_sendmsg+0x31e/0x4e0
[  433.001365][T21397]  ___sys_sendmsg+0x17b/0x1d0
[  433.001411][T21397]  __x64_sys_sendmsg+0xd4/0x160
[  433.001446][T21397]  x64_sys_call+0x2999/0x2fb0
[  433.001473][T21397]  do_syscall_64+0xd2/0x200
[  433.001494][T21397]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  433.001587][T21397]  ? clear_bhb_loop+0x40/0x90
[  433.001616][T21397]  ? clear_bhb_loop+0x40/0x90
[  433.001646][T21397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.001675][T21397] RIP: 0033:0x7f767f75e929
[  433.001719][T21397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.001739][T21397] RSP: 002b:00007f767ddc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.001813][T21397] RAX: ffffffffffffffda RBX: 00007f767f985fa0 RCX: 00007f767f75e929
[  433.001831][T21397] RDX: 0000000000001004 RSI: 0000200000000100 RDI: 0000000000000006
[  433.001848][T21397] RBP: 00007f767ddc7090 R08: 0000000000000000 R09: 0000000000000000
[  433.001860][T21397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.001901][T21397] R13: 0000000000000000 R14: 00007f767f985fa0 R15: 00007fffb8f94ba8
[  433.001936][T21397]  </TASK>
[  433.218340][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.288073][T21402] netlink: 'syz.4.6132': attribute type 5 has an invalid length.
[  433.397539][T21411] loop2: detected capacity change from 0 to 1024
[  433.410766][T21411] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  433.458422][T21411] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  433.467026][T21413] random: crng reseeded on system resumption
[  433.482270][T21411] EXT4-fs (loop2): orphan cleanup on readonly fs
[  433.507236][T21411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  433.560287][T21419] netlink: 'syz.0.6140': attribute type 21 has an invalid length.
[  433.572007][T21411] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  433.588070][T21417] lo speed is unknown, defaulting to 1000
[  433.614418][T21411] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  433.653415][T21411] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  433.698437][T21411] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  433.715178][T21420] loop9: detected capacity change from 0 to 512
[  433.725212][T21411] EXT4-fs (loop2): 1 orphan inode deleted
[  433.741716][T21411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  433.766122][T21423] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6139'.
[  433.784786][T21411] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  433.804537][T21420] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  433.847953][T21425] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.6137: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  433.895010][T21420] EXT4-fs (loop9): 1 truncate cleaned up
[  433.914086][T21420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.944115][T21411] random: crng reseeded on system resumption
[  433.952884][   T29] kauditd_printk_skb: 601 callbacks suppressed
[  433.952903][   T29] audit: type=1326 audit(1749561890.676:36503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.033488][   T29] audit: type=1326 audit(1749561890.676:36504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.056929][   T29] audit: type=1326 audit(1749561890.676:36505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fa830d290 code=0x7ffc0000
[  434.080184][   T29] audit: type=1326 audit(1749561890.676:36506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.103530][   T29] audit: type=1326 audit(1749561890.676:36507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.126664][   T29] audit: type=1326 audit(1749561890.676:36508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.150178][   T29] audit: type=1326 audit(1749561890.676:36509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.173362][   T29] audit: type=1326 audit(1749561890.676:36510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.183635][T21437] random: crng reseeded on system resumption
[  434.196476][   T29] audit: type=1326 audit(1749561890.676:36511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.225463][   T29] audit: type=1326 audit(1749561890.676:36512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21410 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  434.297164][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.566971][T21456] loop0: detected capacity change from 0 to 1024
[  434.574285][T21456] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.625425][T21456] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  434.627588][T21462] bridge0: port 3(vlan2) entered blocking state
[  434.639851][T21462] bridge0: port 3(vlan2) entered disabled state
[  434.646728][T21462] vlan2: entered allmulticast mode
[  434.647232][T21460] random: crng reseeded on system resumption
[  434.652002][T21462] bridge0: entered allmulticast mode
[  434.652550][T21456] EXT4-fs (loop0): orphan cleanup on readonly fs
[  434.670269][T21462] vlan2: left allmulticast mode
[  434.675240][T21462] bridge0: left allmulticast mode
[  434.685059][T21456] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  434.754446][T21456] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  434.774797][T21471] loop4: detected capacity change from 0 to 1024
[  434.796313][T21467] loop2: detected capacity change from 0 to 2048
[  434.809749][T21456] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  434.824413][T21471] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.841889][T21456] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  434.860757][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.870687][T21471] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  434.880774][T21471] EXT4-fs (loop4): orphan cleanup on readonly fs
[  434.887973][T21467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.913092][T21456] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  434.926799][T21471] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  434.927626][T21456] EXT4-fs (loop0): 1 orphan inode deleted
[  434.971091][T21456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  434.985908][T21471] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  434.997418][T21471] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  435.009557][T21471] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  435.022857][T21471] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  435.037727][T21471] EXT4-fs (loop4): 1 orphan inode deleted
[  435.044156][T21471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  435.074125][T21471] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  435.081167][T21473] __nla_validate_parse: 1 callbacks suppressed
[  435.081191][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6158'.
[  435.099276][T21471] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  435.115220][T21473] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6158'.
[  435.131167][T21471] random: crng reseeded on system resumption
[  435.187348][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.216571][T21456] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  435.308550][T21483] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.6151: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  435.343922][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.414041][T21487] random: crng reseeded on system resumption
[  435.438647][T21488] netlink: 'syz.7.6162': attribute type 10 has an invalid length.
[  435.552078][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.595263][T21492] loop4: detected capacity change from 0 to 1024
[  435.604001][T21491] sctp: [Deprecated]: syz.7.6163 (pid 21491) Use of int in max_burst socket option.
[  435.604001][T21491] Use struct sctp_assoc_value instead
[  435.732236][T21492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.753388][T21492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.004265][T21492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.153754][T21492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.266902][T21492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.338437][T21492] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.350551][T21492] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.362616][T21492] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.374567][T21492] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.402329][T21526] loop9: detected capacity change from 0 to 512
[  436.447256][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.465940][T21526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.478945][T21526] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  436.592192][T21538] netlink: 'syz.2.6174': attribute type 10 has an invalid length.
[  436.675187][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.050805][T21562] wg2: entered promiscuous mode
[  437.055892][T21562] wg2: entered allmulticast mode
[  437.101032][T21567] bridge0: port 3(vlan2) entered blocking state
[  437.107475][T21567] bridge0: port 3(vlan2) entered disabled state
[  437.114146][T21567] vlan2: entered allmulticast mode
[  437.119419][T21567] bridge0: entered allmulticast mode
[  437.149179][T21567] vlan2: left allmulticast mode
[  437.154140][T21567] bridge0: left allmulticast mode
[  437.163503][T21569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6184'.
[  437.176666][T21569] loop0: detected capacity change from 0 to 512
[  437.183542][T21569] EXT4-fs: Ignoring removed i_version option
[  437.189670][T21569] EXT4-fs: Ignoring removed mblk_io_submit option
[  437.196995][T21569] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  437.230930][T21569] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.6184: iget: bad i_size value: -6917529027641081756
[  437.256848][T21573] netlink: 'syz.2.6186': attribute type 10 has an invalid length.
[  437.281874][T21569] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6184: couldn't read orphan inode 17 (err -117)
[  437.298762][T21579] netlink: 'syz.2.6187': attribute type 21 has an invalid length.
[  437.317706][T21569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.378721][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.099278][T21603] random: crng reseeded on system resumption
[  438.211757][T21605] random: crng reseeded on system resumption
[  438.394795][T21610] netlink: 'syz.0.6197': attribute type 10 has an invalid length.
[  438.448280][T21618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6201'.
[  438.475497][T21620] loop9: detected capacity change from 0 to 2048
[  438.492494][T21620] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.690346][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.730274][T21635] netlink: 'syz.9.6205': attribute type 21 has an invalid length.
[  438.969705][T21638] loop4: detected capacity change from 0 to 512
[  438.989953][T21638] EXT4-fs: Ignoring removed i_version option
[  438.996078][T21638] EXT4-fs: Ignoring removed mblk_io_submit option
[  439.017504][T21638] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  439.039659][T21638] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.6206: iget: bad i_size value: -6917529027641081756
[  439.054741][T21638] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6206: couldn't read orphan inode 17 (err -117)
[  439.076690][T21638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.114790][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.291972][T21648] usb usb1: usbfs: process 21648 (syz.9.6209) did not claim interface 0 before use
[  439.313322][   T29] kauditd_printk_skb: 412 callbacks suppressed
[  439.313342][   T29] audit: type=1326 audit(1749561895.690:36907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cd5da58e7 code=0x7ffc0000
[  439.354580][   T29] audit: type=1326 audit(1749561895.727:36908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cd5d4ab19 code=0x7ffc0000
[  439.378256][   T29] audit: type=1326 audit(1749561895.727:36909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cd5da58e7 code=0x7ffc0000
[  439.401900][   T29] audit: type=1326 audit(1749561895.727:36910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1cd5d4ab19 code=0x7ffc0000
[  439.425687][   T29] audit: type=1326 audit(1749561895.727:36911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.449416][   T29] audit: type=1326 audit(1749561895.727:36912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.473005][   T29] audit: type=1326 audit(1749561895.727:36913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.496680][   T29] audit: type=1326 audit(1749561895.727:36914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.520435][   T29] audit: type=1326 audit(1749561895.727:36915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.543974][   T29] audit: type=1326 audit(1749561895.727:36916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21645 comm="syz.9.6209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  439.701463][T21652] FAULT_INJECTION: forcing a failure.
[  439.701463][T21652] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  439.716826][T21652] CPU: 0 UID: 0 PID: 21652 Comm: syz.0.6210 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  439.716899][T21652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  439.716917][T21652] Call Trace:
[  439.716925][T21652]  <TASK>
[  439.716934][T21652]  __dump_stack+0x1d/0x30
[  439.716961][T21652]  dump_stack_lvl+0xe8/0x140
[  439.716987][T21652]  dump_stack+0x15/0x1b
[  439.717009][T21652]  should_fail_ex+0x265/0x280
[  439.717108][T21652]  should_fail_alloc_page+0xf2/0x100
[  439.717134][T21652]  __alloc_frozen_pages_noprof+0xff/0x360
[  439.717181][T21652]  __alloc_pages_noprof+0x9/0x20
[  439.717256][T21652]  probe_event_enable+0x50d/0x7d0
[  439.717365][T21652]  ? __pfx_uprobe_perf_filter+0x10/0x10
[  439.717406][T21652]  trace_uprobe_register+0x86/0x3c0
[  439.717527][T21652]  perf_trace_event_init+0x359/0x7b0
[  439.717577][T21652]  perf_uprobe_init+0xf9/0x150
[  439.717640][T21652]  perf_uprobe_event_init+0xea/0x150
[  439.717673][T21652]  perf_try_init_event+0xd6/0x540
[  439.717714][T21652]  ? perf_event_alloc+0xb1c/0x1680
[  439.717753][T21652]  perf_event_alloc+0xb27/0x1680
[  439.717858][T21652]  __se_sys_perf_event_open+0x615/0x11c0
[  439.717929][T21652]  __x64_sys_perf_event_open+0x67/0x80
[  439.717997][T21652]  x64_sys_call+0x27ec/0x2fb0
[  439.718021][T21652]  do_syscall_64+0xd2/0x200
[  439.718042][T21652]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  439.718157][T21652]  ? clear_bhb_loop+0x40/0x90
[  439.718186][T21652]  ? clear_bhb_loop+0x40/0x90
[  439.718213][T21652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.718235][T21652] RIP: 0033:0x7f767f75e929
[  439.718250][T21652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.718321][T21652] RSP: 002b:00007f767ddc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  439.718344][T21652] RAX: ffffffffffffffda RBX: 00007f767f985fa0 RCX: 00007f767f75e929
[  439.718358][T21652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  439.718374][T21652] RBP: 00007f767ddc7090 R08: 0000000000000000 R09: 0000000000000000
[  439.718390][T21652] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002
[  439.718483][T21652] R13: 0000000000000000 R14: 00007f767f985fa0 R15: 00007fffb8f94ba8
[  439.718509][T21652]  </TASK>
[  439.959160][T21655] netlink: 'syz.7.6212': attribute type 10 has an invalid length.
[  439.999045][T21657] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6213'.
[  440.032144][T21659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6214'.
[  440.114594][T21665] siw: device registration error -23
[  440.145196][T21667] loop2: detected capacity change from 0 to 1024
[  440.173059][T21672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6220'.
[  440.269301][T21664] loop4: detected capacity change from 0 to 8192
[  440.286395][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6219'.
[  440.309074][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6219'.
[  440.352552][T21677] netlink: 'syz.9.6219': attribute type 3 has an invalid length.
[  440.360519][T21677] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.6219'.
[  440.499585][T21683] netlink: 'syz.2.6223': attribute type 10 has an invalid length.
[  440.509162][T21685] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6224'.
[  440.610226][T21687] delete_channel: no stack
[  440.633672][T21691] loop9: detected capacity change from 0 to 256
[  440.818944][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6226'.
[  440.828630][T21693] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  440.836886][T21693] FAT-fs (loop9): Filesystem has been set read-only
[  440.845106][T21693] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  440.853888][T21693] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  441.012738][T21693] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  441.127842][T21702] FAULT_INJECTION: forcing a failure.
[  441.127842][T21702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.141119][T21702] CPU: 0 UID: 0 PID: 21702 Comm: syz.2.6229 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  441.141178][T21702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.141192][T21702] Call Trace:
[  441.141217][T21702]  <TASK>
[  441.141243][T21702]  __dump_stack+0x1d/0x30
[  441.141287][T21702]  dump_stack_lvl+0xe8/0x140
[  441.141314][T21702]  dump_stack+0x15/0x1b
[  441.141342][T21702]  should_fail_ex+0x265/0x280
[  441.141380][T21702]  should_fail+0xb/0x20
[  441.141495][T21702]  should_fail_usercopy+0x1a/0x20
[  441.141518][T21702]  _copy_to_user+0x20/0xa0
[  441.141544][T21702]  simple_read_from_buffer+0xb5/0x130
[  441.141589][T21702]  proc_fail_nth_read+0x100/0x140
[  441.141659][T21702]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  441.141680][T21702]  vfs_read+0x19d/0x6f0
[  441.141703][T21702]  ? __rcu_read_unlock+0x4f/0x70
[  441.141733][T21702]  ? __fget_files+0x184/0x1c0
[  441.141825][T21702]  ksys_read+0xda/0x1a0
[  441.141849][T21702]  __x64_sys_read+0x40/0x50
[  441.141869][T21702]  x64_sys_call+0x2d77/0x2fb0
[  441.141895][T21702]  do_syscall_64+0xd2/0x200
[  441.141993][T21702]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  441.142029][T21702]  ? clear_bhb_loop+0x40/0x90
[  441.142171][T21702]  ? clear_bhb_loop+0x40/0x90
[  441.142194][T21702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.142310][T21702] RIP: 0033:0x7f4fa830d33c
[  441.142326][T21702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  441.142358][T21702] RSP: 002b:00007f4fa6977030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  441.142384][T21702] RAX: ffffffffffffffda RBX: 00007f4fa8535fa0 RCX: 00007f4fa830d33c
[  441.142412][T21702] RDX: 000000000000000f RSI: 00007f4fa69770a0 RDI: 0000000000000014
[  441.142502][T21702] RBP: 00007f4fa6977090 R08: 0000000000000000 R09: 0000000000000000
[  441.142587][T21702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.142600][T21702] R13: 0000000000000000 R14: 00007f4fa8535fa0 R15: 00007ffd670e1f98
[  441.142623][T21702]  </TASK>
[  441.144761][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6230'.
[  441.407494][T21702] delete_channel: no stack
[  441.485804][T21707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6231'.
[  441.516532][T21711] FAULT_INJECTION: forcing a failure.
[  441.516532][T21711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.529759][T21711] CPU: 1 UID: 0 PID: 21711 Comm: syz.4.6233 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  441.529842][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.529855][T21711] Call Trace:
[  441.529861][T21711]  <TASK>
[  441.529869][T21711]  __dump_stack+0x1d/0x30
[  441.529928][T21711]  dump_stack_lvl+0xe8/0x140
[  441.530028][T21711]  dump_stack+0x15/0x1b
[  441.530045][T21711]  should_fail_ex+0x265/0x280
[  441.530082][T21711]  should_fail+0xb/0x20
[  441.530123][T21711]  should_fail_usercopy+0x1a/0x20
[  441.530157][T21711]  _copy_to_user+0x20/0xa0
[  441.530182][T21711]  simple_read_from_buffer+0xb5/0x130
[  441.530235][T21711]  proc_fail_nth_read+0x100/0x140
[  441.530308][T21711]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  441.530336][T21711]  vfs_read+0x19d/0x6f0
[  441.530356][T21711]  ? __rcu_read_unlock+0x4f/0x70
[  441.530378][T21711]  ? __fget_files+0x184/0x1c0
[  441.530404][T21711]  ksys_read+0xda/0x1a0
[  441.530437][T21711]  __x64_sys_read+0x40/0x50
[  441.530463][T21711]  x64_sys_call+0x2d77/0x2fb0
[  441.530487][T21711]  do_syscall_64+0xd2/0x200
[  441.530509][T21711]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  441.530539][T21711]  ? clear_bhb_loop+0x40/0x90
[  441.530602][T21711]  ? clear_bhb_loop+0x40/0x90
[  441.530631][T21711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.530727][T21711] RIP: 0033:0x7f6f5d73d33c
[  441.530743][T21711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  441.530766][T21711] RSP: 002b:00007f6f5bda7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  441.530790][T21711] RAX: ffffffffffffffda RBX: 00007f6f5d965fa0 RCX: 00007f6f5d73d33c
[  441.530807][T21711] RDX: 000000000000000f RSI: 00007f6f5bda70a0 RDI: 0000000000000009
[  441.530823][T21711] RBP: 00007f6f5bda7090 R08: 0000000000000000 R09: 0000000000000000
[  441.530906][T21711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.530922][T21711] R13: 0000000000000000 R14: 00007f6f5d965fa0 R15: 00007ffd42865368
[  441.531054][T21711]  </TASK>
[  441.559345][T21715] bridge0: port 3(vlan2) entered blocking state
[  441.746235][T21715] bridge0: port 3(vlan2) entered disabled state
[  441.754517][T21715] vlan2: entered allmulticast mode
[  441.759862][T21715] bridge0: entered allmulticast mode
[  441.810630][T21719] loop0: detected capacity change from 0 to 2048
[  441.818679][T21715] vlan2: left allmulticast mode
[  441.823696][T21715] bridge0: left allmulticast mode
[  441.840599][T21721] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6238'.
[  441.849774][T21721] tipc: Invalid UDP bearer configuration
[  441.849796][T21721] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  441.871600][T21723] netlink: 'syz.9.6239': attribute type 10 has an invalid length.
[  441.871610][T21717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6236'.
[  441.904899][T21719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.014475][T21735] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6243'.
[  442.093826][T21738] loop2: detected capacity change from 0 to 512
[  442.104846][T21739] loop9: detected capacity change from 0 to 512
[  442.121132][T21739] EXT4-fs: Ignoring removed i_version option
[  442.127382][T21739] EXT4-fs: Ignoring removed mblk_io_submit option
[  442.140890][T21738] EXT4-fs (loop2): 1 orphan inode deleted
[  442.147226][T21739] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  442.156489][ T8041] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 1
[  442.170099][T21738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.183271][T21738] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.202574][T21739] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #17: comm syz.9.6242: iget: bad i_size value: -6917529027641081756
[  442.219347][T21737] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.6244: iget: bad i_size value: 360287970189639690
[  442.232282][T21739] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.6242: couldn't read orphan inode 17 (err -117)
[  442.245030][T21739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.294936][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.308264][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.328049][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6249'.
[  442.342536][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.354328][T21756] loop9: detected capacity change from 0 to 128
[  442.369843][T21756] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  442.384036][T21756] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.501697][T21065] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  442.516742][T21762] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  442.587322][T21766] loop9: detected capacity change from 0 to 1024
[  442.596202][T21766] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  442.608076][T21766] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  442.617291][T21766] EXT4-fs (loop9): orphan cleanup on readonly fs
[  442.624838][T21766] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  442.640105][T21766] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  442.655568][T21766] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  442.668097][T21766] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  442.682236][T21766] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  442.695726][T21766] EXT4-fs (loop9): 1 orphan inode deleted
[  442.703063][T21766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  442.717670][T21766] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  442.737460][T21766] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  442.758568][T21770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6253'.
[  442.767609][T21770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6253'.
[  442.780140][T21766] random: crng reseeded on system resumption
[  442.806732][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.855443][T21774] bridge0: port 3(vlan2) entered blocking state
[  442.861821][T21774] bridge0: port 3(vlan2) entered disabled state
[  442.869712][T21774] vlan2: entered allmulticast mode
[  442.875046][T21774] bridge0: entered allmulticast mode
[  442.881301][T21774] vlan2: left allmulticast mode
[  442.886297][T21774] bridge0: left allmulticast mode
[  442.948945][T21778] SELinux:  policydb version -1592362021 does not match my version range 15-34
[  442.965496][T21778] SELinux: failed to load policy
[  443.740838][T21798] loop2: detected capacity change from 0 to 1024
[  443.771113][T21798] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  443.781087][T21798] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  443.829487][T21798] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  443.840724][T21798] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.6263: unexpected bad inode w/o EXT4_IGET_BAD
[  443.862869][T21807] loop4: detected capacity change from 0 to 8192
[  443.907963][T21798] EXT4-fs (loop2): no journal found
[  443.913280][T21798] EXT4-fs (loop2): can't get journal size
[  443.925775][T21805] loop9: detected capacity change from 0 to 512
[  443.932925][T21805] EXT4-fs: Ignoring removed bh option
[  443.939453][T21798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  443.957306][T21805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.971401][T21805] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.985708][T21805] bridge_slave_1: left allmulticast mode
[  443.991450][T21805] bridge_slave_1: left promiscuous mode
[  443.997244][T21805] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.014932][T21805] bridge_slave_0: left allmulticast mode
[  444.020673][T21805] bridge_slave_0: left promiscuous mode
[  444.026626][T21805] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.191792][T21819] loop0: detected capacity change from 0 to 1024
[  444.199059][T21819] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  444.210403][T21819] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  444.218651][T21819] EXT4-fs (loop0): orphan cleanup on readonly fs
[  444.226401][T21819] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  444.240533][T21819] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  444.251787][T21819] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  444.263044][T21819] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  444.276345][T21819] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  444.287443][T21819] EXT4-fs (loop0): 1 orphan inode deleted
[  444.294057][T21819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  444.312239][T21819] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  444.331314][T21819] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  444.351319][T21819] random: crng reseeded on system resumption
[  444.387706][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.416602][T21828] loop0: detected capacity change from 0 to 1024
[  444.423628][T21828] ext4: Unknown parameter 'noacl'
[  444.468249][T21830] netlink: 'syz.0.6272': attribute type 11 has an invalid length.
[  444.591727][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.593476][T21833] loop0: detected capacity change from 0 to 2048
[  444.619629][T21833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.620883][T21837] netlink: 'syz.2.6274': attribute type 10 has an invalid length.
[  444.738946][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.801601][T21843] loop9: detected capacity change from 0 to 512
[  444.825092][   T29] kauditd_printk_skb: 307 callbacks suppressed
[  444.825110][   T29] audit: type=1326 audit(1749561900.844:37205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  444.867203][   T29] audit: type=1326 audit(1749561900.844:37206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  444.890967][   T29] audit: type=1326 audit(1749561900.872:37207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  444.919118][T21843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.937736][   T29] audit: type=1326 audit(1749561900.890:37208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  444.961399][   T29] audit: type=1326 audit(1749561900.900:37209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  444.985115][   T29] audit: type=1326 audit(1749561900.900:37210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  445.008970][   T29] audit: type=1326 audit(1749561900.900:37211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  445.011072][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.032638][   T29] audit: type=1326 audit(1749561900.900:37212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  445.065679][   T29] audit: type=1326 audit(1749561900.900:37213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  445.089412][   T29] audit: type=1326 audit(1749561900.900:37214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21844 comm="syz.2.6278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fa830e929 code=0x7ffc0000
[  445.113334][T21843] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  445.163078][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.180485][T21858] netlink: 'syz.7.6284': attribute type 21 has an invalid length.
[  445.250990][T21872] 9pnet_fd: Insufficient options for proto=fd
[  445.328099][T21876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.347830][T21884] FAULT_INJECTION: forcing a failure.
[  445.347830][T21884] name failslab, interval 1, probability 0, space 0, times 0
[  445.360573][T21884] CPU: 0 UID: 0 PID: 21884 Comm: syz.9.6295 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  445.360625][T21884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.360642][T21884] Call Trace:
[  445.360650][T21884]  <TASK>
[  445.360658][T21884]  __dump_stack+0x1d/0x30
[  445.360682][T21884]  dump_stack_lvl+0xe8/0x140
[  445.360726][T21884]  dump_stack+0x15/0x1b
[  445.360743][T21884]  should_fail_ex+0x265/0x280
[  445.360781][T21884]  should_failslab+0x8c/0xb0
[  445.360884][T21884]  kmem_cache_alloc_noprof+0x50/0x310
[  445.360938][T21884]  ? audit_log_start+0x365/0x6c0
[  445.360974][T21884]  audit_log_start+0x365/0x6c0
[  445.361012][T21884]  audit_seccomp+0x48/0x100
[  445.361044][T21884]  ? __seccomp_filter+0x68c/0x10d0
[  445.361094][T21884]  __seccomp_filter+0x69d/0x10d0
[  445.361121][T21884]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  445.361208][T21884]  ? vfs_write+0x75e/0x8e0
[  445.361228][T21884]  ? __rcu_read_unlock+0x4f/0x70
[  445.361252][T21884]  ? __fget_files+0x184/0x1c0
[  445.361279][T21884]  __secure_computing+0x82/0x150
[  445.361308][T21884]  syscall_trace_enter+0xcf/0x1e0
[  445.361335][T21884]  do_syscall_64+0xac/0x200
[  445.361433][T21884]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  445.361550][T21884]  ? clear_bhb_loop+0x40/0x90
[  445.361575][T21884]  ? clear_bhb_loop+0x40/0x90
[  445.361649][T21884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.361677][T21884] RIP: 0033:0x7f1cd5dae929
[  445.361695][T21884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.361716][T21884] RSP: 002b:00007f1cd4417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  445.361780][T21884] RAX: ffffffffffffffda RBX: 00007f1cd5fd5fa0 RCX: 00007f1cd5dae929
[  445.361794][T21884] RDX: 0000000000000004 RSI: 0000200000000480 RDI: 0000000000000016
[  445.361807][T21884] RBP: 00007f1cd4417090 R08: 0000000000000000 R09: 0000000000000000
[  445.361819][T21884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.361833][T21884] R13: 0000000000000000 R14: 00007f1cd5fd5fa0 R15: 00007ffedf5c5b48
[  445.361932][T21884]  </TASK>
[  445.668847][T21876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.697674][T21886] loop2: detected capacity change from 0 to 1764
[  445.768213][T21876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.800429][T21902] syzkaller1: entered promiscuous mode
[  445.805982][T21902] syzkaller1: entered allmulticast mode
[  445.859223][T21876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.897088][T21911] __nla_validate_parse: 6 callbacks suppressed
[  445.897112][T21911] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6306'.
[  445.898451][T21913] FAULT_INJECTION: forcing a failure.
[  445.898451][T21913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.925638][T21913] CPU: 1 UID: 0 PID: 21913 Comm: syz.7.6307 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  445.925686][T21913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.925775][T21913] Call Trace:
[  445.925783][T21913]  <TASK>
[  445.925793][T21913]  __dump_stack+0x1d/0x30
[  445.925880][T21913]  dump_stack_lvl+0xe8/0x140
[  445.925906][T21913]  dump_stack+0x15/0x1b
[  445.925928][T21913]  should_fail_ex+0x265/0x280
[  445.925977][T21913]  should_fail+0xb/0x20
[  445.926019][T21913]  should_fail_usercopy+0x1a/0x20
[  445.926057][T21913]  _copy_from_user+0x1c/0xb0
[  445.926153][T21913]  ___sys_sendmsg+0xc1/0x1d0
[  445.926217][T21913]  __x64_sys_sendmsg+0xd4/0x160
[  445.926253][T21913]  x64_sys_call+0x2999/0x2fb0
[  445.926277][T21913]  do_syscall_64+0xd2/0x200
[  445.926382][T21913]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  445.926418][T21913]  ? clear_bhb_loop+0x40/0x90
[  445.926491][T21913]  ? clear_bhb_loop+0x40/0x90
[  445.926521][T21913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.926550][T21913] RIP: 0033:0x7fe1de70e929
[  445.926570][T21913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.926594][T21913] RSP: 002b:00007fe1dcd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.926620][T21913] RAX: ffffffffffffffda RBX: 00007fe1de935fa0 RCX: 00007fe1de70e929
[  445.926647][T21913] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  445.926664][T21913] RBP: 00007fe1dcd77090 R08: 0000000000000000 R09: 0000000000000000
[  445.926680][T21913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.926697][T21913] R13: 0000000000000000 R14: 00007fe1de935fa0 R15: 00007ffce47b4d28
[  445.926731][T21913]  </TASK>
[  446.114529][T21876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.126811][T21876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.140502][T21876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.153203][T21876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.223962][T21931] netlink: 'syz.9.6314': attribute type 21 has an invalid length.
[  446.260511][T21934] random: crng reseeded on system resumption
[  446.374303][T21942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6318'.
[  446.436739][T21948] loop0: detected capacity change from 0 to 1024
[  446.447382][T21946] lo speed is unknown, defaulting to 1000
[  446.457096][T21948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.482055][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6319'.
[  446.506058][T20209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.598937][T21953] loop2: detected capacity change from 0 to 8192
[  446.610819][T21955] loop0: detected capacity change from 0 to 8192
[  446.660236][T21953] FAULT_INJECTION: forcing a failure.
[  446.660236][T21953] name failslab, interval 1, probability 0, space 0, times 0
[  446.673125][T21953] CPU: 1 UID: 0 PID: 21953 Comm: syz.2.6322 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  446.673176][T21953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  446.673209][T21953] Call Trace:
[  446.673217][T21953]  <TASK>
[  446.673224][T21953]  __dump_stack+0x1d/0x30
[  446.673307][T21953]  dump_stack_lvl+0xe8/0x140
[  446.673333][T21953]  dump_stack+0x15/0x1b
[  446.673382][T21953]  should_fail_ex+0x265/0x280
[  446.673437][T21953]  should_failslab+0x8c/0xb0
[  446.673468][T21953]  kmem_cache_alloc_node_noprof+0x57/0x320
[  446.673502][T21953]  ? __alloc_skb+0x101/0x320
[  446.673562][T21953]  __alloc_skb+0x101/0x320
[  446.673637][T21953]  ? audit_log_start+0x365/0x6c0
[  446.673697][T21953]  audit_log_start+0x380/0x6c0
[  446.673743][T21953]  audit_seccomp+0x48/0x100
[  446.673822][T21953]  ? __seccomp_filter+0x68c/0x10d0
[  446.673867][T21953]  __seccomp_filter+0x69d/0x10d0
[  446.673899][T21953]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  446.673926][T21953]  ? vfs_write+0x75e/0x8e0
[  446.673954][T21953]  __secure_computing+0x82/0x150
[  446.673983][T21953]  syscall_trace_enter+0xcf/0x1e0
[  446.674087][T21953]  do_syscall_64+0xac/0x200
[  446.674108][T21953]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  446.674177][T21953]  ? clear_bhb_loop+0x40/0x90
[  446.674243][T21953]  ? clear_bhb_loop+0x40/0x90
[  446.674271][T21953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.674320][T21953] RIP: 0033:0x7f4fa830e929
[  446.674362][T21953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.674385][T21953] RSP: 002b:00007f4fa6977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.674425][T21953] RAX: ffffffffffffffda RBX: 00007f4fa8535fa0 RCX: 00007f4fa830e929
[  446.674441][T21953] RDX: 0000200000000900 RSI: 00000000c0185879 RDI: 0000000000000009
[  446.674464][T21953] RBP: 00007f4fa6977090 R08: 0000000000000000 R09: 0000000000000000
[  446.674480][T21953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.674493][T21953] R13: 0000000000000000 R14: 00007f4fa8535fa0 R15: 00007ffd670e1f98
[  446.674516][T21953]  </TASK>
[  446.972429][T21969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6325'.
[  447.030538][T21968] random: crng reseeded on system resumption
[  447.075453][T21975] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6330'.
[  448.090713][T21984] FAULT_INJECTION: forcing a failure.
[  448.090713][T21984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.103922][T21984] CPU: 0 UID: 0 PID: 21984 Comm: syz.0.6331 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  448.103959][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  448.103974][T21984] Call Trace:
[  448.103983][T21984]  <TASK>
[  448.103993][T21984]  __dump_stack+0x1d/0x30
[  448.104021][T21984]  dump_stack_lvl+0xe8/0x140
[  448.104044][T21984]  dump_stack+0x15/0x1b
[  448.104073][T21984]  should_fail_ex+0x265/0x280
[  448.104123][T21984]  should_fail+0xb/0x20
[  448.104161][T21984]  should_fail_usercopy+0x1a/0x20
[  448.104182][T21984]  _copy_from_user+0x1c/0xb0
[  448.104232][T21984]  ___sys_sendmsg+0xc1/0x1d0
[  448.104274][T21984]  __x64_sys_sendmsg+0xd4/0x160
[  448.104305][T21984]  x64_sys_call+0x2999/0x2fb0
[  448.104327][T21984]  do_syscall_64+0xd2/0x200
[  448.104353][T21984]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  448.104387][T21984]  ? clear_bhb_loop+0x40/0x90
[  448.104482][T21984]  ? clear_bhb_loop+0x40/0x90
[  448.104507][T21984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.104535][T21984] RIP: 0033:0x7f767f75e929
[  448.104554][T21984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.104609][T21984] RSP: 002b:00007f767dda6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.104649][T21984] RAX: ffffffffffffffda RBX: 00007f767f986080 RCX: 00007f767f75e929
[  448.104664][T21984] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008
[  448.104679][T21984] RBP: 00007f767dda6090 R08: 0000000000000000 R09: 0000000000000000
[  448.104702][T21984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.104718][T21984] R13: 0000000000000000 R14: 00007f767f986080 R15: 00007fffb8f94ba8
[  448.104741][T21984]  </TASK>
[  448.343364][T21988] loop2: detected capacity change from 0 to 164
[  448.350734][T21988] isofs_fill_super: root inode is not a directory. Corrupted media?
[  448.431043][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6333'.
[  448.515711][T22000] bond0: (slave syz_tun): Releasing backup interface
[  448.552921][T21983] Set syz1 is full, maxelem 65536 reached
[  448.580605][T21988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6333'.
[  448.583793][T21988] loop2: detected capacity change from 0 to 512
[  448.584086][T21988] EXT4-fs: Ignoring removed i_version option
[  448.584184][T21988] EXT4-fs: Ignoring removed mblk_io_submit option
[  448.589079][T21988] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  448.593084][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593123][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593148][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593246][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593270][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593298][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593325][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593346][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593369][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593392][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593413][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593543][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593572][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593601][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593628][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593649][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593720][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593802][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593828][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593856][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593881][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593902][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.593929][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594007][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594035][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594064][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594098][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594124][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.594152][ T3416] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0
[  448.603351][T22010] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6341'.
[  448.610175][ T3416] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1
[  448.626956][T22006] macvlan1: entered promiscuous mode
[  448.628833][T21988] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.6333: iget: bad i_size value: -6917529027641081756
[  448.629065][T21988] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6333: couldn't read orphan inode 17 (err -117)
[  448.630943][T22006] ipvlan0: entered promiscuous mode
[  448.929939][T22006] ipvlan0: left promiscuous mode
[  448.943139][T22006] macvlan1: left promiscuous mode
[  448.960571][T22014] bridge0: port 3(vlan2) entered blocking state
[  448.967139][T22014] bridge0: port 3(vlan2) entered disabled state
[  448.974368][T22014] vlan2: entered allmulticast mode
[  448.979573][T22014] bridge0: entered allmulticast mode
[  449.017684][T22026] loop2: detected capacity change from 0 to 8192
[  449.026920][T22014] vlan2: left allmulticast mode
[  449.031849][T22014] bridge0: left allmulticast mode
[  449.171129][T22030] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  449.408965][T22050] loop4: detected capacity change from 0 to 2048
[  449.518378][T22048] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  449.623089][T22048] SELinux: failed to load policy
[  449.997615][T22062] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6356'.
[  450.031131][T22062] netlink: 'syz.4.6356': attribute type 9 has an invalid length.
[  450.039007][T22062] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6356'.
[  450.200132][T22075] netlink: 'syz.4.6361': attribute type 10 has an invalid length.
[  450.281722][T22085] FAULT_INJECTION: forcing a failure.
[  450.281722][T22085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.294957][T22085] CPU: 1 UID: 0 PID: 22085 Comm: syz.2.6363 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  450.295034][T22085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  450.295050][T22085] Call Trace:
[  450.295059][T22085]  <TASK>
[  450.295069][T22085]  __dump_stack+0x1d/0x30
[  450.295175][T22085]  dump_stack_lvl+0xe8/0x140
[  450.295252][T22085]  dump_stack+0x15/0x1b
[  450.295271][T22085]  should_fail_ex+0x265/0x280
[  450.295311][T22085]  should_fail+0xb/0x20
[  450.295503][T22085]  should_fail_usercopy+0x1a/0x20
[  450.295537][T22085]  _copy_from_iter+0xcf/0xe40
[  450.295566][T22085]  ? ref_tracker_alloc+0x1f2/0x2f0
[  450.295612][T22085]  ? skb_set_owner_w+0x16a/0x1c0
[  450.295635][T22085]  ? sock_alloc_send_pskb+0x456/0x4f0
[  450.295719][T22085]  skb_copy_datagram_from_iter+0xb1/0x490
[  450.295748][T22085]  ? __rcu_read_unlock+0x4f/0x70
[  450.295775][T22085]  ? skb_put+0xa9/0xf0
[  450.295797][T22085]  packet_sendmsg+0x25ef/0x3240
[  450.295864][T22085]  ? __rcu_read_unlock+0x4f/0x70
[  450.295888][T22085]  ? avc_has_perm+0xd3/0x150
[  450.295932][T22085]  ? selinux_socket_sendmsg+0x175/0x1b0
[  450.296006][T22085]  ? __pfx_packet_sendmsg+0x10/0x10
[  450.296049][T22085]  __sock_sendmsg+0x142/0x180
[  450.296130][T22085]  __sys_sendto+0x268/0x330
[  450.296181][T22085]  __x64_sys_sendto+0x76/0x90
[  450.296244][T22085]  x64_sys_call+0x2eb6/0x2fb0
[  450.296268][T22085]  do_syscall_64+0xd2/0x200
[  450.296368][T22085]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  450.296394][T22085]  ? clear_bhb_loop+0x40/0x90
[  450.296417][T22085]  ? clear_bhb_loop+0x40/0x90
[  450.296441][T22085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.296462][T22085] RIP: 0033:0x7f4fa830e929
[  450.296486][T22085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.296507][T22085] RSP: 002b:00007f4fa6977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  450.296538][T22085] RAX: ffffffffffffffda RBX: 00007f4fa8535fa0 RCX: 00007f4fa830e929
[  450.296551][T22085] RDX: 000000000000000e RSI: 0000200000000240 RDI: 0000000000000003
[  450.296563][T22085] RBP: 00007f4fa6977090 R08: 0000200000000200 R09: 0000000000000014
[  450.296575][T22085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.296587][T22085] R13: 0000000000000000 R14: 00007f4fa8535fa0 R15: 00007ffd670e1f98
[  450.296608][T22085]  </TASK>
[  450.603973][   T29] kauditd_printk_skb: 401 callbacks suppressed
[  450.603993][   T29] audit: type=1326 audit(1749561906.241:37612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.633914][   T29] audit: type=1326 audit(1749561906.241:37613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.657682][   T29] audit: type=1326 audit(1749561906.241:37614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.681347][   T29] audit: type=1326 audit(1749561906.241:37615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.704999][   T29] audit: type=1326 audit(1749561906.241:37616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.720858][T22098] loop0: detected capacity change from 0 to 512
[  450.728595][   T29] audit: type=1326 audit(1749561906.241:37617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.740143][T22102] loop2: detected capacity change from 0 to 512
[  450.758445][   T29] audit: type=1326 audit(1749561906.241:37618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.758476][   T29] audit: type=1326 audit(1749561906.241:37619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.811953][   T29] audit: type=1326 audit(1749561906.241:37620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.816005][T22098] EXT4-fs: Ignoring removed i_version option
[  450.835624][   T29] audit: type=1326 audit(1749561906.241:37621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22092 comm="syz.9.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1cd5dae929 code=0x7ffc0000
[  450.841648][T22098] EXT4-fs: Ignoring removed mblk_io_submit option
[  450.879758][T22102] EXT4-fs (loop2): orphan cleanup on readonly fs
[  450.886499][T22102] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6368: bg 0: block 131: padding at end of block bitmap is not set
[  450.903927][T22098] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  450.913436][T22102] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  450.922981][T22101] loop4: detected capacity change from 0 to 1024
[  450.923850][T22102] EXT4-fs (loop2): 1 truncate cleaned up
[  450.941596][T22101] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  450.963765][T22098] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.6366: iget: bad i_size value: -6917529027641081756
[  450.978495][T22101] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  450.986736][T22098] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6366: couldn't read orphan inode 17 (err -117)
[  450.999220][T22101] EXT4-fs (loop4): orphan cleanup on readonly fs
[  451.005677][T22095] xt_hashlimit: size too large, truncated to 1048576
[  451.022171][T22101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set
[  451.038674][T22101] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  451.090127][T22096] sd 0:0:1:0: device reset
[  451.106581][T22119] FAULT_INJECTION: forcing a failure.
[  451.106581][T22119] name failslab, interval 1, probability 0, space 0, times 0
[  451.119366][T22119] CPU: 1 UID: 0 PID: 22119 Comm: syz.7.6373 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  451.119395][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.119411][T22119] Call Trace:
[  451.119419][T22119]  <TASK>
[  451.119429][T22119]  __dump_stack+0x1d/0x30
[  451.119516][T22119]  dump_stack_lvl+0xe8/0x140
[  451.119541][T22119]  dump_stack+0x15/0x1b
[  451.119557][T22119]  should_fail_ex+0x265/0x280
[  451.119599][T22119]  should_failslab+0x8c/0xb0
[  451.119694][T22119]  __kmalloc_noprof+0xa5/0x3e0
[  451.119728][T22119]  ? copy_splice_read+0xc2/0x5f0
[  451.119763][T22119]  copy_splice_read+0xc2/0x5f0
[  451.119852][T22119]  ? _parse_integer_limit+0x170/0x190
[  451.119949][T22119]  ? __pfx_copy_splice_read+0x10/0x10
[  451.119981][T22119]  splice_file_to_pipe+0x241/0x3a0
[  451.120050][T22119]  do_splice+0xc4d/0x10b0
[  451.120088][T22119]  ? proc_fail_nth_write+0x12d/0x160
[  451.120110][T22119]  ? __rcu_read_unlock+0x4f/0x70
[  451.120169][T22119]  ? __fget_files+0x184/0x1c0
[  451.120225][T22119]  __se_sys_splice+0x26c/0x3a0
[  451.120319][T22119]  __x64_sys_splice+0x78/0x90
[  451.120355][T22119]  x64_sys_call+0xb0a/0x2fb0
[  451.120379][T22119]  do_syscall_64+0xd2/0x200
[  451.120403][T22119]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  451.120502][T22119]  ? clear_bhb_loop+0x40/0x90
[  451.120531][T22119]  ? clear_bhb_loop+0x40/0x90
[  451.120560][T22119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.120666][T22119] RIP: 0033:0x7fe1de70e929
[  451.120684][T22119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.120772][T22119] RSP: 002b:00007fe1dcd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  451.120794][T22119] RAX: ffffffffffffffda RBX: 00007fe1de935fa0 RCX: 00007fe1de70e929
[  451.120810][T22119] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007
[  451.120824][T22119] RBP: 00007fe1dcd77090 R08: 00000800000000fc R09: 0000000000000000
[  451.120837][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.120850][T22119] R13: 0000000000000000 R14: 00007fe1de935fa0 R15: 00007ffce47b4d28
[  451.120876][T22119]  </TASK>
[  451.148738][T22101] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  451.339946][T22125] __nla_validate_parse: 4 callbacks suppressed
[  451.340011][T22125] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6375'.
[  451.341352][T22101] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096
[  451.380373][T22101] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0
[  451.395995][T22101] EXT4-fs (loop4): 1 orphan inode deleted
[  451.432619][T22101] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm +}[@: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  451.435515][ T3583] IPVS: starting estimator thread 0...
[  451.473346][T22131] loop9: detected capacity change from 0 to 256
[  451.481888][T22131] msdos: Bad value for 'tz'
[  451.502987][T22135] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.6369: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  451.544691][T22140] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6379'.
[  451.547004][T22101] random: crng reseeded on system resumption
[  451.579038][T22132] IPVS: using max 2592 ests per chain, 129600 per kthread
[  451.592830][T22140] loop9: detected capacity change from 0 to 2048
[  451.619711][T22140] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.6379: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  451.641563][T22149] loop4: detected capacity change from 0 to 512
[  451.644246][T22140] EXT4-fs (loop9): Remounting filesystem read-only
[  451.659895][T22149] EXT4-fs: Ignoring removed i_version option
[  451.666049][T22149] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.677631][T22149] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  451.699513][T22153] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6383'.
[  451.711001][T22153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.711123][T22149] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.6382: iget: bad i_size value: -6917529027641081756
[  451.718464][T22153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.736600][T22149] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6382: couldn't read orphan inode 17 (err -117)
[  451.768165][T22153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.776155][T22153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.795950][T22158] loop9: detected capacity change from 0 to 1024
[  451.807373][T22158] EXT4-fs: Invalid want_extra_isize 0
[  451.817216][T22160] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6385'.
[  451.857791][T22162] bridge0: port 2(bridge_slave_1) entered learning state
[  451.885011][T22162] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.899066][T22162] loop4: detected capacity change from 0 to 164
[  451.982246][T22162] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  452.026416][T22166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6387'.
[  452.087875][T22168] loop4: detected capacity change from 0 to 8192
[  452.143821][T22170] loop4: detected capacity change from 0 to 164
[  452.151476][T22170] isofs_fill_super: root inode is not a directory. Corrupted media?
[  452.291994][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'.
[  452.301318][T22170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6389'.
[  452.316159][T22170] loop4: detected capacity change from 0 to 512
[  452.323088][T22170] EXT4-fs: Ignoring removed i_version option
[  452.329148][T22170] EXT4-fs: Ignoring removed mblk_io_submit option
[  452.337377][T22170] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  452.356398][T22170] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.6389: iget: bad i_size value: -6917529027641081756
[  452.382622][T22170] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6389: couldn't read orphan inode 17 (err -117)
[  452.614286][T22201] loop4: detected capacity change from 0 to 8192
[  453.138636][T22211] netlink: 'syz.0.6402': attribute type 10 has an invalid length.
[  453.149083][T22209] loop9: detected capacity change from 0 to 8192
[  453.199747][T22213] random: crng reseeded on system resumption
[  453.255690][T22216] random: crng reseeded on system resumption
[  453.289811][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6405'.
[  453.299067][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6405'.
[  453.308089][T22219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6405'.
[  453.582014][T22238] loop0: detected capacity change from 0 to 128
[  453.661194][T22238] bio_check_eod: 102 callbacks suppressed
[  453.661210][T22238] syz.0.6412: attempt to access beyond end of device
[  453.661210][T22238] loop0: rw=0, sector=121, nr_sectors = 920 limit=128
[  453.681502][T22242] loop4: detected capacity change from 0 to 2048
[  454.264500][T22259] netlink: 'syz.0.6419': attribute type 16 has an invalid length.
[  454.272452][T22259] netlink: 'syz.0.6419': attribute type 17 has an invalid length.
[  454.342414][T22262] ref_ctr_offset mismatch. inode: 0x431 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000
[  454.388942][T22259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.483148][T22272] loop0: detected capacity change from 0 to 256
[  454.489768][T10593] IPVS: starting estimator thread 0...
[  454.506899][T22272] msdos: Bad value for 'tz'
[  455.112188][T22273] IPVS: using max 2496 ests per chain, 124800 per kthread
[  455.167696][T22283] lo speed is unknown, defaulting to 1000
[  455.279356][T22283] loop9: detected capacity change from 0 to 512
[  455.298628][T22283] EXT4-fs mount: 18 callbacks suppressed
[  455.298644][T22283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  455.317107][T22283] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.354970][T22283] EXT4-fs (loop9): shut down requested (0)
[  456.317533][T22317] loop2: detected capacity change from 0 to 164
[  456.341778][T22317] isofs_fill_super: root inode is not a directory. Corrupted media?
[  456.478685][T22331] netlink: 'syz.0.6440': attribute type 10 has an invalid length.
[  456.523626][T22331] batman_adv: batadv0: Adding interface: team0
[  456.530097][T22331] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.555364][T22331] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  456.580951][T22338] loop2: detected capacity change from 0 to 512
[  456.613809][T22338] EXT4-fs: Ignoring removed i_version option
[  456.619916][T22338] EXT4-fs: Ignoring removed mblk_io_submit option
[  456.673572][T22338] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  456.756911][T22338] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #17: comm syz.2.6436: iget: bad i_size value: -6917529027641081756
[  456.783878][T22352] netlink: 'syz.4.6445': attribute type 10 has an invalid length.
[  456.795382][T22338] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6436: couldn't read orphan inode 17 (err -117)
[  456.812452][   T29] kauditd_printk_skb: 270 callbacks suppressed
[  456.812469][   T29] audit: type=1326 audit(1749561912.059:37883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  456.845755][T21065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  456.862058][   T29] audit: type=1326 audit(1749561912.106:37884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  456.870169][T22355] __nla_validate_parse: 14 callbacks suppressed
[  456.870229][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6447'.
[  456.885872][   T29] audit: type=1326 audit(1749561912.106:37885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  456.901659][T22338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.925005][   T29] audit: type=1326 audit(1749561912.106:37886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  456.961426][   T29] audit: type=1326 audit(1749561912.106:37887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  456.985036][   T29] audit: type=1326 audit(1749561912.106:37888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  457.009125][   T29] audit: type=1326 audit(1749561912.106:37889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  457.033493][   T29] audit: type=1326 audit(1749561912.106:37890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  457.057066][   T29] audit: type=1326 audit(1749561912.106:37891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  457.080862][   T29] audit: type=1326 audit(1749561912.106:37892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22347 comm="syz.0.6444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f767f75e929 code=0x7ffc0000
[  457.142928][T22357] SELinux: syz.4.6448 (22357) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  457.161373][T22357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6448'.
[  457.467021][T20786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.525219][T22367] random: crng reseeded on system resumption
[  457.615115][T22373] option changes via remount are deprecated (pid=22372 comm=syz.4.6455)
[  457.741041][T22383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6458'.
[  457.762222][T22384] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6459'.
[  457.771317][T22384] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6459'.
[  457.796882][T22387] loop4: detected capacity change from 0 to 164
[  457.820589][T22387] isofs_fill_super: root inode is not a directory. Corrupted media?
[  457.961461][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6460'.
[  457.982650][T22393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6460'.
[  458.000731][T22392] SELinux: syz.0.6457 (22392) set checkreqprot to 1. This is no longer supported.
[  458.008418][T22393] loop4: detected capacity change from 0 to 512
[  458.033063][T22402] FAULT_INJECTION: forcing a failure.
[  458.033063][T22402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.046280][T22402] CPU: 1 UID: 0 PID: 22402 Comm: syz.2.6463 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  458.046342][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  458.046359][T22402] Call Trace:
[  458.046368][T22402]  <TASK>
[  458.046378][T22402]  __dump_stack+0x1d/0x30
[  458.046405][T22402]  dump_stack_lvl+0xe8/0x140
[  458.046431][T22402]  dump_stack+0x15/0x1b
[  458.046486][T22402]  should_fail_ex+0x265/0x280
[  458.046531][T22402]  should_fail+0xb/0x20
[  458.046627][T22402]  should_fail_usercopy+0x1a/0x20
[  458.046654][T22402]  _copy_from_user+0x1c/0xb0
[  458.046683][T22402]  __sys_sendto+0x19e/0x330
[  458.046856][T22402]  __x64_sys_sendto+0x76/0x90
[  458.046898][T22402]  x64_sys_call+0x2eb6/0x2fb0
[  458.046925][T22402]  do_syscall_64+0xd2/0x200
[  458.047031][T22402]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  458.047066][T22402]  ? clear_bhb_loop+0x40/0x90
[  458.047094][T22402]  ? clear_bhb_loop+0x40/0x90
[  458.047121][T22402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.047149][T22402] RIP: 0033:0x7f4fa83107bc
[  458.047205][T22402] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  458.047229][T22402] RSP: 002b:00007f4fa6954ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  458.047252][T22402] RAX: ffffffffffffffda RBX: 00007f4fa6954fc0 RCX: 00007f4fa83107bc
[  458.047270][T22402] RDX: 0000000000000024 RSI: 00007f4fa6955010 RDI: 000000000000000a
[  458.047286][T22402] RBP: 0000000000000000 R08: 00007f4fa6954f14 R09: 000000000000000c
[  458.047302][T22402] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  458.047393][T22402] R13: 00007f4fa6954f68 R14: 00007f4fa6955010 R15: 0000000000000000
[  458.047416][T22402]  </TASK>
[  458.056935][T22392] loop0: detected capacity change from 0 to 1024
[  458.069245][T22393] EXT4-fs: Ignoring removed i_version option
[  458.244114][T22393] EXT4-fs: Ignoring removed mblk_io_submit option
[  458.266411][T22392] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  458.278722][T22392] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  458.292893][    C1] ==================================================================
[  458.301026][    C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv
[  458.308281][    C1] 
[  458.310619][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 0:
[  458.318706][    C1]  can_can_gw_rcv+0x807/0x820
[  458.323418][    C1]  can_rcv_filter+0xc4/0x4f0
[  458.328038][    C1]  can_receive+0x163/0x1c0
[  458.332508][    C1]  canfd_rcv+0xed/0x190
[  458.336690][    C1]  __netif_receive_skb+0x11d/0x270
[  458.341859][    C1]  process_backlog+0x229/0x420
[  458.346667][    C1]  __napi_poll+0x66/0x3a0
[  458.351043][    C1]  net_rx_action+0x391/0x830
[  458.355669][    C1]  handle_softirqs+0xb7/0x290
[  458.360380][    C1]  do_softirq+0x5d/0x90
[  458.364567][    C1]  __local_bh_enable_ip+0x70/0x80
[  458.369616][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  458.374599][    C1]  batadv_nc_purge_paths+0x22b/0x270
[  458.379953][    C1]  batadv_nc_worker+0x3d8/0xae0
[  458.384844][    C1]  process_scheduled_works+0x4cb/0x9d0
[  458.390377][    C1]  worker_thread+0x582/0x770
[  458.395020][    C1]  kthread+0x486/0x510
[  458.399129][    C1]  ret_from_fork+0xda/0x150
[  458.403662][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.408469][    C1] 
[  458.410814][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 1:
[  458.418906][    C1]  can_can_gw_rcv+0x807/0x820
[  458.423640][    C1]  can_rcv_filter+0xc4/0x4f0
[  458.428257][    C1]  can_receive+0x163/0x1c0
[  458.432698][    C1]  canfd_rcv+0xed/0x190
[  458.436874][    C1]  __netif_receive_skb+0x11d/0x270
[  458.442021][    C1]  process_backlog+0x229/0x420
[  458.446814][    C1]  __napi_poll+0x66/0x3a0
[  458.451197][    C1]  net_rx_action+0x391/0x830
[  458.455826][    C1]  handle_softirqs+0xb7/0x290
[  458.460542][    C1]  run_ksoftirqd+0x1c/0x30
[  458.464998][    C1]  smpboot_thread_fn+0x32b/0x530
[  458.469987][    C1]  kthread+0x486/0x510
[  458.474087][    C1]  ret_from_fork+0xda/0x150
[  458.478621][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.483435][    C1] 
[  458.485782][    C1] value changed: 0x0000c6df -> 0x0000c6e0
[  458.491516][    C1] 
[  458.493856][    C1] Reported by Kernel Concurrency Sanitizer on:
[  458.500025][    C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  458.512390][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  458.522475][    C1] ==================================================================
[  458.531388][T22393] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  458.577368][    C1] ==================================================================
[  458.585512][    C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter
[  458.592747][    C1] 
[  458.595092][    C1] read-write to 0xffff88810093d388 of 8 bytes by interrupt on cpu 0:
[  458.603181][    C1]  can_rcv_filter+0xd9/0x4f0
[  458.607797][    C1]  can_receive+0x163/0x1c0
[  458.612235][    C1]  canfd_rcv+0xed/0x190
[  458.616411][    C1]  __netif_receive_skb+0x11d/0x270
[  458.621557][    C1]  process_backlog+0x229/0x420
[  458.626368][    C1]  __napi_poll+0x66/0x3a0
[  458.630735][    C1]  net_rx_action+0x391/0x830
[  458.635368][    C1]  handle_softirqs+0xb7/0x290
[  458.640078][    C1]  do_softirq+0x5d/0x90
[  458.644263][    C1]  __local_bh_enable_ip+0x70/0x80
[  458.649315][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  458.654291][    C1]  batadv_nc_purge_paths+0x22b/0x270
[  458.659620][    C1]  batadv_nc_worker+0x3ff/0xae0
[  458.664512][    C1]  process_scheduled_works+0x4cb/0x9d0
[  458.670009][    C1]  worker_thread+0x582/0x770
[  458.674660][    C1]  kthread+0x486/0x510
[  458.678763][    C1]  ret_from_fork+0xda/0x150
[  458.683296][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.688095][    C1] 
[  458.690433][    C1] read-write to 0xffff88810093d388 of 8 bytes by interrupt on cpu 1:
[  458.698522][    C1]  can_rcv_filter+0xd9/0x4f0
[  458.703152][    C1]  can_receive+0x163/0x1c0
[  458.707593][    C1]  canfd_rcv+0xed/0x190
[  458.711773][    C1]  __netif_receive_skb+0x11d/0x270
[  458.716928][    C1]  process_backlog+0x229/0x420
[  458.721726][    C1]  __napi_poll+0x66/0x3a0
[  458.726093][    C1]  net_rx_action+0x391/0x830
[  458.730720][    C1]  handle_softirqs+0xb7/0x290
[  458.735422][    C1]  do_softirq+0x5d/0x90
[  458.739611][    C1]  __local_bh_enable_ip+0x70/0x80
[  458.744664][    C1]  kernel_fpu_end+0x9d/0xd0
[  458.749207][    C1]  blake2s_compress+0x5f/0xd0
[  458.753911][    C1]  blake2s_final+0x6a/0xa0
[  458.758357][    C1]  message_ephemeral+0xfb/0x1d0
[  458.763243][    C1]  wg_noise_handshake_create_initiation+0x1ac/0x5a0
[  458.769873][    C1]  wg_packet_handshake_send_worker+0xb2/0x160
[  458.775984][    C1]  process_scheduled_works+0x4cb/0x9d0
[  458.781488][    C1]  worker_thread+0x582/0x770
[  458.786143][    C1]  kthread+0x486/0x510
[  458.790242][    C1]  ret_from_fork+0xda/0x150
[  458.794775][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.799573][    C1] 
[  458.801916][    C1] value changed: 0x000000000000fdc0 -> 0x000000000000fdc1
[  458.809041][    C1] 
[  458.811379][    C1] Reported by Kernel Concurrency Sanitizer on:
[  458.817551][    C1] CPU: 1 UID: 0 PID: 8031 Comm: kworker/u8:37 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  458.830261][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  458.840345][    C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
[  458.847334][    C1] ==================================================================
[  459.298421][T22392] JBD2: no valid journal superblock found
[  459.305748][T22392] EXT4-fs (loop0): Could not load journal inode
[  460.652667][T22409] 9pnet: Could not find request transport: f{ª
:X:ñRÇù¿­9¾£å
[  460.778067][T22411] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  460.855273][T22393] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.6460: iget: bad i_size value: -6917529027641081756
[  461.057979][T22393] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6460: couldn't read orphan inode 17 (err -117)
[  461.507039][    C0] ==================================================================
[  461.515200][    C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv
[  461.522443][    C0] 
[  461.524783][    C0] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 1:
[  461.532877][    C0]  can_can_gw_rcv+0x807/0x820
[  461.537597][    C0]  can_rcv_filter+0xc4/0x4f0
[  461.542220][    C0]  can_receive+0x163/0x1c0
[  461.546667][    C0]  canfd_rcv+0xed/0x190
[  461.550852][    C0]  __netif_receive_skb+0x11d/0x270
[  461.555995][    C0]  process_backlog+0x229/0x420
[  461.560799][    C0]  __napi_poll+0x66/0x3a0
[  461.565181][    C0]  net_rx_action+0x391/0x830
[  461.569829][    C0]  handle_softirqs+0xb7/0x290
[  461.574545][    C0]  do_softirq+0x5d/0x90
[  461.578838][    C0]  __local_bh_enable_ip+0x70/0x80
[  461.583902][    C0]  _raw_spin_unlock_bh+0x36/0x40
[  461.588886][    C0]  nsim_dev_trap_report_work+0x52b/0x630
[  461.594559][    C0]  process_scheduled_works+0x4cb/0x9d0
[  461.600070][    C0]  worker_thread+0x582/0x770
[  461.604703][    C0]  kthread+0x486/0x510
[  461.608884][    C0]  ret_from_fork+0xda/0x150
[  461.613414][    C0]  ret_from_fork_asm+0x1a/0x30
[  461.618204][    C0] 
[  461.620541][    C0] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 0:
[  461.628817][    C0]  can_can_gw_rcv+0x807/0x820
[  461.633531][    C0]  can_rcv_filter+0xc4/0x4f0
[  461.638149][    C0]  can_receive+0x163/0x1c0
[  461.642600][    C0]  canfd_rcv+0xed/0x190
[  461.646787][    C0]  __netif_receive_skb+0x11d/0x270
[  461.651930][    C0]  process_backlog+0x229/0x420
[  461.656732][    C0]  __napi_poll+0x66/0x3a0
[  461.661101][    C0]  net_rx_action+0x391/0x830
[  461.665738][    C0]  handle_softirqs+0xb7/0x290
[  461.670446][    C0]  do_softirq+0x5d/0x90
[  461.674632][    C0]  __local_bh_enable_ip+0x70/0x80
[  461.679711][    C0]  kernel_fpu_end+0x9d/0xd0
[  461.684257][    C0]  poly1305_blocks_arch+0x5b/0xe0
[  461.689319][    C0]  poly1305_update+0xaa/0x130
[  461.694029][    C0]  __chacha20poly1305_encrypt+0x18b/0x250
[  461.699784][    C0]  chacha20poly1305_encrypt+0x18f/0x1f0
[  461.705364][    C0]  wg_noise_handshake_create_initiation+0x267/0x5a0
[  461.712000][    C0]  wg_packet_handshake_send_worker+0xb2/0x160
[  461.718116][    C0]  process_scheduled_works+0x4cb/0x9d0
[  461.723623][    C0]  worker_thread+0x582/0x770
[  461.728261][    C0]  kthread+0x486/0x510
[  461.732369][    C0]  ret_from_fork+0xda/0x150
[  461.736902][    C0]  ret_from_fork_asm+0x1a/0x30
[  461.741694][    C0] 
[  461.744031][    C0] value changed: 0x000457e1 -> 0x000457e2
[  461.749766][    C0] 
[  461.752113][    C0] Reported by Kernel Concurrency Sanitizer on:
[  461.758287][    C0] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  461.770736][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  461.780825][    C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  461.787831][    C0] ==================================================================
[  461.801448][    C1] ==================================================================
[  461.809566][    C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter
[  461.816792][    C1] 
[  461.819130][    C1] read-write to 0xffff88810093d3d8 of 8 bytes by interrupt on cpu 0:
[  461.827205][    C1]  can_rcv_filter+0xd9/0x4f0
[  461.831822][    C1]  can_receive+0x163/0x1c0
[  461.836257][    C1]  canfd_rcv+0xed/0x190
[  461.840457][    C1]  __netif_receive_skb+0x11d/0x270
[  461.845689][    C1]  process_backlog+0x229/0x420
[  461.850490][    C1]  __napi_poll+0x66/0x3a0
[  461.854871][    C1]  net_rx_action+0x391/0x830
[  461.859500][    C1]  handle_softirqs+0xb7/0x290
[  461.864194][    C1]  do_softirq+0x5d/0x90
[  461.868373][    C1]  __local_bh_enable_ip+0x70/0x80
[  461.873437][    C1]  kernel_fpu_end+0x9d/0xd0
[  461.877976][    C1]  blake2s_compress+0x5f/0xd0
[  461.882691][    C1]  blake2s_update+0xa3/0x160
[  461.887305][    C1]  hmac+0x141/0x270
[  461.891144][    C1]  kdf+0x7d/0x1d0
[  461.894813][    C1]  wg_noise_handshake_create_initiation+0x373/0x5a0
[  461.901463][    C1]  wg_packet_handshake_send_worker+0xb2/0x160
[  461.907589][    C1]  process_scheduled_works+0x4cb/0x9d0
[  461.913102][    C1]  worker_thread+0x582/0x770
[  461.917743][    C1]  kthread+0x486/0x510
[  461.921853][    C1]  ret_from_fork+0xda/0x150
[  461.926380][    C1]  ret_from_fork_asm+0x1a/0x30
[  461.931187][    C1] 
[  461.933520][    C1] read-write to 0xffff88810093d3d8 of 8 bytes by interrupt on cpu 1:
[  461.941612][    C1]  can_rcv_filter+0xd9/0x4f0
[  461.946231][    C1]  can_receive+0x163/0x1c0
[  461.950685][    C1]  canfd_rcv+0xed/0x190
[  461.954876][    C1]  __netif_receive_skb+0x11d/0x270
[  461.960026][    C1]  process_backlog+0x229/0x420
[  461.964828][    C1]  __napi_poll+0x66/0x3a0
[  461.969214][    C1]  net_rx_action+0x391/0x830
[  461.973833][    C1]  handle_softirqs+0xb7/0x290
[  461.978537][    C1]  do_softirq+0x5d/0x90
[  461.982718][    C1]  __local_bh_enable_ip+0x70/0x80
[  461.987779][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  461.992753][    C1]  batadv_nc_purge_paths+0x22b/0x270
[  461.998092][    C1]  batadv_nc_worker+0x3ff/0xae0
[  462.002986][    C1]  process_scheduled_works+0x4cb/0x9d0
[  462.008494][    C1]  worker_thread+0x582/0x770
[  462.013152][    C1]  kthread+0x486/0x510
[  462.017246][    C1]  ret_from_fork+0xda/0x150
[  462.021786][    C1]  ret_from_fork_asm+0x1a/0x30
[  462.026582][    C1] 
[  462.028921][    C1] value changed: 0x000000000004b800 -> 0x000000000004b801
[  462.036052][    C1] 
[  462.038419][    C1] Reported by Kernel Concurrency Sanitizer on:
[  462.044591][    C1] CPU: 1 UID: 0 PID: 8003 Comm: kworker/u8:18 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  462.057308][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  462.067396][    C1] Workqueue: bat_events batadv_nc_worker
[  462.073080][    C1] ==================================================================
[  462.537703][T22393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.924736][T22408] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set
[  463.552396][T19277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.725590][    C1] ==================================================================
[  464.733760][    C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv
[  464.741008][    C1] 
[  464.743366][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 0:
[  464.751453][    C1]  can_can_gw_rcv+0x807/0x820
[  464.756169][    C1]  can_rcv_filter+0xc4/0x4f0
[  464.760781][    C1]  can_receive+0x163/0x1c0
[  464.765240][    C1]  canfd_rcv+0xed/0x190
[  464.769419][    C1]  __netif_receive_skb+0x11d/0x270
[  464.774592][    C1]  process_backlog+0x229/0x420
[  464.779410][    C1]  __napi_poll+0x66/0x3a0
[  464.783774][    C1]  net_rx_action+0x391/0x830
[  464.788393][    C1]  handle_softirqs+0xb7/0x290
[  464.793099][    C1]  do_softirq+0x5d/0x90
[  464.797285][    C1]  __local_bh_enable_ip+0x70/0x80
[  464.802344][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  464.807340][    C1]  nsim_dev_trap_report_work+0x52b/0x630
[  464.813013][    C1]  process_scheduled_works+0x4cb/0x9d0
[  464.818515][    C1]  worker_thread+0x582/0x770
[  464.823147][    C1]  kthread+0x486/0x510
[  464.827330][    C1]  ret_from_fork+0xda/0x150
[  464.831874][    C1]  ret_from_fork_asm+0x1a/0x30
[  464.836666][    C1] 
[  464.839012][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 1:
[  464.847118][    C1]  can_can_gw_rcv+0x807/0x820
[  464.851846][    C1]  can_rcv_filter+0xc4/0x4f0
[  464.856458][    C1]  can_receive+0x163/0x1c0
[  464.860901][    C1]  canfd_rcv+0xed/0x190
[  464.865081][    C1]  __netif_receive_skb+0x11d/0x270
[  464.870232][    C1]  process_backlog+0x229/0x420
[  464.875030][    C1]  __napi_poll+0x66/0x3a0
[  464.879405][    C1]  net_rx_action+0x391/0x830
[  464.884028][    C1]  handle_softirqs+0xb7/0x290
[  464.888733][    C1]  do_softirq+0x5d/0x90
[  464.892919][    C1]  __local_bh_enable_ip+0x70/0x80
[  464.897976][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  464.902946][    C1]  wg_packet_encrypt_worker+0x17a/0xb80
[  464.908535][    C1]  process_scheduled_works+0x4cb/0x9d0
[  464.914038][    C1]  worker_thread+0x582/0x770
[  464.918677][    C1]  kthread+0x486/0x510
[  464.922773][    C1]  ret_from_fork+0xda/0x150
[  464.927309][    C1]  ret_from_fork_asm+0x1a/0x30
[  464.932103][    C1] 
[  464.934458][    C1] value changed: 0x0007faaf -> 0x0007fab0
[  464.940191][    C1] 
[  464.942536][    C1] Reported by Kernel Concurrency Sanitizer on:
[  464.948711][    C1] CPU: 1 UID: 0 PID: 3590 Comm: kworker/1:12 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  464.961327][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  464.971412][    C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  464.977968][    C1] ==================================================================
[  465.012601][    C1] ==================================================================
[  465.020762][    C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter
[  465.027987][    C1] 
[  465.030334][    C1] read-write to 0xffff88810093d388 of 8 bytes by interrupt on cpu 0:
[  465.038414][    C1]  can_rcv_filter+0xd9/0x4f0
[  465.043031][    C1]  can_receive+0x163/0x1c0
[  465.047478][    C1]  canfd_rcv+0xed/0x190
[  465.051661][    C1]  __netif_receive_skb+0x11d/0x270
[  465.056810][    C1]  process_backlog+0x229/0x420
[  465.061609][    C1]  __napi_poll+0x66/0x3a0
[  465.065980][    C1]  net_rx_action+0x391/0x830
[  465.070616][    C1]  handle_softirqs+0xb7/0x290
[  465.075323][    C1]  do_softirq+0x5d/0x90
[  465.079503][    C1]  __local_bh_enable_ip+0x70/0x80
[  465.084550][    C1]  _raw_read_unlock_bh+0x1b/0x30
[  465.089529][    C1]  wg_socket_send_skb_to_peer+0x111/0x130
[  465.095299][    C1]  wg_packet_tx_worker+0x12d/0x330
[  465.100456][    C1]  process_scheduled_works+0x4cb/0x9d0
[  465.105958][    C1]  worker_thread+0x582/0x770
[  465.110619][    C1]  kthread+0x486/0x510
[  465.114727][    C1]  ret_from_fork+0xda/0x150
[  465.119256][    C1]  ret_from_fork_asm+0x1a/0x30
[  465.124059][    C1] 
[  465.126403][    C1] read-write to 0xffff88810093d388 of 8 bytes by interrupt on cpu 1:
[  465.134511][    C1]  can_rcv_filter+0xd9/0x4f0
[  465.139142][    C1]  can_receive+0x163/0x1c0
[  465.143581][    C1]  canfd_rcv+0xed/0x190
[  465.147760][    C1]  __netif_receive_skb+0x11d/0x270
[  465.152910][    C1]  process_backlog+0x229/0x420
[  465.157714][    C1]  __napi_poll+0x66/0x3a0
[  465.162165][    C1]  net_rx_action+0x391/0x830
[  465.166834][    C1]  handle_softirqs+0xb7/0x290
[  465.171552][    C1]  do_softirq+0x5d/0x90
[  465.175739][    C1]  __local_bh_enable_ip+0x70/0x80
[  465.180802][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  465.185779][    C1]  wg_packet_encrypt_worker+0x17a/0xb80
[  465.191368][    C1]  process_scheduled_works+0x4cb/0x9d0
[  465.196874][    C1]  worker_thread+0x582/0x770
[  465.201514][    C1]  kthread+0x486/0x510
[  465.205621][    C1]  ret_from_fork+0xda/0x150
[  465.210169][    C1]  ret_from_fork_asm+0x1a/0x30
[  465.214988][    C1] 
[  465.217332][    C1] value changed: 0x0000000000085e63 -> 0x0000000000085e64
[  465.224463][    C1] 
[  465.226819][    C1] Reported by Kernel Concurrency Sanitizer on:
[  465.232997][    C1] CPU: 1 UID: 0 PID: 3416 Comm: kworker/1:4 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  465.245543][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  465.255640][    C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  465.262201][    C1] ==================================================================
[  467.954866][    C1] ==================================================================
[  467.963015][    C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv
[  467.970266][    C1] 
[  467.972606][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 0:
[  467.980691][    C1]  can_can_gw_rcv+0x807/0x820
[  467.985406][    C1]  can_rcv_filter+0xc4/0x4f0
[  467.990027][    C1]  can_receive+0x163/0x1c0
[  467.994475][    C1]  canfd_rcv+0xed/0x190
[  467.998650][    C1]  __netif_receive_skb+0x11d/0x270
[  468.003800][    C1]  process_backlog+0x229/0x420
[  468.008600][    C1]  __napi_poll+0x66/0x3a0
[  468.012957][    C1]  net_rx_action+0x391/0x830
[  468.017582][    C1]  handle_softirqs+0xb7/0x290
[  468.022282][    C1]  do_softirq+0x5d/0x90
[  468.026463][    C1]  __local_bh_enable_ip+0x70/0x80
[  468.031510][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  468.036483][    C1]  batadv_tt_purge+0x2cd/0x610
[  468.041283][    C1]  process_scheduled_works+0x4cb/0x9d0
[  468.046782][    C1]  worker_thread+0x582/0x770
[  468.051438][    C1]  kthread+0x486/0x510
[  468.055534][    C1]  ret_from_fork+0xda/0x150
[  468.060065][    C1]  ret_from_fork_asm+0x1a/0x30
[  468.064861][    C1] 
[  468.067229][    C1] read-write to 0xffff888142578080 of 4 bytes by interrupt on cpu 1:
[  468.075328][    C1]  can_can_gw_rcv+0x807/0x820
[  468.080044][    C1]  can_rcv_filter+0xc4/0x4f0
[  468.084669][    C1]  can_receive+0x163/0x1c0
[  468.089106][    C1]  canfd_rcv+0xed/0x190
[  468.093275][    C1]  __netif_receive_skb+0x11d/0x270
[  468.098423][    C1]  process_backlog+0x229/0x420
[  468.103227][    C1]  __napi_poll+0x66/0x3a0
[  468.107580][    C1]  net_rx_action+0x391/0x830
[  468.112196][    C1]  handle_softirqs+0xb7/0x290
[  468.116898][    C1]  do_softirq+0x5d/0x90
[  468.121080][    C1]  __local_bh_enable_ip+0x70/0x80
[  468.126135][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  468.131108][    C1]  wg_packet_encrypt_worker+0xb44/0xb80
[  468.136701][    C1]  process_scheduled_works+0x4cb/0x9d0
[  468.142200][    C1]  worker_thread+0x582/0x770
[  468.146829][    C1]  kthread+0x486/0x510
[  468.150925][    C1]  ret_from_fork+0xda/0x150
[  468.155451][    C1]  ret_from_fork_asm+0x1a/0x30
[  468.160244][    C1] 
[  468.162585][    C1] value changed: 0x000bb781 -> 0x000bb782
[  468.168317][    C1] 
[  468.170645][    C1] Reported by Kernel Concurrency Sanitizer on:
[  468.176833][    C1] CPU: 1 UID: 0 PID: 3588 Comm: kworker/1:10 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) 
[  468.189459][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  468.199538][    C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  468.206121][    C1] ==================================================================
[  468.231967][    C1] ==================================================================
[  468.240099][    C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter
[  468.247325][    C1] 
[  468.249668][    C1] read-write to 0xffff88810093d388 of 8 bytes by interrupt on cpu 0:
[  468.257747][    C1]  can_rcv_filter+0xd9/0x4f0
[  468.262367][    C1]  can_receive+0x163/0x1c0
[  468.266815][    C1]  canfd_rcv+0xed/0x190
[  468.270989][    C1]  __netif_receive_skb+0x11d/0x270
[  468.276134][    C1]  process_backlog+0x229/0x420
[  468.280941][    C1]  __napi_poll+0x66/0x3a0
[  468.285310][    C1]  net_rx_action+0x391/0x830
[  468.289938][    C1]  handle_softirqs+0xb7/0x290
[  468.294643][    C1]  do_softirq+0x5d/0x90
[  468.298824][    C1]  __local_bh_enable_ip+0x70/0x80