last executing test programs: 2.706511541s ago: executing program 4 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5a16}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x14, &(0x7f0000000300)=""/20, 0x41000, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x0, 0x5, 0xd, 0x9}, {0x2, 0x2, 0xb, 0x6}, {0x3, 0x2, 0xb}, {0x4, 0x2, 0xc, 0xc}, {0x0, 0x2, 0x7, 0x6}], 0x10, 0xbad8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="8974e31211cad7a75a8e0b0935c89bfb3157ed419f783a8bcef9ea37c4da9d21e9822b2cdd4d451110613c1f8bc2cadf6b03f777935c1a53d326b176a6f6184468c316f013c138f7bb348147b02c9f43ef353d2373d32ba54394e5c95b972163323537193968f6b28d2fd8ccce253f4d8988dd48f8c794dc0c9c42402849dea069f8baca7852bd699ffb54ac8417c9c69b828e751c1f7c9bb8f8af5be9d63ca1711323d9033035fa75efcb519f678453badeee76bdfda018ebf7e6e624b8389e8f4cad02f286e1510feb69be88091e0197975756fa695fe07b2f05a5ebce73dbb60dce143321aa66df547bcdff235e5c932a47996e640631064f4023adf0613b53bb2fcec360db7d6ba54d45656b1633359bcb261120e159394f374da9c6d5bea6d2b961fc472924c14fde7f5cf9994b55cd43825ab5edf75727a6ce2f4ad24bcd838174ca760c796b78d11f4360f46814dee977ac564994476bcc34447706b491990f6f56133db6e27f3a0092c051790d2887ecb1df2638fdd0e4030c8d0577d47c498702d4a3131645945cc14f656cc795c777f7df92227801c933f1d5ed54450d716c407243c4d57c4e7612c92ca4d739d7f8a427dff26430ca9f03c03b66cbd4f176d6f68c1cafed906c908a1518ef87ea919c55e51bacdf8b284c682adb85ae04d1187ac5dd2ceab48713336a32328309b87834cbe3ce8e73407511cd3d955a40bf7f1420a0132f4542732d6707f2d3105f0278b75e245c21454a609f834168617ca40c74786b30239f6fbe8e972ffce3e7b023d8fffcd176646af557b5034b109f05d29e7f9d16ebe326a169244b297b7ce7692a3db6bbaeb8e6b8a57eddf7f0fb4283fea322537402fddf73380b7fdbafe8919f0bafcdb7ffdb2fe13afc3954643af7f137993af06fc5d76d717bcbf4dde31d27763ac8bc3a52d994ce2fdd85da3830d64d57f948795f9118dd898230e5406b178759bb45aa0d342d5ed90f5210619bda6c223dfd99c4430dc4efa91dea3d6ad399b9f12eb8b56e2a7f10a95263e35abe8417008b0f3f162fc55e132320f095157dd5dc459d5d50d4db45555c0ce8ad2f40d399e013a7fa65881c83d0febc202c0b97fa1669faaccbf753a0d603e6e3c9c74a8e1aa94e6962361b98be5be504edf0a770d50f6ee39944a5fd1117085a89b854779f7688c851eae04ae57e040c04a5cedd3998d387dcbddf7bf73eddc3e696e204001424fcecda1aa91d021b23dd38f35aa11dc8d29e1a0ac4e0d8f611b5605a8d4c13f8747a360840bbae1927ef495e40091fba98223af4fc40bf54ef9792ee0ce7ff9b4741a8ad1955323181c41eb8242e8df16645a97699f186f87d22fa0793bcd86a5fae3a8760fc04f088d3d73d06400926cabbe14139301fbee17eeade4d4eef081bdbf214d7214943757d3785e0337de52d6a74d2cf806492345aebf92452586789f5ac141d4e0034c7a093719d39e4d3e361315c0dfaa7f4493cdbf92766a6f310c5bb7f3e317258cbfe76a7d5b667127844e8e51f69d7d5aae119da5cf7e942d815ccc7aeb5894bd43e5847c7b714875606e6442009659324ac17d51320adc63b8fcf91f0dafab695220bf204494a75c3802d437b25c20e8f9c486817f910dc566acd16eeac91fbcf10b232d1f2b6084f2a7e8218dfc181b8a68c5f4a242fc023bd6e646f7928297e2d4d4d9dc5ceb841c61e9f9e1498b53025e7722d272b6c659e50295248d9179888d1c7be9297074c9aaa73dbc536fbe2bf6d122d7606e1943b36ad3616133de557b8b29a88a0c89ce90bcf99b259791ac3d430ce5a930efd0af4f602b4c0d0aabbb3a73fcf608c94e8cebc662daf9c0e34c3d06e37fd27e0a850da79f73711c8e3f5cd28e01c151e8fd565d1a215cc1750157632e5f67d413ea2fb083f5a6deb28b7f520f9553a17b35b2124bb9e377a1512f227da5f0fedde226a151fc685bf304412eb7c1b5a9132e36f67f3c1dd805d6c990dad98b3d7fa9bc501d70bc7fc8043b93e2668f4769b0fcb2705b5eb8587642ad1477b7f5a3a0bc86797e4cd855e746a99e3f8b69de19ce95cae57eb101410524eb1e9caa41be0c8bda030bb93681941134beffe0a7fa915092a3feacdf8e35f14d28b0c8282a2ea2e8adf5dea2b1eae1b4c309e03cf2f33eef66a03d47746c49a9a23e70a45962525cce4da3e387cf85f5b4cfa53a7818ee889ad3df2a4c34763173ac03bce6f2fb86b1e376fe672c911785ec7e2c2ea8a0b99b5188fb2c2431b17e837f110a3ad861be58a494ed6f6aaafca23e7b510727c6cd28fc7d722dc487861de2fc4c8787025ef65d70e87af2b0bad43701e3b3064bc1310c29a296b7892702b1f4db221a1d94c8ddcf604425074bf11f8c0dfba2fd9adb6a9165a9fb0286940094262bd81b1518a2adecf2be1e6ced186417e2cd2cd2a087a9d33878a47a933466d728dc45665ec0e1b07149c9926ad4bd15f5ced80afc058dcd1303a24284668d89697c29b260ffb7f2ab452cbdbdb370005bacaf00b9803778b68d24a0d545c71339fac161fe93022c5e489685264ad29e4353abd81150025aba91f8ac8b198a4d0d3d6c1a145c6c46c82dafb1e865ae6414af5ee6700f6ddf89f401759f203197020a01ed69b7048655dcbbbe08521fde03d60df94004e1e7fa4513ebec82ddcac13263c3d7c4b7b7f61aba905f5c6fe802ea61fc1fe9a9adef5e729338eecc1f9b4279ccedcf3b868514c95a78fbbf5b283c4b6a663ddf26d372846f1004f9bbce8fa8a4699de610b7a99066281f4646486791fe8cba03cd0f60641f5bcafa9ab944b9952ea39beaf1e04a6a13b6629ddd9818534e64a7ab514c1344dfea8e6966133f947ab409b950f57a3199ee178a4bd9d7787ac975faafcfbcd4a351542c96d52afbe91f677e1244cca01ab35f85b8f4e04022ffd407414967333f6808ef1a2d56a79157d1966bff50f89d33141b9dafe16ac6f3ea92480546508a108fcd070d5d54b522c158b13ec70b65dc1324c5e170b22ab12b70dfff7efa3ebcab822060945bad239ca17de009d381170af6a949dd47a2f200ec2e279e56940c4362d389ac45630e40c64f06e45f01550d64b044edcb45e8eb6fb836935cd98a05fa3389eaa41f0b2b3e818e7f369d9b6600d3855cc190e70003d54f3fae49145bcddd4ab6885bfda27ecfc02b38566dbead910515ea91485622a28b074d2c088184a7eb3cd1210dd4ebd0588814646be88a1c63ae1aff0c19b3b4637c1e322e14436256fee02b18a668b8ce2ca9ed176946e9b3a7cb7382e2aff6c6bf6fd4718a8861fe6b3f1104b045410adbd207ec7e0eadf22842ad1f14f49a1e31d56f2acc7d97c752525a8ee685d764b2f413fa10eb79b60e16d4fc9b77d5d5efac412cef5d2f97536f452cdd89c976849535114afed5cc38b5abaf8e4743769c94fd1b5418341563e1940f38d909cde986bc3260681232601c54d0ddcaca407c737f42ec0f7ec23247725a6f313c63f4abaee95819c031733aa8f0e31583a57a5bc97b56273337592486489f062e9fdf8f0ab8fc6eb83f46c661f5ab81dd32535417128d49f00ac1f3b9dcdedb476bd58048db53a9b0f355a31f0034b86e54b7a8295e17a709c50817a8d52cd16d54c9a42d88745cbaf4557baa2ee5b5c91cdd8864e7a2228b9348c67f0f7dd4803120c326470f68207a51a993b8b00181645fbbbc9655e411ed86a306b6d865ea144fcbc386a508576f4fdd2bd0799655944966556826a7b094b1f7263c6aadbca2760a5fa0b2a8520fd7766f29341ed320a9b40d4df0652c3c63da0d8d35ea36946f29c81136f1b825703ad57e9180de502e63974c0f77756f87253f16298f09915be24f9267b1f0ef845cf8addb3f30ab5e23585a7b887a649d106e359251059d890b62c4620f71008efc269734cd2dbce6739b5e1bdfe85474a9d4b2cbea98b18164b924773d9eddd617dc953c8701dac8af1a4ed58733ab9774ae3a4eb636dd9b45338f5eeb3c6696a8feb8e8f2109cf302b8894641a7718ca1794c9da575e45523e613953327918dea1ec532206f978e4cdba7cbb7436d4b82b778a4805a1988b417a5107257bff875bf206a8cc9662281f9d7ca176f464f6ae5c2393254723e267dbebf006b5860258a08dc61747c025a8bea3914a6bd4ee87b1f6e7529bef2b1908b4cae57448f10e92271dff87879ce44848eceb91a77dab9cc0478e59144325da837793d73765c11ca8e0f64f93d9d0f3eef9749445ed979d63794a5b5409344a3594144b31a38cfec7cd5c792227616c6dca614d4f212fb6f604e8b1733a2a5fbb62e125860d98ab28d863b052500a7a523e60fc12558624bd668eb06867798725895c8a6d63065915fc26bb12954c099b69222858b1cf18dbf0781f02c0dbbb4f7fe70ee47fea714de6ae7c9486c46636d854de99537b6ed90799c3527c7282f518caaa9006a92ec2102e501b1a2022f5c1a375fc7915adc01c7d1930a500a7e34751bb4b1f989cb88025f31faa31e2fd14aa3a42edf34f7ed6ca2954f28a19b42598ef866e2912b10ffe9796abf47f67f6e9bdde785c7c1886bf438443d54f99ce62df8e793ab23525a0d2ef799aa745fe81def7a9c988c784ab1eb039d4dc1d731a710babdf2bde50ab55f694de13508758db88d27b605c6b37a36bbfa974dc894cb950fd7919ce04e9eb97adafeb5632b8d998d9fefb441871786f774931f5724d5842e2e064d7b07144939ded203fad30a55c7447607f2556fe4bc9c1932992792a171a1b4264aecb47863b76bd794e052f5981ca1630f672c692df190bda0fc63140161dce374a25454e43215fdb69528421dbea4d1a267d08056f531611a8880cdf8c64a33ce1264d495c2e940bfdbf698663b362770fde6a465e0c6a35308dc218e3d9477184d0420d21ad06d5295b6da8b2e5b45bb6b19622d82545868c71e945396b6324e51c226ca3e051f10fc3c7d63dd65e465b6dc4b5575585984bb307e14f49574edecc6b4458f8776d68deee60935cd61331eb9a80109d93de35fca0cc9764a37e5cf2be405008f160c71bf437fb993a615c5dfe2ebd873262ea0af03f59f5a7dc3b6804523f6a372a69079245da7f44dd220cc64ec7e822b553f86149e9720f2edc9e7826ac362f5d8ae0c94c47d012474d5f3f82b19b311f5a738b3cf12df2ee94a7c4179c596c4a3a0cd887c73ada35c6fa8dacc8cb47e838f4c0e72735ff4a40e1909d5278ee7f33d0e0beaea54094b501280e25187d14f30ca3e970d40149258b73f10ac542438a0f26169352b34f0b4823bf80a4a31fa0d3ec7451e0a7c48a07ccb143fa1b072a026e625ae62b7fa2fe4dc76c4bc39942cb0ee76eda8ede6b4e8d6ee63953994286f6f5d59fc82e1807205ece72ad9d0657655d8aa60de611c88246748f0489c7f3da1929137d293da0760115a0a1c0c3a7aa6e72aecf60022f4d78c965cd31e4c8019909e2bd2b8759183e271b88aa44db123d25055e958878025b2ddb38aa0d2e8134c449cf7a667f0a37cf2112b9aa4430c6c6619f173039f7ec319cf264d8340c653bed720b5f0c163b60ce4ede97934ebb682b128ba70a8d2b99e90af419de50342e88b425a03f2c5a5fe5a281f95de8fbdaf10aee5ffc886484e392cb19236524b38605f8bbec1e520a15a05209bb4f3d336289fd7450", 0xfc8}], 0x1, 0x0, 0xc0}, 0x40025) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000001280), &(0x7f00000012c0)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000001300)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000078040000000000000885000000760000009546164477ad21ad784c3c85db64b42e2aae2e060000c358ed4087fdb42f703c7282c98b75bdd45b86806f700fabc853486820834ce64db5486b2cb0def0c45c38f804b0d7802cbb7d7bc5bf7e1a98f5c88bdf246680b490194252c70c0c387713"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001240), 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xfe, 0x0, 0x7fff0006}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r10, 0x3) unshare(0x22020400) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r11}, 0x38) fgetxattr(r0, &(0x7f00000004c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0) 1.822843712s ago: executing program 2 (id=1024): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x47, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4", 0x0, 0x8, 0x60000000}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000002c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) execve(0x0, 0x0, 0x0) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.693242744s ago: executing program 0 (id=1026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0xf000, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 1.692831154s ago: executing program 4 (id=1027): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0xa, 0x502, &(0x7f0000000b00)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x1003, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB, @ANYRES8=r10, @ANYRES16=r11, @ANYRES64=r10], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c2000000080045000024000000000011aa7800000000e00000014e2417c100109078c2fc000100000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000001000000850000008c00000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.660312687s ago: executing program 0 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000070100000000000000cb5e89d9c32d63c230ea7b755427f8af4c945ed4269e42c04e538fd67bbe64782d5ea52ab0801b6818fb0a4c2cb067dd949d68455eaaa9bc794b018975282fe87e16e2847f4f624a108b37d572ca11063e41462fc40f5f01b717442340fede1ee5c46b23b4a9920c2f72957bf17bd59634087fd58c3a527695d84480a1f6d524bba84270c9b70c8e2a641b3abb9ea2b53baa822503cfd88b2e00b3935ffc673859dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xdb5a4924a476f61d, 0xffff}}}, 0x24}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000007f000014001a80100005800c000580080001"], 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200060000000000020000000c0000000034002a4e0108b2e288986044c8c16200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0xdfffffff, 0x800, 0x0, 0x3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078eeac444fbe0112989b2d4fb14b"}}}}}}, 0x0) 1.603725062s ago: executing program 2 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}, r5}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.537691139s ago: executing program 2 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000000)=0x7, 0x5) syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x40, 0x80, 0x5, 0x9, {{0xa, 0x4, 0x0, 0x35, 0x28, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0xe1, [@loopback, @local, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@newqdisc={0x7c, 0x24, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {0xfffb, 0xfff3}, {0xffff, 0x5}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000010) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") 1.465179455s ago: executing program 0 (id=1031): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r0, 0x0, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) 1.438336418s ago: executing program 2 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000f050000000000000000000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fd0c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085c82104c93682e6aac09e070000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000003c0)=0x401, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002680), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 1.435716718s ago: executing program 0 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0xe5, @buffer={0x2, 0x51, &(0x7f0000000180)=""/81}, &(0x7f0000000380)="259370c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.387932812s ago: executing program 1 (id=1035): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}, r5}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.281341012s ago: executing program 4 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) futex_waitv(&(0x7f0000000340)=[{0xb21, 0x0, 0xe5f80e6f5803176e}], 0x1, 0x0, &(0x7f0000000480), 0x1) 1.254324714s ago: executing program 1 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0xf000, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 1.251112715s ago: executing program 4 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.218736948s ago: executing program 4 (id=1040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)={0x2390, r3, 0x10ada85e65c25349, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_TID_CONFIG={0xbec, 0x11d, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa4, 0xe7, 0x79a0, 0x349e, 0x0, 0x3, 0x1, 0xe064]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x30, 0x2, 0x3c, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x401, 0x2, 0x385, 0x8, 0x2, 0x7ff, 0x9c34]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x5}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x5}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x2}, {0x4, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0x6}, {0x3, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x1}, {0x5, 0x8}, {0x7, 0x7}, {0x1}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x1b, 0x18, 0x36, 0x48, 0x16, 0x6c, 0x1, 0x3, 0x16, 0x3, 0x5, 0x2, 0x2, 0xb, 0x24, 0x6, 0x6c, 0x6, 0x12, 0xb, 0x6c, 0x0, 0x48, 0x24, 0x71]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x36, 0xb, 0x0, 0x12, 0x48, 0x36, 0x6c, 0x2, 0x52, 0x18, 0x0, 0x6, 0x16, 0x2, 0xc, 0x18, 0x1, 0x1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x9, 0x9, 0x8, 0x7, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xff, 0x6, 0xa9c, 0xd, 0x6, 0x720, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x75, 0x10, 0xfff9, 0x6, 0x4, 0x4, 0xfffb, 0x1]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {}, {0x5, 0x9}, {0x3, 0x1}, {0x5}, {0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x8}, {0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x3}, {}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x5, 0x24, 0x7, 0x16, 0x60, 0x9, 0x7, 0x6, 0x1, 0x6, 0x9, 0xb, 0x1, 0xb, 0x18, 0x18, 0x30, 0x60, 0x18, 0x30, 0x12, 0x0, 0x18, 0x1b, 0x9, 0x1b, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x1, 0x3, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x0, 0x1a, 0x12, 0x18, 0x48, 0xa, 0x1b, 0x24, 0x1b, 0x2, 0x48, 0xc, 0x3, 0x3, 0x2, 0x6, 0x1b, 0x60, 0x9, 0x36, 0x12, 0xb, 0x24, 0x30]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5b, 0x16, 0x5, 0x3, 0x48]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x6, 0x8000, 0x84, 0xa9ec, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x6]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6f, 0xa7, 0x24, 0x7525c1fcbb19a156, 0x6, 0x60, 0x48, 0x9, 0x4, 0x12, 0x18, 0x30, 0x6, 0x16, 0x24, 0x18, 0x36, 0x6, 0xa, 0x18, 0x0, 0xb, 0x4, 0xb, 0x9, 0x36, 0x6c]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c, 0xfffb, 0x4e60, 0x1, 0x1, 0x200, 0x1, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0xa}, {0x7, 0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x1}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x6}, {0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x2, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff4, 0x8000, 0x9, 0x7, 0x7ff, 0x1, 0x4, 0x6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x18, 0x1b, 0x18, 0x18, 0x18, 0xb, 0x12, 0x6c, 0xc, 0xc, 0x18, 0x6c, 0x1b, 0x4, 0x60, 0x4, 0x5, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7fff, 0x3, 0xfff, 0x9, 0x0, 0x6, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7b73, 0x8001, 0x81, 0xc, 0x7, 0x800, 0x7]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2d, 0x6, 0x2, 0x7, 0x75f4, 0x0, 0x8, 0xfff8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x30, 0x1, 0x6, 0x3, 0x6, 0x1b, 0x4, 0x1, 0x36, 0x48, 0x1, 0x6, 0x30, 0x1, 0x18, 0x12, 0x5, 0xb, 0x6c, 0x4, 0x24, 0x1b, 0x12, 0x1, 0x42, 0x4, 0x9, 0x2, 0x36, 0xc, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x5, 0x2a, 0x3, 0x1, 0x24, 0x48, 0x48, 0x2427626cc52f33c8, 0x36, 0x3, 0x3, 0x6c, 0x3, 0x1b, 0x12, 0x3, 0x3, 0x2, 0x5]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x5, 0x4, 0x16, 0x3, 0x1b, 0x1b, 0xb, 0x1b, 0x36, 0x1, 0x4, 0x26, 0x18, 0x41, 0x30, 0x1b, 0x16, 0x2, 0x33, 0x36, 0x9, 0x6c, 0x16, 0x1b, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x800, 0x31b, 0x3, 0x0, 0x6, 0x800]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x7, 0x6, 0x1, 0x0, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x40, 0x7, 0x0, 0x7, 0x7, 0x4116, 0x1f]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x6}, {}, {0x7, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x2, 0x6}, {0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x5}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x1}, {0x1, 0x9}, {0x7, 0x13}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x9, 0x9, 0x9, 0xd9, 0x6, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x85, 0xb48e, 0xd, 0x1, 0x9, 0x8001, 0xfffb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x8}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x2}, {0x3}, {0x4, 0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {}, {0x0, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0xa}, {0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x1}, {0x6, 0x4}, {}, {0x1, 0x9}, {0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x9}, {0x7, 0xa}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x7}, {0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x5}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x0, 0x3, 0x7, 0x4, 0x8, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x6, 0x1, 0x1, 0x8001, 0x5, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x36, 0xb, 0x48, 0x30, 0x12, 0x5, 0x30, 0x4, 0x3, 0x6c, 0x6c, 0x16, 0x1b, 0x1, 0x5, 0x6c, 0x1, 0x6, 0x4, 0xb, 0x24, 0x5, 0x5, 0x16, 0x60, 0x2, 0xb, 0x9, 0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x1b, 0x24, 0x1, 0x2, 0x6a, 0x4c, 0xb, 0x3, 0x36, 0x3, 0x9, 0x2, 0x6c, 0x6, 0x60, 0x30, 0x1, 0x79, 0xb, 0x6c, 0x8, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x2, 0x7, 0x8000, 0x0, 0x7, 0x1be, 0xc000]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x2, 0x1b, 0x2, 0x6, 0xb, 0x26, 0xb, 0x36, 0x60, 0x60, 0x18, 0x16, 0x24, 0x60, 0x60, 0x1b, 0x1b, 0x1, 0x14, 0x2, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x5}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x1}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x2, 0x60, 0x4, 0x3, 0x18, 0x1b, 0x18, 0x4f, 0x24]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0xb, 0x6c, 0x6c, 0x0, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x4, 0x5, 0x100, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x400, 0x3, 0x9, 0x8, 0x7, 0x313, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x36, 0x3, 0x9, 0x50, 0xc, 0x1b, 0x24, 0x2, 0x6c, 0x3, 0x9, 0x5, 0xb, 0xc, 0x5, 0x0, 0x5, 0x16, 0x18, 0x6, 0xc, 0x6c, 0x3, 0x2, 0x1, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x3fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcbf, 0x8, 0x81, 0x10, 0xfdc2, 0x3, 0x4966, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x2, 0x11}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x5, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0x1}, {0x6}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x1, 0x4, 0xc, 0x1b, 0x1b, 0x3, 0xc, 0x60, 0x30, 0x30, 0x24, 0x30, 0xb, 0xb, 0x16, 0x30, 0xc, 0x60, 0x1b, 0x6c, 0xc, 0x0, 0x48, 0x1b, 0x2, 0x2, 0x5, 0x0, 0x36]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x8}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x5}, {0x4, 0x1}, {0x3, 0xa}, {}, {0x5, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x1}, {0x3, 0x8}, {0x5}, {0x0, 0x6}, {0x4}, {0x0, 0x10}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x4}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x2}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x1}, {0x6, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x800, 0x0, 0xa64, 0x7, 0x101]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x1b, 0x30, 0x10, 0x16, 0xb, 0x9, 0x37, 0x60, 0x3, 0x60, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x18, 0x9, 0x60, 0x24, 0x48, 0x30, 0x0, 0x48, 0x6, 0x6c, 0x24, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0x5, 0x3, 0xb, 0x8, 0x0, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x20, 0x3, 0x30, 0x3, 0x3, 0x1d, 0x36, 0x3, 0x2, 0xb, 0x48, 0x1b, 0x6, 0x12, 0xb, 0x0, 0x16, 0xb, 0x60, 0xb, 0x22, 0x3, 0x5, 0x3, 0x6c]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x3, 0x24, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xffff, 0x2, 0xed0, 0x2, 0x9, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb146, 0x4323, 0x4, 0x4, 0x0, 0xfffd, 0x200, 0x1]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x18, 0x1b, 0x1b, 0x3, 0x1b, 0x5c, 0x12, 0x1b, 0x24, 0xc, 0x4, 0x18, 0x48, 0x36, 0x48, 0x18, 0x6, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x1ffa, 0x3, 0x0, 0x3caf, 0x9]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x1, 0x0, 0x6, 0x100, 0xfff4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x47, 0x7, 0x6, 0x25, 0x4, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x5, 0x5, 0x3, 0x16, 0x2, 0x1, 0x6, 0x34, 0x36, 0x6, 0x1, 0x3, 0x16, 0x1, 0x16, 0x60, 0x60, 0xb, 0x1b, 0x24, 0x18, 0x18, 0x3, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x9, 0x4, 0x9, 0x9, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x4}, {0x5, 0x4}, {0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x1f2, 0x2, 0x7, 0x2, 0x1ff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe8f7, 0x6, 0x9, 0x0, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x8060d7f42cdcbb4b, 0x5, 0x1b, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x4, 0x9, 0x5, 0x768, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x12, 0x6c, 0x2, 0x24, 0xe, 0x6c, 0x9, 0x6c, 0x30, 0x60, 0x30, 0x3, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x3}, {0x7}, {0x4, 0x8}, {0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x1f}, {0x5, 0x6}, {0x5, 0x4}, {0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x3, 0x4}, {0x2}, {0x0, 0x2}, {0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x6, 0x9}, {0x1}, {0x2, 0xa}, {0x5, 0x7}, {0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x36, 0x7, 0x48, 0x60, 0x1b, 0x16, 0x18, 0x16, 0x16, 0x16, 0x4, 0x6, 0x4, 0x2, 0x2, 0x16, 0x51, 0x48, 0x91, 0x60, 0xb, 0x4, 0x1, 0x31]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x46, 0x0, 0x8, 0x5, 0x6a5d, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x60, 0x48, 0x30, 0x4, 0x30, 0xc, 0xc, 0x16, 0x9, 0x60, 0x4, 0x1b, 0x6c, 0x16, 0xb, 0x78, 0x16, 0xb, 0x4, 0x36, 0x6f]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a8, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x78}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x6, 0x1}, {0x6}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x4}, {0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x3, 0x5}, {0x7}, {0x0, 0x8}, {0x2}, {0x7, 0x7}, {}, {}, {0x5, 0x6}, {0x3, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x1, 0x3}, {0x2}, {0x0, 0x3}, {}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x1a7, 0x2, 0x9, 0x8001, 0x8, 0x6a]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffc, 0x5, 0x100, 0x8, 0xfffd, 0x3]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x6}, {0x4}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x6}, {0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {0x4}, {0x7}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0xa}, {0x5}, {0x4, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc000, 0x7, 0x140, 0x7f, 0x1, 0x0, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf5c, 0x1, 0xff8c, 0x2, 0x6, 0x100, 0x307d]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x12, 0x3, 0x3c, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x4}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xde, 0x4, 0x0, 0x5, 0x6, 0x6, 0x7b0f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x944, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xdbe33733ba978d55}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x6c, 0x24, 0x16, 0x18, 0x1b, 0xc, 0x2, 0x5, 0x12, 0x30, 0x4, 0x9, 0x16, 0x6, 0x76, 0x16, 0x30, 0x1b, 0x9, 0x1, 0x9, 0x12, 0x6c, 0x48, 0x2, 0x24, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x13d5, 0x2, 0x1, 0xfffc, 0x9, 0x1ff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1c00, 0x8, 0x6, 0x1000, 0x39c, 0x3, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x1306, 0x800, 0xc, 0xe, 0x8c, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcbff, 0x3, 0x101, 0x3, 0x3ffc, 0xfa8a, 0x1ff, 0x1000]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0xa}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0x5}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x12, 0x16, 0x0, 0x9, 0x5, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xff, 0x7, 0x7, 0xb, 0x1, 0xffff, 0x4]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0x9}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x7}, {0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x2}, {0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x6}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x8}, {0x7, 0x4}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0x8}, {0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0x4}, {}, {0x1, 0xa}, {0x5, 0x8}, {}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {0x4}, {0x2, 0x8}, {}, {0x4, 0x9}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x1}, {0x4, 0x9}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x2, 0x1}, {}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x7}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x7, 0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x5}, {0x6, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xf, 0xff, 0x4, 0x2, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xbe, 0x5, 0x100, 0x802, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x5, 0x2}, {0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0x7}, {0x3, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x3}, {0x3, 0x8}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x3}, {}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x8, 0x4, 0x101, 0x4, 0xff, 0xfff, 0x7]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc66, 0x3, 0xd6, 0x6, 0x9, 0x3, 0x53]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x284, 0x156, 0x5, 0x6, 0x200, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x400, 0x100, 0xdb7a, 0x7, 0x7d, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x5, 0xe5f196ae32b449d7, 0x60, 0xc, 0x1, 0x2, 0x36, 0x24, 0x48, 0x36, 0x9, 0x6b, 0x2, 0x30, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7af, 0xf, 0x8769, 0x0, 0x6e, 0x800, 0x3]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x5, 0x48, 0x12, 0x6, 0x1b, 0xb, 0x48, 0x0, 0x36, 0x24, 0x36, 0x6c, 0xc, 0x30, 0x60, 0x6, 0x1b, 0x48, 0x18, 0x9, 0x9, 0x3, 0x1b, 0x60, 0x12, 0x72, 0x36, 0x1e, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x7}, {0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x7, 0x8}, {}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7f, 0x4, 0x3, 0xc6, 0x8, 0x29, 0x9]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x1, 0xc, 0x6c, 0x18, 0x24, 0xb, 0x9, 0x24, 0x30, 0x60, 0x6c, 0xc, 0x1b, 0x18, 0x9791db11a255179e, 0x16, 0x24, 0x5, 0x12, 0x16, 0x0, 0x30, 0xb, 0xc, 0x18, 0x4, 0x12, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0xfff5, 0x6, 0x0, 0x4, 0xee, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x9, 0x1, 0x60, 0x4, 0x12, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4d, 0x88b4, 0x8, 0x7, 0x4, 0x7f, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x400, 0x100, 0x6, 0x1, 0x3]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x9, 0x1b, 0x48, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x6}, {0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x190, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x3, 0x2227, 0x7, 0x7, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0xffff, 0x3, 0x5, 0x10, 0xf000, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6775, 0x5, 0x80, 0xc1e, 0x6, 0x8, 0x3, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x48, 0x0, 0x16, 0x0, 0x60, 0x36, 0x12, 0x6, 0x6c, 0x4, 0x30, 0x1, 0x24, 0x5, 0x30, 0x4, 0x9, 0x12, 0x16, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x0, 0xc, 0x1b]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xdd, 0x0, 0x9, 0x5, 0x6]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8, 0x200, 0x0, 0x6, 0x1, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x5, 0x6}, {0x5, 0x4}, {0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x3}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x3}, {0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {0x0, 0x3}, {0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x6, 0x4}, {0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x4, 0x2}, {}, {0x3, 0x5}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf, 0x8, 0x8, 0x3ff, 0x75, 0x159, 0xf58]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0x8, 0x1000, 0x5, 0x8, 0x3ff, 0x67]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x2, 0x8000, 0x4, 0x9, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x400, 0x6, 0x0, 0x0, 0x2, 0xff04, 0x2a8d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xdd1, 0x3, 0x2c72, 0x81, 0xfff9, 0x9, 0x226]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x18, 0x3, 0x3c, 0x9, 0x1b, 0x30, 0x60, 0x17, 0x3, 0x1, 0x60, 0x6b, 0x6, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x3, 0x2, 0x7ff, 0x1ed, 0x5, 0x4, 0xeea]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0xa}, {0x5, 0x1}, {0x4, 0x4}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x2}, {0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x3, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x6c, 0x30, 0x6]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x1b, 0x2, 0x60, 0xb, 0x6, 0x12, 0x48, 0x16, 0x1, 0xb, 0xc]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x2}, {0x6}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x17}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x2}, {0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x9}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x5}, {0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x60, 0x1b, 0xb, 0x4, 0x12, 0x6c, 0x3, 0x5, 0x12, 0x55, 0x9, 0x48, 0x12, 0x12, 0x48, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x52, 0x1000, 0x8000, 0x1, 0x8, 0x3, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f4, 0x11d, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0xa}, {0x4, 0x2}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x1, 0x2, 0x9c9b, 0x5, 0x9, 0xebf0, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1, 0x121, 0x2, 0xff, 0x7, 0x800]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x1b, 0x30, 0x24, 0x1b, 0x9]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x9, 0x6c, 0xb, 0x3e, 0x60, 0x60, 0x5, 0x6, 0x76, 0x22, 0x16, 0x3, 0xc, 0x1b, 0xb, 0x3, 0x41, 0x9, 0x48, 0x26, 0x1, 0xc, 0x0, 0x36, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x8, 0x9, 0x0, 0x8, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x35, 0x2, 0x1b, 0x1, 0xb, 0x12, 0x9, 0x60, 0x48, 0x4, 0x3c, 0x5, 0x0, 0xc, 0x24, 0x12, 0x6, 0x6c, 0x66, 0x48, 0x24]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x3, 0x2, 0xf, 0x6, 0x60, 0x36, 0x3, 0x6c, 0x60, 0x4, 0x30, 0xc, 0x24, 0x16, 0x36, 0x5, 0x18, 0x60, 0x60, 0x12, 0x2, 0x3, 0x6c, 0x36, 0x36, 0x4, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x36, 0xf818cad9182398ae, 0x1b, 0x30, 0x24, 0x1, 0x12, 0x60, 0xc, 0x3, 0x18, 0x1, 0x6c, 0x24, 0x0, 0x8]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x24, 0x6, 0x16, 0x2, 0x24, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x22, 0x65e5, 0x3, 0x9, 0x4, 0xfff8, 0x401, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x29, 0x9, 0x9, 0x24, 0x30, 0x6c, 0xc, 0x18, 0x2, 0x1, 0x6, 0x3, 0x16, 0x48, 0x30, 0x3, 0xb, 0x48, 0x36, 0x30, 0x3, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x6}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xf, 0x0, 0x1, 0x8, 0x2, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x8}, {0x2}, {0x7}, {0x0, 0x9}, {0x5, 0x2}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x9, 0x2, 0x5, 0xe, 0x0, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x200, 0xff, 0xfff, 0x4, 0xb9c5, 0x9, 0x12ae]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa39, 0xf6e, 0x9, 0x4, 0xf0c, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0x3, 0xb, 0x2, 0x1fc0, 0xb3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xc3, 0x8, 0x5, 0x800, 0x0, 0x70, 0x5]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x8}, {0x7, 0x3}, {0x7}, {0x2, 0xa}, {}, {0x0, 0x9}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {0x3}, {0x4, 0x3}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x1}, {0x2, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x73}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x4f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x66d, 0xb5, 0x3, 0x6, 0x28c, 0x9, 0x401, 0xaeb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x9, 0xff, 0x1, 0x81, 0x8, 0x2]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x30, 0xc, 0x24, 0x1, 0x3, 0x5, 0x6c, 0x5, 0x9, 0xc, 0x4, 0x16, 0x1b, 0x5, 0x48, 0x12, 0x6c, 0x4, 0xb, 0x16, 0x3, 0xb, 0x30, 0x1, 0x3, 0x1, 0x64, 0x18, 0x9]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0x1ff, 0x9, 0x2, 0x0, 0x2, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffa, 0xe, 0xc, 0x0, 0x5c2c, 0x5, 0xfff8]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x4}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x8}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x3}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xfff7, 0x4800, 0xd, 0x401, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x6}, {0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x5}, {0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0xa}, {0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x2, 0x2}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x1}, {0x6}, {0x5, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x80, 0x1000, 0x1, 0xfff, 0x81cb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x5634, 0x51, 0x5, 0x9c9, 0x8, 0x5]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xd, 0x9, 0x0, 0x9, 0xd, 0x5, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x9, 0x9, 0x3, 0x7fff, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x336e, 0x4, 0x3, 0x9, 0x7, 0xeec, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x6a, 0x4, 0x9, 0x2, 0x16, 0xc, 0x18, 0x0, 0x60, 0x2, 0x2, 0x1, 0x5, 0x3a, 0x60, 0x6c, 0xb, 0x6, 0x12, 0x24, 0x16, 0x3b, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe27, 0x6, 0x1, 0xfffc, 0x8, 0x8, 0x9121, 0x5d4d]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x5, 0x2ff8, 0x6e7a, 0xfff, 0x9, 0xc, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x7, 0xc, 0xf, 0x5, 0x40, 0x2, 0x94dd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x9, 0x3, 0x16, 0x1b, 0x16, 0x1b, 0x9, 0x6, 0xb, 0x4b, 0x3, 0xb, 0x4, 0x1b, 0x24, 0x12, 0xb, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x12, 0x36, 0xc, 0xc, 0x31, 0x3, 0x2, 0x60, 0x10, 0x4, 0x48, 0x24, 0x3, 0x12, 0x24, 0x48, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x1b, 0x6, 0x24, 0x1, 0x27, 0x1b, 0x4, 0x1, 0x9, 0x1, 0xc, 0x6c, 0xc, 0x24, 0x60, 0x3, 0x0, 0x5, 0x9, 0x36, 0x48, 0xc, 0x6, 0x3, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x3, 0x7fff, 0x3, 0xffff, 0x5, 0x1]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x1, 0xd, 0x8000, 0x0, 0x5b41, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x6, 0xb, 0x3, 0xaf, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x9, 0x9, 0x48, 0x46, 0x1b, 0xb, 0x6, 0x30, 0x4, 0x12, 0x3, 0x30, 0x24, 0x1, 0x12, 0x16, 0x12, 0x18, 0x5, 0x12, 0x60, 0x12, 0x3, 0x1b, 0x2, 0x6c, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x7c, 0x9, 0x4e, 0x16, 0x48, 0x5, 0x1b, 0x11, 0xc, 0x1b, 0x4, 0x9, 0xc, 0x3, 0x24, 0x12, 0x3, 0x18, 0x6c, 0x1, 0x5, 0x30, 0x60, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8d, 0x7, 0x6f, 0x5c2, 0x6, 0x4, 0x80]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x0, 0x9, 0x2, 0xff5c, 0x1, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x6}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x5}, {0x1, 0x4}, {}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2a2, 0x8, 0x7, 0x5, 0x7, 0x8, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x1}, {0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x9}, {0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x2, 0x1a}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x18, 0x3, 0x6c, 0x2, 0x9, 0x12, 0x6c, 0x39, 0x60, 0xc, 0xb, 0x5, 0x48, 0x24, 0x12, 0x36, 0x24, 0x12, 0x0, 0xc, 0x48, 0x16, 0xc, 0x6, 0x36]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x12, 0x4, 0x48, 0x1b, 0x30, 0x1, 0x36, 0x48, 0x9, 0x4, 0x6, 0x9, 0x0, 0x6c, 0xc, 0x24, 0x30, 0x6, 0x1b, 0xb, 0x2, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x474, 0x11d, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59, 0x8, 0x29, 0x1200, 0x90, 0x140, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x4, 0x6, 0x1, 0x60, 0x24, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40f8, 0x0, 0xd, 0x9c, 0x7, 0xffff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x2, 0x7}, {0x2}, {0x2, 0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4, 0x3, 0x1, 0x1, 0x71, 0x3]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x0, 0xf3a3b072415fce73, 0xc, 0x6, 0x9, 0x30, 0x24, 0x60, 0x6c, 0x0, 0x0, 0x12, 0x19, 0x24, 0x2, 0x48, 0x5, 0x5, 0x0, 0x36, 0x0, 0x71, 0x3, 0x1, 0x17, 0x1b, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x5, 0x7, 0x0, 0x8, 0x2, 0xfffb, 0x8]}}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x450, 0xd, 0x1, 0xdf01, 0x713e, 0x80, 0x3, 0x8000]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x1}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x4}, {0x6, 0x7}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x2}, {0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {}, {0x7, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x5, 0x4, 0x6, 0x6, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x26, 0xb, 0x6e, 0x0, 0x0, 0x6, 0x48, 0xc, 0x18, 0x1b, 0x1b, 0x3, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x60, 0x1b, 0xb, 0xb, 0x48, 0xb, 0x48, 0x1b, 0x30, 0x12, 0x0, 0x48, 0x60, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x14c4, 0x3, 0xf, 0x7, 0x0, 0xf0dd, 0x8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x6c, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7, 0x400, 0x9c5c, 0x8, 0x1a, 0xc]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4}, {0x2, 0x4}, {0x5}, {0x4}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x7, 0x9}, {0x6}, {0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x2}, {0x3, 0x5}, {0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x4, 0x4, 0x6, 0xff, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x100, 0x0, 0x2, 0xff7f, 0x3ff, 0xd]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x9, 0x24, 0x36, 0x9, 0x16, 0x1, 0x0, 0xc, 0x2, 0x9, 0x60, 0xb, 0x2, 0x60, 0x12, 0x9, 0x60, 0x9, 0x18, 0x24, 0x58, 0x3, 0x1, 0xc, 0x6, 0x24, 0xc]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x8, 0x8000, 0xdaa6, 0x1c, 0x49f1, 0xfffc]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffb, 0x8, 0xfff9, 0x0, 0x31, 0x0, 0x6]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x5}, {0x2, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x2}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3bd5, 0xfffa, 0xfffc, 0x300, 0x5, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x400, 0xf6, 0x4, 0xee, 0x3ee, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x57f7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x2390}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.180281291s ago: executing program 1 (id=1041): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000400)=""/200, 0x26, 0xc8, 0xa, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x36) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) pread64(r3, &(0x7f0000000740)=""/102398, 0x18ffe, 0x9) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 824.860814ms ago: executing program 4 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000f050000000000000000000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fd0c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085c82104c93682e6aac09e070000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbb9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x200, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f00000003c0)=0x401, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000026c0)={{0x1, 0x0, 0x8001, 0x0, 0x6}, 0x5, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x8, 0x3, 0x40}) 699.968786ms ago: executing program 3 (id=1045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x35}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x7c}}, './file0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r5 = memfd_create(&(0x7f0000000a80)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\rH\x85\xaa2\xe0\xf7\xc9\x11a\x01\xfc\x87A|\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x82.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00'/258, 0x0) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) dup3(r4, r5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @private}, &(0x7f0000000240)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x40) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c7, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfa5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x0, 0x0, 0x6, 0x4, 0x6, 0x18, 0xfffffffffffffff0}, @generic={0x6, 0x0, 0x7, 0x7, 0x400}]}, &(0x7f00000001c0)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r8], 0x0, 0x10, 0x7, @void, @value}, 0x94) 583.975226ms ago: executing program 3 (id=1046): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2c, 0x10, &(0x7f0000000000)={0x3, 0xf, 0x0, 0x800081}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_setup(0xd9, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES8, @ANYRES32=r5, @ANYBLOB="00000000581500000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008510000001000093a18d615f631b2dec14f355f3bee0101b4b50a338056c0f07e87023e6285b65d721f1b6689b206aa71d3a17725ee134c5480914e63775403d485c0b29a20edda553e9522712a84f1b6ebad9842a7ab2a5bd8b36b1a2e3bce55e03e988f148f3808361d74a21307289210063684cc09fe02d73c49ea9d1073e4c45f14355aa15fad6dbd59337324471b4140aa256fc43bb1ce87b04ed39bc68756983f80ee8edaf23cd142b5202c6e7e34500b50815847d5d50db35cb3c448606477eca9c1755f0505992951c25b71bde7f0d3dc02f7a68580545b5d5356d32dd93096f07bff8a8d8cdfebd5b038c072fee528d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000144000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 551.787159ms ago: executing program 0 (id=1047): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}, r5}}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000000)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 531.027142ms ago: executing program 2 (id=1048): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}, r5}}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000000)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 287.743024ms ago: executing program 1 (id=1049): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r6}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}}, r5}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 287.252974ms ago: executing program 3 (id=1050): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x7f00, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 118.59713ms ago: executing program 3 (id=1051): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@fwd={0xa}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0xe27d, [{0xb, 0x2, 0xd}]}, @datasec={0xc, 0x3, 0x0, 0xf, 0x1, [{0x3}, {0x5, 0xffff, 0x7}, {0x4, 0x6, 0xa}], "17"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @struct={0x5, 0x3, 0x0, 0x4, 0x0, 0x76c, [{0x5, 0x5, 0xd}, {0x9, 0x5, 0x1}, {0xb, 0x2, 0x8}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f0000000200)=""/198, 0xca, 0xc6, 0x1, 0xa, 0x10000, @value}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x6, [@fwd={0xa}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0xe27d, [{0xb, 0x2, 0xd}]}, @datasec={0xc, 0x3, 0x0, 0xf, 0x1, [{0x3}, {0x5, 0xffff, 0x7}, {0x4, 0x6, 0xa}], "17"}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @struct={0x5, 0x3, 0x0, 0x4, 0x0, 0x76c, [{0x5, 0x5, 0xd}, {0x9, 0x5, 0x1}, {0xb, 0x2, 0x8}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f0000000200)=""/198, 0xca, 0xc6, 0x1, 0xa, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x164b, 0x4, 0x100, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x4, 0x3, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x164b, 0x4, 0x100, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x4, 0x3, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0x0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x971095, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '@&*--(-}:\x80[\\'}}, {@aname}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@privport}, {@afid={'afid', 0x3d, 0x2fd7dee3}}, {@afid={'afid', 0x3d, 0x7fffffffffffffff}}, {@cache_none}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x971095, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '@&*--(-}:\x80[\\'}}, {@aname}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@privport}, {@afid={'afid', 0x3d, 0x2fd7dee3}}, {@afid={'afid', 0x3d, 0x7fffffffffffffff}}, {@cache_none}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) recvmsg(r5, &(0x7f0000000ac0)={&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/190, 0xbe}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000000800)=""/134, 0x86}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000900)=""/242, 0xf2}], 0x6, &(0x7f0000000a80)=""/36, 0x24}, 0x40000001) r6 = openat(r0, &(0x7f0000000b00)='./file0/../file0\x00', 0x400, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x1, 0xe9, 0xc, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x90, 0x10, 0x8, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x1, 0xe9, 0xc, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x90, 0x10, 0x8, 0x8}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x2, 0x7, 0x100, 0x7f, 0x100, r6, 0x7, '\x00', r7, r8, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) memfd_create(&(0x7f0000000cc0)='+}#\x00', 0x2) setxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@random={'os2.', 'wfdno'}, &(0x7f0000000d80)='wfdno', 0x5, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) fcntl$getownex(r2, 0x10, &(0x7f0000000dc0)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f0000000e00)='smaps\x00') (async) r10 = syz_open_procfs(r9, &(0x7f0000000e00)='smaps\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r11, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xf, 0x6c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffc2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x47c}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000000) fsetxattr(r0, &(0x7f0000001000)=@random={'os2.', '\x00'}, &(0x7f0000001040)='rfdno', 0x5, 0x1) write$P9_RLINK(r10, &(0x7f0000001080)={0x7, 0x47, 0x2}, 0x7) renameat2(r3, &(0x7f00000010c0)='./file1\x00', r6, &(0x7f0000001100)='./file0/file0\x00', 0x7) (async) renameat2(r3, &(0x7f00000010c0)='./file1\x00', r6, &(0x7f0000001100)='./file0/file0\x00', 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r3}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r3}, 0x8) fgetxattr(r2, &(0x7f0000001180)=@random={'security.', 'nl80211\x00'}, &(0x7f00000011c0)=""/104, 0x68) memfd_secret(0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000001240)={0x0, 0x0, 0x8, 0x1, 0x5, 0x1}, &(0x7f0000001280)=0x14) 59.361545ms ago: executing program 3 (id=1055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000ffff000000000000001400030076657468305f746f5f626f6e64000000080006"], 0x38}}, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r4, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x2000}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c00018025000100"], 0x17d4}}, 0x0) 46.393076ms ago: executing program 1 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x24}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 1 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000ffff000000000000001400030076657468305f746f5f626f6e64000000080006"], 0x38}}, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r4, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x2000}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c00018025000100"], 0x17d4}}, 0x0) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 77.308092][ T5262] loop0: detected capacity change from 0 to 164 [ 77.313140][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.329993][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.339966][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.350429][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.362304][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.363805][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.380931][ T5087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.390054][ T5087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393951][ T5244] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.579: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 77.398798][ T5087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.398866][ T5087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.426606][ T29] audit: type=1400 audit(1727827355.508:2879): avc: denied { mount } for pid=5261 comm="syz.0.583" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 77.433173][ T5262] syz.0.583: attempt to access beyond end of device [ 77.433173][ T5262] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.456592][ T5244] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.579: Bad quota inode: 3, type: 0 [ 77.458475][ T5262] syz.0.583: attempt to access beyond end of device [ 77.458475][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.497655][ T5262] syz.0.583: attempt to access beyond end of device [ 77.497655][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.511300][ T5262] syz.0.583: attempt to access beyond end of device [ 77.511300][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.525984][ T5244] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.547676][ T5244] EXT4-fs (loop4): mount failed [ 77.676151][ T5269] loop3: detected capacity change from 0 to 256 [ 77.713485][ T29] audit: type=1400 audit(1727827355.788:2880): avc: denied { name_bind } for pid=5239 comm="syz.4.579" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.832252][ T5269] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.009733][ T29] audit: type=1326 audit(1727827356.048:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 78.016629][ T5262] bio_check_eod: 4354 callbacks suppressed [ 78.016651][ T5262] syz.0.583: attempt to access beyond end of device [ 78.016651][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 78.033130][ T29] audit: type=1326 audit(1727827356.048:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 78.056872][ T5262] syz.0.583: attempt to access beyond end of device [ 78.056872][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 78.075689][ T29] audit: type=1326 audit(1727827356.078:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 78.095535][ T5274] loop2: detected capacity change from 0 to 512 [ 78.123287][ T5277] loop1: detected capacity change from 0 to 128 [ 78.136797][ T5262] syz.0.583: attempt to access beyond end of device [ 78.136797][ T5262] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 78.157018][ T29] audit: type=1326 audit(1727827356.198:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5271 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 78.161352][ T5274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.193735][ T5274] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.238824][ T5287] loop0: detected capacity change from 0 to 512 [ 78.388582][ T5287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.402886][ T5287] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.444516][ T5296] tipc: Started in network mode [ 78.449543][ T5296] tipc: Node identity f7, cluster identity 4711 [ 78.455938][ T5296] tipc: Node number set to 247 [ 78.474635][ T5297] loop4: detected capacity change from 0 to 256 [ 78.600449][ T5297] FAT-fs (loop4): Directory bread(block 64) failed [ 78.607169][ T5297] FAT-fs (loop4): Directory bread(block 65) failed [ 78.613756][ T5297] FAT-fs (loop4): Directory bread(block 66) failed [ 78.620405][ T5297] FAT-fs (loop4): Directory bread(block 67) failed [ 78.627053][ T5297] FAT-fs (loop4): Directory bread(block 68) failed [ 78.633633][ T5297] FAT-fs (loop4): Directory bread(block 69) failed [ 78.640228][ T5297] FAT-fs (loop4): Directory bread(block 70) failed [ 78.647016][ T5297] FAT-fs (loop4): Directory bread(block 71) failed [ 78.653593][ T5297] FAT-fs (loop4): Directory bread(block 72) failed [ 78.660258][ T5297] FAT-fs (loop4): Directory bread(block 73) failed [ 78.698782][ T5297] syz.4.590: attempt to access beyond end of device [ 78.698782][ T5297] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 78.712597][ T5297] syz.4.590: attempt to access beyond end of device [ 78.712597][ T5297] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 78.823393][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.833618][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.877787][ T5308] veth0_vlan: entered allmulticast mode [ 78.991821][ T5313] loop2: detected capacity change from 0 to 2048 [ 79.000123][ T5315] hub 9-0:1.0: USB hub found [ 79.011159][ T5315] hub 9-0:1.0: 8 ports detected [ 79.067427][ T5316] veth0_vlan: left promiscuous mode [ 79.073882][ T5316] veth0_vlan: entered promiscuous mode [ 79.103018][ T5313] loop2: p3 < > p4 < > [ 79.107384][ T5313] loop2: partition table partially beyond EOD, truncated [ 79.132534][ T5313] loop2: p3 start 4284289 is beyond EOD, truncated [ 79.148182][ T2967] loop2: p3 < > p4 < > [ 79.152523][ T2967] loop2: partition table partially beyond EOD, truncated [ 79.163449][ T2967] loop2: p3 start 4284289 is beyond EOD, truncated [ 79.497869][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.589755][ T5325] program syz.0.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.707321][ T5333] loop4: detected capacity change from 0 to 512 [ 79.782058][ T5341] loop2: detected capacity change from 0 to 512 [ 79.808501][ T5341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.836930][ T5341] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.849648][ T5333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.863854][ T5333] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.942054][ T5355] loop0: detected capacity change from 0 to 256 [ 79.960607][ T5354] veth0_vlan: entered allmulticast mode [ 80.123781][ T5355] FAT-fs (loop0): Directory bread(block 64) failed [ 80.130448][ T5355] FAT-fs (loop0): Directory bread(block 65) failed [ 80.137046][ T5355] FAT-fs (loop0): Directory bread(block 66) failed [ 80.143760][ T5355] FAT-fs (loop0): Directory bread(block 67) failed [ 80.150433][ T5355] FAT-fs (loop0): Directory bread(block 68) failed [ 80.157066][ T5355] FAT-fs (loop0): Directory bread(block 69) failed [ 80.163752][ T5355] FAT-fs (loop0): Directory bread(block 70) failed [ 80.170410][ T5355] FAT-fs (loop0): Directory bread(block 71) failed [ 80.177009][ T5355] FAT-fs (loop0): Directory bread(block 72) failed [ 80.183607][ T5355] FAT-fs (loop0): Directory bread(block 73) failed [ 80.218441][ T5355] syz.0.610: attempt to access beyond end of device [ 80.218441][ T5355] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 80.232254][ T5355] syz.0.610: attempt to access beyond end of device [ 80.232254][ T5355] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 80.258345][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.336233][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.388272][ T5366] program syz.4.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.460269][ T5374] loop2: detected capacity change from 0 to 1024 [ 80.490414][ T5374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803e01c, mo2=0002] [ 80.498688][ T5374] System zones: 0-1, 3-12 [ 80.503856][ T5374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.531908][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.594745][ T5390] loop3: detected capacity change from 0 to 2048 [ 80.601285][ T5387] loop2: detected capacity change from 0 to 128 [ 80.629798][ T5390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.698717][ T5390] FAULT_INJECTION: forcing a failure. [ 80.698717][ T5390] name failslab, interval 1, probability 0, space 0, times 0 [ 80.711629][ T5390] CPU: 1 UID: 0 PID: 5390 Comm: syz.3.625 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 80.723738][ T5390] Tainted: [W]=WARN [ 80.727700][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.737799][ T5390] Call Trace: [ 80.741095][ T5390] [ 80.744092][ T5390] dump_stack_lvl+0xf2/0x150 [ 80.748704][ T5390] dump_stack+0x15/0x20 [ 80.752994][ T5390] should_fail_ex+0x223/0x230 [ 80.757718][ T5390] ? __d_alloc+0x3d/0x340 [ 80.762091][ T5390] should_failslab+0x8f/0xb0 [ 80.766806][ T5390] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 80.772577][ T5390] ? __d_lookup+0x342/0x370 [ 80.777106][ T5390] __d_alloc+0x3d/0x340 [ 80.781347][ T5390] d_alloc+0x2e/0x100 [ 80.785423][ T5390] lookup_one_qstr_excl+0x97/0x1a0 [ 80.790571][ T5390] filename_create+0x14d/0x2b0 [ 80.795428][ T5390] kern_path_create+0x39/0x110 [ 80.800260][ T5390] unix_bind+0x1c0/0x870 [ 80.804524][ T5390] __sys_bind+0x14f/0x1c0 [ 80.808880][ T5390] __x64_sys_bind+0x41/0x50 [ 80.813476][ T5390] x64_sys_call+0x201c/0x2d60 [ 80.818274][ T5390] do_syscall_64+0xc9/0x1c0 [ 80.822791][ T5390] ? clear_bhb_loop+0x55/0xb0 [ 80.827517][ T5390] ? clear_bhb_loop+0x55/0xb0 [ 80.832216][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.838129][ T5390] RIP: 0033:0x7f3f3f73dff9 [ 80.842549][ T5390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.862306][ T5390] RSP: 002b:00007f3f3e3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 80.870758][ T5390] RAX: ffffffffffffffda RBX: 00007f3f3f8f5f80 RCX: 00007f3f3f73dff9 [ 80.878854][ T5390] RDX: 000000000000006e RSI: 0000000020000080 RDI: 0000000000000007 [ 80.886849][ T5390] RBP: 00007f3f3e3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 80.894876][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.902870][ T5390] R13: 0000000000000000 R14: 00007f3f3f8f5f80 R15: 00007ffc9bdebb58 [ 80.910889][ T5390] [ 80.951141][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.992423][ T5401] program syz.4.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.133642][ T3933] udevd[3933]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 81.163575][ T5418] program syz.4.637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.219683][ T5422] loop0: detected capacity change from 0 to 256 [ 81.377070][ T5422] FAT-fs (loop0): Directory bread(block 64) failed [ 81.383812][ T5422] FAT-fs (loop0): Directory bread(block 65) failed [ 81.390571][ T5422] FAT-fs (loop0): Directory bread(block 66) failed [ 81.397343][ T5422] FAT-fs (loop0): Directory bread(block 67) failed [ 81.404551][ T5422] FAT-fs (loop0): Directory bread(block 68) failed [ 81.411123][ T5422] FAT-fs (loop0): Directory bread(block 69) failed [ 81.417862][ T5422] FAT-fs (loop0): Directory bread(block 70) failed [ 81.424405][ T5422] FAT-fs (loop0): Directory bread(block 71) failed [ 81.431283][ T5422] FAT-fs (loop0): Directory bread(block 72) failed [ 81.437845][ T5422] FAT-fs (loop0): Directory bread(block 73) failed [ 81.465917][ T5422] syz.0.636: attempt to access beyond end of device [ 81.465917][ T5422] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 81.479755][ T5422] syz.0.636: attempt to access beyond end of device [ 81.479755][ T5422] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 81.546311][ T5429] loop4: detected capacity change from 0 to 512 [ 81.600534][ T5432] loop1: detected capacity change from 0 to 128 [ 81.625523][ T5429] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.633746][ T5429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.659834][ T5441] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 81.663131][ T5429] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.674141][ T5429] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.681523][ T5429] __quota_error: 70 callbacks suppressed [ 81.681540][ T5429] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 81.696716][ T5441] macvlan1: entered promiscuous mode [ 81.699824][ T5429] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.702045][ T5441] macvlan1: entered allmulticast mode [ 81.716704][ T5429] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 81.729454][ T5429] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.641: bg 0: block 40: padding at end of block bitmap is not set [ 81.736311][ T5441] veth1_vlan: entered allmulticast mode [ 81.744935][ T5429] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 81.751697][ T5441] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 81.772622][ T5429] EXT4-fs (loop4): 1 truncate cleaned up [ 81.778842][ T5429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.781291][ T5444] program syz.2.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.801347][ T5429] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.641: corrupted xattr block 19: bad e_name length [ 81.823182][ T5429] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.842833][ T5429] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.641: corrupted xattr block 19: bad e_name length [ 81.877614][ T5429] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.914314][ T29] audit: type=1400 audit(1727827359.988:2955): avc: denied { read } for pid=5428 comm="syz.4.641" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.937498][ T5429] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.641: corrupted xattr block 19: bad e_name length [ 81.961561][ T5429] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 81.971160][ T29] audit: type=1400 audit(1727827360.048:2956): avc: denied { open } for pid=5428 comm="syz.4.641" path="/167/file2/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.002727][ T5457] program syz.1.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.028520][ T5449] program syz.3.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.071276][ T29] audit: type=1400 audit(1727827360.148:2957): avc: denied { getopt } for pid=5467 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.107609][ T5473] loop1: detected capacity change from 0 to 512 [ 82.117283][ T5475] loop2: detected capacity change from 0 to 2048 [ 82.135577][ T5473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.138595][ T5477] program syz.3.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.163405][ T5473] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.180022][ T5482] syz.0.662[5482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.180091][ T5482] syz.0.662[5482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.195581][ T5475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.204646][ T5485] loop3: detected capacity change from 0 to 512 [ 82.219592][ T5482] syz.0.662[5482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.236092][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.263511][ T5475] netlink: 268 bytes leftover after parsing attributes in process `syz.2.660'. [ 82.272856][ T5475] unsupported nla_type 65024 [ 82.281212][ T5475] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.296536][ T5475] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 28 with error 28 [ 82.298949][ T5485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.308946][ T5475] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.308946][ T5475] [ 82.323600][ T5485] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.331858][ T5475] EXT4-fs (loop2): Total free blocks count 0 [ 82.348387][ T5475] EXT4-fs (loop2): Free/Dirty block details [ 82.353078][ T5491] loop4: detected capacity change from 0 to 512 [ 82.354299][ T5475] EXT4-fs (loop2): free_blocks=2415919104 [ 82.354317][ T5475] EXT4-fs (loop2): dirty_blocks=32 [ 82.354333][ T5475] EXT4-fs (loop2): Block reservation details [ 82.372892][ T5491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.378172][ T5475] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 82.396198][ T5475] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 33 with error 28 [ 82.397748][ T5491] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.423479][ T5491] EXT4-fs (loop4): 1 truncate cleaned up [ 82.430285][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.444122][ T29] audit: type=1400 audit(1727827360.508:2958): avc: denied { mounton } for pid=5484 comm="syz.3.663" path="/144/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.483142][ T5487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.487569][ T5494] FAULT_INJECTION: forcing a failure. [ 82.487569][ T5494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.506171][ T5485] loop3: detected capacity change from 512 to 0 [ 82.506952][ T5494] CPU: 1 UID: 0 PID: 5494 Comm: syz.2.665 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 82.525195][ T5494] Tainted: [W]=WARN [ 82.529011][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.531995][ T3271] syz-executor: attempt to access beyond end of device [ 82.531995][ T3271] loop3: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 82.539334][ T5494] Call Trace: [ 82.539345][ T5494] [ 82.539355][ T5494] dump_stack_lvl+0xf2/0x150 [ 82.539387][ T5494] dump_stack+0x15/0x20 [ 82.568161][ T5494] should_fail_ex+0x223/0x230 [ 82.572908][ T5494] should_fail+0xb/0x10 [ 82.577094][ T5494] should_fail_usercopy+0x1a/0x20 [ 82.582216][ T5494] _copy_from_user+0x1e/0xd0 [ 82.586818][ T5494] copy_msghdr_from_user+0x54/0x2a0 [ 82.592033][ T5494] __sys_sendmsg+0x171/0x270 [ 82.596704][ T5494] __x64_sys_sendmsg+0x46/0x50 [ 82.601512][ T5494] x64_sys_call+0x2689/0x2d60 [ 82.606201][ T5494] do_syscall_64+0xc9/0x1c0 [ 82.610802][ T5494] ? clear_bhb_loop+0x55/0xb0 [ 82.615570][ T5494] ? clear_bhb_loop+0x55/0xb0 [ 82.620298][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.626310][ T5494] RIP: 0033:0x7ff7bb1edff9 [ 82.630843][ T5494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.650596][ T5494] RSP: 002b:00007ff7b9e61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.659147][ T5494] RAX: ffffffffffffffda RBX: 00007ff7bb3a5f80 RCX: 00007ff7bb1edff9 [ 82.667126][ T5494] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 82.675141][ T5494] RBP: 00007ff7b9e61090 R08: 0000000000000000 R09: 0000000000000000 [ 82.683195][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.691175][ T5494] R13: 0000000000000000 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 82.699155][ T5494] [ 82.705105][ T11] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:0: unable to read itable block [ 82.719231][ T11] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 82.727748][ T11] EXT4-fs (loop3): I/O error while writing superblock [ 82.749405][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.765342][ T3271] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 82.774398][ T3271] EXT4-fs (loop3): I/O error while writing superblock [ 82.776312][ T5487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.793350][ T5488] Buffer I/O error on dev loop3, logical block 12, lost sync page write [ 82.793966][ T5087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.812302][ T29] audit: type=1400 audit(1727827360.888:2959): avc: denied { ioctl } for pid=5495 comm="syz.0.667" path="/dev/input/event1" dev="devtmpfs" ino=219 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.864763][ T5499] program syz.2.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.892299][ T29] audit: type=1400 audit(1727827360.968:2960): avc: denied { create } for pid=5500 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.920194][ T5487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.934494][ T29] audit: type=1400 audit(1727827360.968:2961): avc: denied { bind } for pid=5500 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.953953][ T29] audit: type=1400 audit(1727827360.998:2962): avc: denied { listen } for pid=5500 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.999949][ T29] audit: type=1400 audit(1727827361.078:2963): avc: denied { ioctl } for pid=5510 comm="syz.2.672" path="socket:[13066]" dev="sockfs" ino=13066 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.006370][ T5513] program syz.1.673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.060051][ T5487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.157370][ T5487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.180246][ T5487] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.184951][ T5487] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.200832][ T5487] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.234192][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.407260][ T5538] lo speed is unknown, defaulting to 1000 [ 83.426134][ T5538] lo speed is unknown, defaulting to 1000 [ 83.448051][ T5538] lo speed is unknown, defaulting to 1000 [ 83.460087][ T5538] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.487913][ T5538] lo speed is unknown, defaulting to 1000 [ 83.497378][ T5538] lo speed is unknown, defaulting to 1000 [ 83.523917][ T5538] lo speed is unknown, defaulting to 1000 [ 83.530617][ T5538] lo speed is unknown, defaulting to 1000 [ 83.539366][ T5523] chnl_net:caif_netlink_parms(): no params data found [ 83.548550][ T5538] lo speed is unknown, defaulting to 1000 [ 83.554732][ T5538] lo speed is unknown, defaulting to 1000 [ 83.650922][ T5552] program syz.2.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.692144][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.699290][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.749934][ T5523] bridge_slave_0: entered allmulticast mode [ 83.758312][ T5557] program syz.4.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.769892][ T5523] bridge_slave_0: entered promiscuous mode [ 83.782658][ T5559] loop0: detected capacity change from 0 to 512 [ 83.793884][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.801143][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.811576][ T5563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.689'. [ 83.827428][ T5523] bridge_slave_1: entered allmulticast mode [ 83.835400][ T5559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.858142][ T5523] bridge_slave_1: entered promiscuous mode [ 83.864179][ T5559] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.883989][ T5567] macvlan0: entered promiscuous mode [ 83.906111][ T5567] ipvlan0: entered promiscuous mode [ 83.912025][ T5567] ipvlan0: left promiscuous mode [ 84.032614][ T5567] macvlan0: left promiscuous mode [ 84.142553][ T5523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.179760][ T5523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.240617][ T5585] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.254769][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.275879][ T5523] team0: Port device team_slave_0 added [ 84.281963][ T5587] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 84.285451][ T5523] team0: Port device team_slave_1 added [ 84.303591][ T5590] FAULT_INJECTION: forcing a failure. [ 84.303591][ T5590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.316704][ T5590] CPU: 0 UID: 0 PID: 5590 Comm: syz.2.699 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 84.328926][ T5590] Tainted: [W]=WARN [ 84.332736][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.342817][ T5590] Call Trace: [ 84.346116][ T5590] [ 84.349077][ T5590] dump_stack_lvl+0xf2/0x150 [ 84.353756][ T5590] dump_stack+0x15/0x20 [ 84.358037][ T5590] should_fail_ex+0x223/0x230 [ 84.362812][ T5590] should_fail+0xb/0x10 [ 84.367009][ T5590] should_fail_usercopy+0x1a/0x20 [ 84.372103][ T5590] _copy_from_user+0x1e/0xd0 [ 84.376708][ T5590] ppp_get_filter+0x3f/0x160 [ 84.381347][ T5590] ppp_ioctl+0xbdd/0x11b0 [ 84.385705][ T5590] ? __pfx_ppp_ioctl+0x10/0x10 [ 84.390495][ T5590] __se_sys_ioctl+0xcd/0x140 [ 84.395126][ T5590] __x64_sys_ioctl+0x43/0x50 [ 84.399734][ T5590] x64_sys_call+0x15cc/0x2d60 [ 84.404477][ T5590] do_syscall_64+0xc9/0x1c0 [ 84.409017][ T5590] ? clear_bhb_loop+0x55/0xb0 [ 84.413731][ T5590] ? clear_bhb_loop+0x55/0xb0 [ 84.418538][ T5590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.424451][ T5590] RIP: 0033:0x7ff7bb1edff9 [ 84.428896][ T5590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.448513][ T5590] RSP: 002b:00007ff7b9e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.456990][ T5590] RAX: ffffffffffffffda RBX: 00007ff7bb3a5f80 RCX: 00007ff7bb1edff9 [ 84.465477][ T5590] RDX: 0000000020000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 84.473465][ T5590] RBP: 00007ff7b9e61090 R08: 0000000000000000 R09: 0000000000000000 [ 84.481451][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.489431][ T5590] R13: 0000000000000000 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 84.497477][ T5590] [ 84.529753][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.536881][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.562905][ T5523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.574294][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.581426][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.607765][ T5523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.647641][ T5523] hsr_slave_0: entered promiscuous mode [ 84.653782][ T5523] hsr_slave_1: entered promiscuous mode [ 84.655237][ T5595] loop1: detected capacity change from 0 to 2048 [ 84.673925][ T5523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.688785][ T5595] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.695945][ T5523] Cannot create hsr debugfs directory [ 84.706786][ T5595] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 84.733662][ T5599] program syz.2.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.751192][ T5595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.810964][ T5595] vxcan1: tx address claim with different name [ 84.824015][ T5595] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 84.898514][ T5523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.968373][ T5087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.011346][ T5523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.086887][ T5623] syz.4.709[5623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.087065][ T5623] syz.4.709[5623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.127389][ T5523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.202981][ T5628] loop1: detected capacity change from 0 to 2048 [ 85.227202][ T5523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.273614][ T5639] program syz.4.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.307976][ T5628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.324701][ T5627] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.343814][ T5627] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 85.356305][ T5627] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.356305][ T5627] [ 85.366147][ T5627] EXT4-fs (loop1): Total free blocks count 0 [ 85.372150][ T5627] EXT4-fs (loop1): Free/Dirty block details [ 85.378092][ T5627] EXT4-fs (loop1): free_blocks=2415919104 [ 85.383826][ T5627] EXT4-fs (loop1): dirty_blocks=16 [ 85.389068][ T5627] EXT4-fs (loop1): Block reservation details [ 85.395090][ T5627] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 85.407686][ T5628] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2 with error 28 [ 85.434780][ T5643] loop4: detected capacity change from 0 to 2048 [ 85.442605][ T5643] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.449172][ T5643] EXT4-fs: Ignoring removed i_version option [ 85.517692][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.562750][ T5651] loop1: detected capacity change from 0 to 2048 [ 85.568937][ T5523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.569567][ T5651] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.582498][ T5651] EXT4-fs: Ignoring removed i_version option [ 85.602272][ T5643] FAULT_INJECTION: forcing a failure. [ 85.602272][ T5643] name failslab, interval 1, probability 0, space 0, times 0 [ 85.615135][ T5643] CPU: 1 UID: 0 PID: 5643 Comm: syz.4.717 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 85.627286][ T5643] Tainted: [W]=WARN [ 85.631107][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.641182][ T5643] Call Trace: [ 85.644537][ T5643] [ 85.647523][ T5643] dump_stack_lvl+0xf2/0x150 [ 85.652313][ T5643] dump_stack+0x15/0x20 [ 85.656490][ T5643] should_fail_ex+0x223/0x230 [ 85.661325][ T5643] ? getname_flags+0x81/0x3b0 [ 85.666034][ T5643] should_failslab+0x8f/0xb0 [ 85.670662][ T5643] kmem_cache_alloc_noprof+0x4c/0x290 [ 85.676085][ T5643] getname_flags+0x81/0x3b0 [ 85.680875][ T5643] __x64_sys_symlink+0x33/0x60 [ 85.685695][ T5643] x64_sys_call+0x2819/0x2d60 [ 85.690416][ T5643] do_syscall_64+0xc9/0x1c0 [ 85.694928][ T5643] ? clear_bhb_loop+0x55/0xb0 [ 85.699637][ T5643] ? clear_bhb_loop+0x55/0xb0 [ 85.704369][ T5643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.710365][ T5643] RIP: 0033:0x7f046146dff9 [ 85.714801][ T5643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.734763][ T5643] RSP: 002b:00007f04600e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 85.743536][ T5643] RAX: ffffffffffffffda RBX: 00007f0461625f80 RCX: 00007f046146dff9 [ 85.751529][ T5643] RDX: 0000000000000000 RSI: 0000000020000cc0 RDI: 0000000020000dc0 [ 85.759783][ T5643] RBP: 00007f04600e7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.768369][ T5643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.776602][ T5643] R13: 0000000000000000 R14: 00007f0461625f80 R15: 00007ffd0fc0fb58 [ 85.784651][ T5643] [ 85.788092][ T5523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.799594][ T5523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.808903][ T5523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.817395][ T5651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.858530][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.892304][ T5523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.897715][ T5523] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.911767][ T5523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.911865][ T5523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.917465][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.917504][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.919166][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.919194][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.014295][ T5613] loop2: detected capacity change from 0 to 1024 [ 86.029256][ T5613] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.049703][ T5656] veth0_vlan: left promiscuous mode [ 86.050375][ T5656] veth0_vlan: entered promiscuous mode [ 86.058277][ T5087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.063628][ T5523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.099176][ T5613] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.707: Invalid block bitmap block 0 in block_group 0 [ 86.131409][ T5668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.722'. [ 86.132120][ T5613] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.707: Failed to acquire dquot type 0 [ 86.148533][ T5667] hub 9-0:1.0: USB hub found [ 86.153432][ T5613] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.707: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.170842][ T5613] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.707: Invalid inode bitmap blk 0 in block_group 0 [ 86.176191][ T5667] hub 9-0:1.0: 8 ports detected [ 86.184018][ T5613] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 86.197492][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:3: Failed to release dquot type 0 [ 86.198934][ T5613] EXT4-fs (loop2): 1 orphan inode deleted [ 86.215595][ T5613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.280369][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.347744][ T5523] veth0_vlan: entered promiscuous mode [ 86.359352][ T5523] veth1_vlan: entered promiscuous mode [ 86.359355][ T5676] loop1: detected capacity change from 0 to 8192 [ 86.360434][ T5679] SELinux: failed to load policy [ 86.467690][ T5679] loop2: detected capacity change from 0 to 8192 [ 86.572103][ T5523] veth0_macvtap: entered promiscuous mode [ 86.744640][ T5684] program syz.0.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.764859][ T5523] veth1_macvtap: entered promiscuous mode [ 86.784329][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 86.784347][ T29] audit: type=1400 audit(1727827364.858:2995): avc: denied { create } for pid=5678 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.819300][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.829789][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.839623][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.850097][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.860024][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.870487][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.880659][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.891171][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.917193][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.928048][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.939032][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.948933][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.959460][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.969384][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.979868][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.990066][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.995544][ T5691] loop0: detected capacity change from 0 to 512 [ 87.000513][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.032228][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.087521][ T5523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.096511][ T5523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.105255][ T5523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.114119][ T5523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.127834][ T5691] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.728: Invalid inode bitmap blk 4 in block_group 0 [ 87.133821][ T5697] loop4: detected capacity change from 0 to 128 [ 87.141685][ T5691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.194502][ T5697] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.208802][ T5697] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.241250][ T5698] wireguard0: entered promiscuous mode [ 87.246815][ T5698] wireguard0: entered allmulticast mode [ 87.252455][ T29] audit: type=1400 audit(1727827365.318:2996): avc: denied { read } for pid=5689 comm="syz.0.728" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.252492][ T29] audit: type=1400 audit(1727827365.318:2997): avc: denied { append } for pid=5689 comm="syz.0.728" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.252542][ T29] audit: type=1326 audit(1727827365.318:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.320830][ T29] audit: type=1326 audit(1727827365.318:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.344338][ T29] audit: type=1326 audit(1727827365.318:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.368003][ T29] audit: type=1326 audit(1727827365.318:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.375143][ T5705] loop1: detected capacity change from 0 to 128 [ 87.403003][ T5697] block device autoloading is deprecated and will be removed. [ 87.411364][ T5705] vfat: Unknown parameter '' [ 87.419183][ T5697] FAULT_INJECTION: forcing a failure. [ 87.419183][ T5697] name failslab, interval 1, probability 0, space 0, times 0 [ 87.431909][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: syz.4.730 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 87.444086][ T5697] Tainted: [W]=WARN [ 87.447954][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.458061][ T5697] Call Trace: [ 87.461397][ T5697] [ 87.464344][ T5697] dump_stack_lvl+0xf2/0x150 [ 87.469063][ T5697] dump_stack+0x15/0x20 [ 87.473296][ T5697] should_fail_ex+0x223/0x230 [ 87.478005][ T5697] ? sidtab_sid2str_get+0xb8/0x140 [ 87.483129][ T5697] should_failslab+0x8f/0xb0 [ 87.487815][ T5697] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 87.494230][ T5697] kmemdup_noprof+0x2a/0x60 [ 87.498766][ T5697] sidtab_sid2str_get+0xb8/0x140 [ 87.503714][ T5697] security_sid_to_context_core+0x1eb/0x2f0 [ 87.509759][ T5697] security_sid_to_context+0x27/0x30 [ 87.515164][ T5697] avc_audit_post_callback+0x9d/0x530 [ 87.520568][ T5697] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 87.526593][ T5697] common_lsm_audit+0x7cc/0xfc0 [ 87.531483][ T5697] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 87.537877][ T5697] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 87.543793][ T5697] slow_avc_audit+0xf9/0x140 [ 87.548551][ T5697] avc_has_extended_perms+0x595/0x820 [ 87.553972][ T5697] ioctl_has_perm+0x286/0x2e0 [ 87.558801][ T5697] selinux_file_ioctl+0x2f7/0x380 [ 87.563862][ T5697] ? __fget_files+0x1d4/0x210 [ 87.568595][ T5697] security_file_ioctl+0x47/0x80 [ 87.573585][ T5697] __se_sys_ioctl+0x47/0x140 [ 87.578194][ T5697] __x64_sys_ioctl+0x43/0x50 [ 87.582802][ T5697] x64_sys_call+0x15cc/0x2d60 [ 87.587497][ T5697] do_syscall_64+0xc9/0x1c0 [ 87.592023][ T5697] ? clear_bhb_loop+0x55/0xb0 [ 87.596799][ T5697] ? clear_bhb_loop+0x55/0xb0 [ 87.601498][ T5697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.607412][ T5697] RIP: 0033:0x7f046146dff9 [ 87.611837][ T5697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.631532][ T5697] RSP: 002b:00007f04600e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.640042][ T5697] RAX: ffffffffffffffda RBX: 00007f0461625f80 RCX: 00007f046146dff9 [ 87.648041][ T5697] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000005 [ 87.656017][ T5697] RBP: 00007f04600e7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.663992][ T5697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.671966][ T5697] R13: 0000000000000000 R14: 00007f0461625f80 R15: 00007ffd0fc0fb58 [ 87.680064][ T5697] [ 87.685792][ T29] audit: type=1326 audit(1727827365.448:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.709444][ T29] audit: type=1326 audit(1727827365.448:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.732814][ T29] audit: type=1326 audit(1727827365.448:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4079cdff9 code=0x7ffc0000 [ 87.771452][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.771526][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.783411][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.798567][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.811263][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.824201][ T5714] syz.2.732[5714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.829665][ T4738] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 87.883140][ T4738] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 87.904659][ T4738] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 87.907572][ T3268] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.927783][ T4738] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 87.979089][ T4738] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 88.001834][ T4738] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 88.025889][ T4738] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 88.063865][ T4738] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 88.090957][ T5724] loop3: detected capacity change from 0 to 128 [ 88.098423][ T4738] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 20: comm syz-executor: path /42/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 88.125167][ T5730] hub 9-0:1.0: USB hub found [ 88.135866][ T5730] hub 9-0:1.0: 8 ports detected [ 88.152463][ T4738] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 88.197516][ T5728] loop2: detected capacity change from 0 to 8192 [ 88.281838][ T5728] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 88.289096][ T5728] FAT-fs (loop2): Filesystem has been set read-only [ 88.502778][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.731016][ T5742] program syz.3.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.769678][ T5747] netlink: 'syz.3.746': attribute type 4 has an invalid length. [ 88.770834][ T5748] SET target dimension over the limit! [ 88.798668][ T5750] loop4: detected capacity change from 0 to 512 [ 88.816943][ T5747] netlink: 'syz.3.746': attribute type 17 has an invalid length. [ 88.826654][ T5750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.846477][ T5750] ext4 filesystem being mounted at /190/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.902014][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.912933][ T5759] loop3: detected capacity change from 0 to 128 [ 88.913293][ T5760] FAULT_INJECTION: forcing a failure. [ 88.913293][ T5760] name failslab, interval 1, probability 0, space 0, times 0 [ 88.932028][ T5760] CPU: 1 UID: 0 PID: 5760 Comm: syz.2.751 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 88.944529][ T5760] Tainted: [W]=WARN [ 88.948365][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.958439][ T5760] Call Trace: [ 88.961763][ T5760] [ 88.964759][ T5760] dump_stack_lvl+0xf2/0x150 [ 88.969384][ T5760] dump_stack+0x15/0x20 [ 88.973712][ T5760] should_fail_ex+0x223/0x230 [ 88.978413][ T5760] ? io_cqring_event_overflow+0x5a/0x300 [ 88.984128][ T5760] should_failslab+0x8f/0xb0 [ 88.988729][ T5760] __kmalloc_noprof+0xa5/0x370 [ 88.993587][ T5760] io_cqring_event_overflow+0x5a/0x300 [ 88.999133][ T5760] ? strncpy_from_user+0x167/0x200 [ 89.004262][ T5760] io_req_cqe_overflow+0x89/0xb0 [ 89.009223][ T5760] __io_submit_flush_completions+0x34e/0xa00 [ 89.015364][ T5760] io_submit_sqes+0xe9b/0x1090 [ 89.020147][ T5760] ? __rcu_read_unlock+0x4e/0x70 [ 89.025106][ T5760] ? xa_load+0xb9/0xe0 [ 89.029262][ T5760] __se_sys_io_uring_enter+0x1ce/0x17b0 [ 89.034819][ T5760] ? get_pid_task+0x8e/0xc0 [ 89.039342][ T5760] ? proc_fail_nth_write+0x12a/0x150 [ 89.044645][ T5760] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.050302][ T5760] ? vfs_write+0x580/0x910 [ 89.054851][ T5760] ? __fget_files+0x1d4/0x210 [ 89.059569][ T5760] ? fput+0x14e/0x190 [ 89.063644][ T5760] ? ksys_write+0x17a/0x1b0 [ 89.068165][ T5760] __x64_sys_io_uring_enter+0x78/0x90 [ 89.073545][ T5760] x64_sys_call+0x2567/0x2d60 [ 89.078236][ T5760] do_syscall_64+0xc9/0x1c0 [ 89.082803][ T5760] ? clear_bhb_loop+0x55/0xb0 [ 89.087570][ T5760] ? clear_bhb_loop+0x55/0xb0 [ 89.092324][ T5760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.098347][ T5760] RIP: 0033:0x7ff7bb1edff9 [ 89.102767][ T5760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.122513][ T5760] RSP: 002b:00007ff7b9e61038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.131022][ T5760] RAX: ffffffffffffffda RBX: 00007ff7bb3a5f80 RCX: 00007ff7bb1edff9 [ 89.139003][ T5760] RDX: 0000000000000000 RSI: 0000000000001849 RDI: 0000000000000003 [ 89.147036][ T5760] RBP: 00007ff7b9e61090 R08: 0000000000000000 R09: 0000000000000000 [ 89.155142][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.163138][ T5760] R13: 0000000000000000 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 89.171244][ T5760] [ 89.255552][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.324047][ T5774] program syz.4.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.385345][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=5790 comm=syz.3.764 [ 89.397798][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=5790 comm=syz.3.764 [ 89.410224][ T5790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=5790 comm=syz.3.764 [ 89.427315][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.438722][ T5790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'. [ 89.472219][ T5790] loop3: detected capacity change from 0 to 164 [ 89.492302][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.532800][ T5764] lo speed is unknown, defaulting to 1000 [ 89.547307][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.590412][ T5808] hub 9-0:1.0: USB hub found [ 89.595925][ T5808] hub 9-0:1.0: 8 ports detected [ 89.663283][ T50] bridge_slave_1: left allmulticast mode [ 89.669050][ T50] bridge_slave_1: left promiscuous mode [ 89.674811][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.721140][ T5812] program syz.3.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.730928][ T50] bridge_slave_0: left allmulticast mode [ 89.736806][ T50] bridge_slave_0: left promiscuous mode [ 89.742456][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.995485][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.049528][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.106280][ T50] bond0 (unregistering): Released all slaves [ 90.184106][ T50] hsr_slave_0: left promiscuous mode [ 90.192167][ T50] hsr_slave_1: left promiscuous mode [ 90.225683][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.233233][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.260475][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.267996][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.280026][ T50] veth1_macvtap: left promiscuous mode [ 90.280054][ T50] veth0_macvtap: left promiscuous mode [ 90.280166][ T50] veth1_vlan: left promiscuous mode [ 90.280213][ T50] veth0_vlan: left promiscuous mode [ 90.358284][ T5843] program syz.4.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.419108][ T50] team0 (unregistering): Port device team_slave_1 removed [ 90.440522][ T50] team0 (unregistering): Port device team_slave_0 removed [ 90.486216][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 90.497049][ T5842] netlink: 124 bytes leftover after parsing attributes in process `syz.3.782'. [ 90.514258][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 90.572718][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 90.602890][ T5854] loop1: detected capacity change from 0 to 128 [ 90.605436][ T5848] lo speed is unknown, defaulting to 1000 [ 90.663573][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.699694][ T5868] loop2: detected capacity change from 0 to 512 [ 90.728376][ T5870] loop1: detected capacity change from 0 to 1024 [ 90.729615][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.741934][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.745972][ T5870] EXT4-fs: Ignoring removed orlov option [ 90.749219][ T5868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.754740][ T5870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.782763][ T5764] bridge_slave_0: entered allmulticast mode [ 90.790035][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.798482][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.803424][ T5764] bridge_slave_0: entered promiscuous mode [ 90.813814][ T3343] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.828207][ T5868] EXT4-fs (loop2): 1 truncate cleaned up [ 90.830288][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.841690][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.852496][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.872582][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879836][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.887215][ T5764] bridge_slave_1: entered allmulticast mode [ 90.894143][ T5764] bridge_slave_1: entered promiscuous mode [ 90.897854][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.937750][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.949541][ T5087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.967803][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.975120][ T5880] hub 9-0:1.0: USB hub found [ 90.981597][ T5880] hub 9-0:1.0: 8 ports detected [ 90.989284][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.006410][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.028871][ T5764] team0: Port device team_slave_0 added [ 91.035607][ T5764] team0: Port device team_slave_1 added [ 91.055690][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.062680][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.088800][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.100508][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.107534][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.134281][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.183454][ T5764] hsr_slave_0: entered promiscuous mode [ 91.190960][ T5764] hsr_slave_1: entered promiscuous mode [ 91.294860][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.064068][ T5886] loop4: detected capacity change from 0 to 256 [ 92.078084][ T5764] Cannot create hsr debugfs directory [ 92.114748][ T5861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.138153][ T5886] FAT-fs (loop4): Directory bread(block 64) failed [ 92.144728][ T5886] FAT-fs (loop4): Directory bread(block 65) failed [ 92.151412][ T5886] FAT-fs (loop4): Directory bread(block 66) failed [ 92.157981][ T5886] FAT-fs (loop4): Directory bread(block 67) failed [ 92.164508][ T5886] FAT-fs (loop4): Directory bread(block 68) failed [ 92.171049][ T5886] FAT-fs (loop4): Directory bread(block 69) failed [ 92.177619][ T5886] FAT-fs (loop4): Directory bread(block 70) failed [ 92.184161][ T5886] FAT-fs (loop4): Directory bread(block 71) failed [ 92.190738][ T5886] FAT-fs (loop4): Directory bread(block 72) failed [ 92.192496][ T5888] loop1: detected capacity change from 0 to 256 [ 92.197301][ T5886] FAT-fs (loop4): Directory bread(block 73) failed [ 92.217964][ T5885] bio_check_eod: 6 callbacks suppressed [ 92.217980][ T5885] syz.4.795: attempt to access beyond end of device [ 92.217980][ T5885] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 92.237408][ T5885] syz.4.795: attempt to access beyond end of device [ 92.237408][ T5885] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 92.260153][ T5890] program syz.3.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.271646][ T5861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.308173][ T5893] loop1: detected capacity change from 0 to 1024 [ 92.327220][ T5861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.336525][ T5893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803e01c, mo2=0002] [ 92.349749][ T5861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358496][ T5893] System zones: 0-1, 3-12 [ 92.363424][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.412429][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 92.412444][ T29] audit: type=1326 audit(1727827370.478:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.442186][ T29] audit: type=1326 audit(1727827370.478:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.465979][ T29] audit: type=1326 audit(1727827370.478:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.489454][ T29] audit: type=1326 audit(1727827370.478:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.512907][ T29] audit: type=1326 audit(1727827370.478:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.536547][ T29] audit: type=1326 audit(1727827370.478:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.559971][ T29] audit: type=1326 audit(1727827370.478:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.583590][ T29] audit: type=1326 audit(1727827370.478:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.607422][ T29] audit: type=1326 audit(1727827370.478:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.631040][ T29] audit: type=1326 audit(1727827370.478:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.1.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 92.684977][ T5902] loop2: detected capacity change from 0 to 512 [ 92.727017][ T5906] program syz.1.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.753988][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 92.756145][ T5902] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.763957][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 92.946324][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.957425][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.966413][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.977797][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.025322][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.038551][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.054738][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.061911][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.103112][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.113552][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.129315][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.136439][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.212983][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.287730][ T5950] loop1: detected capacity change from 0 to 256 [ 93.306026][ T5950] FAT-fs (loop1): Directory bread(block 64) failed [ 93.312616][ T5950] FAT-fs (loop1): Directory bread(block 65) failed [ 93.319201][ T5950] FAT-fs (loop1): Directory bread(block 66) failed [ 93.325920][ T5950] FAT-fs (loop1): Directory bread(block 67) failed [ 93.332694][ T5950] FAT-fs (loop1): Directory bread(block 68) failed [ 93.339312][ T5950] FAT-fs (loop1): Directory bread(block 69) failed [ 93.345883][ T5950] FAT-fs (loop1): Directory bread(block 70) failed [ 93.352526][ T5950] FAT-fs (loop1): Directory bread(block 71) failed [ 93.359342][ T5950] FAT-fs (loop1): Directory bread(block 72) failed [ 93.366074][ T5950] FAT-fs (loop1): Directory bread(block 73) failed [ 93.388588][ T5950] syz.1.811: attempt to access beyond end of device [ 93.388588][ T5950] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 93.402349][ T5950] syz.1.811: attempt to access beyond end of device [ 93.402349][ T5950] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 93.454495][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 93.473229][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 93.536392][ T5953] loop3: detected capacity change from 0 to 512 [ 93.627599][ T5953] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.690491][ T5764] veth0_vlan: entered promiscuous mode [ 93.702032][ T5764] veth1_vlan: entered promiscuous mode [ 93.774924][ T5764] veth0_macvtap: entered promiscuous mode [ 93.816793][ T5764] veth1_macvtap: entered promiscuous mode [ 93.834554][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.845136][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.855070][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.865591][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.875707][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.886269][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.896324][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.906989][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.972081][ T5989] loop3: detected capacity change from 0 to 256 [ 93.990627][ T5989] FAT-fs (loop3): Directory bread(block 64) failed [ 93.997239][ T5989] FAT-fs (loop3): Directory bread(block 65) failed [ 94.004357][ T5989] FAT-fs (loop3): Directory bread(block 66) failed [ 94.011276][ T5989] FAT-fs (loop3): Directory bread(block 67) failed [ 94.017887][ T5989] FAT-fs (loop3): Directory bread(block 68) failed [ 94.024604][ T5989] FAT-fs (loop3): Directory bread(block 69) failed [ 94.031371][ T5989] FAT-fs (loop3): Directory bread(block 70) failed [ 94.038216][ T5989] FAT-fs (loop3): Directory bread(block 71) failed [ 94.044948][ T5989] FAT-fs (loop3): Directory bread(block 72) failed [ 94.051604][ T5989] FAT-fs (loop3): Directory bread(block 73) failed [ 94.078482][ T5989] syz.3.822: attempt to access beyond end of device [ 94.078482][ T5989] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 94.092371][ T5989] syz.3.822: attempt to access beyond end of device [ 94.092371][ T5989] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 94.111869][ T5986] SELinux: failed to load policy [ 94.121140][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.240963][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.251511][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.261509][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.272035][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.282078][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.292826][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.302680][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.313173][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.390550][ T5993] program syz.2.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.430850][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.441980][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450890][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459726][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.468514][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498455][ T5996] loop1: detected capacity change from 0 to 1764 [ 94.582616][ T6001] loop2: detected capacity change from 0 to 1764 [ 94.593730][ T6001] iso9660: Bad value for 'uid' [ 94.598646][ T6001] iso9660: Bad value for 'uid' [ 94.620371][ T6009] FAULT_INJECTION: forcing a failure. [ 94.620371][ T6009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.633804][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.0.833 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 94.646036][ T6009] Tainted: [W]=WARN [ 94.648579][ T6003] loop4: detected capacity change from 0 to 2048 [ 94.649850][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.666746][ T6009] Call Trace: [ 94.670063][ T6009] [ 94.673108][ T6009] dump_stack_lvl+0xf2/0x150 [ 94.677806][ T6009] dump_stack+0x15/0x20 [ 94.681988][ T6009] should_fail_ex+0x223/0x230 [ 94.687383][ T6009] should_fail+0xb/0x10 [ 94.691556][ T6009] should_fail_usercopy+0x1a/0x20 [ 94.696750][ T6009] _copy_from_user+0x1e/0xd0 [ 94.701358][ T6009] copy_msghdr_from_user+0x54/0x2a0 [ 94.706868][ T6009] __sys_sendmsg+0x171/0x270 [ 94.711494][ T6009] __x64_sys_sendmsg+0x46/0x50 [ 94.716286][ T6009] x64_sys_call+0x2689/0x2d60 [ 94.721154][ T6009] do_syscall_64+0xc9/0x1c0 [ 94.725852][ T6009] ? clear_bhb_loop+0x55/0xb0 [ 94.730624][ T6009] ? clear_bhb_loop+0x55/0xb0 [ 94.735431][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.741402][ T6009] RIP: 0033:0x7fc5f33adff9 [ 94.745914][ T6009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.765989][ T6009] RSP: 002b:00007fc5f2021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.775626][ T6009] RAX: ffffffffffffffda RBX: 00007fc5f3565f80 RCX: 00007fc5f33adff9 [ 94.783619][ T6009] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 94.791685][ T6009] RBP: 00007fc5f2021090 R08: 0000000000000000 R09: 0000000000000000 [ 94.799700][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.807713][ T6009] R13: 0000000000000000 R14: 00007fc5f3565f80 R15: 00007ffd783b9de8 [ 94.815703][ T6009] [ 94.828981][ T6007] loop1: detected capacity change from 0 to 512 [ 94.866360][ T6003] loop4: p1 < > p4 [ 94.872121][ T6003] loop4: p4 size 393216 extends beyond EOD, truncated [ 94.872453][ T6007] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.900195][ T6016] SELinux: failed to load policy [ 94.907860][ T6003] syz.4.831[6003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.908049][ T6003] syz.4.831[6003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.919869][ T6003] syz.4.831[6003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.980174][ T6021] lo speed is unknown, defaulting to 1000 [ 95.088028][ T6036] loop2: detected capacity change from 0 to 512 [ 95.174779][ T6036] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.838: bg 0: block 248: padding at end of block bitmap is not set [ 95.240310][ T6056] loop3: detected capacity change from 0 to 512 [ 95.285490][ T6036] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.838: Failed to acquire dquot type 1 [ 95.309157][ T6060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.319767][ T6056] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.332989][ T6036] EXT4-fs (loop2): 1 truncate cleaned up [ 95.335963][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.849'. [ 95.339180][ T6036] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.376307][ T6050] lo speed is unknown, defaulting to 1000 [ 95.489339][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.500858][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.535671][ T6073] program syz.0.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.547379][ T6060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.609195][ T6074] netlink: 'syz.1.856': attribute type 30 has an invalid length. [ 95.630414][ T6074] lo speed is unknown, defaulting to 1000 [ 95.674105][ T6074] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 95.719621][ T6060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.831044][ T6060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.897898][ T6060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.914783][ T6060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917312][ T965] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1 [ 95.942466][ T6078] program syz.0.861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.954715][ T6060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.977007][ T6082] syz.2.858[6082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.977103][ T6082] syz.2.858[6082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.990665][ T6082] syz.2.858[6082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.005158][ T6060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.072213][ T6088] syz.4.865[6088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.072347][ T6088] syz.4.865[6088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.083885][ T6090] FAULT_INJECTION: forcing a failure. [ 96.083885][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.091672][ T6088] syz.4.865[6088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.095278][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.2.864 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 96.132377][ T6090] Tainted: [W]=WARN [ 96.136329][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.146571][ T6090] Call Trace: [ 96.149907][ T6090] [ 96.152860][ T6090] dump_stack_lvl+0xf2/0x150 [ 96.157485][ T6090] dump_stack+0x15/0x20 [ 96.161648][ T6090] should_fail_ex+0x223/0x230 [ 96.166357][ T6090] should_fail+0xb/0x10 [ 96.170559][ T6090] should_fail_usercopy+0x1a/0x20 [ 96.175627][ T6090] _copy_from_iter+0xd3/0xd20 [ 96.180342][ T6090] ? rep_movs_alternative+0x4a/0x70 [ 96.185573][ T6090] ? _copy_from_iter+0x161/0xd20 [ 96.190581][ T6090] copy_page_from_iter+0x14f/0x280 [ 96.195704][ T6090] skb_copy_datagram_from_iter+0x224/0x460 [ 96.201616][ T6090] tun_get_user+0xb7c/0x24e0 [ 96.206220][ T6090] ? avc_has_perm+0xd4/0x160 [ 96.210864][ T6090] ? ref_tracker_alloc+0x1f5/0x2f0 [ 96.216344][ T6090] tun_chr_write_iter+0x188/0x240 [ 96.221456][ T6090] vfs_write+0x76a/0x910 [ 96.225834][ T6090] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 96.231392][ T6090] ksys_write+0xeb/0x1b0 [ 96.235747][ T6090] __x64_sys_write+0x42/0x50 [ 96.240369][ T6090] x64_sys_call+0x27dd/0x2d60 [ 96.245061][ T6090] do_syscall_64+0xc9/0x1c0 [ 96.249595][ T6090] ? clear_bhb_loop+0x55/0xb0 [ 96.254469][ T6090] ? clear_bhb_loop+0x55/0xb0 [ 96.259170][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.265210][ T6090] RIP: 0033:0x7ff7bb1ecadf [ 96.269661][ T6090] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 96.289281][ T6090] RSP: 002b:00007ff7b9e61000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.297752][ T6090] RAX: ffffffffffffffda RBX: 00007ff7bb3a5f80 RCX: 00007ff7bb1ecadf [ 96.305743][ T6090] RDX: 000000000000fdef RSI: 00000000200002c0 RDI: 00000000000000c8 [ 96.313726][ T6090] RBP: 00007ff7b9e61090 R08: 0000000000000000 R09: 0000000000000000 [ 96.321703][ T6090] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000002 [ 96.329682][ T6090] R13: 0000000000000001 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 96.337779][ T6090] [ 96.417751][ T6095] program syz.1.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.477450][ T6097] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 96.503855][ T6113] loop3: detected capacity change from 0 to 256 [ 96.606538][ T6122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.652392][ T6121] loop0: detected capacity change from 0 to 1024 [ 96.707629][ T6122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.792036][ T6122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.834297][ T6126] loop4: detected capacity change from 0 to 1024 [ 96.859497][ T6122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.873878][ T6126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.901553][ T6137] program syz.1.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.976221][ T6122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008506][ T6122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.049932][ T6122] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.074731][ T6122] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.093024][ T6153] tipc: Started in network mode [ 97.098085][ T6153] tipc: Node identity f7, cluster identity 4711 [ 97.104496][ T6153] tipc: Node number set to 247 [ 97.176968][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 97.190651][ T6162] loop2: detected capacity change from 0 to 1024 [ 97.209995][ T6166] program syz.3.895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.334335][ T6173] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001 [ 97.372841][ T6173] loop3: detected capacity change from 0 to 1024 [ 97.396323][ T6173] EXT4-fs: Ignoring removed orlov option [ 97.402122][ T6173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.437672][ T6177] loop0: detected capacity change from 0 to 256 [ 97.455514][ T6177] FAT-fs (loop0): Directory bread(block 64) failed [ 97.462136][ T6177] FAT-fs (loop0): Directory bread(block 65) failed [ 97.468779][ T6177] FAT-fs (loop0): Directory bread(block 66) failed [ 97.475306][ T6177] FAT-fs (loop0): Directory bread(block 67) failed [ 97.481865][ T6177] FAT-fs (loop0): Directory bread(block 68) failed [ 97.488493][ T6177] FAT-fs (loop0): Directory bread(block 69) failed [ 97.495100][ T6177] FAT-fs (loop0): Directory bread(block 70) failed [ 97.501661][ T6177] FAT-fs (loop0): Directory bread(block 71) failed [ 97.508351][ T6177] FAT-fs (loop0): Directory bread(block 72) failed [ 97.514952][ T6177] FAT-fs (loop0): Directory bread(block 73) failed [ 97.538248][ T6177] syz.0.897: attempt to access beyond end of device [ 97.538248][ T6177] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 97.552022][ T6177] syz.0.897: attempt to access beyond end of device [ 97.552022][ T6177] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 97.575312][ T6173] EXT4-fs mount: 15 callbacks suppressed [ 97.575326][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.754648][ T6184] FAULT_INJECTION: forcing a failure. [ 97.754648][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.767918][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.2.901 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 97.780019][ T6184] Tainted: [W]=WARN [ 97.783883][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.793976][ T6184] Call Trace: [ 97.797261][ T6184] [ 97.800200][ T6184] dump_stack_lvl+0xf2/0x150 [ 97.804901][ T6184] dump_stack+0x15/0x20 [ 97.809078][ T6184] should_fail_ex+0x223/0x230 [ 97.813833][ T6184] should_fail+0xb/0x10 [ 97.818007][ T6184] should_fail_usercopy+0x1a/0x20 [ 97.823056][ T6184] _copy_from_user+0x1e/0xd0 [ 97.827656][ T6184] kstrtouint_from_user+0x76/0xe0 [ 97.832864][ T6184] ? 0xffffffff81000000 [ 97.837039][ T6184] proc_fail_nth_write+0x4f/0x150 [ 97.842175][ T6184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.847920][ T6184] vfs_write+0x26c/0x910 [ 97.852309][ T6184] ? __fget_files+0x1d4/0x210 [ 97.857009][ T6184] ksys_write+0xeb/0x1b0 [ 97.861366][ T6184] __x64_sys_write+0x42/0x50 [ 97.865996][ T6184] x64_sys_call+0x27dd/0x2d60 [ 97.870713][ T6184] do_syscall_64+0xc9/0x1c0 [ 97.875235][ T6184] ? clear_bhb_loop+0x55/0xb0 [ 97.880015][ T6184] ? clear_bhb_loop+0x55/0xb0 [ 97.884785][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.890841][ T6184] RIP: 0033:0x7ff7bb1ecadf [ 97.895263][ T6184] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 97.914908][ T6184] RSP: 002b:00007ff7b9e40030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 97.923329][ T6184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7bb1ecadf [ 97.931310][ T6184] RDX: 0000000000000001 RSI: 00007ff7b9e400a0 RDI: 0000000000000006 [ 97.939421][ T6184] RBP: 00007ff7b9e40090 R08: 0000000000000000 R09: 0000000000000000 [ 97.947460][ T6184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 97.955460][ T6184] R13: 0000000000000001 R14: 00007ff7bb3a6058 R15: 00007ffd95ceff28 [ 97.963452][ T6184] [ 97.975712][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 97.975726][ T29] audit: type=1400 audit(1727827376.058:3366): avc: denied { execute } for pid=6172 comm="syz.3.898" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.004328][ T29] audit: type=1400 audit(1727827376.078:3367): avc: denied { execute_no_trans } for pid=6172 comm="syz.3.898" path="/38/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.029538][ T29] audit: type=1400 audit(1727827376.098:3368): avc: denied { create } for pid=6185 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.049764][ T29] audit: type=1400 audit(1727827376.098:3369): avc: denied { setopt } for pid=6185 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.053984][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.128643][ T6189] loop4: detected capacity change from 0 to 512 [ 98.135417][ T6189] EXT4-fs: Invalid want_extra_isize 0 [ 98.141991][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 98.159769][ T6186] netlink: 199796 bytes leftover after parsing attributes in process `syz.1.903'. [ 98.161769][ T5523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.178242][ T6191] netlink: 199796 bytes leftover after parsing attributes in process `syz.1.903'. [ 98.196559][ T6189] syz.4.902 (6189): /proc/6188/oom_adj is deprecated, please use /proc/6188/oom_score_adj instead. [ 98.209179][ T6193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.221853][ T29] audit: type=1326 audit(1727827376.308:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 98.262097][ T29] audit: type=1400 audit(1727827376.308:3371): avc: denied { read } for pid=6188 comm="syz.4.902" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.282765][ T29] audit: type=1326 audit(1727827376.318:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 98.306277][ T29] audit: type=1326 audit(1727827376.318:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 98.330036][ T29] audit: type=1326 audit(1727827376.318:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf4e5dff9 code=0x7ffc0000 [ 98.353658][ T29] audit: type=1326 audit(1727827376.318:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cf4e5c990 code=0x7ffc0000 [ 98.393691][ T6206] program syz.3.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.491371][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 98.512296][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 98.549191][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'. [ 98.574837][ T6223] lo speed is unknown, defaulting to 1000 [ 98.614667][ T6232] €: renamed from bond0 (while UP) [ 98.635996][ T6233] loop4: detected capacity change from 0 to 256 [ 98.661630][ T6233] FAT-fs (loop4): Directory bread(block 64) failed [ 98.668276][ T6233] FAT-fs (loop4): Directory bread(block 65) failed [ 98.674875][ T6233] FAT-fs (loop4): Directory bread(block 66) failed [ 98.681449][ T6233] FAT-fs (loop4): Directory bread(block 67) failed [ 98.688098][ T6233] FAT-fs (loop4): Directory bread(block 68) failed [ 98.694728][ T6233] FAT-fs (loop4): Directory bread(block 69) failed [ 98.701378][ T6233] FAT-fs (loop4): Directory bread(block 70) failed [ 98.707977][ T6233] FAT-fs (loop4): Directory bread(block 71) failed [ 98.714611][ T6233] FAT-fs (loop4): Directory bread(block 72) failed [ 98.721258][ T6233] FAT-fs (loop4): Directory bread(block 73) failed [ 98.747757][ T6233] syz.4.914: attempt to access beyond end of device [ 98.747757][ T6233] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 98.761635][ T6233] syz.4.914: attempt to access beyond end of device [ 98.761635][ T6233] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 98.864845][ T6236] FAULT_INJECTION: forcing a failure. [ 98.864845][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 98.877828][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.2.917 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 98.889956][ T6236] Tainted: [W]=WARN [ 98.893891][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.903971][ T6236] Call Trace: [ 98.907261][ T6236] [ 98.910195][ T6236] dump_stack_lvl+0xf2/0x150 [ 98.914896][ T6236] dump_stack+0x15/0x20 [ 98.919066][ T6236] should_fail_ex+0x223/0x230 [ 98.923825][ T6236] ? getname_flags+0x81/0x3b0 [ 98.928722][ T6236] should_failslab+0x8f/0xb0 [ 98.933352][ T6236] kmem_cache_alloc_noprof+0x4c/0x290 [ 98.938861][ T6236] ? __perf_event_task_sched_out+0x111/0xfe0 [ 98.944920][ T6236] getname_flags+0x81/0x3b0 [ 98.949453][ T6236] getname+0x17/0x20 [ 98.953450][ T6236] do_sys_openat2+0x67/0x120 [ 98.958236][ T6236] __x64_sys_openat+0xf3/0x120 [ 98.963037][ T6236] x64_sys_call+0x1025/0x2d60 [ 98.967804][ T6236] do_syscall_64+0xc9/0x1c0 [ 98.972323][ T6236] ? clear_bhb_loop+0x55/0xb0 [ 98.977045][ T6236] ? clear_bhb_loop+0x55/0xb0 [ 98.981778][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.987734][ T6236] RIP: 0033:0x7ff7bb1ec990 [ 98.992155][ T6236] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 99.011857][ T6236] RSP: 002b:00007ff7b9e60b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 99.020422][ T6236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7bb1ec990 [ 99.028415][ T6236] RDX: 0000000000000000 RSI: 00007ff7b9e60c10 RDI: 00000000ffffff9c [ 99.036410][ T6236] RBP: 00007ff7b9e60c10 R08: 0000000000000000 R09: 0000000000000000 [ 99.044399][ T6236] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 99.052652][ T6236] R13: 0000000000000000 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 99.060751][ T6236] [ 99.094401][ T6238] loop2: detected capacity change from 0 to 1024 [ 99.107277][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.320293][ T6250] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 99.328179][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 99.392221][ T6260] veth0_vlan: entered allmulticast mode [ 99.572446][ T6281] veth0_vlan: left promiscuous mode [ 99.581248][ T6281] veth0_vlan: entered promiscuous mode [ 99.731301][ T6287] loop3: detected capacity change from 0 to 256 [ 99.810799][ T6284] loop1: detected capacity change from 0 to 512 [ 99.839307][ T6289] hub 9-0:1.0: USB hub found [ 99.844185][ T6289] hub 9-0:1.0: 8 ports detected [ 99.872600][ T6287] FAT-fs (loop3): Directory bread(block 64) failed [ 99.879211][ T6287] FAT-fs (loop3): Directory bread(block 65) failed [ 99.885823][ T6287] FAT-fs (loop3): Directory bread(block 66) failed [ 99.892380][ T6287] FAT-fs (loop3): Directory bread(block 67) failed [ 99.899201][ T6287] FAT-fs (loop3): Directory bread(block 68) failed [ 99.905783][ T6287] FAT-fs (loop3): Directory bread(block 69) failed [ 99.912424][ T6287] FAT-fs (loop3): Directory bread(block 70) failed [ 99.919039][ T6287] FAT-fs (loop3): Directory bread(block 71) failed [ 99.925767][ T6287] FAT-fs (loop3): Directory bread(block 72) failed [ 99.932357][ T6287] FAT-fs (loop3): Directory bread(block 73) failed [ 99.956542][ T6287] syz.3.933: attempt to access beyond end of device [ 99.956542][ T6287] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 99.970391][ T6287] syz.3.933: attempt to access beyond end of device [ 99.970391][ T6287] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 100.005116][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.028292][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.035830][ T6284] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.161699][ T5087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.197863][ T6296] FAULT_INJECTION: forcing a failure. [ 100.197863][ T6296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.211140][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.2.938 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 100.223708][ T6296] Tainted: [W]=WARN [ 100.227519][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.237604][ T6296] Call Trace: [ 100.240911][ T6296] [ 100.243852][ T6296] dump_stack_lvl+0xf2/0x150 [ 100.248495][ T6296] dump_stack+0x15/0x20 [ 100.252765][ T6296] should_fail_ex+0x223/0x230 [ 100.257569][ T6296] should_fail+0xb/0x10 [ 100.262071][ T6296] should_fail_usercopy+0x1a/0x20 [ 100.267136][ T6296] _copy_from_user+0x1e/0xd0 [ 100.271788][ T6296] copy_msghdr_from_user+0x54/0x2a0 [ 100.277070][ T6296] __sys_sendmsg+0x171/0x270 [ 100.281814][ T6296] __x64_sys_sendmsg+0x46/0x50 [ 100.286626][ T6296] x64_sys_call+0x2689/0x2d60 [ 100.291340][ T6296] do_syscall_64+0xc9/0x1c0 [ 100.295961][ T6296] ? clear_bhb_loop+0x55/0xb0 [ 100.300661][ T6296] ? clear_bhb_loop+0x55/0xb0 [ 100.308415][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.314600][ T6296] RIP: 0033:0x7ff7bb1edff9 [ 100.319077][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.338897][ T6296] RSP: 002b:00007ff7b9e61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.347326][ T6296] RAX: ffffffffffffffda RBX: 00007ff7bb3a5f80 RCX: 00007ff7bb1edff9 [ 100.355310][ T6296] RDX: 0000000000000804 RSI: 0000000020000580 RDI: 0000000000000004 [ 100.363302][ T6296] RBP: 00007ff7b9e61090 R08: 0000000000000000 R09: 0000000000000000 [ 100.371287][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.379310][ T6296] R13: 0000000000000000 R14: 00007ff7bb3a5f80 R15: 00007ffd95ceff28 [ 100.387309][ T6296] [ 100.579149][ T6312] loop3: detected capacity change from 0 to 128 [ 100.608794][ T6312] netlink: 'syz.3.944': attribute type 2 has an invalid length. [ 100.616543][ T6312] netlink: 'syz.3.944': attribute type 9 has an invalid length. [ 100.624210][ T6312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.944'. [ 100.635326][ T6312] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 100.646080][ T6312] FAULT_INJECTION: forcing a failure. [ 100.646080][ T6312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.659227][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.3.944 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 100.671427][ T6312] Tainted: [W]=WARN [ 100.675340][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.685539][ T6312] Call Trace: [ 100.688866][ T6312] [ 100.691933][ T6312] dump_stack_lvl+0xf2/0x150 [ 100.696552][ T6312] dump_stack+0x15/0x20 [ 100.700713][ T6312] should_fail_ex+0x223/0x230 [ 100.705540][ T6312] should_fail+0xb/0x10 [ 100.709717][ T6312] should_fail_usercopy+0x1a/0x20 [ 100.714764][ T6312] _copy_from_user+0x1e/0xd0 [ 100.719428][ T6312] move_addr_to_kernel+0x82/0x120 [ 100.724519][ T6312] __sys_sendto+0x15c/0x260 [ 100.729151][ T6312] __x64_sys_sendto+0x78/0x90 [ 100.733911][ T6312] x64_sys_call+0x2959/0x2d60 [ 100.738601][ T6312] do_syscall_64+0xc9/0x1c0 [ 100.743169][ T6312] ? clear_bhb_loop+0x55/0xb0 [ 100.747932][ T6312] ? clear_bhb_loop+0x55/0xb0 [ 100.752642][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.758578][ T6312] RIP: 0033:0x7f03d460dff9 [ 100.763020][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.782816][ T6312] RSP: 002b:00007f03d3287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 100.791274][ T6312] RAX: ffffffffffffffda RBX: 00007f03d47c5f80 RCX: 00007f03d460dff9 [ 100.799349][ T6312] RDX: 0000000000034000 RSI: 0000000020000140 RDI: 000000000000000f [ 100.807325][ T6312] RBP: 00007f03d3287090 R08: 0000000020004ff0 R09: 0000000000000010 [ 100.815294][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.823343][ T6312] R13: 0000000000000000 R14: 00007f03d47c5f80 R15: 00007ffde6e46dd8 [ 100.831371][ T6312] [ 100.841407][ T6315] veth0_vlan: left promiscuous mode [ 100.851637][ T6315] veth0_vlan: entered promiscuous mode [ 100.879012][ T6321] loop4: detected capacity change from 0 to 1024 [ 100.886939][ T6321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.895289][ T6321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.936478][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.045252][ T6334] SELinux: failed to load policy [ 101.120186][ T6340] loop3: detected capacity change from 0 to 256 [ 101.137276][ T6340] FAT-fs (loop3): Directory bread(block 64) failed [ 101.143931][ T6340] FAT-fs (loop3): Directory bread(block 65) failed [ 101.150611][ T6340] FAT-fs (loop3): Directory bread(block 66) failed [ 101.157201][ T6340] FAT-fs (loop3): Directory bread(block 67) failed [ 101.163776][ T6340] FAT-fs (loop3): Directory bread(block 68) failed [ 101.170412][ T6340] FAT-fs (loop3): Directory bread(block 69) failed [ 101.177050][ T6340] FAT-fs (loop3): Directory bread(block 70) failed [ 101.183685][ T6340] FAT-fs (loop3): Directory bread(block 71) failed [ 101.190383][ T6340] FAT-fs (loop3): Directory bread(block 72) failed [ 101.197203][ T6340] FAT-fs (loop3): Directory bread(block 73) failed [ 101.240058][ T6340] syz.3.947: attempt to access beyond end of device [ 101.240058][ T6340] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 101.253872][ T6340] syz.3.947: attempt to access beyond end of device [ 101.253872][ T6340] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 101.300834][ T6193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.461577][ T6193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.898784][ T6342] loop2: detected capacity change from 0 to 256 [ 101.921615][ T6342] FAT-fs (loop2): Directory bread(block 64) failed [ 101.928267][ T6342] FAT-fs (loop2): Directory bread(block 65) failed [ 101.934856][ T6342] FAT-fs (loop2): Directory bread(block 66) failed [ 101.941470][ T6342] FAT-fs (loop2): Directory bread(block 67) failed [ 101.948037][ T6342] FAT-fs (loop2): Directory bread(block 68) failed [ 101.954722][ T6342] FAT-fs (loop2): Directory bread(block 69) failed [ 101.961414][ T6342] FAT-fs (loop2): Directory bread(block 70) failed [ 101.968006][ T6342] FAT-fs (loop2): Directory bread(block 71) failed [ 101.974693][ T6342] FAT-fs (loop2): Directory bread(block 72) failed [ 101.981305][ T6342] FAT-fs (loop2): Directory bread(block 73) failed [ 102.091352][ T6342] syz.2.951: attempt to access beyond end of device [ 102.091352][ T6342] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 102.105157][ T6342] syz.2.951: attempt to access beyond end of device [ 102.105157][ T6342] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 102.128241][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.180221][ T6350] hub 9-0:1.0: USB hub found [ 102.187539][ T6350] hub 9-0:1.0: 8 ports detected [ 102.300322][ T6360] SELinux: failed to load policy [ 102.307574][ T6193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.336128][ T6361] lo speed is unknown, defaulting to 1000 [ 102.516960][ T6193] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.611048][ T6193] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644834][ T6376] loop2: detected capacity change from 0 to 512 [ 102.655398][ T6193] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.688832][ T6376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.706956][ T6376] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.724295][ T6193] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.845749][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.869914][ T6392] SELinux: failed to load policy [ 102.952878][ T6398] loop4: detected capacity change from 0 to 128 [ 103.008733][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 103.008752][ T29] audit: type=1326 audit(1727827381.078:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f046146e087 code=0x7ffc0000 [ 103.038465][ T29] audit: type=1326 audit(1727827381.078:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f046146c990 code=0x7ffc0000 [ 103.062231][ T29] audit: type=1326 audit(1727827381.078:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f046146cc8a code=0x7ffc0000 [ 103.085964][ T29] audit: type=1326 audit(1727827381.078:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.101687][ T6412] loop2: detected capacity change from 0 to 256 [ 103.109713][ T29] audit: type=1326 audit(1727827381.078:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6397 comm="syz.4.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.138903][ T29] audit: type=1400 audit(1727827381.078:3546): avc: denied { read } for pid=6402 comm="syz.0.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.147127][ T6412] FAT-fs (loop2): Directory bread(block 64) failed [ 103.165231][ T6412] FAT-fs (loop2): Directory bread(block 65) failed [ 103.171943][ T6412] FAT-fs (loop2): Directory bread(block 66) failed [ 103.178524][ T6412] FAT-fs (loop2): Directory bread(block 67) failed [ 103.185292][ T6412] FAT-fs (loop2): Directory bread(block 68) failed [ 103.191877][ T6412] FAT-fs (loop2): Directory bread(block 69) failed [ 103.198470][ T6412] FAT-fs (loop2): Directory bread(block 70) failed [ 103.205300][ T6412] FAT-fs (loop2): Directory bread(block 71) failed [ 103.211919][ T6412] FAT-fs (loop2): Directory bread(block 72) failed [ 103.218713][ T6412] FAT-fs (loop2): Directory bread(block 73) failed [ 103.228319][ T29] audit: type=1326 audit(1727827381.308:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.252484][ T29] audit: type=1326 audit(1727827381.308:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.275992][ T29] audit: type=1326 audit(1727827381.308:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.299406][ T29] audit: type=1326 audit(1727827381.308:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046146dff9 code=0x7ffc0000 [ 103.324097][ T6403] syz.2.971: attempt to access beyond end of device [ 103.324097][ T6403] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 103.337986][ T6403] syz.2.971: attempt to access beyond end of device [ 103.337986][ T6403] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 103.395280][ T6425] FAULT_INJECTION: forcing a failure. [ 103.395280][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 103.408161][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.4.983 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 103.420736][ T6425] Tainted: [W]=WARN [ 103.424563][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.434623][ T6425] Call Trace: [ 103.437926][ T6425] [ 103.440876][ T6425] dump_stack_lvl+0xf2/0x150 [ 103.445625][ T6425] dump_stack+0x15/0x20 [ 103.449863][ T6425] should_fail_ex+0x223/0x230 [ 103.454572][ T6425] ? audit_log_d_path+0x96/0x250 [ 103.459513][ T6425] should_failslab+0x8f/0xb0 [ 103.464107][ T6425] __kmalloc_cache_noprof+0x4b/0x2a0 [ 103.469447][ T6425] audit_log_d_path+0x96/0x250 [ 103.474325][ T6425] ? get_file_rcu+0xeb/0x100 [ 103.478926][ T6425] ? __rcu_read_unlock+0x4e/0x70 [ 103.484001][ T6425] audit_log_d_path_exe+0x42/0x70 [ 103.489056][ T6425] audit_log_task+0x155/0x180 [ 103.493762][ T6425] audit_seccomp+0x68/0x130 [ 103.498283][ T6425] __seccomp_filter+0x6fa/0x1180 [ 103.503241][ T6425] ? proc_fail_nth_write+0x12a/0x150 [ 103.508605][ T6425] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.514389][ T6425] ? vfs_write+0x580/0x910 [ 103.518861][ T6425] ? __fget_files+0x1d4/0x210 [ 103.523636][ T6425] __secure_computing+0x9f/0x1c0 [ 103.528601][ T6425] syscall_trace_enter+0xd1/0x1f0 [ 103.533733][ T6425] ? fpregs_assert_state_consistent+0x83/0xa0 [ 103.539957][ T6425] do_syscall_64+0xaa/0x1c0 [ 103.544466][ T6425] ? clear_bhb_loop+0x55/0xb0 [ 103.549212][ T6425] ? clear_bhb_loop+0x55/0xb0 [ 103.554002][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.560018][ T6425] RIP: 0033:0x7f046146dff9 [ 103.564434][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.584145][ T6425] RSP: 002b:00007f04600e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 103.592598][ T6425] RAX: ffffffffffffffda RBX: 00007f0461625f80 RCX: 00007f046146dff9 [ 103.600593][ T6425] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000040 [ 103.608650][ T6425] RBP: 00007f04600e7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.616720][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.624852][ T6425] R13: 0000000000000000 R14: 00007f0461625f80 R15: 00007ffd0fc0fb58 [ 103.632865][ T6425] [ 103.653508][ T6427] SELinux: failed to load policy [ 103.721486][ T6434] hub 9-0:1.0: USB hub found [ 103.730936][ T6434] hub 9-0:1.0: 8 ports detected [ 105.063767][ T6455] program syz.0.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.522649][ T6450] loop1: detected capacity change from 0 to 1024 [ 105.529663][ T6450] EXT4-fs: test_dummy_encryption option not supported [ 105.951307][ T6449] loop3: detected capacity change from 0 to 256 [ 106.405312][ T6449] FAT-fs (loop3): Directory bread(block 64) failed [ 106.412087][ T6449] FAT-fs (loop3): Directory bread(block 65) failed [ 106.418849][ T6449] FAT-fs (loop3): Directory bread(block 66) failed [ 106.425520][ T6449] FAT-fs (loop3): Directory bread(block 67) failed [ 106.432099][ T6449] FAT-fs (loop3): Directory bread(block 68) failed [ 106.438738][ T6449] FAT-fs (loop3): Directory bread(block 69) failed [ 106.445339][ T6449] FAT-fs (loop3): Directory bread(block 70) failed [ 106.451915][ T6449] FAT-fs (loop3): Directory bread(block 71) failed [ 106.458622][ T6449] FAT-fs (loop3): Directory bread(block 72) failed [ 106.465247][ T6449] FAT-fs (loop3): Directory bread(block 73) failed [ 106.482928][ T6444] syz.3.990: attempt to access beyond end of device [ 106.482928][ T6444] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 106.496701][ T6444] syz.3.990: attempt to access beyond end of device [ 106.496701][ T6444] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 106.595141][ T6473] loop0: detected capacity change from 0 to 128 [ 106.762867][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 106.774244][ T6496] syz.3.1011[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.774295][ T6496] syz.3.1011[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.786672][ T6496] syz.3.1011[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.825022][ T6494] program syz.1.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.895175][ T6504] program syz.2.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.929054][ T6510] loop1: detected capacity change from 0 to 512 [ 106.939803][ T6510] EXT4-fs (loop1): inodes count not valid: 108 vs 32 [ 107.009680][ T6515] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 107.122925][ T6515] geneve1: entered promiscuous mode [ 107.129134][ T6522] FAULT_INJECTION: forcing a failure. [ 107.129134][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 107.141948][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.1.1022 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 107.154234][ T6522] Tainted: [W]=WARN [ 107.155481][ T6515] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 107.158187][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.158204][ T6522] Call Trace: [ 107.158211][ T6522] [ 107.158221][ T6522] dump_stack_lvl+0xf2/0x150 [ 107.187848][ T6522] dump_stack+0x15/0x20 [ 107.192093][ T6522] should_fail_ex+0x223/0x230 [ 107.196834][ T6522] ? __alloc_skb+0x10b/0x310 [ 107.201468][ T6522] should_failslab+0x8f/0xb0 [ 107.206171][ T6522] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 107.212046][ T6522] ? prandom_u32_state+0xa6/0xd0 [ 107.217027][ T6522] __alloc_skb+0x10b/0x310 [ 107.220079][ T6527] loop3: detected capacity change from 0 to 256 [ 107.221483][ T6522] netlink_dump+0x162/0x760 [ 107.232291][ T6522] __netlink_dump_start+0x433/0x520 [ 107.237537][ T6522] genl_rcv_msg+0x4e5/0x6c0 [ 107.242062][ T6522] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 107.247833][ T6522] ? __pfx_genl_start+0x10/0x10 [ 107.252720][ T6522] ? __pfx_genl_dumpit+0x10/0x10 [ 107.257684][ T6522] ? __pfx_genl_done+0x10/0x10 [ 107.262488][ T6522] netlink_rcv_skb+0x12c/0x230 [ 107.267274][ T6522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.272384][ T6522] genl_rcv+0x28/0x40 [ 107.276399][ T6522] netlink_unicast+0x599/0x670 [ 107.281338][ T6522] netlink_sendmsg+0x5cc/0x6e0 [ 107.286117][ T6522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.291420][ T6522] __sock_sendmsg+0x140/0x180 [ 107.296176][ T6522] ____sys_sendmsg+0x312/0x410 [ 107.300979][ T6522] __sys_sendmsg+0x1d9/0x270 [ 107.305634][ T6522] __x64_sys_sendmsg+0x46/0x50 [ 107.310460][ T6522] x64_sys_call+0x2689/0x2d60 [ 107.315177][ T6522] do_syscall_64+0xc9/0x1c0 [ 107.319699][ T6522] ? clear_bhb_loop+0x55/0xb0 [ 107.324476][ T6522] ? clear_bhb_loop+0x55/0xb0 [ 107.329175][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.335165][ T6522] RIP: 0033:0x7f8cf4e5dff9 [ 107.339605][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.359239][ T6522] RSP: 002b:00007f8cf3ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.367777][ T6522] RAX: ffffffffffffffda RBX: 00007f8cf5015f80 RCX: 00007f8cf4e5dff9 [ 107.375874][ T6522] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 107.383883][ T6522] RBP: 00007f8cf3ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.391871][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.399858][ T6522] R13: 0000000000000000 R14: 00007f8cf5015f80 R15: 00007ffcf6fb5cc8 [ 107.407974][ T6522] [ 107.429495][ T6527] FAT-fs (loop3): Directory bread(block 64) failed [ 107.436186][ T6527] FAT-fs (loop3): Directory bread(block 65) failed [ 107.442733][ T6527] FAT-fs (loop3): Directory bread(block 66) failed [ 107.449294][ T6527] FAT-fs (loop3): Directory bread(block 67) failed [ 107.455863][ T6527] FAT-fs (loop3): Directory bread(block 68) failed [ 107.462411][ T6527] FAT-fs (loop3): Directory bread(block 69) failed [ 107.469034][ T6527] FAT-fs (loop3): Directory bread(block 70) failed [ 107.475570][ T6527] FAT-fs (loop3): Directory bread(block 71) failed [ 107.482403][ T6527] FAT-fs (loop3): Directory bread(block 72) failed [ 107.489026][ T6527] FAT-fs (loop3): Directory bread(block 73) failed [ 107.504387][ T6519] syz.3.1017: attempt to access beyond end of device [ 107.504387][ T6519] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 107.518267][ T6519] syz.3.1017: attempt to access beyond end of device [ 107.518267][ T6519] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 107.598624][ T6533] loop4: detected capacity change from 0 to 512 [ 107.607913][ T6533] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.628703][ T6533] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.648180][ T6533] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1027: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 107.649122][ T6541] program syz.2.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.678994][ T6533] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.1027: Bad quota inode: 3, type: 0 [ 107.700486][ T6533] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.715490][ T6533] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 107.728907][ T6545] loop2: detected capacity change from 0 to 128 [ 107.732332][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.773327][ T6533] syz.4.1027[6533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.773465][ T6533] syz.4.1027[6533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.785182][ T6533] syz.4.1027[6533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.876090][ T6556] loop0: detected capacity change from 0 to 512 [ 107.911693][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.918513][ T6556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.937694][ T6558] SELinux: failed to load policy [ 107.948557][ T6556] EXT4-fs (loop0): 1 truncate cleaned up [ 107.958877][ T6555] program syz.1.1035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.995946][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.062999][ T6572] loop2: detected capacity change from 0 to 256 [ 108.081400][ T6572] FAT-fs (loop2): Directory bread(block 64) failed [ 108.088075][ T6572] FAT-fs (loop2): Directory bread(block 65) failed [ 108.094632][ T6572] FAT-fs (loop2): Directory bread(block 66) failed [ 108.101207][ T6572] FAT-fs (loop2): Directory bread(block 67) failed [ 108.107932][ T6572] FAT-fs (loop2): Directory bread(block 68) failed [ 108.114523][ T6572] FAT-fs (loop2): Directory bread(block 69) failed [ 108.121127][ T6572] FAT-fs (loop2): Directory bread(block 70) failed [ 108.127712][ T6572] FAT-fs (loop2): Directory bread(block 71) failed [ 108.134353][ T6572] FAT-fs (loop2): Directory bread(block 72) failed [ 108.140953][ T6572] FAT-fs (loop2): Directory bread(block 73) failed [ 108.184710][ T6572] syz.2.1032: attempt to access beyond end of device [ 108.184710][ T6572] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 108.198714][ T6572] syz.2.1032: attempt to access beyond end of device [ 108.198714][ T6572] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 108.234942][ T6552] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1034: corrupted in-inode xattr: overlapping e_value [ 108.287352][ T6552] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1772: inode #15: comm syz.0.1034: unable to update i_inline_off [ 108.302333][ T6552] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1034: corrupted in-inode xattr: overlapping e_value [ 108.367792][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 108.367811][ T29] audit: type=1400 audit(1727827386.448:3790): avc: denied { name_connect } for pid=6549 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.431836][ T29] audit: type=1326 audit(1727827386.448:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.455443][ T29] audit: type=1326 audit(1727827386.448:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.480122][ T29] audit: type=1326 audit(1727827386.448:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.504200][ T29] audit: type=1326 audit(1727827386.448:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.527658][ T29] audit: type=1326 audit(1727827386.448:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.551401][ T29] audit: type=1326 audit(1727827386.448:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.574942][ T29] audit: type=1326 audit(1727827386.448:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.598729][ T29] audit: type=1326 audit(1727827386.448:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.622229][ T29] audit: type=1326 audit(1727827386.448:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.3.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d460dff9 code=0x7ffc0000 [ 108.684292][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.756933][ T6591] loop4: detected capacity change from 0 to 256 [ 108.778532][ T6591] FAT-fs (loop4): Directory bread(block 64) failed [ 108.785311][ T6591] FAT-fs (loop4): Directory bread(block 65) failed [ 108.791999][ T6591] FAT-fs (loop4): Directory bread(block 66) failed [ 108.798606][ T6591] FAT-fs (loop4): Directory bread(block 67) failed [ 108.805340][ T6591] FAT-fs (loop4): Directory bread(block 68) failed [ 108.811982][ T6591] FAT-fs (loop4): Directory bread(block 69) failed [ 108.818869][ T6591] FAT-fs (loop4): Directory bread(block 70) failed [ 108.825414][ T6591] FAT-fs (loop4): Directory bread(block 71) failed [ 108.832175][ T6591] FAT-fs (loop4): Directory bread(block 72) failed [ 108.838726][ T6591] FAT-fs (loop4): Directory bread(block 73) failed [ 108.872831][ T6591] syz.4.1044: attempt to access beyond end of device [ 108.872831][ T6591] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 108.886818][ T6591] syz.4.1044: attempt to access beyond end of device [ 108.886818][ T6591] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 109.094301][ T6590] program syz.2.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.107661][ T6593] program syz.0.1047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.107706][ T6595] program syz.1.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.190723][ T6605] ================================================================== [ 109.198851][ T6605] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 109.205567][ T6605] [ 109.207913][ T6605] write to 0xffff888106971a90 of 8 bytes by task 6606 on cpu 0: [ 109.215652][ T6605] __dentry_kill+0x13e/0x4c0 [ 109.220275][ T6605] dput+0x5c/0xd0 [ 109.223934][ T6605] step_into+0x21a/0x810 [ 109.228193][ T6605] walk_component+0x169/0x230 [ 109.232904][ T6605] path_lookupat+0x10a/0x2b0 [ 109.237524][ T6605] filename_lookup+0x127/0x300 [ 109.242326][ T6605] user_path_at+0x3c/0x110 [ 109.246813][ T6605] __se_sys_mount+0x248/0x2d0 [ 109.251528][ T6605] __x64_sys_mount+0x67/0x80 [ 109.256150][ T6605] x64_sys_call+0x203e/0x2d60 [ 109.260879][ T6605] do_syscall_64+0xc9/0x1c0 [ 109.265413][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.271350][ T6605] [ 109.273688][ T6605] read to 0xffff888106971a90 of 8 bytes by task 6605 on cpu 1: [ 109.281938][ T6605] fast_dput+0x65/0x2c0 [ 109.286118][ T6605] dput+0x24/0xd0 [ 109.289840][ T6605] step_into+0x21a/0x810 [ 109.294104][ T6605] walk_component+0x169/0x230 [ 109.298877][ T6605] path_lookupat+0x10a/0x2b0 [ 109.303481][ T6605] filename_lookup+0x127/0x300 [ 109.308258][ T6605] user_path_at+0x3c/0x110 [ 109.312688][ T6605] __se_sys_mount+0x248/0x2d0 [ 109.317401][ T6605] __x64_sys_mount+0x67/0x80 [ 109.322010][ T6605] x64_sys_call+0x203e/0x2d60 [ 109.326700][ T6605] do_syscall_64+0xc9/0x1c0 [ 109.331212][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.337126][ T6605] [ 109.339449][ T6605] value changed: 0xffff8882377cd520 -> 0x0000000000000000 [ 109.346554][ T6605] [ 109.348875][ T6605] Reported by Kernel Concurrency Sanitizer on: [ 109.355042][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.0.1054 Tainted: G W 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 109.367204][ T6605] Tainted: [W]=WARN [ 109.371002][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.381059][ T6605] ================================================================== [ 109.398191][ T6614] loop3: detected capacity change from 0 to 512 [ 109.427184][ T6614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.455785][ T6614] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.576619][ T5523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.