last executing test programs: 2.813787823s ago: executing program 0 (id=2258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x3, 0x437, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000340)=0xa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x4e4}, @in6={0xa, 0x4e24, 0xd0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x38) (async) syz_emit_ethernet(0x3a, &(0x7f0000000a00)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000009c0)='mm_compaction_end\x00', r4}, 0x18) (async) r7 = socket$key(0xf, 0x3, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) (async) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/73) r10 = socket(0x10, 0x3, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) close(r11) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$xdp(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x2c, 0x0, r12, 0x24}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)="ee5e8475e8a6f514a3c7f7118d5fe7c4efd44ea2a2b687ef635c2fd9da6daf4530d75bb6b1ac0b54a8795131218dcb74d6128990a01ea6833844f087032b0bbadd20363a2761b67e7a666259b0897ee4803c172e0dad89a412ff8cd829d4990a7683d4c33880cffb55aeb00ad2c87a672b79d04d7a82baca91f47bdd04a3e0883742f3dcd98ee8f2b62469d1a8fa0bc36ed50074bb355498b029e9ea7ac20e", 0x9f}, {&(0x7f0000000540)="403939a3635f8a3fdf9ab8d9986aa7a2b4c7c8b0cbaf9de656255a3e42bf701517b22d0157d2567f0c7f88821317a9cf49b70a9cfe679673c5e11cd2e58689b9b539df25b1480cbca70983354f4b09fbef9f5990faed05dc989e22942f0003a92db7c7b61d9af9b77110b74392d9efc1ddbe577cc584e4c8bdbc0cdd2097fe164f55f51a92337226fa3c279ddc9c3bbf77b100f154db118a4068b2aa7dc649c98ce4baa7ed7fa76e6687fb8b9c92d2a16490682fd905d1284116acbf", 0xbc}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f00000008c0)="56164d375e437cccc839ce759384e7874cbe467ca6a4ee8fdd5c981aff0d685bd97d5ff7d54a5a95c98a9d266a3b0669bc56ed933e05b157e0e43949a21af7747aa569cda9f3aa60552835f634779890f7a8d1d70713a433a52da6eed24c93883957ca15d010de1bc46f07f3c08d674b6d17a8d209cc9fb9522cbb6965d24b807d10bf0d8284ff4f93ca7df8d6923a222e4a888c31d60f3bf63e4b5178494a531f9bf13a2a1c5d4244a7e4be4a1ed38b174da577c0285435c4ff8be3ad6bfc7c7bbedd2fc3c6a391de40d070f37821025492d3db4910c264ea0a5f6f490863497f6b9e5f0b03a25f7fac0cb02e0bbd4fa9", 0xf1}], 0x4}, 0x4010) sendmsg$key(r7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x24000004) 2.672145534s ago: executing program 0 (id=2262): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000380)=""/35, 0x23}, {0x0}], 0x2) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 2.072085378s ago: executing program 3 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180), 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.821371509s ago: executing program 0 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005}) r4 = mq_open(0x0, 0x8c2, 0x34, 0x0) mq_getsetattr(r4, 0x0, &(0x7f0000000280)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unlink(0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r7, 0xaaf1, 0x3, 0xd30, 0x0, 0x1ff}, &(0x7f0000000400)=0x14) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0xc000800) close(r0) 1.66819872s ago: executing program 4 (id=2289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) eventfd2(0x5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4044000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="afa1180100181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) r4 = getpid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 1.66798776s ago: executing program 0 (id=2290): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000005c0)) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r2 = mq_open(&(0x7f00000000c0)='\xeb!}&}@,\x00', 0x2, 0x100, &(0x7f0000000100)={0x3, 0x100000000, 0x4, 0x9}) mq_timedsend(r2, &(0x7f00000002c0)="2a77a19c7b2b08b7231905202306f2b7a70e7be019bbf337a762bd9eb6b91d345512374ef78cf663912b72af8407a30509a6249fa5b68420bf2033c015da346c90fbf748cff2b7747c2168e335337e3edbbcf8e55d791813a926cc42623767c21341ef07cfe4d6423747718c2b10c0f9c3e5a1810bb9e13b20db1f18102b769f31ab4fe33f21bedead33ec139f7df2e2af3a42d63b9986ecb5620114159053b9a557c6dbdeb3a1be7a1a6691f744c0d6b3bb76ed60bf859c08903e1b6b6aace979e687827966e3c3ddcfd17c19929f2ffd0cf755915b2c517d5584205c1d88", 0xdf, 0x8, &(0x7f0000000140)={0x0, 0x989680}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x2, r0, 'id1\x00'}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc884}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) semget$private(0x0, 0x0, 0x420) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x80, 0xb, 0x2, 0xffff}, {0xc, 0x9, 0x6}, {0x24, 0x0, 0x60, 0x2d}, {0x7ff, 0x1, 0x3, 0x4}]}) 1.63444184s ago: executing program 4 (id=2291): lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', ',-(L/\x00'}, &(0x7f0000000140)=""/83, 0x53) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 32) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) close(r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x400000) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000000040)=0x3) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_to_hsr\x00', @random="2b0100004ec6"}) 1.57617096s ago: executing program 4 (id=2292): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r2 = memfd_secret(0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xfffffffd}, 0x8) perf_event_open(0x0, 0x0, 0x4, r2, 0xe) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1208002, &(0x7f0000000100), 0x1, 0x5d8, &(0x7f00000005c0)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r6, r4, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x2003, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8f3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) close(0x3) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r4, &(0x7f0000000000), 0x200a00}]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0752d032191af30000000400000080000000010000002800007bdd7121e094fe476b435ad6a49a112e7f6a2e7d4da300"/57, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c7785a736b", @ANYRES32, @ANYRES32, @ANYRESHEX=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r10, @ANYBLOB="0000000700000000b7030000000000000600000000000000b70800"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.511993161s ago: executing program 4 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r6 = dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002600)="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", 0x5dd}], 0x1}}], 0x6, 0x200010c4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@arp={@loopback, @loopback, 0xffffff00, 0xffffff00, 0x5, 0x4, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x200, 0xb, 0xb, 0x9, 'pim6reg\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x1b3}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb, 0x2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff000000, 0x7, 0xf, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x401, 0x15c, 0x3, 0x5, 0x6, 0x8, 'vlan0\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0xb}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x18000000, {0x10}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000580), 0x8, 0x8f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r9 = creat(&(0x7f0000001700)='./file0\x00', 0x0) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000001740)="02b0ce6304999fa7810b1541172030a8a83c0f7d57a96df7f4923b84313477648b2b7f1928293421d9f7c3e9c962", 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xb, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000640)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@dont_measure}]}, 0xfe, 0x478, &(0x7f0000000e00)="$eJzs3c1vFOUfAPDvTF8ob7/2h/gCglbRiG8tLS9y8KBGEw6YmOgB46m2C6ks1NCaCCFaPeDRkHg33v0DjCe9GPVk4lXvhoQYLqCnNbMzA0u7W7plywL7+SSz+zw7z/I835l5dp6ZZ5cG0LNGs4ckYktE/BERw3n25gKj+dO1K+en/7lyfjqJWu3tv5N6uatXzk+XRcv3bc4ztVqR39Ck3gvvRUxVq5UzRX584dSH4/Nnz704e2rqROVE5fTk4cMH9u8ePDR5sPFtQ2uNM4vr6s5P5nbtOPLuxTenj118/5dvs/ZuKdY3xtEpo/nWberpTlfWZVsb0kl/FxtCW/oiIttdA/X+Pxx9sfH6uuF44/OuNg5YV7Vardbs/FxYrAH3sSS63QKgO8oTfXb9Wy53aOhxV7j8an4BlMV9rVjyNf2R5onHB5Zc33bSaEQcW/z362yJdboPAQDQ6Ids/PNCs/FfGg/licHs4X/FHMpIRPw/IrZFxAMRsT0iHoyol304Ih5ps/6lMyTLxz/ppTUHtwrZ+O/lYm7r5vFfWhYZ6StyW+vxDyTHZ6uVfcU22RsDG47PJpWJFer48fXfv2y1rnH8ly1Z/eVYsGjHpf4lN+hmphambifmRpc/i9jZ3yz+JMppnCQidkTEzjXWMftc6wmhW8e/gg7MM9W+iXgm3/+LsST+UtJyfnLipUOTB8eHolrZN14eFcv9+tuFt1rVf3P8MdRW/B2Q7f9NTY//6/GPJEMR82fPnazP1863X8eFP79oeU3T5vF/ZGtx/A8m79RfGCxWfDy1sHBmImIwObr89ckb/1qZL8tn8e/d07z/b4sbW+LRiNgVEbsj4rHsorBo+xMR8WRE7Fkh/p9fe+qD9uNf4a58B2Xxz9xq/0fj/m8/0Xfyp+/bj7+U7f8D9dTe4pXVfP6ttoG3s+0AAADgXpHWvwOfpGPX02k6NpZ/h397bEqrc/MLzx+f++j0TP5d+ZEYSMs7XcMN90MninvDZX5ySX5/cd/4q76N9fzY9Fx1ptvBQ4/b3KL/Z/7q63brgHW3hnm0V9ajHcCd5/ea0Lv0f+hNif4PPU3/h97VrP9/2rL02Hfr2hjgjnL+h961iv6/mD+1HhUA9ybnf+hd+j/0pJa/jU9v6yf/Eh1LHH02ibugGcsSkd4Vzbj/E/2r/s8sbpko/3xGtVIbzlPZqg1NC3fzUwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBz/gsAAP//+C/dcA==") 1.499133041s ago: executing program 4 (id=2294): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503162ed3fc140020004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) 1.487967231s ago: executing program 4 (id=2295): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x11) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 1.243282983s ago: executing program 1 (id=2296): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") creat(&(0x7f0000000140)='./file0\x00', 0x106) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_usbip_server_init(0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bind$unix(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.242725173s ago: executing program 3 (id=2297): r0 = socket$kcm(0x2, 0x0, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101281, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x8001}, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x3ba, 0x7}, &(0x7f00000000c0)=0x8) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x98, r8, 0x10ada85e65c25359, 0xfffbfffc, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0xffffffffffffffe7, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24040005) r10 = epoll_create1(0x80000) epoll_pwait(r10, &(0x7f0000000140)=[{}], 0x1, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0010000000000002000000000000000000000002000000000000000088876a58a7c0605c6b9f57e3"], 0x50) 1.180791253s ago: executing program 3 (id=2300): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES16, @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r6 = gettid() r7 = gettid() tkill(r6, 0x12) tkill(r6, 0x1) tkill(r7, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES16=r4, @ANYBLOB="27063d531e9915cea9e35a57e4311fcbb3b0bc5b315a6f99cb4298d574fec9f4b5ade7de24dcbb34c2ef91b877e7c25f73d22e1ca02501ce9d9fcd9a1a9b1fc1cb9c442e7247eff772b63a5100e2d642c169311bbc2c6fd1dfc6391a7f24ef154c357bc2f579f6c18fe294a0e4c49481af050a8c1eb9afddd44d5c9d830e869afe78a727c491b474837e1f5d82298a4a9a056c10a2666d50d2aece6409357b0e0de688a1e69be990d61a9c3c05b6ae33cf0e178919f2694afaea549d59fcc67d3ab8541a671a32971c944409c50bbe6ea5", @ANYRESHEX=r4, @ANYBLOB="08000ac600", @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x14000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1b, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000100000000000c000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000deff06040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001856000002000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186500000c000000000000006c510000185200000200000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000380)=""/147, 0x41100, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xc, 0x9, 0xe2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r5, r1, r5, 0xffffffffffffffff, r5, r8, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@mcast1, 0x45, r10}) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 884.181945ms ago: executing program 3 (id=2305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006de9caa8960000000f5acb8fe3b6deb129eaa59fe90000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r1, 0x16) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000740)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x2000, 0x800) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x20, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x5, 0xffffffff, @vifc_lcl_addr=@multicast2, @loopback}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x3, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r7, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x80) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x9, 0x8, &(0x7f00000002c0)="b7c21901287c4a83e0026a659301385c2659ce192c8bcdcd5166017d3d7c39b19123f4eb9c3d551032ee82d9fbfa7e9013aff4fe82e7b679eac4e82e8f4543a7dafdabc18f6f9053c2b2aad204407d147d4c589e933b147cfdd9a64fc0b3f929fa25a9ff0d8fe4ff48a9626bac425a31bfafe8fac5414c25dc4803"}) 851.907695ms ago: executing program 0 (id=2307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180), 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 687.297606ms ago: executing program 1 (id=2309): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x800, &(0x7f0000000440)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r3, 0x0, 0x4f}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) listen(r4, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe0f, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x9}}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) fcntl$setpipe(r1, 0x407, 0x8000000000000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r8, 0x7f, 0x0, 0x4) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 528.149537ms ago: executing program 1 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 465.457987ms ago: executing program 1 (id=2315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 392.127757ms ago: executing program 2 (id=2317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='f2fs_shutdown\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) rename(&(0x7f00000062c0)='./file0/file0\x00', &(0x7f0000006280)='./file1\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000080)={0x5}, 0x0) 352.513938ms ago: executing program 2 (id=2318): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x5}) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0xe43, 0x4000000000000006}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="21f13bc1dd43113e0dc9f6c14f35452d62c6651e07d9ccca002b510bc6056dc9f9815ba0d10cc73cb1b99c95a2ee96babb7c848bf134cf51749d3b2c72a2b523ec852004043dfa559184068070d16922af04e94485f41ff6e1e6e2c001fdbbd65aba699aa952281495dc3f4862044d5508ba8e8dc423a923e39f5fe04049a1fe215e4d8910d1c8a7b6068f", 0x8b}], 0x1, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x31a6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x43}}, @mark={{0x14, 0x1, 0x24, 0x51}}, @txtime={{0x18, 0x1, 0x3d, 0xff0}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0xd8}, 0x20008000) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\xaa\xaa\xaa\xaa\xaa'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1d, 0xa, '!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040011}, 0x40c0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f00000015c0)={0x1360, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_TID_CONFIG={0x550, 0x11d, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x12, 0xb, 0x16, 0x6c, 0x60, 0x48, 0xb, 0x36, 0x9, 0xc, 0x18, 0x18, 0x1b, 0x1a, 0x24, 0x24, 0x18, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x268, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x100, 0x100, 0x4, 0x4, 0x1, 0x780e]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x18]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xf771, 0x1, 0xffff, 0xff, 0x5, 0x400, 0x4]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x9, 0x9, 0x2, 0x1, 0x9, 0x36, 0x4, 0x9, 0x6c, 0x30, 0x3, 0xc, 0x17, 0x18, 0x6c, 0x12, 0x4, 0x2, 0x1, 0x60, 0x30, 0x24, 0x60, 0x30, 0x2, 0x30, 0x2, 0xc, 0x3, 0x6c, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd, 0x5, 0x9, 0x3, 0x8, 0x6, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x2, 0x1b, 0x16, 0x1b, 0x18, 0x48, 0x9, 0x1, 0x7]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe0, 0xc, 0x6, 0x800, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x6}, {0x5, 0x6}, {0x5, 0x7}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x9}, {}, {0x3, 0xa}, {0x6}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x6}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x2, 0x7}, {0x2}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x6}, {0x4, 0x9}, {0x2}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x4, 0x200, 0x2, 0x8b5, 0x3, 0x1, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x5e, 0x9, 0x2, 0x18, 0x65, 0x5c, 0x48, 0x1, 0xc, 0x1, 0x12, 0xc, 0x30, 0x6c, 0x12, 0xc, 0x24, 0x23, 0x18, 0x24, 0x36, 0x3, 0x18, 0x48, 0x1b, 0x10, 0x30, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x5, 0x5, 0x12, 0x30, 0x8, 0xb, 0x9, 0x2, 0xc, 0x18, 0x1, 0x60, 0x36, 0x36, 0x2, 0x2]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x6, 0x6, 0x6c, 0x3, 0x5, 0x9, 0x6, 0x36, 0x16, 0x2e, 0x24, 0xc, 0x16, 0x1b, 0x24, 0x5, 0x48, 0x3, 0x1c, 0x12, 0x1, 0x5, 0x3, 0x30, 0xc, 0x6c, 0x5, 0x1b, 0xb, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa, 0x3, 0xffff, 0xfc01, 0xffff, 0xfff, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39d6, 0xfffa, 0x8f, 0x7, 0x0, 0x3ff, 0x4, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x8000, 0xf000, 0x5, 0x6, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x8, 0x0, 0x1e65, 0x8, 0x0, 0x3, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x4, 0xe, 0xc, 0x0, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc956, 0x6d31, 0x3, 0x0, 0x81, 0x5, 0x1, 0x9]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0xa}, {}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x10, 0x5, 0x8, 0x80, 0x6, 0x18, 0xd]}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x18, 0x16, 0x6c, 0x5, 0x60, 0x9, 0x6, 0x9, 0x16, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xfff9, 0x1, 0x1000, 0x8, 0xd, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffb, 0xfff, 0x7ff, 0x1000, 0x1, 0xbe7c, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x6}, {0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x1}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0xa}, {0x1}, {}, {0x5, 0x6}, {0x2, 0x2}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x1}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x24, 0x16, 0x16, 0xb, 0x24, 0x5, 0x12, 0x24, 0x18, 0x4, 0x36, 0x1, 0x3, 0x3, 0x48, 0x6c, 0xc, 0x12, 0x1b, 0x30, 0xb, 0x1b, 0x3, 0x2, 0x48]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x1}, {}, {0x2, 0x4}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x6}, {0x4, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x1}, {0x3, 0x6}, {0x7}, {0x6, 0x6}, {0x6, 0x3}, {0x5, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0xa}, {0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x2}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x2}, {}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0x6}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x2, 0x8000, 0x0, 0x1, 0x2, 0x2, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xffff, 0x80, 0x5, 0x9, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0xfff, 0x5, 0x5, 0x1, 0x3, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69, 0x1, 0xfffa, 0x15c, 0x6, 0x2, 0xfff7, 0x9]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x8, 0x9a, 0x1, 0x7, 0x401, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f39}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8c7f}]}]}, @NL80211_ATTR_TID_CONFIG={0x280, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x6c, 0x2, 0x30, 0x1, 0x1b, 0x9, 0x1]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xd99e5db5ef7bb637}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x1}, {0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x3, 0x5, 0x0, 0x2, 0x5, 0x48, 0xc, 0x30, 0x1, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7, 0x9, 0x9, 0x0, 0x7, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x12, 0x3, 0x18, 0x18, 0x18, 0x41, 0x5, 0x30, 0x7f, 0xb, 0x0, 0x48, 0x4, 0x6, 0x9, 0x30, 0x4, 0x18, 0x78]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x9, 0x30, 0x60, 0x48, 0x6, 0x30, 0x4, 0x24, 0x2, 0x5, 0x0, 0x1, 0xe, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x1, 0x0, 0x1, 0x3ff, 0x8d, 0x80]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff7, 0x6, 0x7f, 0x4, 0xd74, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x100, 0xf74, 0xfff, 0xe72, 0x8, 0xfff9]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x5, 0x8001, 0xfc5, 0x8e7, 0x4, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x9}, {0x2, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x5, 0x4}, {0x0, 0x7}, {}, {0x7, 0x2}, {0x1, 0x7}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x8}, {0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x1}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x2, 0x1c}, {0x4, 0x2}, {0x0, 0x6}, {0x6}, {0x2, 0x2}, {0x5, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x5}, {0x7, 0x1}, {0x3}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x1}, {0x4}, {0x7, 0x8}, {0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0xd}, {0x5, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x2}, {0x5, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x3, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0xfffa, 0xe0, 0x5, 0x3, 0x3, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x3, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x5, 0x14}, {0x4}, {0x7, 0xa}, {0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4d3}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb68, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x73}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xb, 0x2, 0x41, 0x30, 0x1, 0x2, 0x68, 0x3, 0x1, 0x18, 0x6c, 0xc, 0x4b, 0x6c, 0x6, 0x30, 0x1b, 0x9, 0x12, 0x1b, 0x6, 0x60, 0x60, 0x48, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x18, 0x0, 0x6c, 0x8, 0x7, 0x9b, 0x7]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x7}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x1, 0x0, 0xff00, 0x1, 0x3, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x39, 0xd, 0x0, 0x7, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xb, 0x6, 0xc277, 0x1, 0xfff, 0xfff9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x83418d16d2c51328, 0x18, 0x3, 0x24, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x71e, 0x3, 0x4, 0x8000, 0x9, 0x75, 0xfff7, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x821b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x1, 0x5, 0x1, 0x5564, 0xb, 0x1, 0xff80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xc, 0x611, 0x8b2, 0x3, 0xfffd, 0xf]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x6, 0x12, 0xb, 0x36, 0x1, 0x1, 0x12, 0xb, 0x6c, 0x36, 0x6c, 0x1d, 0x60, 0x1b, 0x18, 0x6c, 0x60, 0x6c, 0x1, 0x0, 0x48, 0x1d, 0x12, 0x1, 0xc, 0x36, 0x12, 0x9, 0x48, 0x48, 0x5]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd16f, 0x8000, 0x4, 0x1, 0x2, 0x7d3e, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x7}, {0x2, 0x3}, {0x4, 0x2}, {0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x6}, {0x6}, {0x6}, {0x6, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x6, 0x8}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x7, 0x8, 0x4, 0xf2, 0x68, 0x54]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb69, 0x7, 0x5, 0xfff, 0x7, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1}, {0x3, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0xa}, {0x2}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {}, {0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x1}, {}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x4}, {0x7, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0x4}, {0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x1}, {0x3}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x4, 0x0, 0x7f, 0xbe5, 0x4, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x5, 0x1, 0x0, 0x2, 0x8000, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x11ed6ab2c0e9718b}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xffff, 0x5, 0xc, 0x34, 0x6, 0xfff3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x4, 0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x4, 0x30, 0x12, 0x30, 0x9, 0x6, 0x24, 0x6c, 0x6, 0x6, 0x16, 0x24, 0x1b, 0x2]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x4, 0x16, 0x30, 0xb, 0x48, 0x3, 0x36, 0x60, 0x5, 0x18, 0x36]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x6}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x4}, {}, {0x4, 0x7}, {0x4}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x2, 0x9}, {0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x8}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0xa}, {0x3, 0x5}, {0x3, 0x5}, {0x2, 0x2}, {0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x3}, {0x6, 0x2}, {0x2}, {0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x4}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0xfffd, 0xd48, 0xfffd, 0x0, 0xff, 0x9, 0x314]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x2, 0x7, 0x2cf1, 0x75, 0x4b, 0x401]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x4f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff5, 0x3, 0x7, 0x101, 0x7, 0x4, 0xb8, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x5}, {0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x7}, {0x1, 0x9}, {0x2, 0xa}, {}, {0x5, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x7}, {0x2, 0xa}, {}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x7}, {0x7}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x4}, {0x5, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x8}, {0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x12, 0x6c, 0x24, 0x36, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0x7, 0x401, 0x8, 0x3, 0xff00, 0x7a]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x440, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x9, 0x6, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x80, 0x99, 0x7, 0x902f, 0xc, 0x8, 0x3]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x10c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x6, 0x4}, {0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x6}, {0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x3, 0x5}, {0x3}, {0x0, 0x6}, {0x1, 0x4}, {0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x9}, {}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x6}, {}, {0x2, 0x4}, {0x7, 0xa}, {0x6}, {0x2, 0x9}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x6, 0x0, 0xffff, 0x9, 0x8, 0xba56]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x8}, {0x6}, {0x2, 0x5}, {}, {0x0, 0x3}, {0x3, 0x3}, {0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x7, 0x7}, {0x4}, {0x6, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x7}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0xa}, {0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xfffd, 0xc20d, 0x100, 0x7d, 0x5, 0x200]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x6c, 0x5, 0x2, 0x1, 0x48, 0x3, 0x48, 0x1]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0xa}, {0x6, 0xa}, {0x7}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x1}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x7}, {0x3}, {}, {0x5, 0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {}, {0x6, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x6}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x7, 0xb, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x7}, {0x3, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x13}, {0x3, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x2}, {0x6, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x2}, {0x7, 0xa}, {0x1}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x6}, {0x3, 0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x9}, {0x0, 0x3}, {0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x2, 0x6}, {0x1}, {0x3, 0x4}, {0x1}, {0x5, 0x5}, {0x2, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x6, 0xc, 0x9, 0xc, 0xb, 0x8, 0x30, 0x36, 0x24, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x1b, 0x1, 0x48, 0x36, 0x12, 0x6c, 0xb, 0x4, 0x69, 0x48, 0x4, 0x18, 0x60, 0x2, 0x0, 0xb, 0x36, 0x4, 0x30, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x7, 0x1cb, 0x8001, 0x8001, 0x2, 0x3ff, 0x729]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x0, 0x8, 0x800, 0x3, 0x6, 0xfc23]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0x8}, {0x3}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x1}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x7}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4, 0x1, 0x8, 0x0, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0xa}, {}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x6}, {}, {0x2, 0xa}, {0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1}, {0x7}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x3}, {0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xf, 0xf001, 0x9, 0x5920, 0x8000, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x8cc, 0x200, 0x2, 0x3e1c, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb, 0x3, 0x0, 0x7fff, 0x7ab, 0x2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x1, 0x7f, 0x0, 0x9, 0x100, 0x7]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0x3}, {0x6}, {0x2, 0x2}, {0x3, 0x2}, {0x5, 0x3}, {0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x4}, {0x0, 0x1}, {0x5, 0x2}, {0x5, 0x7}, {0x7, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x7}, {0x7, 0x19}, {0x1, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x5}, {0x5, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x16, 0x48, 0x48, 0x12, 0x24, 0x1, 0x48, 0x24, 0x30, 0x60, 0x0, 0x1b, 0x4, 0x2, 0x5, 0x48, 0x60, 0x24, 0x16, 0x6, 0x24, 0x2, 0x198156510375680f, 0x18, 0x12, 0x6, 0x9, 0x18, 0x18, 0x6c]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0xff9c, 0xb53, 0x8, 0x3, 0xfff8, 0x61]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x2}, {0x4, 0x2}, {0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x3}, {0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x3}, {0x6, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x3}, {0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x1}, {0x1}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x1}, {0x7}, {0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xacf267624173acc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x1360}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) 349.538898ms ago: executing program 2 (id=2319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2a0402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0xef, 0x1, 0x0, 0x4000002, 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e000000e77300008f00000005000000081001"], 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r3 = inotify_init1(0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4a000280}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x16000715) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x18) uname(&(0x7f00000014c0)=""/126) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) 349.317038ms ago: executing program 2 (id=2320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/314, @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 32) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (async, rerun: 32) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xf) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x6}, 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) (async) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) (async) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) close_range(r7, r9, 0x0) 347.074848ms ago: executing program 2 (id=2321): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x11) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 339.614508ms ago: executing program 1 (id=2322): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x1, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000440), &(0x7f0000000080)='%pB \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 32) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 271.951738ms ago: executing program 1 (id=2323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x800, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = getgid() lchown(0x0, 0x0, r10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r13 = socket$caif_stream(0x25, 0x1, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f", 0xb0}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd883356630000000000000000", 0x58}], 0x7, 0x0, 0x0, 0x804}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000000c0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)="ae528d0c38de4bfae46c16c1be56dbfc2905a0879fe655b8accc30c56a21432cad6f0ba64996d025dc00ce264cb2d630393b95d43ac7c6747d89d45506795ff19b055e5c585964ca2e5c9eca44bf362065830afe3634218baa45eb06ab13f0b94bedabeebf9e000457f1507af74f0070fb5cfeac92833079460fbef76a1d7788fc8233107a680dc8c757dc4c36a1", 0x8e}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r11, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001) setgroups(0x1, &(0x7f00000001c0)=[r10]) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 80.26928ms ago: executing program 3 (id=2324): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) eventfd2(0x5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4044000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) r4 = getpid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 58.34659ms ago: executing program 2 (id=2325): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x601, 0x0) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="4894b5ff738adeb189e7f010bf63edef4ae63bfcffc8ba1d966b3948cd3fff632f15fd3dcaf527b3ca28cdda95814788fb5ec45b683bb881afe96c6b50f06b8caead13c0185abbb27e13c4ff6a974932459ef38cb68f237ff1f890c9df2a2e1d268af28f68de9f6d1f06723cc62319985c605e5e7d2d0bc3ecec2d115f244857407213307b6c993d6e71f2496c57db53239cd20b2deede4ec4165aedaa693e5a9bb0fc86ed0b2eb7c3353cf6121e7be0699c601340712f099b3b7bb94bdd31a6bad1c77c0f8f5d4a2818dd9233989bf6e5f4c965fa233319c567dedb13f3b5d4", 0xe0}, {&(0x7f0000000140)="02fd0245dae5f12d7f111c05b4379f230808c3e8", 0x14}, {&(0x7f0000000180)="9c3fbd96623e169bbf26e40ee138fb8865cc407d26a95ce2faafb568020f911b386634f4a3192dc79d35ae98046666cf17810bdf681c46a5d50a1022322a96", 0x3f}, {&(0x7f00000001c0)="bc619270953967e6ece27ce57c0ebe1dfff808c096c0ec4dad25dfce9f4847ee6a4b2fd2115101cf2a5d3247861e4fe8e8b08c157320eb9e53e8a76bbcd6af01bd", 0x41}, {&(0x7f0000000240)="fb199011f9f237ba11d2521b8d447bee3fdd55aff42a5bd8707cd6caf05bbdde93c1", 0x22}, {&(0x7f0000000280)="c58125e85455c9c1811e535c115d1deb6b06864c8fd6f6968ecd44363edcbcce5743eb699c75c28f34d220f346bf26198a4d47a98c9e79d2e08892944a436ff5960ac9407b3fb1e0ae445087c6d2dd85d041f0356c692f3bda65c45f8951de9e9fc604a33ffffe5d9478bd8d87aa91c52aa0", 0x72}], 0x6, 0xf0, 0x9, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ftruncate(r1, 0x76) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000540)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x906, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x400c804) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000880)={0x11f8, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9bc, 0x52}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x949f}, @NL80211_ATTR_FRAME_MATCH={0x3e, 0x5b, "d593fc68f90a1bfcf00d3d7c6aea94b912ffb6e1887faeaf2e794e7b1c456e6a1d554aa5df99cad159b344abbddb7563350f1560e9e24b8abbf4"}, @NL80211_ATTR_FRAME_MATCH={0xa0, 0x5b, "1bf46134faca4aa9de7961b4154db7243738326ce1acc4c7482d352f8cd11ea05467757e28eeb40780977e976151964a6b95a5007bebaa8df148813ce8083ca222217693203db400b7c8072eb2604db976771e2173e9350553d95158d02fcc3007a8d51570a273650eb3aae778d76952350b7a3b743fc90bc5eca37fee5cbc58908bf98a89eff93b3084c37e816f4b158a21ac81448e5bca52e1b72e"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "42ccbe35eb8d621d8f56c01b42c7776eb4d0c802f491094eba41925e7b521846406a57190b7e50b492259dc30514c895609882a93145a185ab97664406c591a9ad8bc9600bc24134ef8a0dce0d2b23b92b55758ecd7600c009b40891c04443d178007b07ec2b8b3e40235b1a972ec28d58dd82b185190a9e16f405e4f61a6456317d4870e7f7569d30ef50af45e74c80732fc066b41d08bc5fc402fb4729201a9ed907b51ed81e8529c02594efc49b27e0677805bca4108d3fb620d1f346ebe5fc356c7da4dc90f2a0f8d6dd35ba21dc2df5466bafa8985db01faf5373d1d72202073769b0324c1b6fa01989a79df05bcd6c8619f4539d31ff315647147ed9f6ed19285a0394583a861909bce1affc99468067d3ef5278e9bddbe9a99abfe9ab919c5e5a0e94e687a43183223b46e586a84650d71e1ee319a187d540ba9c100456ea4ff77b5388d72c43e388d833c9bb5be9a62d27d6b329eb5af0fb5a4764b220f3bb041b94e25ef5d1eae88b8d677835a26bb579511ceae0794e4b556cc2bef652e79dad7626481a80de9a9d09191a38b9fcf71f1570a5184d34bf19633c972653c98a380dd04c671da0785e7d39367a87bc523fd9cd81f78fcf50300bb9fd5bda31c3ae9a1e72425504d7f62b7e1e52dde13045ed09c6212dc9f57d8921965a55e4fb732f4017f41271459dde667c237df3e2f7a27bce5857a9562cc9be67eeeeaa3b1aac1ba560b191a3008bf5f71760025d60576daa925748d6ede857d2afb723da38fe0623d036b352fccfca64e706db2765d4818907938d3f7bccd2df11313549124ea2a69823f7205644bdbd869a78aac1cd3440061f8ca28f10de0c881a1f91bb89f3427fab7532c3d1b51983e9f5b09524e29d9f882f663ba3d3a7e38dbb7633ca06af107d3c545f1d02235679fb18e24ffcd2e081c5e5602fb3c6a6011a07b9614a5f2f261c42ea3d1d68ed9be1960038ced90170ae60bca14eb136f58fa87dca180da452a9677ff29911dade8cb7dcb93934674839fbf25a81af9b9a4ec9279c8a3ab672dd0fddca0a95c61abc98187ceca0dbf70db86fbef804552b3212bb1527a48e7eeb981ac8f19ecf67f466e02a3a5b5b808385eaec70f12d83dea73af0490ea269347d900ec485c8f623d283d15cb64380892624d3f2cd6c1e708c5ab1f0f029211d35dc6c27a04b974b299db07fa2d8ee6a0b9e2f3baad6aef57c3f1a08bb5a10db6e518ca9258cefed0fe33473b11e685510f2ad7c47b5e14304447bac87ce22aa6bac20297bed3364d99516e3a837e5bef6f07022580da570766c6b262815c3099e1829ea0fb04c2f41dd6c8b35ba1f2276894ef03d5ba8a0fc2ae396c3abec5939ed241a8453a2ab09f99ab5f986f39dffd442b08f64c27b3a2e030153b546e3d6040b75b96997926ede9841a387eb32f772196230e890a5f4a6e9c954bd7b706c36a9f4728c127e71ec88971e335ecf1ca4d4c64d79002ba201ff9d7db05f5879b1690ac2cf0fb4239443b76b3c6c5fb207b2a51fdbacf19702c3e851c9b4c626048a50164a5f01672ed57f4947d27749ff9bd4168ff6d365d6b855df536a926b979427520bd90c55d3acc49b12a2e6c856a95f59dcafc9260eea5744e7d1bb51dfbc11644e9008a8d8c505b41a5c6226377e003aad237c772737bd7ccb2e06143bad2da8f386503144a1ac2c47a26699aef6357329d0ddeacbd1af0ae12f52e5473f687326515935210d80364bda5294ddc0cbfd110e19ded3ff49c576c347fd1cd66506085fdb5e892ad6e1d57b2b4405b7d21cbb839f4cd028f870caa42d1c3490824fccca26a62d74c3cbc56cdb2c0e845a2b681cbafb3c04963c71ddc54e0e3de6a12b06b8085c3a3305c6e95a4ad43219a65d1ed8dcbf1f7e6ddd197c3c7d12476b3a97450a14ef64c348d66d36e5fd8fa6417c71bc7d567a0ec8336b9212f03aa37d835cb4901014b05fd7f07d58088654d6e98046451dbb6704472077d61b2e274f00824df76aa19ac471f7e025d28a7d82be1c635ac9b52fd537913e925e1f4bd2f84d1927a6d9956b363aa54476570457e8028f4b4c5c063d2310b726581bc26217e0c11e3e82cd73363f4493c4871d5569559eb1ce954f59f645feb5073cb83075e8aef5b7a780ab34ba376e3e2e72ac79d647c9b053eba5df19436df0c68369eac57cb85b5eb290ec1ab76b24cddef86cc75189c4386eb71ea6c8512809adcd1425b496f1fd1d2f0fdc9990becd4a63a640e60c5d8ee84ba9c05f554aec823df08db77401c306580f10ef56df4230fbdf8cecf3dd43223fb843a3dfda701cb8bfee5d441475ad6c974f0f67d83eb4a4a8265eb32d8dc410b750a1e663cb56648a0d148afd88f7d364f9272a7c3a09d441978511e0bb6a4f8b98fc6a75e8d4dc83264b38da12fd024d8190da6674ae42a65d23d27c862d00fda1d13a6bc963dd633dd53c10e86fa924ec666185b1f8722c3deeac7582699f2f881f01a428d5ad5e122e63b782afabbb1d7d7db541e9dcadec10e6b23373afb149f5e59be721f8fdaa1be876dc9b8d0b78c73aa363f05347d5904e68663fe2e2d262f7d398f32f51a2e85f0afa844909b383891c261abce7f2f8b4e0b774e0770df970f5c5d6aa3f04ca11e23f646376edc6172766a806dd3c5ddf6c728daa862c457fd92e0ffb2285b961b7a8088e1ae551283905d93873bb2b62db50e68b32e55d4d4d7969ba5cb08299e63253ae6b0125d4ff0929743c67cc34086a661050a0763a72e774a11a4bab7475a40341bcc17dfafa1c29514e40a3a1b2e9da316de093811409f2319e5aed33e72ce604f07bfadac0bfa04d5eaa83f2f877ecb6c99bc28190ad01f9f57935584d1046db960fadf18b22ab94cac16cf719e658e73dfaafdb9d0114e129c714b7c0489ea9e9578d6c3da03e09fa8df668457d19bf9dc39f1f5666c6083308f3ced036d975212765267ef1ed5d85ef54b6f459537b8f08698ac5d55790a595e8af5c6162a99aae7b389e68714f8086ce7a65cee4437dba5bb7deabd092cc5af5b93d1f027ac43d986a4cb7267bc2740f7d99255f2734e3367a31e7d3ed5d27511d60f880f668cc751c1a97dc10fb43bce027cf7efd6fca576fc082471902f3dbcef70fc275213ff7557ca2e3542d063f89b897e3bc8460a0576a16d4e940ab85b716605571807d476bbfc9ad9a57fd0d1bc1ab3d9d5591615da516232b5a7335807bef4b51b0f1c63ebc9a8142907b8a1513b75fd173937a22d960ff2fbb15fa470917e8a569ced416504b43ba3f4c99903ded489c4bbb91f836a07da247d0ca0650b4263dab042424d14ed9f34521b569503ad509fd41280a4f549e4c6fb3530b39a4050e980c861eccaeb1047cb57b9ae3cf1014f29094171fc0606ffa9b6f4457015bf0bb44f4ff1acffe17685da85d1f7c01e54c26346c0240e7771eaad31a781d6e69dbb86c53a04ca4bae056dc31d5d4d9f703613c6be1f1411b15c5559f1f8b33f4eb36e27fd66889245660d3484084b949a267bed0848c9d06d9e767f731c126fda2d589da5c444f47a56b0d6008fdeb8856decb94e529830a4bd996f44e155aa89f7a666166ce8b609227a73deae1009bf1262b3826303b9b8e3cf000b917f91c93f08d753e03b14d6f5eb7ac30e3485685fc4fe91f427de2152c8080bd23f23817459552b8d6eddc4dcac3c27e3d6af0d96e86b5d1d248ce6d7b79027a97156c18aa32b42cfae9690ddcaa6df1918c430947e82320e090dacb916c3ce28179f96b80fdd1b75eca5bfcf104b4c171c0f9b35a644a65e1d731205c2c7894f9f2230cb24db35df09e6c677261c874cc98fd7244433128f7dc4950c8063893377e74a67f99dbd35340c2a2e440ba6d04cfb0ae47edc12aa6fb567e4b19116742fe7d863ad10b88aa07607ae965011c91e85be0d84fbbc13031ad6ff6896e5889f35454ccfbe52cc23a7f4d08b9bec4cc12ca73f7e927e3aee88e546ef59e4dad5721dae97ca8db0a8469a2cec5a8989cd47d7d3347f78c13edf2f9f416cd0d8655c9d4cc680fb2cdddd4e02348412cfac147ca78a23a68dc02474f824a3eb1c98e1ae1a0ad424f5315d949f8908dbad96988ff93cd0c142c2aa47f0724b484da36f511dd5d386f639bcf276521aa292b1ec4b5fc7933713501112bc6f85468e8af6bfed87f35993ed41d53d5c67cb36902ef6435bc9c07fc3c0e1fba7e9a6d79db300af9620fe0d9fc59ffcb63e908a34c71043a96b99b34c33b5e122997bcc8f58af5a346089028bd63b326a9388e69284ba4bba7d34b6f22260a4e04de1e8bfbc3134d2bf00765ea12034b285e423280f6b59038ddd66ede4f45a3a7d94af7c1fe005576c0906dd23eee28b6352306f6f98898b9013478105e5109c5f769be9a7652060ea43bdb5b925e07541fcbf90eaca89f614d3935d729ae7617965687a361c230da0909f43c946ef6c0351fb26480410dd8d3738aeea3153af84aa5b3f6fc798c080c0fc679990336b45498cd30bcf261c67d7bec46b1fca7e6decd1c6335094a4e310a5f114edbef887691d3d889da848d5107e10d4298cdd84014c8d51b9a97e9e897f16549eac927702bf9bce478f21d82f070b4c8ea6b08456b819db7f1020b4e17658fbf2c62c6ea087dc2a8e559edace9685addc0df9f3e31808c35fdf16e04c3e9db89996c1678aab6896e07577f54e8e3af3adb0a84bb96c0a627764e6b0b3117318033855e14de19a87045ed17a1668bc3518a07391e7722837d345aa342ac3cd98b48b60ae289521a7b4fa2c2cfd56d88ca89e775ada8be4d6278a4858e0f73b525316835db6369521658ab57bdb7f182910264950de276d43f69beb5b3def8f49072dbe290e779317330c1839420fcb9738d1904c1daed9704885a71784a59c026d444e813d98e642eaeac84b70d0ca660d1252d3a3f20eeba2987c7dca41dba573a295a921a7e51d4ae68a3fe15c195e4510e7eac4a62eecec1d52a8ce68c3fdb2d0b163170894652b46a367d831977bb8624b72fd3b7e9c081658e87eabe85aeb2865c52a73470f16ab98e7601fff7fa43170783f286e793676a665f2ee43cae063ef38c5fe231aa620c08073ff4528f925c1c1addd3a49d138cf6a7c923ef76783340c887a06d2839db2defb1ce62e4d94c95296d85162ec97b92c935bf808c16b146b8df29b502f3b1815cfceec2fac8d94280d32567526cce6be72b8a2f70b9b999b813d9705dd823bfea2cef57459a38d34c4f82f0837a3f65bf6f7b8f177ae239cfbae99940a4eaa8aaae22826f9debdb3f9a7cf0265e88b58dac4aa11557915b4deca4a02fc7015a3b6793c0d09133740046107bca60b675b3c58f5b981b066316797b1ee12f8853a6782d3d3c8314eae34ed4bf4f9c039c40dc956852aa0e9a4903ab40c3450fb79668f8001d7b8ac6711b7d4f0b8854a225676649e2c46b88327daf6a5f8584ed57d0e2ac271a0e835f0efc9a23ac6e5a206dcfb47ef259472597a07c8af70138df0f2401b0561771724814d56a19a8e0f0d98c58fc50f0c53fe0f7f31e8548cf7aade5fa5b969b6ddc7985502b515fbcb3732e6ef67f26ee209a7b95ad40836fd273eedbb978f3d711da9757a5b77c656b26057aa0fca51a5d9e69fe3f263c0e3a2df84618fff08fe18d074c12e42978b81d6348b4d8d3c73fa9ed9348d2b6466d7f2fdba479ec9e3ec4c0e409ed7db539345b2433ab74c35b797784ac8be44a95af7e02e8b21fc73e031180a73ba0009dff3954"}, @NL80211_ATTR_FRAME_MATCH={0x76, 0x5b, "b2026dfb21bba94d83f63978d849da69f1656a4a0dec5cb3234f3b47d61de0ef6c51fd732c53b7e7fd4b9bf14217d2956b7d2c35b011d4e410beda333040f4e9544e4e8de3ebde39e48a3aa3aa891bdc8061feef8588239e95d2b436b26a19a6b9053f24a71ee1f0d1869c145773b7c5c78a"}, @NL80211_ATTR_FRAME_MATCH={0x63, 0x5b, "e99401998a27cdbeaa30b3385966fca7c6be01539b41cbf33e19a939362b39f6636554edb8bb5eb148bf9081e46b163a89e954ec91cf88e2b597c7bab80544faae845dc945a86e0a430a3fc3668575a6e05d108e1a539a64103f00173e9e71"}]}, 0x11f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x52040}, 0x4008800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001c40)=0x7, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000001c80)={0x6, 'veth0_to_team\x00', {0x7}, 0x31}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001cc0)={0x1f, 0x0, @none}, &(0x7f0000001d00)=0xe, 0x80800) r6 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r6, &(0x7f0000ffe000/0x1000)=nil, 0x6000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001d80)={0x9, 0x1, 0xd, 0x2, 0x5, 0x3, 0xfffffffc, 0x8, 0x0}, &(0x7f0000001dc0)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001e00)={r8, 0x7, 0x7, 0x9, 0x3ff, 0x4}, &(0x7f0000001e40)=0x14) sendto$inet6(r5, &(0x7f0000001e80)="5ddd12f2e8f239bae77fb48394d6a58c1f6f205ce45c5dc0f14b27879ee644e05112d38a", 0x24, 0x8800, &(0x7f0000001ec0)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r4, r9, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000001f40)={0x8, 0x0, &(0x7f0000001f00)=[r10, r1, r5, r7, r0]}, 0x5) 3.45684ms ago: executing program 0 (id=2326): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB, @ANYBLOB="2ba457df8ac8615e49168b21b098ac0ed9cb3bb03dbebe95c6abe77d7ec4a737edb09f958c2b5a66c5cec4d7bb85f21e70b40c7e8cfa52d95109a3f54049ca19f1829698f17b532b3f0594cabcd7c300cb6bb5ba146ce9e5193ec199bfe9ca470074454285130d0651fff457d26e206e82cb2a632efc717f"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=2327): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xffff}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r12 = fcntl$dupfd(r1, 0x0, r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r9, 0x20, &(0x7f0000000a40)={&(0x7f0000000580)=""/67, 0x43, 0x0, &(0x7f0000000a00)=""/53, 0x35}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6a10ba05784536e, 0x1a, &(0x7f00000013c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x4, 0x2, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], &(0x7f00000001c0)='GPL\x00', 0x227, 0xfa, &(0x7f0000000680)=""/250, 0x0, 0x2, '\x00', r11, @fallback, r12, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x6, 0x59d1}, 0x10, r13, r2, 0x2, &(0x7f0000000b40)=[r1, r1, 0xffffffffffffffff, r1, r1, r1, r1, r1], &(0x7f0000000b80)=[{0x3, 0x1, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0x3}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000c80)=""/206, 0xce}, {&(0x7f0000000d80)=""/235, 0xeb}, {&(0x7f0000000e80)=""/190, 0xbe}, {&(0x7f0000000f40)=""/248, 0xf8}, {&(0x7f0000001040)=""/236, 0xec}, {&(0x7f00000012c0)=""/195, 0xc3}, {&(0x7f0000000540)=""/61, 0x3d}], &(0x7f00000005c0), 0x7}, 0x20) r14 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 0s ago: executing program 0 (id=2328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x4eb827d327fcb3c1, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x4eb827d327fcb3c1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="00000000d55958453fc2480801c4b50c948be3349ae17c2d8208fd9d47041a0e8061b85c43f044e5062c8285adb96c30069545d44dddece92106cadec4d5bcb085ab869e4b1f84f088178f9bf52ce4a34a1416d6b21e2925bedab6a8c068d7d9c8ba082a52280220838e29d51f46142c8c4af5c217849eb7b3b575ef97ed276fedd55f22bb95f7fb6bfbc9a46ccab337fc4e2f8a58afb4eb935b6f6c37091abdbbb8af914b038dcb3860267ed501d1e1d4595cdeeed5511f8cdf683704e134210e", @ANYRES16=r2, @ANYRESHEX=r3, @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x844) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0x10a2, &(0x7f0000001b80)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x23, 0x4, 0x1, 0x4, 0x1094, 0x64, 0x0, 0xff, 0x2, 0x0, @loopback, @empty, {[@end, @noop, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0x3, [{@loopback, 0xe}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@rand_addr=0x64010101, 0x8}, {@local, 0x16db}, {@empty, 0x400}]}, @ssrr={0x89, 0x17, 0x94, [@multicast1, @local, @loopback, @loopback, @private=0xa010102]}, @ssrr={0x89, 0x2b, 0xc3, [@broadcast, @remote, @private=0xa010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @empty, @empty, @empty]}]}}, {0x11, 0x7, 0x0, @broadcast, "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"}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x20, r5, 0x400, 0x70b527, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x8d0) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x20, r5, 0x400, 0x70b527, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x8d0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket(0xa, 0x5, 0x0) (async) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r10, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async) sendto$inet6(r10, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x40, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x232}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x40, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x232}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 68.901824][ T29] audit: type=1400 audit(1762197336.958:2625): avc: denied { read } for pid=6226 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.103323][ T6241] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 69.114059][ T6241] team0: Port device dummy0 added [ 69.120358][ T29] audit: type=1400 audit(1762197337.198:2626): avc: denied { bind } for pid=6240 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.140576][ T29] audit: type=1400 audit(1762197337.198:2627): avc: denied { setopt } for pid=6240 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.170421][ T6242] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 69.178821][ T6242] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.206526][ T6242] team0: Failed to send options change via netlink (err -105) [ 69.217298][ T6242] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.240544][ T6242] team0: Port device dummy0 removed [ 69.314652][ T6242] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.323736][ T1447] bond0: (slave dummy0): interface is now down [ 69.343679][ T5758] bond0: (slave dummy0): interface is now down [ 69.352424][ T6244] IPVS: Error connecting to the multicast addr [ 69.371361][ T1447] bond0: (slave dummy0): interface is now down [ 69.390447][ T5758] bond0: (slave dummy0): interface is now down [ 69.396847][ T5758] bond0: now running without any active interface! [ 69.455841][ T6248] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 69.486260][ T6252] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 69.493987][ T6252] __nla_validate_parse: 3 callbacks suppressed [ 69.494001][ T6252] netlink: 152 bytes leftover after parsing attributes in process `syz.4.495'. [ 69.521292][ T6252] .`: renamed from bond0 (while UP) [ 69.540299][ T6252] xt_CT: No such helper "pptp" [ 69.592057][ T6260] tmpfs: Bad value for 'mpol' [ 69.621515][ T6264] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 69.627669][ T29] audit: type=1326 audit(1762197337.708:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 69.628310][ T6264] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 69.628329][ T6264] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 69.628349][ T6264] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 69.651648][ T29] audit: type=1326 audit(1762197337.708:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 69.651676][ T29] audit: type=1326 audit(1762197337.718:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 69.651717][ T29] audit: type=1326 audit(1762197337.718:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 69.651757][ T29] audit: type=1326 audit(1762197337.718:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 69.765561][ T29] audit: type=1326 audit(1762197337.718:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 70.656034][ T6280] syzkaller0: entered allmulticast mode [ 70.662685][ T6280] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 70.698602][ T6280] batadv0: left allmulticast mode [ 70.703698][ T6280] batadv0: left promiscuous mode [ 70.708844][ T6280] bridge0: port 5(batadv0) entered disabled state [ 70.713445][ T6283] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 70.723023][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.504'. [ 70.733303][ T6280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.751976][ T6280] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 70.876392][ T6283] batadv0: entered promiscuous mode [ 70.881648][ T6283] batadv0: entered allmulticast mode [ 70.913721][ T6283] bond0: (slave batadv0): Releasing backup interface [ 70.923858][ T6283] bridge0: port 5(batadv0) entered blocking state [ 70.930382][ T6283] bridge0: port 5(batadv0) entered disabled state [ 70.964222][ T6279] syzkaller0: left allmulticast mode [ 71.290533][ T5753] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 71.299780][ T5753] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 71.465824][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6313 comm=syz.4.513 [ 71.700161][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 71.794215][ T6361] netlink: 76 bytes leftover after parsing attributes in process `syz.4.528'. [ 71.855411][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 71.864909][ T6353] loop1: detected capacity change from 0 to 8192 [ 71.887465][ T6353] vfat: Unknown parameter 'GPL' [ 71.887471][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 71.904525][ T6353] ip6t_srh: unknown srh match flags 4000 [ 71.940853][ T6383] loop3: detected capacity change from 0 to 512 [ 71.951525][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 71.978742][ T6383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.979048][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 72.002932][ T6383] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.017966][ T6389] loop1: detected capacity change from 0 to 1024 [ 72.021746][ T6390] xt_TCPMSS: Only works on TCP SYN packets [ 72.044738][ T3007] udevd[3007]: worker [3312] terminated by signal 33 (Unknown signal 33) [ 72.110609][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.253826][ T6397] loop3: detected capacity change from 0 to 512 [ 72.262779][ T6397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.270259][ T6397] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.538: EA inode hash validation failed [ 72.282821][ T6397] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.296747][ T6397] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.538: corrupted inode contents [ 72.308804][ T6397] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.538: mark_inode_dirty error [ 72.322039][ T6402] 9pnet_fd: Insufficient options for proto=fd [ 72.512754][ T6407] x_tables: duplicate underflow at hook 2 [ 73.103182][ T6397] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.538: corrupted inode contents [ 73.128938][ T6397] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.538: mark_inode_dirty error [ 73.180842][ T6397] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.538: mark inode dirty (error -117) [ 73.225872][ T6429] loop1: detected capacity change from 0 to 1024 [ 73.245952][ T6397] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 73.269716][ T6431] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.286484][ T6397] EXT4-fs (loop3): 1 orphan inode deleted [ 73.295332][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.322032][ T6436] netlink: 56 bytes leftover after parsing attributes in process `syz.4.548'. [ 73.330981][ T6436] netlink: 308 bytes leftover after parsing attributes in process `syz.4.548'. [ 73.362529][ T6429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.379299][ T6429] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.404494][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.431945][ T6431] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.538921][ T6431] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.583271][ T6428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.679404][ T6431] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.727608][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 73.727622][ T29] audit: type=1326 audit(1762197341.818:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.763258][ T29] audit: type=1400 audit(1762197341.818:2990): avc: denied { execute } for pid=6440 comm="syz.0.552" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.787831][ T29] audit: type=1326 audit(1762197341.858:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.799845][ T6444] loop3: detected capacity change from 0 to 2048 [ 73.811202][ T29] audit: type=1326 audit(1762197341.858:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.840899][ T29] audit: type=1326 audit(1762197341.858:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.864213][ T29] audit: type=1326 audit(1762197341.858:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.887517][ T29] audit: type=1326 audit(1762197341.858:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.910629][ T29] audit: type=1326 audit(1762197341.858:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.933961][ T29] audit: type=1326 audit(1762197341.858:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.957290][ T29] audit: type=1326 audit(1762197341.858:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 73.969229][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 74.006156][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.023646][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.049417][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059253][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 74.069693][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.128615][ T6468] loop3: detected capacity change from 0 to 2034 [ 74.151835][ T6468] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (508 blocks) [ 74.153434][ T6469] bridge1: entered promiscuous mode [ 74.264196][ T6485] netlink: 'syz.1.566': attribute type 7 has an invalid length. [ 74.271892][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 75.559285][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 75.745087][ T6587] netlink: 19 bytes leftover after parsing attributes in process `syz.2.601'. [ 75.769173][ T6590] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 75.933391][ T6608] netlink: 528 bytes leftover after parsing attributes in process `syz.1.608'. [ 75.942409][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 75.956358][ T6608] xt_hashlimit: max too large, truncated to 1048576 [ 75.979790][ T6613] Driver unsupported XDP return value 0 on prog (id 613) dev N/A, expect packet loss! [ 75.997532][ T6610] loop3: detected capacity change from 0 to 8192 [ 76.437799][ T6625] batman_adv: batadv0: Adding interface: dummy0 [ 76.444092][ T6625] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.471334][ T6625] batman_adv: batadv0: Interface activated: dummy0 [ 76.507091][ T6626] batadv0: mtu less than device minimum [ 76.513134][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.523851][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.534679][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.545402][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.556107][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.566927][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.577677][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.588348][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.598950][ T6626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 76.642272][ T6625] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 76.665615][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 76.706011][ T6632] bond1 (unregistering): Released all slaves [ 76.852687][ T6635] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.938308][ T6642] loop3: detected capacity change from 0 to 1024 [ 76.951793][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 76.961052][ T6647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6647 comm=syz.2.619 [ 76.980920][ T6642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.998039][ T6642] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.011965][ T6650] sch_fq: defrate 0 ignored. [ 77.084196][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.094347][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 77.406175][ T6676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6676 comm=syz.4.627 [ 77.653568][ T6694] 9pnet_fd: Insufficient options for proto=fd [ 77.663389][ T6686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.711626][ T6686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.762317][ T6686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.842318][ T6686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.869339][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 78.142529][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 78.284149][ T5758] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.308634][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 78.328521][ T5758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.383069][ T5758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.457839][ T5758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.482083][ T6726] xt_CT: No such helper "pptp" [ 78.560140][ T6731] xt_connbytes: Forcing CT accounting to be enabled [ 78.567214][ T6731] Cannot find set identified by id 0 to match [ 78.759223][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 78.759243][ T29] audit: type=1326 audit(1762197346.848:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 78.788882][ T29] audit: type=1326 audit(1762197346.848:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.2.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 79.115842][ T29] audit: type=1400 audit(1762197346.978:3636): avc: denied { relabelfrom } for pid=6744 comm="syz.1.650" name="" dev="pipefs" ino=12409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.138242][ T29] audit: type=1326 audit(1762197347.118:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.161582][ T29] audit: type=1326 audit(1762197347.118:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.185022][ T29] audit: type=1326 audit(1762197347.128:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.208404][ T29] audit: type=1326 audit(1762197347.128:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.231988][ T29] audit: type=1326 audit(1762197347.128:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.255372][ T29] audit: type=1326 audit(1762197347.128:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.278720][ T29] audit: type=1326 audit(1762197347.128:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 79.464798][ T6784] lo speed is unknown, defaulting to 1000 [ 79.471039][ T6784] lo speed is unknown, defaulting to 1000 [ 79.476949][ T6784] lo speed is unknown, defaulting to 1000 [ 79.484526][ T6784] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.517782][ T6792] 9pnet_fd: Insufficient options for proto=fd [ 79.533468][ T6784] lo speed is unknown, defaulting to 1000 [ 79.540254][ T6784] lo speed is unknown, defaulting to 1000 [ 79.546659][ T6784] lo speed is unknown, defaulting to 1000 [ 79.553098][ T6784] lo speed is unknown, defaulting to 1000 [ 79.569659][ T6784] lo speed is unknown, defaulting to 1000 [ 79.576666][ T6784] lo speed is unknown, defaulting to 1000 [ 79.597870][ T6801] bridge0: port 3(batadv1) entered blocking state [ 79.600436][ T6784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6784 comm=syz.2.661 [ 79.604541][ T6801] bridge0: port 3(batadv1) entered disabled state [ 79.623371][ T6801] batadv1: entered allmulticast mode [ 79.629156][ T6801] batadv1: entered promiscuous mode [ 79.656966][ T6817] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 79.685367][ T6801] process 'syz.1.665' launched '/dev/fd/7' with NULL argv: empty string added [ 79.726006][ T6823] IPVS: Unknown mcast interface: ipvlan1 [ 79.861287][ T6837] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.876196][ T6832] ref_ctr_offset mismatch. inode: 0x2af offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x200000000180 [ 80.003359][ T5955] IPVS: starting estimator thread 0... [ 80.014996][ T6848] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.085786][ T6848] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.095622][ T5759] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 80.095655][ T6851] IPVS: using max 2496 ests per chain, 124800 per kthread [ 80.104866][ T5759] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 80.153559][ T6848] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.224453][ T6860] IPVS: set_ctl: invalid protocol: 22 172.20.20.20:20004 [ 80.236396][ T6848] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.340381][ T5759] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.363757][ T5759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.391254][ T5759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416946][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.621981][ T6874] __nla_validate_parse: 8 callbacks suppressed [ 80.621996][ T6874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.687'. [ 80.672845][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 80.907009][ T6891] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 81.091744][ T6909] ipvlan0: entered promiscuous mode [ 81.336149][ T6948] tipc: Started in network mode [ 81.341293][ T6948] tipc: Node identity ac14140f, cluster identity 4711 [ 81.354236][ T6948] tipc: New replicast peer: 255.255.255.255 [ 81.360738][ T6948] tipc: Enabled bearer , priority 10 [ 81.369829][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 81.378744][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 81.450623][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 81.516483][ T6959] SELinux: Context @ is not valid (left unmapped). [ 81.969134][ T7001] lo speed is unknown, defaulting to 1000 [ 82.070322][ T6999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.732'. [ 82.144242][ T6999] ip6gre3: entered promiscuous mode [ 82.149526][ T6999] ip6gre3: entered allmulticast mode [ 82.360619][ T5955] tipc: Node number set to 2886997007 [ 82.480482][ T7022] tipc: Started in network mode [ 82.485399][ T7022] tipc: Node identity ac14140f, cluster identity 4711 [ 82.537226][ T7022] tipc: New replicast peer: 255.255.255.255 [ 82.543525][ T7022] tipc: Enabled bearer , priority 10 [ 82.563177][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 82.572185][ T7024] tipc: Disabling bearer [ 82.710297][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'. [ 83.654003][ T7047] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 83.815546][ T29] kauditd_printk_skb: 1000 callbacks suppressed [ 83.815584][ T29] audit: type=1400 audit(1762197351.908:4644): avc: denied { bind } for pid=7048 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.065030][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 84.321705][ T29] audit: type=1400 audit(1762197352.408:4645): avc: denied { bind } for pid=7067 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.341741][ T29] audit: type=1400 audit(1762197352.408:4646): avc: denied { setopt } for pid=7067 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.423665][ T29] audit: type=1326 audit(1762197352.518:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 84.447059][ T29] audit: type=1326 audit(1762197352.518:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 84.480308][ T29] audit: type=1326 audit(1762197352.568:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 84.503642][ T29] audit: type=1326 audit(1762197352.568:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3df82f003 code=0x7ffc0000 [ 84.526887][ T29] audit: type=1326 audit(1762197352.578:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3df82da7f code=0x7ffc0000 [ 84.550086][ T29] audit: type=1326 audit(1762197352.618:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc3df82f057 code=0x7ffc0000 [ 84.574970][ T29] audit: type=1326 audit(1762197352.618:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3df82d810 code=0x7ffc0000 [ 84.642261][ T7075] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 85.007251][ T7136] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 85.029584][ T7141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=7141 comm=syz.4.780 [ 85.065245][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.867023][ T7211] lo speed is unknown, defaulting to 1000 [ 86.129309][ T7219] __nla_validate_parse: 8 callbacks suppressed [ 86.129324][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.805'. [ 86.365103][ T7218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.805'. [ 86.966017][ T7233] netlink: 'syz.2.810': attribute type 16 has an invalid length. [ 86.973809][ T7233] netlink: 156 bytes leftover after parsing attributes in process `syz.2.810'. [ 86.983778][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 87.363475][ T7244] veth0_to_bridge: entered promiscuous mode [ 87.404285][ T7243] veth0_to_bridge: left promiscuous mode [ 87.418093][ T7250] lo speed is unknown, defaulting to 1000 [ 87.763769][ T7276] netlink: 'syz.2.824': attribute type 8 has an invalid length. [ 87.771608][ T7276] netem: change failed [ 87.844037][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'. [ 87.931768][ T7304] x_tables: unsorted entry at hook 2 [ 87.965740][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 87.975187][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 88.011872][ T7315] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.131139][ T7315] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.204840][ T7315] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.261717][ T7315] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.317243][ T7335] infiniband syz!: set down [ 88.321865][ T7335] infiniband syz!: added team_slave_0 [ 88.339929][ T5759] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353107][ T7335] RDS/IB: syz!: added [ 88.357167][ T7335] smc: adding ib device syz! with port count 1 [ 88.363400][ T7335] smc: ib device syz! port 1 has no pnetid [ 88.573947][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 88.595628][ T7315] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.625880][ T7347] team0: Port device team_slave_1 removed [ 88.835842][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 88.835857][ T29] audit: type=1326 audit(1762197356.928:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 88.892686][ T29] audit: type=1326 audit(1762197356.938:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 88.916178][ T29] audit: type=1326 audit(1762197356.938:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 88.939789][ T29] audit: type=1326 audit(1762197356.938:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa662b0f003 code=0x7ffc0000 [ 88.963006][ T29] audit: type=1326 audit(1762197356.978:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa662b0da7f code=0x7ffc0000 [ 89.011979][ T29] audit: type=1326 audit(1762197357.018:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa662b0f057 code=0x7ffc0000 [ 89.035483][ T29] audit: type=1326 audit(1762197357.088:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa662b0d810 code=0x7ffc0000 [ 89.058806][ T29] audit: type=1326 audit(1762197357.088:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa662b0dc2a code=0x7ffc0000 [ 89.082018][ T29] audit: type=1326 audit(1762197357.088:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 89.105535][ T29] audit: type=1326 audit(1762197357.098:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 89.170030][ T7366] netlink: 'syz.1.847': attribute type 21 has an invalid length. [ 89.178326][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.847'. [ 89.490664][ T7386] wireguard0: entered promiscuous mode [ 89.496218][ T7386] wireguard0: entered allmulticast mode [ 89.795863][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 90.140899][ T7418] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 90.324628][ T7436] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.349569][ T7436] lo speed is unknown, defaulting to 1000 [ 90.939063][ T7443] lo speed is unknown, defaulting to 1000 [ 91.335917][ T7464] netlink: 'syz.2.878': attribute type 13 has an invalid length. [ 91.343792][ T7464] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.878'. [ 91.356116][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 91.607263][ T7496] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 91.615188][ T7496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.888'. [ 91.633693][ T7499] lo speed is unknown, defaulting to 1000 [ 91.731867][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'. [ 91.908727][ T7530] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.921290][ T7532] atomic_op ffff888109d2d128 conn xmit_atomic 0000000000000000 [ 92.063194][ T7530] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.512182][ T7530] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.539590][ T5758] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554092][ T5759] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.579973][ T5759] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592812][ T7530] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.614174][ T5759] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.644446][ T7572] lo speed is unknown, defaulting to 1000 [ 92.658948][ T7568] lo speed is unknown, defaulting to 1000 [ 92.694186][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 92.702142][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.727414][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.739002][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850294][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871346][ T7591] 9pnet_fd: Insufficient options for proto=fd [ 92.880908][ T7592] netlink: 52 bytes leftover after parsing attributes in process `syz.2.914'. [ 93.093572][ T7603] netlink: 10748 bytes leftover after parsing attributes in process `syz.1.917'. [ 93.109716][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'. [ 93.196329][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.203540][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.256558][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.268369][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.325740][ T5758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.335250][ T5758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.344610][ T5758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.371200][ T5758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.386783][ T7621] netlink: 'syz.1.923': attribute type 21 has an invalid length. [ 93.394575][ T7621] netlink: 128 bytes leftover after parsing attributes in process `syz.1.923'. [ 93.405213][ T7621] netlink: 'syz.1.923': attribute type 5 has an invalid length. [ 93.413058][ T7621] netlink: 'syz.1.923': attribute type 6 has an invalid length. [ 93.420836][ T7621] netlink: 3 bytes leftover after parsing attributes in process `syz.1.923'. [ 93.914496][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 93.914511][ T29] audit: type=1326 audit(1762197362.008:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 93.966440][ T29] audit: type=1326 audit(1762197362.048:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 93.989875][ T29] audit: type=1326 audit(1762197362.048:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f998f7bf003 code=0x7ffc0000 [ 94.096085][ T29] audit: type=1326 audit(1762197362.118:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f998f7bda7f code=0x7ffc0000 [ 94.119312][ T29] audit: type=1326 audit(1762197362.138:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f998f7bf057 code=0x7ffc0000 [ 94.142686][ T29] audit: type=1326 audit(1762197362.138:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f998f7bd810 code=0x7ffc0000 [ 94.166065][ T29] audit: type=1326 audit(1762197362.138:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f998f7bdc2a code=0x7ffc0000 [ 94.189218][ T29] audit: type=1326 audit(1762197362.148:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 94.212617][ T29] audit: type=1326 audit(1762197362.158:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 94.235936][ T29] audit: type=1326 audit(1762197362.158:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 94.807391][ T7713] netlink: 'syz.1.954': attribute type 4 has an invalid length. [ 94.815390][ T7710] bond0: option all_slaves_active: invalid value (5) [ 94.824822][ T7710] bond0 (unregistering): Released all slaves [ 95.213699][ T7732] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 95.257912][ T7734] geneve2: entered promiscuous mode [ 95.263232][ T7734] geneve2: entered allmulticast mode [ 95.585859][ T7767] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 95.611664][ T5948] lo speed is unknown, defaulting to 1000 [ 95.617473][ T5948] syz2: Port: 1 Link DOWN [ 95.629859][ T7767] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 95.640148][ T5955] lo speed is unknown, defaulting to 1000 [ 95.645903][ T5955] syz2: Port: 1 Link ACTIVE [ 95.977587][ T7788] mmap: syz.1.982 (7788): VmData 17715200 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 96.677204][ T7809] __nla_validate_parse: 8 callbacks suppressed [ 96.677220][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 96.692396][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 98.432877][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 98.684831][ T7909] sctp: [Deprecated]: syz.4.1024 (pid 7909) Use of int in maxseg socket option. [ 98.684831][ T7909] Use struct sctp_assoc_value instead [ 98.726201][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 98.847263][ T7933] nfs4: Unknown parameter 'proc/timer_list' [ 98.904624][ T7939] siw: device registration error -23 [ 99.168484][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 99.168500][ T29] audit: type=1326 audit(1762197367.258:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 99.221742][ T29] audit: type=1326 audit(1762197367.288:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 99.245175][ T29] audit: type=1326 audit(1762197367.288:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3df82f003 code=0x7ffc0000 [ 99.268470][ T29] audit: type=1326 audit(1762197367.308:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3df82da7f code=0x7ffc0000 [ 99.296104][ T29] audit: type=1326 audit(1762197367.388:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc3df82f057 code=0x7ffc0000 [ 99.330657][ T29] audit: type=1326 audit(1762197367.418:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3df82d810 code=0x7ffc0000 [ 99.354092][ T29] audit: type=1326 audit(1762197367.418:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc3df82dc2a code=0x7ffc0000 [ 99.377342][ T29] audit: type=1326 audit(1762197367.428:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 99.400762][ T29] audit: type=1326 audit(1762197367.428:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 99.427895][ T29] audit: type=1326 audit(1762197367.448:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 99.468718][ T7949] ip6t_srh: unknown srh match flags 4000 [ 99.485235][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 99.504597][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 99.504610][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 99.728345][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'. [ 100.049665][ T7983] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 100.109712][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 100.117080][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.151237][ T7987] macvlan2: entered promiscuous mode [ 100.231039][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 100.416574][ T8025] netlink: 'syz.4.1062': attribute type 4 has an invalid length. [ 100.461593][ T8025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.541893][ T8025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.621573][ T8025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.720084][ T8034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.781997][ T8025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.792398][ T8046] x_tables: duplicate underflow at hook 1 [ 100.847434][ T5730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.860219][ T5730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.892746][ T8051] : renamed from wg2 [ 100.903837][ T5730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.929255][ T5730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.952093][ T8056] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.374114][ T8093] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.266928][ T8119] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 102.357428][ T8105] syz.1.1089 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 102.371395][ T8105] CPU: 1 UID: 0 PID: 8105 Comm: syz.1.1089 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.371421][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.371432][ T8105] Call Trace: [ 102.371437][ T8105] [ 102.371443][ T8105] __dump_stack+0x1d/0x30 [ 102.371464][ T8105] dump_stack_lvl+0xe8/0x140 [ 102.371512][ T8105] dump_stack+0x15/0x1b [ 102.371532][ T8105] dump_header+0x81/0x220 [ 102.371548][ T8105] oom_kill_process+0x342/0x400 [ 102.371635][ T8105] out_of_memory+0x979/0xb80 [ 102.371671][ T8105] try_charge_memcg+0x610/0xa10 [ 102.371709][ T8105] obj_cgroup_charge_pages+0xa6/0x150 [ 102.371784][ T8105] __memcg_kmem_charge_page+0x9f/0x170 [ 102.371814][ T8105] __alloc_frozen_pages_noprof+0x188/0x360 [ 102.371915][ T8105] alloc_pages_mpol+0xb3/0x260 [ 102.371937][ T8105] alloc_pages_noprof+0x90/0x130 [ 102.371960][ T8105] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 102.372010][ T8105] __kvmalloc_node_noprof+0x483/0x670 [ 102.372092][ T8105] ? ip_set_alloc+0x24/0x30 [ 102.372120][ T8105] ? ip_set_alloc+0x24/0x30 [ 102.372151][ T8105] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 102.372241][ T8105] ip_set_alloc+0x24/0x30 [ 102.372274][ T8105] hash_netiface_create+0x282/0x740 [ 102.372312][ T8105] ? __pfx_hash_netiface_create+0x10/0x10 [ 102.372427][ T8105] ip_set_create+0x3cc/0x970 [ 102.372524][ T8105] nfnetlink_rcv_msg+0x4c6/0x590 [ 102.372569][ T8105] netlink_rcv_skb+0x123/0x220 [ 102.372644][ T8105] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 102.372698][ T8105] nfnetlink_rcv+0x167/0x16c0 [ 102.372728][ T8105] ? trace_reschedule_exit+0xd/0xc0 [ 102.372752][ T8105] ? is_bpf_text_address+0x141/0x160 [ 102.372792][ T8105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.372876][ T8105] ? kernel_text_address+0x94/0xb0 [ 102.372903][ T8105] ? __kernel_text_address+0xd/0x40 [ 102.373007][ T8105] ? unwind_get_return_address+0x16/0x40 [ 102.373038][ T8105] ? perf_callchain_kernel+0x301/0x330 [ 102.373109][ T8105] ? plist_check_list+0x1cf/0x210 [ 102.373138][ T8105] ? __rcu_read_unlock+0x4f/0x70 [ 102.373189][ T8105] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 102.373226][ T8105] ? plist_check_list+0x1cf/0x210 [ 102.373316][ T8105] ? perf_cgroup_switch+0x10c/0x480 [ 102.373383][ T8105] ? _raw_spin_unlock+0x26/0x50 [ 102.373449][ T8105] ? finish_task_switch+0xad/0x2b0 [ 102.373539][ T8105] ? __schedule+0x6b9/0xb30 [ 102.373567][ T8105] ? should_fail_ex+0x30/0x280 [ 102.373586][ T8105] ? selinux_nlmsg_lookup+0x99/0x890 [ 102.373610][ T8105] ? __rcu_read_unlock+0x34/0x70 [ 102.373635][ T8105] ? __netlink_lookup+0x266/0x2a0 [ 102.373671][ T8105] netlink_unicast+0x5c0/0x690 [ 102.373752][ T8105] netlink_sendmsg+0x58b/0x6b0 [ 102.373771][ T8105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.373789][ T8105] __sock_sendmsg+0x145/0x180 [ 102.373823][ T8105] ____sys_sendmsg+0x31e/0x4e0 [ 102.373885][ T8105] ___sys_sendmsg+0x17b/0x1d0 [ 102.373920][ T8105] __x64_sys_sendmsg+0xd4/0x160 [ 102.373945][ T8105] x64_sys_call+0x191e/0x3000 [ 102.373967][ T8105] do_syscall_64+0xd2/0x200 [ 102.373987][ T8105] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.374030][ T8105] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.374061][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.374081][ T8105] RIP: 0033:0x7f998f7befc9 [ 102.374095][ T8105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.374135][ T8105] RSP: 002b:00007f998e1e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.374157][ T8105] RAX: ffffffffffffffda RBX: 00007f998fa16180 RCX: 00007f998f7befc9 [ 102.374168][ T8105] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 102.374180][ T8105] RBP: 00007f998f841f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.374249][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.374264][ T8105] R13: 00007f998fa16218 R14: 00007f998fa16180 R15: 00007fff0e826db8 [ 102.374286][ T8105] [ 102.374340][ T8105] memory: usage 307200kB, limit 307200kB, failcnt 219 [ 102.635178][ T8132] __nla_validate_parse: 6 callbacks suppressed [ 102.635191][ T8132] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1098'. [ 102.637344][ T8105] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 102.637361][ T8105] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 102.795981][ T8105] Memory cgroup stats for /syz1: [ 102.798914][ T8105] cache 0 [ 102.806830][ T8105] rss 0 [ 102.809625][ T8105] shmem 0 [ 102.812587][ T8105] mapped_file 0 [ 102.816031][ T8105] dirty 0 [ 102.818957][ T8105] writeback 0 [ 102.822248][ T8105] workingset_refault_anon 2039 [ 102.827004][ T8105] workingset_refault_file 63 [ 102.831683][ T8105] swap 720896 [ 102.835150][ T8105] swapcached 32768 [ 102.839074][ T8105] pgpgin 132893 [ 102.842641][ T8105] pgpgout 132883 [ 102.846232][ T8105] pgfault 136062 [ 102.849772][ T8105] pgmajfault 263 [ 102.853371][ T8105] inactive_anon 24576 [ 102.857343][ T8105] active_anon 8192 [ 102.861144][ T8105] inactive_file 8192 [ 102.865024][ T8105] active_file 0 [ 102.868469][ T8105] unevictable 0 [ 102.871993][ T8105] hierarchical_memory_limit 314572800 [ 102.877349][ T8105] hierarchical_memsw_limit 9223372036854771712 [ 102.883510][ T8105] total_cache 0 [ 102.886959][ T8105] total_rss 0 [ 102.890308][ T8105] total_shmem 0 [ 102.893840][ T8105] total_mapped_file 0 [ 102.897800][ T8105] total_dirty 0 [ 102.901281][ T8105] total_writeback 0 [ 102.905074][ T8105] total_workingset_refault_anon 2039 [ 102.910358][ T8105] total_workingset_refault_file 63 [ 102.915458][ T8105] total_swap 720896 [ 102.919253][ T8105] total_swapcached 32768 [ 102.923492][ T8105] total_pgpgin 132893 [ 102.927473][ T8105] total_pgpgout 132883 [ 102.931561][ T8105] total_pgfault 136062 [ 102.935659][ T8105] total_pgmajfault 263 [ 102.939743][ T8105] total_inactive_anon 24576 [ 102.944241][ T8105] total_active_anon 8192 [ 102.948463][ T8105] total_inactive_file 8192 [ 102.952871][ T8105] total_active_file 0 [ 102.956841][ T8105] total_unevictable 0 [ 102.960827][ T8105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1089,pid=8099,uid=0 [ 102.975399][ T8105] Memory cgroup out of memory: Killed process 8099 (syz.1.1089) total-vm:98324kB, anon-rss:1140kB, file-rss:26404kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 103.150187][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1102'. [ 103.163045][ T8147] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 103.198700][ T8147] net_ratelimit: 10 callbacks suppressed [ 103.198766][ T8147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.271743][ T8158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8158 comm=syz.0.1102 [ 103.343440][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 103.352459][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 104.330298][ T5751] batman_adv: batadv1: IGMP Querier appeared [ 104.336325][ T5751] batman_adv: batadv1: MLD Querier appeared [ 104.353827][ T8208] veth4: entered promiscuous mode [ 104.358894][ T8208] veth4: entered allmulticast mode [ 104.441088][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 104.458387][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 104.468755][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 104.478969][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 104.518712][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 104.518821][ T29] audit: type=1400 audit(1762197372.608:6088): avc: denied { accept } for pid=8221 comm="syz.0.1128" lport=51024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.644827][ T29] audit: type=1326 audit(1762197372.738:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.668477][ T29] audit: type=1326 audit(1762197372.738:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.691908][ T29] audit: type=1326 audit(1762197372.738:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.715384][ T29] audit: type=1326 audit(1762197372.738:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.738865][ T29] audit: type=1326 audit(1762197372.738:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.762345][ T29] audit: type=1326 audit(1762197372.738:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.785758][ T29] audit: type=1326 audit(1762197372.738:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.809202][ T29] audit: type=1326 audit(1762197372.738:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 104.832779][ T29] audit: type=1326 audit(1762197372.738:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 105.118385][ T8245] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1134'. [ 105.327321][ T8257] lo speed is unknown, defaulting to 1000 [ 105.424021][ T8266] lo speed is unknown, defaulting to 1000 [ 105.429878][ T8266] lo speed is unknown, defaulting to 1000 [ 105.436347][ T8266] lo speed is unknown, defaulting to 1000 [ 105.450787][ T8266] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.467913][ T8266] lo speed is unknown, defaulting to 1000 [ 105.474742][ T8266] lo speed is unknown, defaulting to 1000 [ 105.481088][ T8266] lo speed is unknown, defaulting to 1000 [ 105.488703][ T8266] lo speed is unknown, defaulting to 1000 [ 105.502556][ T8266] lo speed is unknown, defaulting to 1000 [ 105.706496][ T8288] lo speed is unknown, defaulting to 1000 [ 105.739858][ T8288] lo speed is unknown, defaulting to 1000 [ 106.023734][ T8299] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1152'. [ 106.032883][ T8299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 106.456665][ T8331] syz.2.1163 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.874062][ T8353] siw: device registration error -23 [ 107.196006][ T8378] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 107.213361][ T8378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.719924][ T8420] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.775554][ T8431] __nla_validate_parse: 1 callbacks suppressed [ 107.775625][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 107.814334][ T8420] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.891772][ T8420] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.952011][ T8420] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.019400][ T5755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.032237][ T5755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.046958][ T5755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.062947][ T5755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.987763][ T8505] lo speed is unknown, defaulting to 1000 [ 109.016588][ T8505] lo speed is unknown, defaulting to 1000 [ 109.688438][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 109.688457][ T29] audit: type=1326 audit(1762197377.778:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800e4efc9 code=0x7ffc0000 [ 109.738932][ T29] audit: type=1326 audit(1762197377.778:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd800e4efc9 code=0x7ffc0000 [ 109.762435][ T29] audit: type=1326 audit(1762197377.778:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd800e4f003 code=0x7ffc0000 [ 109.785657][ T29] audit: type=1326 audit(1762197377.798:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd800e4da7f code=0x7ffc0000 [ 109.808902][ T29] audit: type=1326 audit(1762197377.818:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd800e4f057 code=0x7ffc0000 [ 109.832221][ T29] audit: type=1326 audit(1762197377.818:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd800e4d810 code=0x7ffc0000 [ 109.855740][ T29] audit: type=1326 audit(1762197377.818:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd800e4dc2a code=0x7ffc0000 [ 109.879024][ T29] audit: type=1326 audit(1762197377.828:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800e4efc9 code=0x7ffc0000 [ 109.902606][ T29] audit: type=1326 audit(1762197377.828:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd800e4efc9 code=0x7ffc0000 [ 109.926079][ T29] audit: type=1326 audit(1762197377.828:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.0.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd800e4efc9 code=0x7ffc0000 [ 109.964272][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 109.984013][ T8543] syz.3.1237: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 109.998545][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.3.1237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.998575][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.998587][ T8543] Call Trace: [ 109.998593][ T8543] [ 109.998601][ T8543] __dump_stack+0x1d/0x30 [ 109.998633][ T8543] dump_stack_lvl+0xe8/0x140 [ 109.998655][ T8543] dump_stack+0x15/0x1b [ 109.998671][ T8543] warn_alloc+0x12b/0x1a0 [ 109.998726][ T8543] ? __rcu_read_unlock+0x4f/0x70 [ 109.998775][ T8543] __vmalloc_node_range_noprof+0x9d/0xed0 [ 109.998812][ T8543] ? __futex_wait+0x1fa/0x260 [ 109.998836][ T8543] ? __pfx_futex_wake_mark+0x10/0x10 [ 109.998986][ T8543] ? __rcu_read_unlock+0x4f/0x70 [ 109.999012][ T8543] ? avc_has_perm_noaudit+0x1b1/0x200 [ 109.999111][ T8543] ? should_fail_ex+0x30/0x280 [ 109.999134][ T8543] ? xskq_create+0x36/0xe0 [ 109.999174][ T8543] vmalloc_user_noprof+0x7d/0xb0 [ 109.999266][ T8543] ? xskq_create+0x80/0xe0 [ 109.999286][ T8543] xskq_create+0x80/0xe0 [ 109.999363][ T8543] xsk_init_queue+0x95/0xf0 [ 109.999404][ T8543] xsk_setsockopt+0x3f5/0x640 [ 109.999427][ T8543] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.999449][ T8543] __sys_setsockopt+0x184/0x200 [ 109.999486][ T8543] __x64_sys_setsockopt+0x64/0x80 [ 109.999562][ T8543] x64_sys_call+0x20ec/0x3000 [ 109.999585][ T8543] do_syscall_64+0xd2/0x200 [ 109.999620][ T8543] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.999652][ T8543] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.999688][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.999708][ T8543] RIP: 0033:0x7fc3df82efc9 [ 109.999801][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.999821][ T8543] RSP: 002b:00007fc3de28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.999842][ T8543] RAX: ffffffffffffffda RBX: 00007fc3dfa85fa0 RCX: 00007fc3df82efc9 [ 109.999856][ T8543] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 109.999874][ T8543] RBP: 00007fc3df8b1f91 R08: 0000000000000004 R09: 0000000000000000 [ 109.999886][ T8543] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.999900][ T8543] R13: 00007fc3dfa86038 R14: 00007fc3dfa85fa0 R15: 00007ffe8d8370b8 [ 109.999920][ T8543] [ 109.999928][ T8543] Mem-Info: [ 110.226564][ T8543] active_anon:13857 inactive_anon:6 isolated_anon:0 [ 110.226564][ T8543] active_file:20537 inactive_file:2503 isolated_file:0 [ 110.226564][ T8543] unevictable:16364 dirty:84 writeback:0 [ 110.226564][ T8543] slab_reclaimable:3411 slab_unreclaimable:30013 [ 110.226564][ T8543] mapped:29083 shmem:3219 pagetables:1407 [ 110.226564][ T8543] sec_pagetables:0 bounce:0 [ 110.226564][ T8543] kernel_misc_reclaimable:0 [ 110.226564][ T8543] free:1722915 free_pcp:70586 free_cma:0 [ 110.271990][ T8543] Node 0 active_anon:55428kB inactive_anon:24kB active_file:82148kB inactive_file:10012kB unevictable:65456kB isolated(anon):0kB isolated(file):0kB mapped:116332kB dirty:336kB writeback:0kB shmem:12876kB kernel_stack:4736kB pagetables:5628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 110.299940][ T8543] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.329587][ T8543] lowmem_reserve[]: 0 2881 7859 7859 [ 110.334914][ T8543] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 110.335950][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 110.366250][ T8543] lowmem_reserve[]: 0 0 4978 4978 [ 110.366290][ T8543] Node 0 Normal free:3923328kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57632kB inactive_anon:24kB active_file:82148kB inactive_file:10012kB unevictable:65456kB writepending:336kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:278704kB local_pcp:141424kB free_cma:0kB [ 110.413923][ T8543] lowmem_reserve[]: 0 0 0 0 [ 110.418503][ T8543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.431239][ T8543] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 110.447422][ T8543] Node 0 Normal: 8*4kB (E) 7*8kB (E) 8*16kB (E) 8*32kB (ME) 40*64kB (UM) 98*128kB (UE) 53*256kB (UME) 130*512kB (UE) 74*1024kB (UME) 34*2048kB (UM) 896*4096kB (UM) = 3911128kB [ 110.465216][ T8543] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 110.474570][ T8543] 47278 total pagecache pages [ 110.479248][ T8543] 23 pages in swap cache [ 110.483578][ T8543] Free swap = 123072kB [ 110.487722][ T8543] Total swap = 124996kB [ 110.491869][ T8543] 2097051 pages RAM [ 110.495690][ T8543] 0 pages HighMem/MovableOnly [ 110.500373][ T8543] 81086 pages reserved [ 110.505559][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.547927][ T8550] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 110.566985][ T8552] lo speed is unknown, defaulting to 1000 [ 110.598194][ T8550] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 110.606397][ T8552] lo speed is unknown, defaulting to 1000 [ 110.640861][ T8550] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 110.791156][ T8550] netlink: 'syz.4.1241': attribute type 29 has an invalid length. [ 111.059188][ T8591] lo speed is unknown, defaulting to 1000 [ 111.108929][ T8592] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 111.125842][ T8591] lo speed is unknown, defaulting to 1000 [ 111.140392][ T8592] ipvlan0: entered allmulticast mode [ 111.145708][ T8592] veth0_vlan: entered allmulticast mode [ 111.171468][ T8592] team0: Device ipvlan0 failed to register rx_handler [ 111.311998][ T8594] blktrace: Concurrent blktraces are not allowed on loop0 [ 112.925198][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 113.716763][ T8687] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.751637][ T8687] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.802011][ T8687] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.872242][ T8687] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.938618][ T5755] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.950855][ T5733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.962940][ T5733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.973637][ T5733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.105001][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 114.291555][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 114.358449][ T8714] bond1 (unregistering): Released all slaves [ 114.641342][ T8743] netlink: '+}[@': attribute type 21 has an invalid length. [ 114.799897][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 114.799911][ T29] audit: type=1326 audit(1762197382.888:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 114.829520][ T29] audit: type=1326 audit(1762197382.888:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 114.860383][ T29] audit: type=1326 audit(1762197382.948:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 114.883844][ T29] audit: type=1326 audit(1762197382.948:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 114.907585][ T29] audit: type=1326 audit(1762197382.948:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87009efc9 code=0x7ffc0000 [ 114.934588][ T29] audit: type=1326 audit(1762197383.008:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 114.958008][ T29] audit: type=1326 audit(1762197383.008:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 114.981781][ T29] audit: type=1326 audit(1762197383.008:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 115.005281][ T29] audit: type=1326 audit(1762197383.008:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 115.028878][ T29] audit: type=1326 audit(1762197383.008:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 115.081945][ T8773] netlink: 'syz.2.1319': attribute type 29 has an invalid length. [ 115.105146][ T8773] netlink: 'syz.2.1319': attribute type 29 has an invalid length. [ 115.118554][ T8773] netlink: 'syz.2.1319': attribute type 29 has an invalid length. [ 115.668667][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 115.815368][ T8845] 9pnet_fd: Insufficient options for proto=fd [ 117.253369][ T8934] batadv_slave_1: entered promiscuous mode [ 117.263465][ T8934] batman_adv: batadv0: Adding interface: macvlan0 [ 117.269918][ T8934] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.330282][ T8934] batman_adv: batadv0: Interface activated: macvlan0 [ 117.909153][ T8959] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1389'. [ 117.933637][ T8959] sit0: entered promiscuous mode [ 117.942635][ T8959] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 117.950511][ T8959] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1389'. [ 118.144818][ T8986] lo speed is unknown, defaulting to 1000 [ 118.252386][ T8986] lo speed is unknown, defaulting to 1000 [ 118.340846][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 118.399500][ T9012] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 118.412840][ T9012] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 118.421286][ T9012] netlink: 'syz.4.1412': attribute type 29 has an invalid length. [ 118.655206][ T9051] netlink: 'syz.4.1427': attribute type 29 has an invalid length. [ 118.663864][ T9051] netlink: 'syz.4.1427': attribute type 29 has an invalid length. [ 118.878062][ T9065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9065 comm=syz.2.1433 [ 118.893979][ T9065] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 118.955281][ T9069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1434'. [ 118.992420][ T9071] lo speed is unknown, defaulting to 1000 [ 119.029973][ T9071] lo speed is unknown, defaulting to 1000 [ 119.346670][ T9092] 9pnet_fd: p9_fd_create_unix (9092): problem connecting socket: ./file0: -111 [ 119.402776][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 119.428306][ T5739] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.436578][ T5739] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.460142][ T5739] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.468449][ T5739] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.703941][ T9115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.712616][ T9115] bond0: (slave bond1): Enslaving as an active interface with an up link [ 119.886773][ T9129] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.013034][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 120.021987][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 120.169014][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1470'. [ 120.210565][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.217991][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.375917][ T9182] pim6reg: entered allmulticast mode [ 120.381880][ T9182] pim6reg: left allmulticast mode [ 120.552831][ T9189] validate_nla: 2 callbacks suppressed [ 120.552846][ T9189] netlink: 'syz.3.1476': attribute type 27 has an invalid length. [ 120.629077][ T9189] bridge1: left promiscuous mode [ 120.638108][ T9189] macvlan2: left promiscuous mode [ 120.645192][ T5733] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.653628][ T5733] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.702445][ T5733] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.710857][ T5733] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.740323][ T5733] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.748708][ T5733] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.778470][ T5733] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.786906][ T5733] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.963886][ T9229] 9pnet: Could not find request transport: fd rejected, failed to enable media [ 135.638041][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1871'. [ 135.735125][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 135.753016][T10304] netlink: 'syz.0.1878': attribute type 29 has an invalid length. [ 136.092982][T10339] lo speed is unknown, defaulting to 1000 [ 136.127780][T10339] lo speed is unknown, defaulting to 1000 [ 136.184478][T10344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10344 comm=syz.0.1889 [ 136.670374][T10362] lo speed is unknown, defaulting to 1000 [ 136.828329][T10362] lo speed is unknown, defaulting to 1000 [ 137.544325][T10406] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.592034][T10406] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.652393][T10406] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.714772][T10406] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.773358][ T5755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.790744][ T5755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.798984][ T5755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.816132][ T5755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.869531][T10434] tipc: Enabling of bearer rejected, failed to enable media [ 137.885275][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 138.131724][T10456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.182344][T10456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.210308][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 138.210325][ T29] audit: type=1326 audit(1762197406.268:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.240040][ T29] audit: type=1326 audit(1762197406.268:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.263531][ T29] audit: type=1326 audit(1762197406.268:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.287104][ T29] audit: type=1326 audit(1762197406.268:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.310468][ T29] audit: type=1326 audit(1762197406.268:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.333987][ T29] audit: type=1326 audit(1762197406.268:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.357465][ T29] audit: type=1326 audit(1762197406.268:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f998f7bf003 code=0x7ffc0000 [ 138.380854][ T29] audit: type=1326 audit(1762197406.278:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f998f7bf003 code=0x7ffc0000 [ 138.404172][ T29] audit: type=1326 audit(1762197406.288:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.427643][ T29] audit: type=1326 audit(1762197406.288:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998f7befc9 code=0x7ffc0000 [ 138.463903][T10456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.552047][T10456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.972377][T10473] validate_nla: 1 callbacks suppressed [ 138.972395][T10473] netlink: 'syz.3.1934': attribute type 29 has an invalid length. [ 139.406842][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 139.473067][T10496] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1941'. [ 139.551537][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 139.561517][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 139.581430][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 139.667151][T10512] lo speed is unknown, defaulting to 1000 [ 139.698742][T10512] lo speed is unknown, defaulting to 1000 [ 139.810330][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 139.939022][T10522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.115719][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1957'. [ 140.171696][T10538] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.243095][T10538] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.304722][T10538] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.372894][T10538] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.450134][ T5755] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.462989][ T5755] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.483927][ T5755] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.492681][ T5755] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.021482][T10556] lo speed is unknown, defaulting to 1000 [ 141.059255][T10556] lo speed is unknown, defaulting to 1000 [ 141.375431][T10559] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 141.503657][ T5752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.516804][ T5752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.535912][ T5752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.544301][ T5752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.564019][T10576] sctp: [Deprecated]: syz.2.1971 (pid 10576) Use of int in max_burst socket option. [ 141.564019][T10576] Use struct sctp_assoc_value instead [ 141.607447][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 142.159959][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 142.169788][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 142.183225][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1974'. [ 143.209124][T10667] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 143.501135][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 143.501151][ T29] audit: type=1326 audit(1762197411.588:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10694 comm="syz.3.2011" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3df82efc9 code=0x0 [ 143.556901][ T29] audit: type=1326 audit(1762197411.648:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.581498][ T29] audit: type=1326 audit(1762197411.648:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.606098][ T29] audit: type=1326 audit(1762197411.648:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.630537][ T29] audit: type=1326 audit(1762197411.648:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.655293][ T29] audit: type=1326 audit(1762197411.648:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.681809][ T29] audit: type=1326 audit(1762197411.648:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.706263][ T29] audit: type=1326 audit(1762197411.648:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.730669][ T29] audit: type=1326 audit(1762197411.648:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 143.754216][ T29] audit: type=1326 audit(1762197411.648:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.4.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa662b0efc9 code=0x7ffc0000 [ 144.660435][ T5755] batman_adv: batadv1: IGMP Querier appeared [ 144.666537][ T5755] batman_adv: batadv1: MLD Querier appeared [ 144.756625][T10772] veth0_to_team: entered promiscuous mode [ 144.762491][T10772] veth0_to_team: entered allmulticast mode [ 144.779791][T10772] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 144.790901][T10772] netlink: 'syz.2.2037': attribute type 10 has an invalid length. [ 144.801361][T10772] dummy0: left promiscuous mode [ 144.809002][T10772] netlink: 'syz.2.2037': attribute type 10 has an invalid length. [ 144.819122][T10772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.927894][T10781] ip6tnl0: entered promiscuous mode [ 144.934168][T10781] ip6tnl0: entered allmulticast mode [ 144.963029][T10792] __nla_validate_parse: 7 callbacks suppressed [ 144.963045][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 144.978092][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 144.988992][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'. [ 145.691456][T10808] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 145.769750][T10825] gre1: entered allmulticast mode [ 145.806174][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 145.815262][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 145.873529][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2064'. [ 146.086755][T10857] C: renamed from team_slave_0 [ 146.094612][T10857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2069'. [ 146.188800][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 146.262568][T10860] lo speed is unknown, defaulting to 1000 [ 146.289940][T10860] lo speed is unknown, defaulting to 1000 [ 146.854206][T10883] lo speed is unknown, defaulting to 1000 [ 146.895872][T10883] lo speed is unknown, defaulting to 1000 [ 146.993951][T10896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.116005][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 147.125888][T10909] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2086'. [ 147.631636][T10926] wireguard0: entered promiscuous mode [ 147.637130][T10926] wireguard0: entered allmulticast mode [ 147.943409][T10944] pimreg: entered allmulticast mode [ 147.976701][T10943] pimreg: left allmulticast mode [ 148.991428][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 148.991438][ T29] audit: type=1400 audit(1762197417.088:9189): avc: denied { nlmsg_read } for pid=10979 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 149.029198][ T29] audit: type=1107 audit(1762197417.088:9190): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='('!?߄"GD-ԡvvٳc@ORr`ׁd\' [ 149.050502][ T29] audit: type=1400 audit(1762197417.088:9191): avc: denied { ioctl } for pid=10979 comm="syz.3.2109" path="socket:[27377]" dev="sockfs" ino=27377 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.082969][ T29] audit: type=1326 audit(1762197417.148:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.107568][ T29] audit: type=1326 audit(1762197417.148:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.123419][T10990] bridge4: entered allmulticast mode [ 149.131332][ T29] audit: type=1326 audit(1762197417.148:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.138530][T10990] team0: Port device bridge4 added [ 149.159933][ T29] audit: type=1326 audit(1762197417.148:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.190005][ T29] audit: type=1326 audit(1762197417.148:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.214127][ T29] audit: type=1326 audit(1762197417.148:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.238333][ T29] audit: type=1326 audit(1762197417.148:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.3.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3df82efc9 code=0x7ffc0000 [ 149.357873][T11005] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 149.369415][T11005] bond2 (unregistering): Released all slaves [ 149.518229][T11011] 9pnet: Could not find request transport: fd [ 154.629809][T11376] __dump_stack+0x1d/0x30 [ 154.629901][T11376] dump_stack_lvl+0xe8/0x140 [ 154.629921][T11376] dump_stack+0x15/0x1b [ 154.629938][T11376] dump_header+0x81/0x220 [ 154.630034][T11376] oom_kill_process+0x342/0x400 [ 154.630071][T11376] out_of_memory+0x979/0xb80 [ 154.630188][T11376] try_charge_memcg+0x610/0xa10 [ 154.630230][T11376] obj_cgroup_charge_pages+0xa6/0x150 [ 154.630252][T11376] __memcg_kmem_charge_page+0x9f/0x170 [ 154.630276][T11376] __alloc_frozen_pages_noprof+0x188/0x360 [ 154.630352][T11376] alloc_pages_mpol+0xb3/0x260 [ 154.630404][T11376] alloc_pages_noprof+0x90/0x130 [ 154.630424][T11376] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 154.630472][T11376] __kvmalloc_node_noprof+0x483/0x670 [ 154.630521][T11376] ? ip_set_alloc+0x24/0x30 [ 154.630676][T11376] ? ip_set_alloc+0x24/0x30 [ 154.630712][T11376] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 154.630748][T11376] ip_set_alloc+0x24/0x30 [ 154.630779][T11376] hash_netiface_create+0x282/0x740 [ 154.630931][T11376] ? __pfx_hash_netiface_create+0x10/0x10 [ 154.631018][T11376] ip_set_create+0x3cc/0x970 [ 154.631050][T11376] ? __nla_parse+0x40/0x60 [ 154.631151][T11376] nfnetlink_rcv_msg+0x4c6/0x590 [ 154.631205][T11376] netlink_rcv_skb+0x123/0x220 [ 154.631240][T11376] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 154.631289][T11376] nfnetlink_rcv+0x167/0x16c0 [ 154.631401][T11376] ? __list_del_entry_valid_or_report+0x65/0x130 [ 154.631510][T11376] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 154.631550][T11376] ? should_fail_ex+0x30/0x280 [ 154.631571][T11376] ? selinux_nlmsg_lookup+0x99/0x890 [ 154.631602][T11376] ? __rcu_read_unlock+0x34/0x70 [ 154.631656][T11376] ? __netlink_lookup+0x266/0x2a0 [ 154.631682][T11376] netlink_unicast+0x5c0/0x690 [ 154.631718][T11376] netlink_sendmsg+0x58b/0x6b0 [ 154.631803][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.631824][T11376] __sock_sendmsg+0x145/0x180 [ 154.631921][T11376] ____sys_sendmsg+0x31e/0x4e0 [ 154.631961][T11376] ___sys_sendmsg+0x17b/0x1d0 [ 154.631990][T11376] __x64_sys_sendmsg+0xd4/0x160 [ 154.632087][T11376] x64_sys_call+0x191e/0x3000 [ 154.632109][T11376] do_syscall_64+0xd2/0x200 [ 154.632130][T11376] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.632209][T11376] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.632281][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.632364][T11376] RIP: 0033:0x7f998f7befc9 [ 154.632381][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.632399][T11376] RSP: 002b:00007f998e227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.632463][T11376] RAX: ffffffffffffffda RBX: 00007f998fa15fa0 RCX: 00007f998f7befc9 [ 154.632477][T11376] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 154.632491][T11376] RBP: 00007f998f841f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.632504][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.632517][T11376] R13: 00007f998fa16038 R14: 00007f998fa15fa0 R15: 00007fff0e826db8 [ 154.632538][T11376] [ 154.953862][T11376] memory: usage 307200kB, limit 307200kB, failcnt 447 [ 154.961386][T11376] memory+swap: usage 308164kB, limit 9007199254740988kB, failcnt 0 [ 154.969332][T11376] kmem: usage 230140kB, limit 9007199254740988kB, failcnt 0 [ 154.977507][T11376] Memory cgroup stats for /syz1: [ 154.978070][T11376] cache 78897152 [ 154.987763][T11376] rss 0 [ 154.991557][T11376] shmem 0 [ 154.994486][T11376] mapped_file 0 [ 154.998058][T11376] dirty 0 [ 155.001955][T11376] writeback 0 [ 155.005244][T11376] workingset_refault_anon 2442 [ 155.009994][T11376] workingset_refault_file 2127 [ 155.015811][T11376] swap 987136 [ 155.019101][T11376] swapcached 4096 [ 155.023718][T11376] pgpgin 224536 [ 155.027170][T11376] pgpgout 205271 [ 155.031345][T11376] pgfault 196932 [ 155.034867][T11376] pgmajfault 334 [ 155.038444][T11376] inactive_anon 0 [ 155.042656][T11376] active_anon 4096 [ 155.046700][T11376] inactive_file 0 [ 155.051058][T11376] active_file 8192 [ 155.054807][T11376] unevictable 78897152 [ 155.058947][T11376] hierarchical_memory_limit 314572800 [ 155.064982][T11376] hierarchical_memsw_limit 9223372036854771712 [ 155.072132][T11376] total_cache 78897152 [ 155.076264][T11376] total_rss 0 [ 155.079888][T11376] total_shmem 0 [ 155.084632][T11376] total_mapped_file 0 [ 155.088723][T11376] total_dirty 0 [ 155.093273][T11376] total_writeback 0 [ 155.097091][T11376] total_workingset_refault_anon 2442 [ 155.103525][T11376] total_workingset_refault_file 2127 [ 155.108970][T11376] total_swap 987136 [ 155.113698][T11376] total_swapcached 4096 [ 155.117851][T11376] total_pgpgin 224536 [ 155.122760][T11376] total_pgpgout 205271 [ 155.126834][T11376] total_pgfault 196932 [ 155.131945][T11376] total_pgmajfault 334 [ 155.136017][T11376] total_inactive_anon 0 [ 155.140161][T11376] total_active_anon 4096 [ 155.145394][T11376] total_inactive_file 0 [ 155.149594][T11376] total_active_file 8192 [ 155.154760][T11376] total_unevictable 78897152 [ 155.159370][T11376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2239,pid=11375,uid=0 [ 155.174231][T11376] Memory cgroup out of memory: Killed process 11375 (syz.1.2239) total-vm:93956kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 155.239963][T11442] lo speed is unknown, defaulting to 1000 [ 155.277549][T11442] lo speed is unknown, defaulting to 1000 [ 155.494307][T11470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.578634][T11476] bridge: RTM_NEWNEIGH with invalid ether address [ 155.831985][T11524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11524 comm=syz.1.2280 [ 155.881370][T11528] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.912664][T11528] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.972568][T11528] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.984805][T11534] __nla_validate_parse: 14 callbacks suppressed [ 155.984821][T11534] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2283'. [ 156.041590][T11528] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.068590][T11536] netlink: 'syz.0.2287': attribute type 39 has an invalid length. [ 156.087255][ T5720] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.098662][ T5720] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.109949][ T5733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.122944][ T5733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.154405][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'. [ 156.189054][T11543] netlink: 'syz.0.2290': attribute type 25 has an invalid length. [ 156.350746][T11551] x_tables: duplicate underflow at hook 1 [ 156.406469][T11556] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.558654][T11556] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.612006][T11556] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.653912][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2297'. [ 156.682154][T11556] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.875107][T11572] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2300'. [ 157.141918][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2308'. [ 157.152463][T11593] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2308'. [ 157.162036][T11593] 0{X: renamed from gretap0 (while UP) [ 157.171748][T11593] 0{X: entered allmulticast mode [ 157.178039][T11593] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 157.476142][T11621] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.547961][T11631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.602431][T11631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.651956][T11631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.703102][T11631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.753283][ T5752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.762384][ T5752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.773433][ T5752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.785163][ T5752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.905200][T11657] ================================================================== [ 157.913288][T11657] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 157.919950][T11657] [ 157.922253][T11657] write to 0xffff88811a54eb50 of 8 bytes by task 11656 on cpu 0: [ 157.929942][T11657] __dentry_kill+0x142/0x4b0 [ 157.934515][T11657] dput+0x5e/0xd0 [ 157.938188][T11657] step_into+0x58c/0x7f0 [ 157.942417][T11657] walk_component+0x162/0x220 [ 157.947082][T11657] path_lookupat+0xfe/0x2a0 [ 157.951610][T11657] do_o_path+0x45/0x130 [ 157.955776][T11657] path_openat+0x1df9/0x2170 [ 157.960368][T11657] do_filp_open+0x109/0x230 [ 157.964873][T11657] do_sys_openat2+0xa6/0x110 [ 157.969462][T11657] __x64_sys_openat+0xf2/0x120 [ 157.974225][T11657] x64_sys_call+0x2eab/0x3000 [ 157.978905][T11657] do_syscall_64+0xd2/0x200 [ 157.983397][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.989282][T11657] [ 157.991595][T11657] read to 0xffff88811a54eb50 of 8 bytes by task 11657 on cpu 1: [ 157.999207][T11657] fast_dput+0x5f/0x2c0 [ 158.003366][T11657] dput+0x24/0xd0 [ 158.006991][T11657] step_into+0x58c/0x7f0 [ 158.011229][T11657] walk_component+0x162/0x220 [ 158.015900][T11657] path_lookupat+0xfe/0x2a0 [ 158.020397][T11657] do_o_path+0x45/0x130 [ 158.024549][T11657] path_openat+0x1df9/0x2170 [ 158.029130][T11657] do_filp_open+0x109/0x230 [ 158.033622][T11657] do_sys_openat2+0xa6/0x110 [ 158.038201][T11657] __x64_sys_openat+0xf2/0x120 [ 158.042950][T11657] x64_sys_call+0x2eab/0x3000 [ 158.047616][T11657] do_syscall_64+0xd2/0x200 [ 158.052112][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.057992][T11657] [ 158.060295][T11657] value changed: 0xffff88823742d6c0 -> 0x0000000000000000 [ 158.067386][T11657] [ 158.069691][T11657] Reported by Kernel Concurrency Sanitizer on: [ 158.075827][T11657] CPU: 1 UID: 0 PID: 11657 Comm: syz.0.2328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.085630][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.095683][T11657] ================================================================== [ 159.315097][ T5720] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.325988][ T5720] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.337040][ T5733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.348310][ T5733] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0