last executing test programs: 4.658617026s ago: executing program 0 (id=517): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x7, 0x4e20, 0x4000, 0x2, 0x0, 0x20, 0x4, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x6, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x1}, [@algo_aead={0x4c, 0x12, {{'pcrypt(ccm-aes-ce)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000f40)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRESDEC=0x0, @ANYRES16=r5, @ANYRES8, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESDEC=r3], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') socket(0xa, 0x3, 0xff) preadv(r7, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x1, 0x1}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10088040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c4}, 0x4a041) 4.538106448s ago: executing program 0 (id=520): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1b0000019}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207a2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_complete(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) 4.492319158s ago: executing program 0 (id=522): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x8001, 0x5, 0xe9}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x4420}, {0xffffffffffffffff, 0x12}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x2500}, {0xffffffffffffffff, 0x2}], 0x7, 0x1) 4.453101909s ago: executing program 0 (id=523): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1200414, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8002}}, {@showassoc}, {@hide}, {@uid}, {}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 4.429634819s ago: executing program 0 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000001c00098008"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7a}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000012c0)=ANY=[], 0x0) 4.164584144s ago: executing program 0 (id=528): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r4, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000340)={'veth1_to_hsr\x00'}) write$selinux_context(r10, &(0x7f0000000300)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e002100000000000000000007"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x1}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcb, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0), &(0x7f0000000380)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) (async) io_uring_enter(r4, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000340)={'veth1_to_hsr\x00'}) (async) write$selinux_context(r10, &(0x7f0000000300)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e002100000000000000000007"], 0x28}}, 0x0) (async) 3.242244478s ago: executing program 4 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000900)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f00000003c0)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffc08e41d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe7520000000000000000000000000000000b00000000000000e052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be769fd383e91a80bc5ae6a2623d4e9e700744f66614535805b84e14d7d27bfd2e0bfcfa7c17bd55cb59b8d003137c", 0xcf}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060", 0x3b}], 0x4}}], 0x1, 0xc0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0xffffffffffffff16, 0x10008095, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='net/netlink\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 3.15965965s ago: executing program 2 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000020a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 3.15306471s ago: executing program 4 (id=547): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r2 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) sync_file_range(r2, 0x6, 0x10000000000000, 0x2) 3.091300391s ago: executing program 2 (id=550): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 2.744684636s ago: executing program 4 (id=554): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r6) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001cc0)='N', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x180011) 2.722090486s ago: executing program 2 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 2.587835848s ago: executing program 3 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) getrlimit(0xa, &(0x7f0000000340)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4004000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000010180)='ext4\x00', &(0x7f0000010140)='./file0\x00', 0x2008000, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1002}}, {@nodiscard}, {@discard}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000200, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r9, 0x1) flock(r9, 0x2) 2.458566361s ago: executing program 2 (id=558): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000039cd756dbd6214b5f8eeff4c46901f7d7c5164a8c2a31a2bc4b2152f099be2d129e8ab0bc3b588da26646641af571f80c04ac217cc3f0532b13710cc735d2572c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x50a, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xd}, 0x9aa3, 0x10002, 0xfffffffd, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.164144975s ago: executing program 2 (id=559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_op_set_cto\x00', r0, 0x0, 0x81}, 0x18) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c000000100003040000000000dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) r10 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001580), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.750612912s ago: executing program 3 (id=560): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ufshcd_clk_scaling\x00', r0, 0x0, 0x2}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.749355852s ago: executing program 4 (id=561): getpgrp(0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x8, &(0x7f0000004c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket(0x25, 0x1, 0x0) sendmsg$inet6(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="c6", 0x1}], 0x1}, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)={0xc98, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc7aa}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1000, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0xc4c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x7, 0x7, 0x2, 0x4, 0x2, 0xb7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x1, 0x9b56, 0x1, 0x8, 0xa, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x8001, 0x5a, 0x8, 0x8, 0xe, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x36, 0x23, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x1, 0x6, 0x101, 0x7f, 0x5, 0x7, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x6, 0x8, 0x0, 0x2, 0x3965, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x200, 0x4, 0x0, 0xce, 0xe, 0xa00d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x5, 0x4, 0x4, 0xfff7, 0xb15, 0x200, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x5, 0x1, 0xfc2e, 0x6, 0x1ff, 0x5c9f, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xf, 0xa, 0x2, 0x2, 0xe, 0x800, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8, 0x2801, 0x5, 0x100, 0x1, 0x8, 0xfff7, 0x6]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfe9, 0x38, 0x7, 0x3, 0x5, 0x69, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x55fb, 0x1, 0x2, 0xb, 0x9, 0x1, 0x2, 0x1000]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x7}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x4}, {0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x1e}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x9, 0x3, 0x2, 0xb, 0x12, 0x4, 0x1b, 0x12, 0x18, 0x60, 0x6c, 0x4]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xc, 0x2, 0x48, 0x36, 0x6, 0x15, 0x4, 0xc3, 0x5, 0xb, 0x9, 0x1, 0x12, 0xc, 0x2, 0x5]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x5, 0x1, 0x16, 0x16, 0x24, 0x60, 0x24, 0x1b, 0xb, 0x140491fd3e33e778, 0x30, 0x1b, 0x36, 0x16, 0x6, 0x3, 0x4, 0x18, 0x6, 0x16, 0xc, 0x1a, 0x12, 0x2a, 0x24, 0x9, 0x2, 0x12, 0x1b, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x2, 0x16, 0x0, 0x30, 0x1d, 0x12, 0x48, 0xc, 0x4, 0x6c, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfe, 0x8001, 0x5, 0x8000, 0x4, 0x3ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x36, 0x2, 0x1, 0xc, 0x3, 0xb, 0x6, 0x1, 0x1b, 0x4, 0x5, 0x60, 0x1, 0xb, 0xda6dfb5a28536d9b, 0x33, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x374, 0x11d, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x6c, 0x30, 0x44, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x6, 0x3, 0x4, 0x800, 0x4, 0xb000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x3, 0x4, 0x48, 0x6, 0x3, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xae7, 0x6, 0x5, 0xfffd, 0x7, 0xf33d, 0x3, 0xbd]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x2, 0x5, 0x3, 0x1, 0x1b, 0x4, 0x18, 0x60, 0x30, 0x3, 0x1, 0x24, 0x1b, 0x24, 0x3, 0x60, 0x27, 0x15, 0x6, 0x30, 0x1b, 0x48, 0x2, 0x6, 0x6, 0x2, 0x12, 0x5, 0x1b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x7, 0x6, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8000, 0x695f, 0x7, 0xfffe, 0xfcc, 0x8001, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x9}, {0x6, 0x7}, {}, {0x0, 0x8}, {0x2}, {0x1, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x6}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1ff, 0x5, 0x200, 0x6, 0x2, 0x2, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1ff, 0x0, 0xfa, 0x7fff, 0x6, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x6}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x5, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x5, 0xa}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x4, 0x9}, {0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x4}, {0x6}, {0x5, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x9, 0x1, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x7, 0x3, 0x7, 0x3ff, 0x3, 0xfffd]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x7}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0x4}, {0x5}, {0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x8}, {0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x2, 0x3}, {}, {0x5, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0xfe01, 0x5, 0x8001, 0x7, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf2}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x134, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x1, 0x12, 0x24, 0x5, 0x1b, 0x6c, 0x16, 0x6, 0x30, 0x1, 0x2, 0x1, 0x79332f8be0f3159c, 0xb, 0x36, 0x12, 0x48, 0xb, 0x1b, 0x6c, 0x5, 0x16, 0x2, 0x6c, 0x5, 0x48, 0x2, 0x2, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x3}, {0x1}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x2}, {0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x4}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x8}, {0x7}, {0x4, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x6, 0xa}, {0x2, 0x3}, {0x5, 0x8}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x273b7297}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7df}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x2, 0x5, 0x7812, 0x7fff, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc92f, 0x4d14, 0xffff, 0x2, 0x200, 0x81, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x7, 0x9, 0x69d, 0x0, 0xbeb, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1220}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x7, 0x67e7, 0x8000, 0x500, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff1, 0x350, 0x1, 0x7f, 0x5, 0x400, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x60, 0x12, 0x18, 0xb, 0x1b, 0x60, 0x16, 0xc, 0x2, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0x84b3, 0x1, 0x0, 0x0, 0x800, 0xff]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x60, 0x6, 0x24, 0x36, 0x1, 0x9, 0x9, 0x30, 0x12, 0x24, 0x30, 0x6, 0x30, 0x24, 0x18, 0x2, 0x12, 0x5e, 0x16, 0x36]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x3, 0x1, 0x4, 0x3, 0xc, 0x4, 0x36, 0x6]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x5}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x4}, {0x2}, {0x1, 0x8}, {0x3}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x13}, {0x6, 0x8}, {0x3, 0x4}, {0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x2, 0x4}, {0x7}, {0x7, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x194, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe6da, 0x53, 0x12c7, 0x3, 0x38, 0x2, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x934, 0x7, 0x200, 0x8, 0xd0bd, 0x101, 0xb313]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x8}, {0x6, 0x2}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x5, 0x4}, {0x1, 0x8}, {0x7}, {0x1, 0x5}, {0x5, 0x9}, {0x6}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x7}, {0x7, 0x4}, {0x1, 0x1}, {0x2}, {0x1}, {0x5, 0xa}, {0x5, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0x4}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0xa}, {0x1, 0x4}, {0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x1}, {0x2}, {0x2, 0x6}, {0x5}, {0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x101, 0x1, 0x101, 0x0, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xacf7, 0x101, 0x2, 0x4, 0x2, 0x8000, 0x23f8]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x2, 0x1f}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x6}, {0x6, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6951, 0x2, 0x5, 0x4, 0x345, 0xae3, 0x5]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x1}, {}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x6}, {0x1}, {0x5, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x6}, {0x4}, {0x2}, {0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x2}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9c, 0x200, 0x7, 0xa7, 0x2, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0xc98}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xae}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x1, 0x1, 0x8, 0x0, 0x20, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x4, 0x0, 0x4, 0x50, 0xfffffffffffffff8}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000005c0)='GPL\x00', 0x16b98630, 0x2e, &(0x7f0000000600)=""/46, 0x40f00, 0x24, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[r0], &(0x7f0000000680)=[{0x4, 0x4, 0xb, 0x9}, {0x0, 0x1, 0x3}, {0x4, 0x3, 0x5, 0x8}, {0x2, 0x5, 0xa, 0x3}, {0x3, 0x2, 0xf, 0x8}, {0x4, 0x5, 0x8, 0xa}, {0x2, 0x4, 0x9, 0x2}, {0x3, 0x1, 0x8, 0x5}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x40047451, &(0x7f0000000180)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r12 = dup3(r8, 0xffffffffffffffff, 0x80000) sendmsg$nl_generic(r12, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002600)={0x1374, 0x1e, 0x2, 0x70bd2a, 0x25dfdbfe, {0x15}, [@generic="54bb61a652ac85cd2327f5b5174aa79cacf1d574c18e36756f339cc419181a595c4e7c14068b579d260117cbd8754b15f80514a2f65546e99f74a330f9041720bb3c4aaa40833f5e22270b88a44065acbea476a660b4203d8425c361879764fa478f5c57b7807e193e54c7d6c6f32cbcf53bae5edfddafe801707ca17e14b7d2277b6054feed76956885e8450f6ea04d6af285d708395fb69a9c474c463ee61ec35f267b0e5b75038131e4a4c4c63a862b6c71ad5820cd227a35b0cba343cad4bcd4eb251fdd189ff1223d66fe118f91c36aeeb8", @nested={0xc, 0xd7, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x4, 0xc2}]}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="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", @generic="887b74408be540223fa67bf2bb32542b4aa4ca74826d835004d14e0573ea092785041ce51cd07e8d3ddce8f25fcddeeeaea4b0b7bffec670201000749a92375d2ca981d6f3d39c45f5e4d0c8ace6d4c85cc8abded8a9acb1170e5ea559ce0a1b4d639e9887ed114431264de3ac6215dd4f251cc6bbd051e8a08ccb8781bcfc9b200f1cec5acd10cdaa0d1d62f27c159f9ca9ffb604f32f4841f12a0d80c9c78cda7bed2b5dc1674c92f37ebd3249d941", @generic="e71005f449dd3c414919c24d4b2632f8d1aeb91e3e808e4481b9c373952a1c2d2c1d37f622bbdc36136c0d88ee6eae61abca6118ad2402d453b03f485ccf2f440ef57eeea9c8602550e57003c4474a1e3d2e3da0391372a274088e411825abe8c5b5642d0c4273f19c9a268a9f2fdc41c26f6dca00c0b163aa202178ce52e5e6440cb8a90f38e5aa64b3afcf43f9c28b0e396473c751d0b1026a2196da1ae76ce6e05aa07eeca7d80b7c66467af09392de7c09576fe9f66794c806e40e15595da55a", @generic="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"]}, 0x1374}, 0x1, 0x0, 0x0, 0x4000081}, 0x80c0) close_range(r11, 0xffffffffffffffff, 0x0) 1.567814905s ago: executing program 3 (id=564): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socket$packet(0x11, 0x2, 0x300) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x1) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x782575a, 0x501880) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001200), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) close(r3) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r7, 0x0, 0xfffffeea) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x80aa, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noload}, {@dax_inode}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x463, &(0x7f0000000740)="$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") clock_adjtime(0x5, &(0x7f0000000580)={0x0, 0x6, 0x1, 0xf93, 0x1, 0x5, 0xc, 0x7ff, 0x5, 0x5, 0x8, 0x0, 0x6, 0x9, 0x1, 0x5c, 0x3, 0x6, 0x0, 0x8000000000000001, 0x7fff, 0xffe, 0x0, 0x8001, 0xc960, 0x9}) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.122535542s ago: executing program 4 (id=567): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0x9c3fa077fa966179, 0xa, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 988.467314ms ago: executing program 1 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x30) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="4119a333934a6c66d0596cc88c2354912ea4670b8b520bf373f7bdc7070b000a57980419954b0488cf300a39d0a80e000000da3564141f341af39f3f48633f196b316f0fc5ef7cde3a8181805abaf259e27780025115e85512c3862097b47d42a8b65ad8e86e985b8f783acb01cee39a107bd20600799784c54e50898a36291d9da700af14677252a433b4c6b0f0a59624d815b63088805169497c9314ebe08d70b5b567ab6a03dc84d6304cb9f8408a92bdd08652842ccb09677e107122be34fbba583406b93fed528ea3525d0bd8704475", @ANYRES16, @ANYBLOB="2000c01200100100100000000000070000000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r6, r5, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000340)={0x81, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="81000000000000000000000000000000d6c648cca89f51fb09e0b95b5bb2323a33943fd5946abc7162c25a1504cdc3763cebd18b12714c00dcb626587c5de1f2a4b0bbfae9625d3ff9000000"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r3}, 0x8) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xcf43, 0x0, 0x2, 0x10, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x9de5, 0x1, 0x15, 0x1b, 0x20, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f8ffffffb7030000080000efb70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) 868.001426ms ago: executing program 1 (id=569): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000002b110000a40b66fd84273e5b23", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) 867.532976ms ago: executing program 1 (id=570): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1b0000019}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207a2500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) 862.479236ms ago: executing program 4 (id=571): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r6) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r6) r7 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001cc0)='N', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r7, 0x180011) 740.883238ms ago: executing program 1 (id=572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$selinux_user(r7, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="3662b3fb809e95a7d48859a127d1a917f4", @ANYRES8=r6, @ANYRES64=r6, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESOCT=r13, @ANYRESOCT=r12], 0x27) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r14, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r14, 0x84, 0x79, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 304.079365ms ago: executing program 1 (id=573): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r0, 0x4010}, {r0, 0x4420}, {r0, 0x12}, {0xffffffffffffffff, 0x1000}, {r0, 0x2500}, {r0, 0x2}], 0x7, 0x1) 288.792735ms ago: executing program 3 (id=574): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 156.952287ms ago: executing program 1 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) tee(r5, r7, 0xfffffffffffffc01, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 0s ago: executing program 2 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @opaque="3e953c6c540c1e29bb"}}}}}, 0x0) kernel console output (not intermixed with test programs): 49.892142][ T3564] EXT4-fs (loop3): free_blocks=0 [ 49.897690][ T3564] EXT4-fs (loop3): dirty_blocks=0 [ 49.903643][ T3564] EXT4-fs (loop3): Block reservation details [ 49.910589][ T3564] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 49.931488][ T3570] SELinux: failed to load policy [ 49.972489][ T3572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 49.984196][ T3572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 50.034831][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 50.113462][ T3577] loop4: detected capacity change from 0 to 2048 [ 50.540516][ T3613] loop1: detected capacity change from 0 to 1024 [ 50.561009][ T3613] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.571140][ T3564] syz.3.25 (3564) used greatest stack depth: 9808 bytes left [ 50.581179][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.599779][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 50.609442][ T3613] netlink: 'syz.1.38': attribute type 5 has an invalid length. [ 50.618325][ T3613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.38'. [ 50.642779][ T3613] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52936 - 0 [ 50.652835][ T3613] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52936 - 0 [ 50.663157][ T3613] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52936 - 0 [ 50.672473][ T3613] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52936 - 0 [ 50.682109][ T3613] geneve2: entered promiscuous mode [ 50.687762][ T3613] geneve2: entered allmulticast mode [ 50.705018][ T3617] loop3: detected capacity change from 0 to 2048 [ 50.724850][ T3617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.753368][ T3615] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 9: comm syz.3.40: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 50.775312][ T3615] EXT4-fs (loop3): Remounting filesystem read-only [ 50.799483][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.882235][ T3622] loop3: detected capacity change from 0 to 2048 [ 50.961629][ T3628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.072395][ T3628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.142130][ T3628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.192405][ T3628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.286846][ T3628] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.316058][ T3628] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.334092][ T3628] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.347694][ T3628] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.469323][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 51.532968][ T3649] netlink: 'syz.2.55': attribute type 7 has an invalid length. [ 51.584107][ T3659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.584149][ T3659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52936 - 0 [ 51.617990][ T3657] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 51.628571][ T3657] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 51.676269][ T3659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.688679][ T3659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52936 - 0 [ 51.733368][ T3659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.748455][ T3659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52936 - 0 [ 51.822365][ T3659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.835070][ T3659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52936 - 0 [ 51.885114][ T3659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 52936 - 0 [ 51.894787][ T3659] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.908217][ T3659] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 52936 - 0 [ 51.918063][ T3659] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.931475][ T3659] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 52936 - 0 [ 51.942357][ T3659] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.955411][ T3659] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 52936 - 0 [ 51.965577][ T3659] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 52.068994][ T3669] loop1: detected capacity change from 0 to 128 [ 52.082853][ T3669] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 52.093931][ T3669] FAT-fs (loop1): Filesystem has been set read-only [ 52.103795][ T3669] syz.1.62: attempt to access beyond end of device [ 52.103795][ T3669] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 52.121507][ T3669] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 52.131055][ T3669] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 52.141069][ T3669] syz.1.62: attempt to access beyond end of device [ 52.141069][ T3669] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 52.169222][ T3669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.178651][ T3669] IPv6: NLM_F_CREATE should be set when creating new route [ 52.188295][ T3669] IPv6: NLM_F_CREATE should be set when creating new route [ 52.351397][ T3676] Zero length message leads to an empty skb [ 52.414863][ T3688] FAULT_INJECTION: forcing a failure. [ 52.414863][ T3688] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.432649][ T3688] CPU: 0 UID: 0 PID: 3688 Comm: syz.0.67 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 52.432689][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.432706][ T3688] Call Trace: [ 52.432716][ T3688] [ 52.432727][ T3688] __dump_stack+0x1d/0x30 [ 52.432801][ T3688] dump_stack_lvl+0xe8/0x140 [ 52.432830][ T3688] dump_stack+0x15/0x1b [ 52.432854][ T3688] should_fail_ex+0x265/0x280 [ 52.432897][ T3688] should_fail+0xb/0x20 [ 52.432977][ T3688] should_fail_usercopy+0x1a/0x20 [ 52.433079][ T3688] _copy_to_user+0x20/0xa0 [ 52.433107][ T3688] simple_read_from_buffer+0xb5/0x130 [ 52.433222][ T3688] proc_fail_nth_read+0x100/0x140 [ 52.433275][ T3688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.433327][ T3688] vfs_read+0x1a0/0x6f0 [ 52.433429][ T3688] ? __sys_setsockopt+0x18e/0x200 [ 52.433553][ T3688] ? __rcu_read_unlock+0x4f/0x70 [ 52.433585][ T3688] ? __fget_files+0x184/0x1c0 [ 52.433614][ T3688] ksys_read+0xda/0x1a0 [ 52.433685][ T3688] __x64_sys_read+0x40/0x50 [ 52.433767][ T3688] x64_sys_call+0x2d77/0x2fb0 [ 52.433794][ T3688] do_syscall_64+0xd2/0x200 [ 52.433815][ T3688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.433878][ T3688] ? clear_bhb_loop+0x40/0x90 [ 52.433901][ T3688] ? clear_bhb_loop+0x40/0x90 [ 52.433948][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.433976][ T3688] RIP: 0033:0x7fc93812d3bc [ 52.433993][ T3688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.434016][ T3688] RSP: 002b:00007fc93678f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.434039][ T3688] RAX: ffffffffffffffda RBX: 00007fc938355fa0 RCX: 00007fc93812d3bc [ 52.434123][ T3688] RDX: 000000000000000f RSI: 00007fc93678f0a0 RDI: 0000000000000007 [ 52.434136][ T3688] RBP: 00007fc93678f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.434153][ T3688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.434171][ T3688] R13: 0000000000000000 R14: 00007fc938355fa0 R15: 00007ffec504e768 [ 52.434198][ T3688] [ 52.733281][ T3690] netlink: 'syz.1.68': attribute type 7 has an invalid length. [ 52.749504][ T30] kauditd_printk_skb: 197 callbacks suppressed [ 52.749526][ T30] audit: type=1400 audit(1752966893.980:288): avc: denied { write } for pid=3691 comm="syz.0.69" path="socket:[4641]" dev="sockfs" ino=4641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.816972][ T3697] loop1: detected capacity change from 0 to 2048 [ 52.863777][ T3702] loop2: detected capacity change from 0 to 128 [ 52.897961][ T3702] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.908421][ T3702] FAT-fs (loop2): Filesystem has been set read-only [ 52.925168][ T3702] syz.2.73: attempt to access beyond end of device [ 52.925168][ T3702] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 52.968188][ T30] audit: type=1400 audit(1752966894.210:289): avc: denied { bind } for pid=3703 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.004234][ T3702] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.013972][ T3702] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.031263][ T3702] syz.2.73: attempt to access beyond end of device [ 53.031263][ T3702] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.050376][ T30] audit: type=1400 audit(1752966894.220:290): avc: denied { name_bind } for pid=3703 comm="syz.3.74" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.076787][ T30] audit: type=1400 audit(1752966894.220:291): avc: denied { node_bind } for pid=3703 comm="syz.3.74" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 53.103995][ T30] audit: type=1400 audit(1752966894.220:292): avc: denied { write } for pid=3703 comm="syz.3.74" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.135496][ T3702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.144574][ T3702] IPv6: NLM_F_CREATE should be set when creating new route [ 53.152811][ T3702] IPv6: NLM_F_CREATE should be set when creating new route [ 53.174197][ T3714] random: crng reseeded on system resumption [ 53.181601][ T3712] loop0: detected capacity change from 0 to 512 [ 53.189631][ T30] audit: type=1400 audit(1752966894.420:293): avc: denied { read append } for pid=3711 comm="syz.0.78" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.216246][ T30] audit: type=1400 audit(1752966894.420:294): avc: denied { ioctl open } for pid=3711 comm="syz.0.78" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.230398][ T3712] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.243886][ T30] audit: type=1400 audit(1752966894.430:295): avc: denied { write } for pid=3713 comm="syz.1.77" name="tcp" dev="proc" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.290703][ T3712] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 53.295469][ T30] audit: type=1400 audit(1752966894.540:296): avc: denied { write } for pid=3718 comm="syz.1.79" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.329981][ T3721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.344029][ T3721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.354964][ T30] audit: type=1326 audit(1752966894.600:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 53.387748][ T3721] loop1: detected capacity change from 0 to 164 [ 53.495043][ T3727] netlink: 'syz.4.82': attribute type 7 has an invalid length. [ 53.503751][ T3727] __nla_validate_parse: 4 callbacks suppressed [ 53.503764][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 53.586017][ T3414] Process accounting resumed [ 53.614749][ T3736] netlink: 104 bytes leftover after parsing attributes in process `syz.4.86'. [ 53.630362][ T3736] pim6reg1: entered promiscuous mode [ 53.636672][ T3736] pim6reg1: entered allmulticast mode [ 53.691113][ T3736] netlink: 332 bytes leftover after parsing attributes in process `syz.4.86'. [ 53.701374][ T3736] netlink: 'syz.4.86': attribute type 9 has an invalid length. [ 53.711056][ T3736] netlink: 108 bytes leftover after parsing attributes in process `syz.4.86'. [ 53.721299][ T3736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.86'. [ 53.760792][ T3738] loop4: detected capacity change from 0 to 512 [ 53.780864][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.796561][ T3738] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.819067][ T3738] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.88: corrupted inode contents [ 53.831464][ T3743] netlink: 80 bytes leftover after parsing attributes in process `syz.3.87'. [ 53.842996][ T3738] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.88: mark_inode_dirty error [ 53.894940][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 53.905630][ T3746] capability: warning: `syz.4.88' uses 32-bit capabilities (legacy support in use) [ 53.925698][ T3738] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.88: corrupted inode contents [ 53.968246][ T3738] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.88: mark_inode_dirty error [ 54.022557][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.109908][ T3757] netlink: 'syz.4.93': attribute type 7 has an invalid length. [ 54.118831][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 54.153121][ T3763] pimreg: entered allmulticast mode [ 54.190805][ T3763] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 54.201805][ T3765] process 'syz.4.97' launched './file0' with NULL argv: empty string added [ 54.202957][ T3763] bridge0: port 3(dummy0) entered disabled state [ 54.221127][ T3763] dummy0: left allmulticast mode [ 54.227240][ T3763] dummy0: left promiscuous mode [ 54.232829][ T3763] bridge0: port 3(dummy0) entered disabled state [ 54.241149][ T3765] loop4: detected capacity change from 0 to 1024 [ 54.251887][ T3765] EXT4-fs: inline encryption not supported [ 54.258394][ T3765] EXT4-fs: Ignoring removed i_version option [ 54.267657][ T3765] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.282937][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 54.283249][ T3765] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.97: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.293089][ T3773] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 54.320472][ T3763] team0: Port device dummy0 added [ 54.331129][ T3774] loop1: detected capacity change from 0 to 512 [ 54.334723][ T3765] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.97: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.339060][ T3774] EXT4-fs: inline encryption not supported [ 54.359549][ T3763] pimreg: left allmulticast mode [ 54.370887][ T3774] EXT4-fs: Invalid commit interval 1917296015, must be smaller than 21474836 [ 54.388134][ T3767] vlan2: entered allmulticast mode [ 54.395513][ T3765] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.97: Failed to acquire dquot type 0 [ 54.413872][ T3765] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 54.430226][ T3770] loop2: detected capacity change from 0 to 512 [ 54.435699][ T3765] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.97: mark_inode_dirty error [ 54.443854][ T3770] ext4: Unknown parameter 'smackfshat' [ 54.460503][ T3765] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 54.471767][ T3765] EXT4-fs (loop4): 1 orphan inode deleted [ 54.472758][ T3773] team0: Port device dummy0 removed [ 54.478218][ T3765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.487451][ T3773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.507981][ T13] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.530963][ T13] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 54.563871][ T3765] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.589300][ T3765] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.97: Invalid inode table block 1 in block_group 0 [ 54.611875][ T3765] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 54.631010][ T3765] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.97: mark_inode_dirty error [ 54.666111][ T3785] loop2: detected capacity change from 0 to 512 [ 54.674215][ T3785] EXT4-fs: Ignoring removed bh option [ 54.674232][ T3765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.97'. [ 54.697750][ T3785] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 54.716932][ T3765] loop4: detected capacity change from 0 to 512 [ 54.727468][ T3299] udevd[3299]: incorrect ext4 checksum on /dev/loop2 [ 54.745113][ T3299] udevd[3299]: incorrect ext4 checksum on /dev/loop2 [ 54.765643][ T3765] EXT4-fs: Ignoring removed orlov option [ 54.841866][ T3765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.892876][ T3765] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.925998][ T3765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.97: bg 0: block 248: padding at end of block bitmap is not set [ 54.954236][ T3765] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.97: Failed to acquire dquot type 1 [ 54.969955][ T3765] EXT4-fs (loop4): 1 truncate cleaned up [ 54.976851][ T3765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.994982][ T3765] ext4: Unknown parameter ' ]|~&bo!F>S6V䟋Ye8}:St' [ 55.040624][ T3797] netlink: 'syz.0.107': attribute type 7 has an invalid length. [ 55.056235][ T3765] syz.4.97 (3765) used greatest stack depth: 9304 bytes left [ 55.093180][ T3799] loop1: detected capacity change from 0 to 1024 [ 55.111974][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.128542][ T3799] EXT4-fs: Ignoring removed nobh option [ 55.135264][ T3799] EXT4-fs: Ignoring removed bh option [ 55.202588][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.393058][ T3806] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.514273][ T3806] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.660398][ T3806] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.792119][ T3806] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.813969][ T3810] loop4: detected capacity change from 0 to 2048 [ 55.852836][ T3799] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 55.903842][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 55.936338][ T3806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.991780][ T3806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.008274][ T3806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.023528][ T3806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.062112][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.240920][ T3825] loop3: detected capacity change from 0 to 1024 [ 56.330958][ T3825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.731279][ T3831] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 56.816144][ T3838] loop1: detected capacity change from 0 to 1024 [ 56.882456][ T3840] FAULT_INJECTION: forcing a failure. [ 56.882456][ T3840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.898690][ T3840] CPU: 1 UID: 0 PID: 3840 Comm: syz.4.120 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 56.898787][ T3840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.898803][ T3840] Call Trace: [ 56.898810][ T3840] [ 56.898819][ T3840] __dump_stack+0x1d/0x30 [ 56.898841][ T3840] dump_stack_lvl+0xe8/0x140 [ 56.898861][ T3840] dump_stack+0x15/0x1b [ 56.898880][ T3840] should_fail_ex+0x265/0x280 [ 56.899000][ T3840] should_fail+0xb/0x20 [ 56.899032][ T3840] should_fail_usercopy+0x1a/0x20 [ 56.899142][ T3840] _copy_from_iter+0xcf/0xe40 [ 56.899178][ T3840] ? alloc_pages_mpol+0x201/0x250 [ 56.899223][ T3840] copy_page_from_iter+0x178/0x2a0 [ 56.899355][ T3840] tun_get_user+0x5f0/0x2500 [ 56.899396][ T3840] ? ref_tracker_alloc+0x1f2/0x2f0 [ 56.899441][ T3840] tun_chr_write_iter+0x15e/0x210 [ 56.899510][ T3840] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 56.899538][ T3840] vfs_write+0x4a0/0x8e0 [ 56.899576][ T3840] ksys_write+0xda/0x1a0 [ 56.899651][ T3840] __x64_sys_write+0x40/0x50 [ 56.899775][ T3840] x64_sys_call+0x2cdd/0x2fb0 [ 56.899798][ T3840] do_syscall_64+0xd2/0x200 [ 56.899821][ T3840] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.899862][ T3840] ? clear_bhb_loop+0x40/0x90 [ 56.899884][ T3840] ? clear_bhb_loop+0x40/0x90 [ 56.899912][ T3840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.900005][ T3840] RIP: 0033:0x7f61c983d45f [ 56.900021][ T3840] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 56.900039][ T3840] RSP: 002b:00007f61c7e9f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 56.900059][ T3840] RAX: ffffffffffffffda RBX: 00007f61c9a65fa0 RCX: 00007f61c983d45f [ 56.900072][ T3840] RDX: 000000000000004e RSI: 0000200000001340 RDI: 00000000000000c8 [ 56.900084][ T3840] RBP: 00007f61c7e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.900096][ T3840] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 56.900108][ T3840] R13: 0000000000000000 R14: 00007f61c9a65fa0 R15: 00007ffc3b8235f8 [ 56.900255][ T3840] [ 57.184695][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.248490][ T3845] netlink: 'syz.0.121': attribute type 7 has an invalid length. [ 57.577950][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.771287][ T3867] loop2: detected capacity change from 0 to 2048 [ 57.798294][ T3869] capability: warning: `syz.0.130' uses deprecated v2 capabilities in a way that may be insecure [ 57.814438][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 57.814455][ T30] audit: type=1400 audit(1752966899.060:463): avc: denied { write } for pid=3868 comm="syz.0.130" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.872529][ T30] audit: type=1400 audit(1752966899.100:464): avc: denied { ioctl } for pid=3868 comm="syz.0.130" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.917651][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.979823][ T30] audit: type=1326 audit(1752966899.230:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.010285][ T30] audit: type=1326 audit(1752966899.260:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.038708][ T30] audit: type=1326 audit(1752966899.260:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.064264][ T30] audit: type=1326 audit(1752966899.260:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.106128][ T30] audit: type=1326 audit(1752966899.260:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.130122][ T3873] hub 2-0:1.0: USB hub found [ 58.132718][ T30] audit: type=1326 audit(1752966899.260:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.164842][ T30] audit: type=1326 audit(1752966899.260:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.166611][ T3873] hub 2-0:1.0: 8 ports detected [ 58.192038][ T30] audit: type=1326 audit(1752966899.340:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8097f2e9a9 code=0x7ffc0000 [ 58.226826][ T3877] netlink: 'syz.2.132': attribute type 7 has an invalid length. [ 58.240833][ T3879] loop3: detected capacity change from 0 to 128 [ 58.395563][ T3892] loop4: detected capacity change from 0 to 1024 [ 58.400442][ T3892] EXT4-fs: Ignoring removed nobh option [ 58.400475][ T3892] EXT4-fs: Ignoring removed bh option [ 58.447641][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.452571][ T3879] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 58.452606][ T3879] FAT-fs (loop3): Filesystem has been set read-only [ 58.452710][ T3879] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 58.458588][ T3898] tipc: Enabling of bearer rejected, failed to enable media [ 58.495846][ T3900] loop1: detected capacity change from 0 to 512 [ 58.498628][ T3879] SELinux: syz.3.131 (3879) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.517544][ T3900] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 58.517681][ T3900] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.142: iget: bad i_size value: 12154757448730 [ 58.517960][ T3900] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.142: couldn't read orphan inode 13 (err -117) [ 58.518773][ T3900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.520257][ T3900] EXT4-fs warning (device loop1): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 58.520474][ T3900] EXT4-fs warning (device loop1): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 58.639845][ T3879] wireguard0: entered promiscuous mode [ 58.639870][ T3879] wireguard0: entered allmulticast mode [ 58.732578][ T3892] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 58.783928][ T3908] loop2: detected capacity change from 0 to 1024 [ 58.792907][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.849004][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.890972][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.897856][ T3908] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.943128][ T3902] netlink: 'syz.0.143': attribute type 3 has an invalid length. [ 58.951547][ T3902] __nla_validate_parse: 9 callbacks suppressed [ 58.951561][ T3902] netlink: 666 bytes leftover after parsing attributes in process `syz.0.143'. [ 58.992541][ T3914] netlink: 'syz.4.146': attribute type 7 has an invalid length. [ 59.001239][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 59.027217][ T3908] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 59.075149][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.115755][ T3920] loop1: detected capacity change from 0 to 1024 [ 59.154916][ T3924] FAULT_INJECTION: forcing a failure. [ 59.154916][ T3924] name failslab, interval 1, probability 0, space 0, times 1 [ 59.171008][ T3924] CPU: 0 UID: 0 PID: 3924 Comm: syz.4.150 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 59.171100][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.171115][ T3924] Call Trace: [ 59.171124][ T3924] [ 59.171133][ T3924] __dump_stack+0x1d/0x30 [ 59.171160][ T3924] dump_stack_lvl+0xe8/0x140 [ 59.171196][ T3924] dump_stack+0x15/0x1b [ 59.171217][ T3924] should_fail_ex+0x265/0x280 [ 59.171275][ T3924] should_failslab+0x8c/0xb0 [ 59.171302][ T3924] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 59.171417][ T3924] ? shmem_alloc_inode+0x34/0x50 [ 59.171523][ T3924] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 59.171567][ T3924] shmem_alloc_inode+0x34/0x50 [ 59.171610][ T3924] alloc_inode+0x40/0x170 [ 59.171682][ T3924] new_inode+0x1d/0xe0 [ 59.171707][ T3924] shmem_get_inode+0x244/0x750 [ 59.171764][ T3924] __shmem_file_setup+0x113/0x210 [ 59.171805][ T3924] shmem_file_setup+0x3b/0x50 [ 59.171844][ T3924] __se_sys_memfd_create+0x2c3/0x590 [ 59.171888][ T3924] __x64_sys_memfd_create+0x31/0x40 [ 59.171984][ T3924] x64_sys_call+0x122f/0x2fb0 [ 59.172014][ T3924] do_syscall_64+0xd2/0x200 [ 59.172039][ T3924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.172083][ T3924] ? clear_bhb_loop+0x40/0x90 [ 59.172110][ T3924] ? clear_bhb_loop+0x40/0x90 [ 59.172132][ T3924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.172164][ T3924] RIP: 0033:0x7f61c983e9a9 [ 59.172196][ T3924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.172216][ T3924] RSP: 002b:00007f61c7e9ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 59.172302][ T3924] RAX: ffffffffffffffda RBX: 0000000000000a2f RCX: 00007f61c983e9a9 [ 59.172315][ T3924] RDX: 00007f61c7e9eef0 RSI: 0000000000000000 RDI: 00007f61c98c16fc [ 59.172328][ T3924] RBP: 0000200000001580 R08: 00007f61c7e9ebb7 R09: 00007f61c7e9ee40 [ 59.172340][ T3924] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 59.172352][ T3924] R13: 00007f61c7e9eef0 R14: 00007f61c7e9eeb0 R15: 0000200000000140 [ 59.172376][ T3924] [ 59.478173][ T3932] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 59.490698][ T3920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.521557][ T3931] loop3: detected capacity change from 0 to 2048 [ 59.551542][ T3920] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 59.566919][ T3920] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.566919][ T3920] [ 59.579095][ T3920] EXT4-fs (loop1): Total free blocks count 0 [ 59.586488][ T3920] EXT4-fs (loop1): Free/Dirty block details [ 59.593053][ T3920] EXT4-fs (loop1): free_blocks=0 [ 59.598999][ T3920] EXT4-fs (loop1): dirty_blocks=0 [ 59.604526][ T3920] EXT4-fs (loop1): Block reservation details [ 59.612119][ T3920] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 59.701765][ T3946] loop3: detected capacity change from 0 to 2048 [ 59.722548][ T3948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 59.760704][ T3948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 59.853936][ T3937] loop2: detected capacity change from 0 to 4096 [ 59.871627][ T3963] loop3: detected capacity change from 0 to 512 [ 59.910998][ T3968] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 59.926064][ T3963] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.926706][ T3937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.956466][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.972753][ T3969] tipc: Started in network mode [ 59.978256][ T3969] tipc: Node identity 5666ca5bd61f, cluster identity 4711 [ 59.989716][ T3969] tipc: Enabled bearer , priority 0 [ 60.006106][ T3963] EXT4-fs (loop3): mount failed [ 60.017599][ T3971] loop4: detected capacity change from 0 to 2048 [ 60.049117][ T3957] tipc: Resetting bearer [ 60.084697][ T3957] tipc: Disabling bearer [ 60.179009][ T3982] loop4: detected capacity change from 0 to 1024 [ 60.200512][ T3982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.224652][ T3982] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.322817][ T3992] loop3: detected capacity change from 0 to 164 [ 60.347041][ T3992] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.359173][ T3992] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.369703][ T3992] Symlink component flag not implemented [ 60.376647][ T3992] Symlink component flag not implemented [ 60.384373][ T3992] Symlink component flag not implemented (7) [ 60.392035][ T3992] Symlink component flag not implemented (116) [ 60.412291][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.427560][ T3990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.170'. [ 60.438495][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 60.541339][ T4001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 60.552160][ T4007] loop3: detected capacity change from 0 to 1024 [ 60.583173][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.628568][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.778498][ T4018] loop4: detected capacity change from 0 to 2048 [ 60.947659][ T4021] loop4: detected capacity change from 0 to 512 [ 60.981942][ T4021] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.182: bg 0: block 131: padding at end of block bitmap is not set [ 61.010053][ T4021] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 61.022570][ T4021] EXT4-fs (loop4): 1 truncate cleaned up [ 61.034626][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.050827][ T4021] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.182: corrupted in-inode xattr: overlapping e_value [ 61.113361][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.305418][ T4047] netlink: 'syz.0.191': attribute type 7 has an invalid length. [ 61.314838][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 61.379086][ T4049] netlink: 260 bytes leftover after parsing attributes in process `syz.4.187'. [ 61.389532][ T4049] netlink: 260 bytes leftover after parsing attributes in process `syz.4.187'. [ 61.434125][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.520702][ T4051] netlink: 'syz.2.192': attribute type 2 has an invalid length. [ 61.529517][ T4051] netlink: 'syz.2.192': attribute type 9 has an invalid length. [ 61.767661][ T4056] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 61.916036][ T4058] FAULT_INJECTION: forcing a failure. [ 61.916036][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 61.929935][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.2.198 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 61.930094][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.930113][ T4058] Call Trace: [ 61.930124][ T4058] [ 61.930136][ T4058] __dump_stack+0x1d/0x30 [ 61.930167][ T4058] dump_stack_lvl+0xe8/0x140 [ 61.930196][ T4058] dump_stack+0x15/0x1b [ 61.930220][ T4058] should_fail_ex+0x265/0x280 [ 61.930277][ T4058] should_failslab+0x8c/0xb0 [ 61.930311][ T4058] __kmalloc_cache_node_noprof+0x54/0x320 [ 61.930353][ T4058] ? __get_vm_area_node+0x106/0x1d0 [ 61.930414][ T4058] __get_vm_area_node+0x106/0x1d0 [ 61.930458][ T4058] __vmalloc_node_range_noprof+0x273/0xe00 [ 61.930511][ T4058] ? copy_process+0x399/0x1f90 [ 61.930554][ T4058] ? __rcu_read_unlock+0x4f/0x70 [ 61.930594][ T4058] __vmalloc_node_noprof+0x89/0xc0 [ 61.930650][ T4058] ? copy_process+0x399/0x1f90 [ 61.930684][ T4058] ? copy_process+0x399/0x1f90 [ 61.930740][ T4058] dup_task_struct+0x449/0x6a0 [ 61.930777][ T4058] ? _parse_integer+0x27/0x40 [ 61.930890][ T4058] copy_process+0x399/0x1f90 [ 61.930926][ T4058] ? kstrtouint+0x76/0xc0 [ 61.930963][ T4058] ? kstrtouint_from_user+0x9f/0xf0 [ 61.931021][ T4058] ? __rcu_read_unlock+0x4f/0x70 [ 61.931123][ T4058] kernel_clone+0x16c/0x5b0 [ 61.931167][ T4058] ? vfs_write+0x75e/0x8e0 [ 61.931235][ T4058] __x64_sys_clone+0xe6/0x120 [ 61.931360][ T4058] x64_sys_call+0x2c59/0x2fb0 [ 61.931390][ T4058] do_syscall_64+0xd2/0x200 [ 61.931415][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.931452][ T4058] ? clear_bhb_loop+0x40/0x90 [ 61.931482][ T4058] ? clear_bhb_loop+0x40/0x90 [ 61.931512][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.931540][ T4058] RIP: 0033:0x7f4698a2e9a9 [ 61.931561][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.931608][ T4058] RSP: 002b:00007f469708efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 61.931677][ T4058] RAX: ffffffffffffffda RBX: 00007f4698c55fa0 RCX: 00007f4698a2e9a9 [ 61.931691][ T4058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 61.931705][ T4058] RBP: 00007f469708f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.931720][ T4058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 61.931737][ T4058] R13: 0000000000000000 R14: 00007f4698c55fa0 R15: 00007ffc12134f68 [ 61.931760][ T4058] [ 61.931770][ T4058] syz.2.198: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 61.937772][ T4063] loop3: detected capacity change from 0 to 128 [ 61.946813][ T4058] ,cpuset=/,mems_allowed=0 [ 61.946854][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.2.198 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 61.946983][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.947002][ T4058] Call Trace: [ 61.947011][ T4058] [ 61.947023][ T4058] __dump_stack+0x1d/0x30 [ 61.947068][ T4058] dump_stack_lvl+0xe8/0x140 [ 61.947097][ T4058] dump_stack+0x15/0x1b [ 61.947123][ T4058] warn_alloc+0x12b/0x1a0 [ 61.947175][ T4058] __vmalloc_node_range_noprof+0x297/0xe00 [ 61.947239][ T4058] ? __rcu_read_unlock+0x4f/0x70 [ 61.947336][ T4058] __vmalloc_node_noprof+0x89/0xc0 [ 61.947381][ T4058] ? copy_process+0x399/0x1f90 [ 61.947447][ T4058] ? copy_process+0x399/0x1f90 [ 61.947498][ T4058] dup_task_struct+0x449/0x6a0 [ 61.947535][ T4058] ? _parse_integer+0x27/0x40 [ 61.947592][ T4058] copy_process+0x399/0x1f90 [ 61.947628][ T4058] ? kstrtouint+0x76/0xc0 [ 61.947706][ T4058] ? kstrtouint_from_user+0x9f/0xf0 [ 61.947748][ T4058] ? __rcu_read_unlock+0x4f/0x70 [ 61.947786][ T4058] kernel_clone+0x16c/0x5b0 [ 61.948004][ T4058] ? vfs_write+0x75e/0x8e0 [ 61.948083][ T4058] __x64_sys_clone+0xe6/0x120 [ 61.948135][ T4058] x64_sys_call+0x2c59/0x2fb0 [ 61.948168][ T4058] do_syscall_64+0xd2/0x200 [ 61.948195][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.948253][ T4058] ? clear_bhb_loop+0x40/0x90 [ 61.948286][ T4058] ? clear_bhb_loop+0x40/0x90 [ 61.948320][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.948363][ T4058] RIP: 0033:0x7f4698a2e9a9 [ 61.948387][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.948493][ T4058] RSP: 002b:00007f469708efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 61.948520][ T4058] RAX: ffffffffffffffda RBX: 00007f4698c55fa0 RCX: 00007f4698a2e9a9 [ 61.948539][ T4058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 61.948558][ T4058] RBP: 00007f469708f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.948576][ T4058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 61.948598][ T4058] R13: 0000000000000000 R14: 00007f4698c55fa0 R15: 00007ffc12134f68 [ 61.948627][ T4058] [ 61.948766][ T4058] Mem-Info: [ 62.047348][ T4063] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.051774][ T4058] active_anon:9632 inactive_anon:2 isolated_anon:0 [ 62.051774][ T4058] active_file:16453 inactive_file:2199 isolated_file:0 [ 62.051774][ T4058] unevictable:0 dirty:1836 writeback:0 [ 62.051774][ T4058] slab_reclaimable:2974 slab_unreclaimable:14671 [ 62.051774][ T4058] mapped:32606 shmem:3055 pagetables:1138 [ 62.051774][ T4058] sec_pagetables:0 bounce:0 [ 62.051774][ T4058] kernel_misc_reclaimable:0 [ 62.051774][ T4058] free:1886900 free_pcp:8314 free_cma:0 [ 62.070338][ T4063] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.073494][ T4058] Node 0 active_anon:38528kB inactive_anon:8kB active_file:65812kB inactive_file:8796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130424kB dirty:7344kB writeback:0kB shmem:12220kB writeback_tmp:0kB kernel_stack:3376kB pagetables:4552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 62.607127][ T4058] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.644682][ T4058] lowmem_reserve[]: 0 2882 7860 7860 [ 62.650958][ T4058] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 62.688027][ T4058] lowmem_reserve[]: 0 0 4978 4978 [ 62.696079][ T4058] Node 0 Normal free:4584416kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38768kB inactive_anon:8kB active_file:65856kB inactive_file:8780kB unevictable:0kB writepending:7448kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28964kB local_pcp:6396kB free_cma:0kB [ 62.734024][ T4058] lowmem_reserve[]: 0 0 0 0 [ 62.738758][ T4058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.753439][ T4058] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 62.771455][ T4058] Node 0 Normal: 224*4kB (UME) 53*8kB (UME) 331*16kB (UM) 311*32kB (UME) 302*64kB (UME) 57*128kB (UME) 13*256kB (UME) 11*512kB (UME) 2*1024kB (U) 2*2048kB (UE) 1105*4096kB (M) = 4584376kB [ 62.794122][ T4058] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.805469][ T4058] 21716 total pagecache pages [ 62.811164][ T4058] 2 pages in swap cache [ 62.815762][ T4058] Free swap = 124988kB [ 62.820921][ T4058] Total swap = 124996kB [ 62.825908][ T4058] 2097051 pages RAM [ 62.830371][ T4058] 0 pages HighMem/MovableOnly [ 62.836161][ T4058] 80813 pages reserved [ 62.860284][ T4063] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.906282][ T30] kauditd_printk_skb: 419 callbacks suppressed [ 62.906301][ T30] audit: type=1326 audit(1752966904.150:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 62.943041][ T30] audit: type=1326 audit(1752966904.150:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 62.972454][ T30] audit: type=1326 audit(1752966904.150:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.002194][ T30] audit: type=1326 audit(1752966904.150:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.032134][ T30] audit: type=1326 audit(1752966904.150:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.048475][ T4084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.061488][ T30] audit: type=1326 audit(1752966904.150:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.103569][ T30] audit: type=1326 audit(1752966904.150:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.130962][ T30] audit: type=1326 audit(1752966904.150:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.172458][ T30] audit: type=1326 audit(1752966904.190:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.202905][ T30] audit: type=1326 audit(1752966904.190:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 63.236508][ T4084] hsr_slave_0 (unregistering): left promiscuous mode [ 63.254652][ T4091] loop2: detected capacity change from 0 to 512 [ 63.296200][ T4090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.304057][ T4090] IPv6: NLM_F_CREATE should be set when creating new route [ 63.312367][ T4090] IPv6: NLM_F_CREATE should be set when creating new route [ 63.323024][ T4091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.323408][ T4093] netlink: 'syz.1.205': attribute type 7 has an invalid length. [ 63.359018][ T4091] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.396351][ T4091] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.204: corrupted inode contents [ 63.413780][ T4091] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.204: mark_inode_dirty error [ 63.419031][ T4101] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 63.435981][ T4091] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.204: corrupted inode contents [ 63.452777][ T4102] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.204: corrupted inode contents [ 63.470085][ T4102] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.204: mark_inode_dirty error [ 63.484137][ T4102] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.204: corrupted inode contents [ 63.508429][ T4102] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.204: mark_inode_dirty error [ 63.537734][ T4102] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.204: corrupted inode contents [ 63.569624][ T4102] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.204: mark_inode_dirty error [ 63.614597][ T4115] loop4: detected capacity change from 0 to 2048 [ 63.631104][ T4117] loop3: detected capacity change from 0 to 736 [ 63.661083][ T4117] rock: directory entry would overflow storage [ 63.668970][ T4117] rock: sig=0x3b10, size=4, remaining=3 [ 63.679936][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.784805][ T4125] hub 2-0:1.0: USB hub found [ 63.790680][ T4125] hub 2-0:1.0: 8 ports detected [ 63.811209][ T4125] loop4: detected capacity change from 0 to 128 [ 63.827951][ T4129] loop3: detected capacity change from 0 to 2048 [ 63.856264][ T4125] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 63.882534][ T4125] FAT-fs (loop4): Filesystem has been set read-only [ 63.893217][ T4125] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 64.077229][ T4149] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 64.086991][ T4149] SELinux: failed to load policy [ 64.187365][ T4160] loop4: detected capacity change from 0 to 2048 [ 64.211061][ T4164] x_tables: duplicate underflow at hook 1 [ 64.223268][ T4158] block device autoloading is deprecated and will be removed. [ 64.355723][ T4170] hub 2-0:1.0: USB hub found [ 64.362691][ T4170] hub 2-0:1.0: 8 ports detected [ 64.410470][ T4170] loop2: detected capacity change from 0 to 128 [ 64.492258][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 64.508026][ T4184] serio: Serial port ptm0 [ 64.537615][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 64.572203][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 64.669094][ T4190] loop1: detected capacity change from 0 to 1024 [ 64.694252][ T4190] EXT4-fs: Ignoring removed nobh option [ 64.700670][ T4190] EXT4-fs: Ignoring removed bh option [ 64.812882][ T4181] infiniband syz2: set active [ 64.818336][ T4181] infiniband syz2: added vxcan1 [ 64.824050][ T1027] vxcan1 speed is unknown, defaulting to 1000 [ 64.838406][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.047635][ T4181] RDS/IB: syz2: added [ 65.095313][ T4196] loop3: detected capacity change from 0 to 736 [ 65.125186][ T4181] smc: adding ib device syz2 with port count 1 [ 65.184408][ T4196] rock: directory entry would overflow storage [ 65.191555][ T4196] rock: sig=0x3b10, size=4, remaining=3 [ 65.250531][ T4181] smc: ib device syz2 port 1 has pnetid [ 65.258130][ T1027] vxcan1 speed is unknown, defaulting to 1000 [ 65.393127][ T4200] loop3: detected capacity change from 0 to 2048 [ 65.406762][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 65.552689][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.591869][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 65.669796][ T4213] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 65.687332][ T4213] netlink: 'syz.3.245': attribute type 13 has an invalid length. [ 65.713389][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 65.734535][ T4216] hub 2-0:1.0: USB hub found [ 65.754622][ T4216] hub 2-0:1.0: 8 ports detected [ 65.770119][ T4213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.794539][ T4216] loop0: detected capacity change from 0 to 128 [ 65.830563][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 65.916147][ T4224] loop1: detected capacity change from 0 to 512 [ 65.936901][ T4224] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.940109][ T4181] vxcan1 speed is unknown, defaulting to 1000 [ 66.007737][ T4233] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 66.033428][ T4233] SELinux: failed to load policy [ 66.063372][ T4237] __nla_validate_parse: 5 callbacks suppressed [ 66.063425][ T4237] netlink: 136 bytes leftover after parsing attributes in process `syz.1.253'. [ 66.188946][ T4250] loop2: detected capacity change from 0 to 736 [ 66.208781][ T4250] rock: directory entry would overflow storage [ 66.215846][ T4250] rock: sig=0x3b10, size=4, remaining=3 [ 66.354035][ T4259] loop0: detected capacity change from 0 to 736 [ 66.381356][ T4259] rock: directory entry would overflow storage [ 66.389157][ T4259] rock: sig=0x3b10, size=4, remaining=3 [ 66.526924][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 66.556679][ T4273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4273 comm=syz.0.260 [ 66.649119][ T4275] loop2: detected capacity change from 0 to 8192 [ 66.682919][ T4282] hub 2-0:1.0: USB hub found [ 66.692094][ T4282] hub 2-0:1.0: 8 ports detected [ 66.699736][ T4275] loop2: p2 p3 p4 [ 66.722414][ T4282] loop1: detected capacity change from 0 to 128 [ 66.730442][ T4275] loop2: p2 start 2936012800 is beyond EOD, truncated [ 66.738057][ T4275] loop2: p3 start 1912602624 is beyond EOD, truncated [ 66.746957][ T4275] loop2: p4 size 656640 extends beyond EOD, truncated [ 66.759366][ T4298] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 66.759366][ T4298] The task syz.0.264 (4298) triggered the difference, watch for misbehavior. [ 66.794070][ T4300] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 66.842999][ T4300] SELinux: failed to load policy [ 67.009971][ T4308] syzkaller1: entered promiscuous mode [ 67.017367][ T4308] syzkaller1: entered allmulticast mode [ 67.467708][ T4352] xt_hashlimit: max too large, truncated to 1048576 [ 67.486302][ T4348] loop1: detected capacity change from 0 to 2048 [ 67.495614][ T3834] udevd[3834]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.500501][ T4352] FAULT_INJECTION: forcing a failure. [ 67.500501][ T4352] name failslab, interval 1, probability 0, space 0, times 0 [ 67.525416][ T4352] CPU: 1 UID: 0 PID: 4352 Comm: syz.2.273 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 67.525455][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.525472][ T4352] Call Trace: [ 67.525482][ T4352] [ 67.525492][ T4352] __dump_stack+0x1d/0x30 [ 67.525519][ T4352] dump_stack_lvl+0xe8/0x140 [ 67.525554][ T4352] dump_stack+0x15/0x1b [ 67.525576][ T4352] should_fail_ex+0x265/0x280 [ 67.525637][ T4352] should_failslab+0x8c/0xb0 [ 67.525669][ T4352] kmem_cache_alloc_noprof+0x50/0x310 [ 67.525707][ T4352] ? getname_kernel+0x3c/0x1f0 [ 67.525741][ T4352] getname_kernel+0x3c/0x1f0 [ 67.525774][ T4352] kern_path+0x23/0x130 [ 67.525807][ T4352] bpf_prog_get_type_path+0x45/0x1c0 [ 67.525837][ T4352] ? strnlen+0x28/0x50 [ 67.525865][ T4352] bpf_mt_check_v1+0xee/0x260 [ 67.525904][ T4352] xt_check_match+0x2aa/0x4f0 [ 67.525997][ T4352] ? xt_find_match+0x1d1/0x210 [ 67.526037][ T4352] ? xt_find_match+0x1b5/0x210 [ 67.526156][ T4352] translate_table+0xa9c/0xf90 [ 67.526314][ T4352] ? _copy_from_user+0x89/0xb0 [ 67.526347][ T4352] do_ipt_set_ctl+0x66f/0x820 [ 67.527530][ T4352] nf_setsockopt+0x196/0x1b0 [ 67.527562][ T4352] ip_setsockopt+0x102/0x110 [ 67.527605][ T4352] udp_setsockopt+0x99/0xb0 [ 67.527712][ T4352] sock_common_setsockopt+0x69/0x80 [ 67.527749][ T4352] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.527810][ T4352] __sys_setsockopt+0x184/0x200 [ 67.527853][ T4352] __x64_sys_setsockopt+0x64/0x80 [ 67.527888][ T4352] x64_sys_call+0x2bd5/0x2fb0 [ 67.527920][ T4352] do_syscall_64+0xd2/0x200 [ 67.527987][ T4352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.528079][ T4352] ? clear_bhb_loop+0x40/0x90 [ 67.528111][ T4352] ? clear_bhb_loop+0x40/0x90 [ 67.528194][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.528236][ T4352] RIP: 0033:0x7f4698a2e9a9 [ 67.528258][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.528278][ T4352] RSP: 002b:00007f469708f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.528304][ T4352] RAX: ffffffffffffffda RBX: 00007f4698c55fa0 RCX: 00007f4698a2e9a9 [ 67.528323][ T4352] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.528342][ T4352] RBP: 00007f469708f090 R08: 0000000000000548 R09: 0000000000000000 [ 67.528360][ T4352] R10: 0000200000002480 R11: 0000000000000246 R12: 0000000000000001 [ 67.528456][ T4352] R13: 0000000000000000 R14: 00007f4698c55fa0 R15: 00007ffc12134f68 [ 67.528486][ T4352] [ 67.929755][ T30] kauditd_printk_skb: 404 callbacks suppressed [ 67.929773][ T30] audit: type=1326 audit(1752966909.180:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 67.992384][ T30] audit: type=1326 audit(1752966909.210:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.020017][ T30] audit: type=1326 audit(1752966909.210:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.047833][ T30] audit: type=1326 audit(1752966909.210:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.075468][ T30] audit: type=1326 audit(1752966909.220:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.104341][ T30] audit: type=1326 audit(1752966909.220:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.131861][ T30] audit: type=1326 audit(1752966909.220:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.157147][ T4365] hub 2-0:1.0: USB hub found [ 68.159523][ T30] audit: type=1326 audit(1752966909.220:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4698a2e9a9 code=0x7ffc0000 [ 68.194154][ T30] audit: type=1326 audit(1752966909.220:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4698a2d310 code=0x7ffc0000 [ 68.198760][ T4365] hub 2-0:1.0: 8 ports detected [ 68.230146][ T4376] loop2: detected capacity change from 0 to 128 [ 68.359096][ T4388] netlink: 'syz.3.282': attribute type 15 has an invalid length. [ 68.368754][ T4388] netlink: 'syz.3.282': attribute type 7 has an invalid length. [ 68.414249][ T30] audit: type=1400 audit(1752966909.280:1314): avc: denied { append } for pid=4373 comm="syz.4.279" name="pfkey" dev="proc" ino=4026532481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.500769][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.519611][ T3401] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.646952][ T4414] syz.2.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.663245][ T4407] fido_id[4407]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.807822][ T4420] loop2: detected capacity change from 0 to 512 [ 68.821587][ T4424] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 68.829552][ T4420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.918812][ T4420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.289: bg 0: block 435: padding at end of block bitmap is not set [ 68.944900][ T4430] hub 2-0:1.0: USB hub found [ 68.959812][ T4432] netlink: 'syz.0.294': attribute type 7 has an invalid length. [ 68.968974][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 68.989223][ T4420] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.009101][ T4430] hub 2-0:1.0: 8 ports detected [ 69.025596][ T4420] EXT4-fs (loop2): 1 truncate cleaned up [ 69.033174][ T4436] loop4: detected capacity change from 0 to 128 [ 69.042748][ T4420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.102279][ T4442] loop1: detected capacity change from 0 to 512 [ 69.135030][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.171969][ T4442] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.185543][ T4447] FAULT_INJECTION: forcing a failure. [ 69.185543][ T4447] name failslab, interval 1, probability 0, space 0, times 0 [ 69.202015][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.4.299 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 69.202052][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.202066][ T4447] Call Trace: [ 69.202071][ T4447] [ 69.202079][ T4447] __dump_stack+0x1d/0x30 [ 69.202101][ T4447] dump_stack_lvl+0xe8/0x140 [ 69.202188][ T4447] dump_stack+0x15/0x1b [ 69.202213][ T4447] should_fail_ex+0x265/0x280 [ 69.202256][ T4447] should_failslab+0x8c/0xb0 [ 69.202285][ T4447] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.202324][ T4447] ? __alloc_skb+0x101/0x320 [ 69.202431][ T4447] __alloc_skb+0x101/0x320 [ 69.202473][ T4447] netlink_alloc_large_skb+0xba/0xf0 [ 69.202507][ T4447] netlink_sendmsg+0x3cf/0x6b0 [ 69.202528][ T4447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.202594][ T4447] __sock_sendmsg+0x142/0x180 [ 69.202628][ T4447] ____sys_sendmsg+0x31e/0x4e0 [ 69.202670][ T4447] ___sys_sendmsg+0x17b/0x1d0 [ 69.202740][ T4447] __x64_sys_sendmsg+0xd4/0x160 [ 69.202792][ T4447] x64_sys_call+0x2999/0x2fb0 [ 69.202820][ T4447] do_syscall_64+0xd2/0x200 [ 69.202890][ T4447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.202929][ T4447] ? clear_bhb_loop+0x40/0x90 [ 69.203010][ T4447] ? clear_bhb_loop+0x40/0x90 [ 69.203042][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.203072][ T4447] RIP: 0033:0x7f61c983e9a9 [ 69.203094][ T4447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.203119][ T4447] RSP: 002b:00007f61c7e9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.203203][ T4447] RAX: ffffffffffffffda RBX: 00007f61c9a65fa0 RCX: 00007f61c983e9a9 [ 69.203217][ T4447] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003 [ 69.203230][ T4447] RBP: 00007f61c7e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.203247][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.203264][ T4447] R13: 0000000000000000 R14: 00007f61c9a65fa0 R15: 00007ffc3b8235f8 [ 69.203289][ T4447] [ 69.456041][ T4442] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.296: bg 0: block 248: padding at end of block bitmap is not set [ 69.478914][ T4444] netlink: 'syz.0.297': attribute type 3 has an invalid length. [ 69.530137][ T4442] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.296: Failed to acquire dquot type 1 [ 69.544485][ T4442] EXT4-fs (loop1): 1 truncate cleaned up [ 69.555538][ T4442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.571538][ T4457] loop2: detected capacity change from 0 to 128 [ 69.603796][ T4457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.613134][ T4457] FAT-fs (loop2): Filesystem has been set read-only [ 69.634367][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 69.646185][ T4457] syz.2.298: attempt to access beyond end of device [ 69.646185][ T4457] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 69.663273][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 69.675517][ T4457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.686208][ T4457] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.728664][ T4457] syz.2.298: attempt to access beyond end of device [ 69.728664][ T4457] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.757028][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 69.777676][ T4463] loop0: detected capacity change from 0 to 2048 [ 69.791052][ T4467] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 69.803452][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.806237][ T4450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.926811][ T4472] netlink: 'syz.3.307': attribute type 7 has an invalid length. [ 69.935938][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 69.981466][ T4475] pim6reg1: entered promiscuous mode [ 69.988635][ T4475] pim6reg1: entered allmulticast mode [ 70.067851][ T4483] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 70.083021][ T4483] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 70.083470][ T4485] FAULT_INJECTION: forcing a failure. [ 70.083470][ T4485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.110524][ T4485] CPU: 0 UID: 0 PID: 4485 Comm: syz.3.311 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 70.110681][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.110707][ T4485] Call Trace: [ 70.110719][ T4485] [ 70.110733][ T4485] __dump_stack+0x1d/0x30 [ 70.110782][ T4485] dump_stack_lvl+0xe8/0x140 [ 70.110851][ T4485] dump_stack+0x15/0x1b [ 70.110878][ T4485] should_fail_ex+0x265/0x280 [ 70.110922][ T4485] should_fail+0xb/0x20 [ 70.110960][ T4485] should_fail_usercopy+0x1a/0x20 [ 70.111000][ T4485] _copy_from_user+0x1c/0xb0 [ 70.111044][ T4485] do_ip6t_set_ctl+0x3a9/0x840 [ 70.111083][ T4485] ? kstrtoull+0x111/0x140 [ 70.111123][ T4485] ? __rcu_read_unlock+0x4f/0x70 [ 70.111165][ T4485] nf_setsockopt+0x196/0x1b0 [ 70.111235][ T4485] ipv6_setsockopt+0x11a/0x130 [ 70.111342][ T4485] tcp_setsockopt+0x95/0xb0 [ 70.111390][ T4485] sock_common_setsockopt+0x69/0x80 [ 70.111429][ T4485] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 70.111469][ T4485] __sys_setsockopt+0x184/0x200 [ 70.111515][ T4485] __x64_sys_setsockopt+0x64/0x80 [ 70.111551][ T4485] x64_sys_call+0x2bd5/0x2fb0 [ 70.111580][ T4485] do_syscall_64+0xd2/0x200 [ 70.111683][ T4485] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.111719][ T4485] ? clear_bhb_loop+0x40/0x90 [ 70.111744][ T4485] ? clear_bhb_loop+0x40/0x90 [ 70.111822][ T4485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.111849][ T4485] RIP: 0033:0x7f8097f2e9a9 [ 70.111869][ T4485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.111898][ T4485] RSP: 002b:00007f8096597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.111997][ T4485] RAX: ffffffffffffffda RBX: 00007f8098155fa0 RCX: 00007f8097f2e9a9 [ 70.112018][ T4485] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 70.112036][ T4485] RBP: 00007f8096597090 R08: 0000000000000660 R09: 0000000000000000 [ 70.112056][ T4485] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 70.112077][ T4485] R13: 0000000000000000 R14: 00007f8098155fa0 R15: 00007ffc9f2e5d48 [ 70.112179][ T4485] [ 70.557343][ T4498] loop3: detected capacity change from 0 to 1024 [ 70.569150][ T4498] EXT4-fs: Ignoring removed nobh option [ 70.574952][ T4498] EXT4-fs: Ignoring removed bh option [ 70.595983][ T4502] loop2: detected capacity change from 0 to 128 [ 70.625780][ T4505] loop1: detected capacity change from 0 to 1024 [ 70.654183][ T4502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.662888][ T4502] FAT-fs (loop2): Filesystem has been set read-only [ 70.680991][ T4498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.685856][ T4505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.710610][ T4502] syz.2.317: attempt to access beyond end of device [ 70.710610][ T4502] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 70.761332][ T4502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.769893][ T4502] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.778783][ T4502] syz.2.317: attempt to access beyond end of device [ 70.778783][ T4502] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 70.794135][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 70.810403][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.822530][ T4497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.875965][ T4517] netlink: 356 bytes leftover after parsing attributes in process `syz.4.323'. [ 70.901833][ T4517] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 70.916221][ T4517] veth0: entered promiscuous mode [ 70.923807][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 70.953205][ T4517] veth0 (unregistering): left promiscuous mode [ 70.973592][ T4521] netlink: 'syz.1.321': attribute type 7 has an invalid length. [ 71.039622][ T4498] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 71.061123][ T4530] loop4: detected capacity change from 0 to 512 [ 71.093531][ T4530] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 71.105631][ T4530] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 71.121382][ T4535] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 71.130763][ T4530] EXT4-fs (loop4): 1 truncate cleaned up [ 71.137192][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.164629][ T4537] FAULT_INJECTION: forcing a failure. [ 71.164629][ T4537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.179113][ T4537] CPU: 1 UID: 0 PID: 4537 Comm: syz.1.330 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 71.179142][ T4537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.179157][ T4537] Call Trace: [ 71.179189][ T4537] [ 71.179196][ T4537] __dump_stack+0x1d/0x30 [ 71.179218][ T4537] dump_stack_lvl+0xe8/0x140 [ 71.179244][ T4537] dump_stack+0x15/0x1b [ 71.179312][ T4537] should_fail_ex+0x265/0x280 [ 71.179442][ T4537] should_fail+0xb/0x20 [ 71.179469][ T4537] should_fail_usercopy+0x1a/0x20 [ 71.179505][ T4537] _copy_from_user+0x1c/0xb0 [ 71.179526][ T4537] ip6gre_tunnel_siocdevprivate+0x13d/0x6f0 [ 71.179652][ T4537] dev_ifsioc+0x8f5/0xaa0 [ 71.179678][ T4537] dev_ioctl+0x78d/0x960 [ 71.179700][ T4537] sock_ioctl+0x593/0x610 [ 71.179723][ T4537] ? __pfx_sock_ioctl+0x10/0x10 [ 71.179766][ T4537] __se_sys_ioctl+0xce/0x140 [ 71.179880][ T4537] __x64_sys_ioctl+0x43/0x50 [ 71.179965][ T4537] x64_sys_call+0x19a8/0x2fb0 [ 71.179996][ T4537] do_syscall_64+0xd2/0x200 [ 71.180021][ T4537] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.180056][ T4537] ? clear_bhb_loop+0x40/0x90 [ 71.180080][ T4537] ? clear_bhb_loop+0x40/0x90 [ 71.180174][ T4537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.180200][ T4537] RIP: 0033:0x7faa07b0e9a9 [ 71.180215][ T4537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.180232][ T4537] RSP: 002b:00007faa0616f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.180253][ T4537] RAX: ffffffffffffffda RBX: 00007faa07d35fa0 RCX: 00007faa07b0e9a9 [ 71.180265][ T4537] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000003 [ 71.180277][ T4537] RBP: 00007faa0616f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.180407][ T4537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.180419][ T4537] R13: 0000000000000000 R14: 00007faa07d35fa0 R15: 00007fffac078078 [ 71.180437][ T4537] [ 71.183954][ T4530] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 4: comm syz.4.328: lblock 0 mapped to illegal pblock 4 (length 1) [ 71.285416][ T4540] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 71.295072][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.318013][ T4539] loop1: detected capacity change from 0 to 2048 [ 71.328917][ T4530] EXT4-fs (loop4): Remounting filesystem read-only [ 71.472982][ T4545] loop3: detected capacity change from 0 to 512 [ 71.486602][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.510318][ T4545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.526319][ T4545] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.541574][ T4545] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.331: corrupted inode contents [ 71.554449][ T4545] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.331: mark_inode_dirty error [ 71.589540][ T4551] loop4: detected capacity change from 0 to 512 [ 71.593333][ T4545] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.331: corrupted inode contents [ 71.611226][ T4545] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.331: mark_inode_dirty error [ 71.624791][ T4551] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 71.666712][ T4551] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.335: bad orphan inode 15 [ 71.680185][ T4551] ext4_test_bit(bit=14, block=18) = 1 [ 71.685990][ T4551] is_bad_inode(inode)=0 [ 71.690314][ T4551] NEXT_ORPHAN(inode)=1023 [ 71.695012][ T4551] max_ino=32 [ 71.698246][ T4551] i_nlink=0 [ 71.703945][ T4551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 71.717947][ T4551] ext2 filesystem being mounted at /73/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 71.738968][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.799284][ T4566] netlink: 'syz.2.338': attribute type 7 has an invalid length. [ 71.807323][ T4566] __nla_validate_parse: 1 callbacks suppressed [ 71.807349][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 72.000964][ T4570] loop3: detected capacity change from 0 to 1024 [ 72.079862][ T4570] EXT4-fs: Ignoring removed nobh option [ 72.086352][ T4570] EXT4-fs: Ignoring removed bh option [ 72.257933][ T4574] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 72.280501][ T4570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.415346][ T4584] loop2: detected capacity change from 0 to 1024 [ 72.481121][ T4584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.541720][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 72.580118][ T4570] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 72.608342][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.686486][ T4598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.717219][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.780701][ T4598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.796597][ T4603] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 72.878270][ T4598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.906464][ T4610] loop1: detected capacity change from 0 to 128 [ 72.950667][ T4610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 72.960320][ T4610] FAT-fs (loop1): Filesystem has been set read-only [ 72.970905][ T4598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.978988][ T4610] syz.1.355: attempt to access beyond end of device [ 72.978988][ T4610] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 73.001633][ T4610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 73.010294][ T4610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 73.028315][ T4610] syz.1.355: attempt to access beyond end of device [ 73.028315][ T4610] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.056471][ T4598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.069478][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 73.072075][ T4598] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.095223][ T4598] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110603][ T4598] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.144144][ T30] kauditd_printk_skb: 629 callbacks suppressed [ 73.144163][ T30] audit: type=1326 audit(1752966914.390:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4698a2e9a9 code=0x0 [ 73.189708][ T4622] loop4: detected capacity change from 0 to 2048 [ 73.204094][ T4613] mmap: syz.3.352 (4613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.220672][ T4624] loop2: detected capacity change from 0 to 1024 [ 73.246395][ T4624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.290203][ T3834] loop4: p2 p3 p7 [ 73.300564][ T4630] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 73.311989][ T30] audit: type=1400 audit(1752966914.560:1943): avc: denied { relabelto } for pid=4629 comm="syz.1.359" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 73.344486][ T30] audit: type=1400 audit(1752966914.560:1944): avc: denied { associate } for pid=4629 comm="syz.1.359" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 73.348958][ T4622] loop4: p2 p3 p7 [ 73.401856][ T4624] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 73.401960][ T4624] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.401960][ T4624] [ 73.401978][ T4624] EXT4-fs (loop2): Total free blocks count 0 [ 73.401995][ T4624] EXT4-fs (loop2): Free/Dirty block details [ 73.402082][ T4624] EXT4-fs (loop2): free_blocks=0 [ 73.402097][ T4624] EXT4-fs (loop2): dirty_blocks=0 [ 73.402108][ T4624] EXT4-fs (loop2): Block reservation details [ 73.402120][ T4624] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 73.490914][ T4630] Option ''MO' to dns_resolver key: bad/missing value [ 73.504521][ T30] audit: type=1326 audit(1752966914.730:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.530480][ T30] audit: type=1326 audit(1752966914.730:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.558250][ T30] audit: type=1326 audit(1752966914.730:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.587108][ T30] audit: type=1326 audit(1752966914.730:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.627239][ T30] audit: type=1326 audit(1752966914.730:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.655660][ T30] audit: type=1326 audit(1752966914.730:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.684635][ T30] audit: type=1326 audit(1752966914.730:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 73.771517][ T4639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.823751][ T4639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.883287][ T4639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.915344][ T4644] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.365'. [ 73.926835][ T4644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.365'. [ 73.943925][ T4639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.957668][ T4648] hub 2-0:1.0: USB hub found [ 73.963280][ T4648] hub 2-0:1.0: 8 ports detected [ 73.998468][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.023440][ T4639] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.052813][ T4639] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100696][ T4654] hub 2-0:1.0: USB hub found [ 74.111269][ T4639] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125435][ T4654] hub 2-0:1.0: 8 ports detected [ 74.141785][ T4639] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.158095][ T4650] loop2: detected capacity change from 0 to 128 [ 74.244030][ T4658] loop3: detected capacity change from 0 to 512 [ 74.258040][ T4658] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 74.292724][ T4658] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.370: invalid indirect mapped block 2683928664 (level 1) [ 74.345430][ T4658] EXT4-fs (loop3): Remounting filesystem read-only [ 74.352694][ T4658] EXT4-fs (loop3): 1 truncate cleaned up [ 74.355994][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 74.361318][ T4658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.405581][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.487314][ T4669] loop3: detected capacity change from 0 to 1024 [ 74.528303][ T4669] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 74.538952][ T4669] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 74.550313][ T4669] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.561924][ T4675] loop2: detected capacity change from 0 to 1024 [ 74.562231][ T4669] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.376: unexpected bad inode w/o EXT4_IGET_BAD [ 74.594076][ T4669] EXT4-fs (loop3): no journal found [ 74.595482][ T4679] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 74.621255][ T4675] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 74.635159][ T4675] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.635159][ T4675] [ 74.646731][ T4675] EXT4-fs (loop2): Total free blocks count 0 [ 74.653372][ T4675] EXT4-fs (loop2): Free/Dirty block details [ 74.660128][ T4675] EXT4-fs (loop2): free_blocks=0 [ 74.667134][ T4675] EXT4-fs (loop2): dirty_blocks=0 [ 74.673405][ T4675] EXT4-fs (loop2): Block reservation details [ 74.679788][ T4675] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 74.730223][ T4684] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 74.740991][ T4684] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.779444][ T4686] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 74.801301][ T4684] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 74.812991][ T4684] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.890330][ T4684] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 74.900767][ T4684] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 74.916377][ T4696] 9pnet: p9_errstr2errno: server reported unknown error @΂(0x0000000000000005 [ 75.031354][ T4684] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 75.042451][ T4684] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 75.102701][ T4710] netlink: 'syz.4.389': attribute type 1 has an invalid length. [ 75.194016][ T4712] vxcan1 speed is unknown, defaulting to 1000 [ 75.615662][ T4715] loop4: detected capacity change from 0 to 1024 [ 75.655826][ T4715] EXT4-fs: Ignoring removed nobh option [ 75.661874][ T4715] EXT4-fs: Ignoring removed bh option [ 75.689247][ T4684] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 52936 - 0 [ 75.698417][ T4684] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.727171][ T4684] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 52936 - 0 [ 75.736101][ T4684] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.764879][ T4684] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 52936 - 0 [ 75.773807][ T4684] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.785996][ T4684] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 52936 - 0 [ 75.794527][ T4684] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 75.840025][ T4723] netlink: 332 bytes leftover after parsing attributes in process `syz.3.392'. [ 75.898533][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 75.941124][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 75.962529][ T4715] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 75.974759][ T4727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.012501][ T4735] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 76.047295][ T4735] SELinux: failed to load policy [ 76.217309][ T4751] FAULT_INJECTION: forcing a failure. [ 76.217309][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 76.236281][ T4751] CPU: 1 UID: 0 PID: 4751 Comm: syz.0.401 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 76.236368][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.236386][ T4751] Call Trace: [ 76.236394][ T4751] [ 76.236403][ T4751] __dump_stack+0x1d/0x30 [ 76.236432][ T4751] dump_stack_lvl+0xe8/0x140 [ 76.236459][ T4751] dump_stack+0x15/0x1b [ 76.236497][ T4751] should_fail_ex+0x265/0x280 [ 76.236539][ T4751] should_failslab+0x8c/0xb0 [ 76.236570][ T4751] kmem_cache_alloc_node_noprof+0x57/0x320 [ 76.236620][ T4751] ? __alloc_skb+0x101/0x320 [ 76.236657][ T4751] __alloc_skb+0x101/0x320 [ 76.236691][ T4751] ? audit_log_start+0x365/0x6c0 [ 76.236734][ T4751] audit_log_start+0x380/0x6c0 [ 76.236807][ T4751] ? __rcu_read_unlock+0x34/0x70 [ 76.236840][ T4751] audit_seccomp+0x48/0x100 [ 76.236877][ T4751] ? __seccomp_filter+0x68c/0x10d0 [ 76.236928][ T4751] __seccomp_filter+0x69d/0x10d0 [ 76.237014][ T4751] ? send_signal_locked+0x34e/0x3c0 [ 76.237117][ T4751] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 76.237148][ T4751] __secure_computing+0x82/0x150 [ 76.237175][ T4751] syscall_trace_enter+0xcf/0x1e0 [ 76.237204][ T4751] do_syscall_64+0xac/0x200 [ 76.237309][ T4751] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.237385][ T4751] ? clear_bhb_loop+0x40/0x90 [ 76.237414][ T4751] ? clear_bhb_loop+0x40/0x90 [ 76.237444][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.237472][ T4751] RIP: 0033:0x7fc93812d3bc [ 76.237497][ T4751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.237567][ T4751] RSP: 002b:00007fc93678f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.237593][ T4751] RAX: ffffffffffffffda RBX: 00007fc938355fa0 RCX: 00007fc93812d3bc [ 76.237610][ T4751] RDX: 000000000000000f RSI: 00007fc93678f0a0 RDI: 0000000000000006 [ 76.237627][ T4751] RBP: 00007fc93678f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.237645][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.237662][ T4751] R13: 0000000000000000 R14: 00007fc938355fa0 R15: 00007ffec504e768 [ 76.237687][ T4751] [ 76.245679][ T4756] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 76.487483][ T4759] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.551508][ T4759] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.571153][ T4768] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 76.583231][ T4759] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.588984][ T4768] SELinux: failed to load policy [ 76.641321][ T4759] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.768344][ T4780] loop2: detected capacity change from 0 to 1024 [ 76.775725][ T4780] EXT4-fs: Ignoring removed nobh option [ 76.781893][ T4780] EXT4-fs: Ignoring removed bh option [ 76.865235][ T4780] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 76.877280][ T4786] loop3: detected capacity change from 0 to 1024 [ 76.902204][ T4788] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 76.960269][ T4792] SELinux: policydb version -1661192459 does not match my version range 15-34 [ 76.971996][ T4792] SELinux: failed to load policy [ 77.013851][ T4796] loop2: detected capacity change from 0 to 2048 [ 77.033675][ T4795] loop3: detected capacity change from 0 to 128 [ 77.041221][ T4795] EXT4-fs: Ignoring removed nobh option [ 77.050106][ T4795] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.139955][ T4801] loop4: detected capacity change from 0 to 128 [ 77.148673][ T4804] loop3: detected capacity change from 0 to 512 [ 77.185614][ T4804] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.197829][ T4804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.419: corrupted inode contents [ 77.198187][ T4804] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.419: mark_inode_dirty error [ 77.198489][ T4804] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.419: corrupted inode contents [ 77.199601][ T4804] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.419: mark_inode_dirty error [ 77.237796][ T4809] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 77.237824][ T4809] FAT-fs (loop4): Filesystem has been set read-only [ 77.237859][ T4809] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 77.311586][ T4814] random: crng reseeded on system resumption [ 77.397242][ T4816] netlink: 'syz.3.424': attribute type 7 has an invalid length. [ 77.405768][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 77.454538][ T4820] FAULT_INJECTION: forcing a failure. [ 77.454538][ T4820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.469093][ T4820] CPU: 0 UID: 0 PID: 4820 Comm: syz.3.427 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 77.469133][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.469152][ T4820] Call Trace: [ 77.469162][ T4820] [ 77.469173][ T4820] __dump_stack+0x1d/0x30 [ 77.469218][ T4820] dump_stack_lvl+0xe8/0x140 [ 77.469269][ T4820] dump_stack+0x15/0x1b [ 77.469285][ T4820] should_fail_ex+0x265/0x280 [ 77.469345][ T4820] should_fail+0xb/0x20 [ 77.469515][ T4820] should_fail_usercopy+0x1a/0x20 [ 77.469548][ T4820] strncpy_from_user+0x25/0x230 [ 77.469708][ T4820] ? kmem_cache_alloc_noprof+0x186/0x310 [ 77.469740][ T4820] ? getname_flags+0x80/0x3b0 [ 77.469765][ T4820] getname_flags+0xae/0x3b0 [ 77.469798][ T4820] do_sys_openat2+0x60/0x110 [ 77.469841][ T4820] __se_sys_openat2+0x194/0x1f0 [ 77.469871][ T4820] __x64_sys_openat2+0x55/0x70 [ 77.469943][ T4820] x64_sys_call+0x21e0/0x2fb0 [ 77.469983][ T4820] do_syscall_64+0xd2/0x200 [ 77.470027][ T4820] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.470092][ T4820] ? clear_bhb_loop+0x40/0x90 [ 77.470115][ T4820] ? clear_bhb_loop+0x40/0x90 [ 77.470138][ T4820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.470160][ T4820] RIP: 0033:0x7f8097f2e9a9 [ 77.470180][ T4820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.470198][ T4820] RSP: 002b:00007f8096597038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 77.470219][ T4820] RAX: ffffffffffffffda RBX: 00007f8098155fa0 RCX: 00007f8097f2e9a9 [ 77.470235][ T4820] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 77.470252][ T4820] RBP: 00007f8096597090 R08: 0000000000000000 R09: 0000000000000000 [ 77.470269][ T4820] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 77.470329][ T4820] R13: 0000000000000000 R14: 00007f8098155fa0 R15: 00007ffc9f2e5d48 [ 77.470351][ T4820] [ 77.702276][ T4822] loop4: detected capacity change from 0 to 1024 [ 77.782208][ T4831] loop4: detected capacity change from 0 to 736 [ 77.800125][ T4831] rock: directory entry would overflow storage [ 77.806583][ T4831] rock: sig=0x3b10, size=4, remaining=3 [ 77.874872][ T4836] loop4: detected capacity change from 0 to 128 [ 77.898516][ T4836] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 77.914849][ T4836] FAT-fs (loop4): Filesystem has been set read-only [ 77.923244][ T4836] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 78.019799][ T4842] loop1: detected capacity change from 0 to 2048 [ 78.055234][ T3305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.057021][ T4759] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079213][ T4845] loop4: detected capacity change from 0 to 128 [ 78.080811][ T3305] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.093034][ T4759] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107517][ T4759] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.131921][ T4759] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.138779][ T4845] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 78.151667][ T4845] FAT-fs (loop4): Filesystem has been set read-only [ 78.159005][ T4845] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 78.180327][ T30] kauditd_printk_skb: 375 callbacks suppressed [ 78.180346][ T30] audit: type=1326 audit(1752966919.430:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 78.220315][ T30] audit: type=1326 audit(1752966919.430:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 78.261727][ T4852] loop1: detected capacity change from 0 to 1024 [ 78.265664][ T30] audit: type=1326 audit(1752966919.500:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.292852][ T30] audit: type=1326 audit(1752966919.500:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.299505][ T4854] loop2: detected capacity change from 0 to 1024 [ 78.317083][ T30] audit: type=1326 audit(1752966919.500:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.317173][ T30] audit: type=1326 audit(1752966919.500:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.317209][ T30] audit: type=1326 audit(1752966919.500:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.317241][ T30] audit: type=1326 audit(1752966919.500:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.317279][ T30] audit: type=1326 audit(1752966919.500:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.317376][ T30] audit: type=1326 audit(1752966919.500:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc93812e9a9 code=0x7ffc0000 [ 78.438178][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 78.520472][ T4869] loop4: detected capacity change from 0 to 512 [ 78.554057][ T4869] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 78.572678][ T4869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.591058][ T4869] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.444: Block bitmap for bg 0 marked uninitialized [ 78.626869][ T4869] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.643512][ T4869] EXT4-fs (loop4): 1 orphan inode deleted [ 78.658005][ T4869] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 78.682308][ T4869] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 78.695736][ T4869] netlink: 96 bytes leftover after parsing attributes in process `syz.4.444'. [ 78.705352][ T4881] vxcan1 speed is unknown, defaulting to 1000 [ 78.725133][ T4884] loop1: detected capacity change from 0 to 1024 [ 78.735294][ T4877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'. [ 78.735351][ T4884] EXT4-fs: Ignoring removed nobh option [ 78.750462][ T4884] EXT4-fs: Ignoring removed bh option [ 78.784383][ T4888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.840706][ T4869] lo speed is unknown, defaulting to 1000 [ 78.848340][ T4888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.866124][ T4869] lo speed is unknown, defaulting to 1000 [ 78.872339][ T4869] lo speed is unknown, defaulting to 1000 [ 78.880168][ T4869] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.888041][ T4869] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.919733][ T4888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.949397][ T4869] lo speed is unknown, defaulting to 1000 [ 78.955551][ T4869] lo speed is unknown, defaulting to 1000 [ 78.963756][ T4888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.979632][ T4869] lo speed is unknown, defaulting to 1000 [ 78.985349][ T4884] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, [ 78.985986][ T4869] lo speed is unknown, defaulting to 1000 [ 78.986295][ T4869] lo speed is unknown, defaulting to 1000 [ 78.986630][ T4869] lo speed is unknown, defaulting to 1000 [ 78.994288][ T4884] inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 79.070307][ T3307] EXT4-fs unmount: 22 callbacks suppressed [ 79.070328][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.096376][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.124158][ T4895] loop4: detected capacity change from 0 to 1024 [ 79.159917][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.175651][ T4899] loop1: detected capacity change from 0 to 128 [ 79.257841][ T4895] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 79.270293][ T4895] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.270293][ T4895] [ 79.280047][ T4895] EXT4-fs (loop4): Total free blocks count 0 [ 79.286357][ T4895] EXT4-fs (loop4): Free/Dirty block details [ 79.292340][ T4895] EXT4-fs (loop4): free_blocks=0 [ 79.297342][ T4895] EXT4-fs (loop4): dirty_blocks=0 [ 79.302475][ T4895] EXT4-fs (loop4): Block reservation details [ 79.308538][ T4895] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 79.316311][ T4905] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 79.324748][ T4905] FAT-fs (loop1): Filesystem has been set read-only [ 79.358080][ T4905] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 79.368169][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.413580][ T4906] tipc: Started in network mode [ 79.418755][ T4906] tipc: Node identity 3a1808c32a5d, cluster identity 4711 [ 79.426404][ T4906] tipc: Enabled bearer , priority 0 [ 79.435344][ T4904] tipc: Resetting bearer [ 79.458833][ T4904] tipc: Disabling bearer [ 79.468421][ T4908] vxcan1 speed is unknown, defaulting to 1000 [ 79.582844][ T4920] loop1: detected capacity change from 0 to 512 [ 79.589858][ T4908] lo speed is unknown, defaulting to 1000 [ 79.642054][ T4920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.667462][ T4921] vxcan1 speed is unknown, defaulting to 1000 [ 79.674214][ T4920] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.712116][ T4921] lo speed is unknown, defaulting to 1000 [ 79.712729][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.750524][ T4927] loop1: detected capacity change from 0 to 512 [ 79.772349][ T4927] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.790210][ T4927] EXT4-fs (loop1): mount failed [ 79.948948][ T4939] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 80.063176][ T4942] vxcan1 speed is unknown, defaulting to 1000 [ 80.124863][ T4942] lo speed is unknown, defaulting to 1000 [ 80.489786][ T4946] tipc: Started in network mode [ 80.494793][ T4946] tipc: Node identity c2b1fffe18c7, cluster identity 4711 [ 80.502568][ T4946] tipc: Enabled bearer , priority 0 [ 80.519750][ T4945] tipc: Resetting bearer [ 80.540798][ T4945] tipc: Disabling bearer [ 80.660954][ T4962] program syz.4.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.818128][ T4969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 80.832011][ T4969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 80.844736][ T4969] netlink: 'syz.1.478': attribute type 7 has an invalid length. [ 80.852649][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 80.919663][ T4973] loop1: detected capacity change from 0 to 736 [ 81.458264][ T4982] tipc: Enabled bearer , priority 0 [ 81.466909][ T4981] tipc: Resetting bearer [ 81.480134][ T4981] tipc: Disabling bearer [ 81.505684][ T4984] loop4: detected capacity change from 0 to 2048 [ 81.559151][ T4988] FAULT_INJECTION: forcing a failure. [ 81.559151][ T4988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.572872][ T4988] CPU: 1 UID: 0 PID: 4988 Comm: syz.3.487 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 81.572922][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.572939][ T4988] Call Trace: [ 81.572948][ T4988] [ 81.572958][ T4988] __dump_stack+0x1d/0x30 [ 81.572987][ T4988] dump_stack_lvl+0xe8/0x140 [ 81.573014][ T4988] dump_stack+0x15/0x1b [ 81.573037][ T4988] should_fail_ex+0x265/0x280 [ 81.573145][ T4988] should_fail+0xb/0x20 [ 81.573182][ T4988] should_fail_usercopy+0x1a/0x20 [ 81.573224][ T4988] _copy_from_user+0x1c/0xb0 [ 81.573340][ T4988] ___sys_sendmsg+0xc1/0x1d0 [ 81.573402][ T4988] __x64_sys_sendmsg+0xd4/0x160 [ 81.573456][ T4988] x64_sys_call+0x2999/0x2fb0 [ 81.573499][ T4988] do_syscall_64+0xd2/0x200 [ 81.573519][ T4988] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.573553][ T4988] ? clear_bhb_loop+0x40/0x90 [ 81.573579][ T4988] ? clear_bhb_loop+0x40/0x90 [ 81.573667][ T4988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.573695][ T4988] RIP: 0033:0x7f8097f2e9a9 [ 81.573713][ T4988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.573802][ T4988] RSP: 002b:00007f8096597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.573826][ T4988] RAX: ffffffffffffffda RBX: 00007f8098155fa0 RCX: 00007f8097f2e9a9 [ 81.573842][ T4988] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 81.573859][ T4988] RBP: 00007f8096597090 R08: 0000000000000000 R09: 0000000000000000 [ 81.573875][ T4988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.573891][ T4988] R13: 0000000000000000 R14: 00007f8098155fa0 R15: 00007ffc9f2e5d48 [ 81.573957][ T4988] [ 81.782595][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 81.792183][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 81.804080][ T4992] netlink: 'syz.3.490': attribute type 7 has an invalid length. [ 81.812030][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 81.880437][ T4999] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 81.888981][ T4999] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 82.074210][ T5007] tipc: Started in network mode [ 82.079209][ T5007] tipc: Node identity 862784496f21, cluster identity 4711 [ 82.086516][ T5007] tipc: Enabled bearer , priority 0 [ 82.097636][ T5006] tipc: Resetting bearer [ 82.129377][ T5006] tipc: Disabling bearer [ 82.270598][ T4888] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.308348][ T4888] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.403814][ T4888] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447514][ T4888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.640506][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 82.654072][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 82.664491][ T5028] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 82.701072][ T5026] netlink: 'syz.0.503': attribute type 7 has an invalid length. [ 82.709949][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 82.728545][ T5034] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 82.826513][ T5037] tipc: Enabling of bearer rejected, failed to enable media [ 82.872661][ T5052] loop2: detected capacity change from 0 to 1024 [ 82.933461][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.982074][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.051369][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 83.094098][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 83.139995][ T5070] netlink: 'syz.2.519': attribute type 7 has an invalid length. [ 83.147718][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 83.199482][ T5081] netlink: 'syz.0.525': attribute type 2 has an invalid length. [ 83.227391][ T5081] tipc: Enabling of bearer rejected, failed to enable media [ 83.307701][ T5087] tipc: Enabled bearer , priority 0 [ 83.332710][ T5082] tipc: Resetting bearer [ 83.357365][ T5082] tipc: Disabling bearer [ 83.504441][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 83.504534][ T30] audit: type=1400 audit(1752966924.750:2465): avc: denied { remount } for pid=5094 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.536439][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 83.577681][ T5098] loop4: detected capacity change from 0 to 512 [ 83.588833][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.596450][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.619211][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.626820][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.679641][ T5098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.697355][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 83.723603][ T5098] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.767064][ T5098] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 83.800718][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.825062][ T5110] loop1: detected capacity change from 0 to 1024 [ 83.844878][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.907930][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.049442][ T5121] netlink: 'syz.1.536': attribute type 7 has an invalid length. [ 84.058263][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 84.077811][ T5124] loop2: detected capacity change from 0 to 512 [ 84.093068][ T5124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.114113][ T5124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 84.136520][ T5124] EXT4-fs (loop2): 1 truncate cleaned up [ 84.143907][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.168410][ T30] audit: type=1326 audit(1752966925.410:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 84.197510][ T30] audit: type=1326 audit(1752966925.410:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 84.227827][ T30] audit: type=1326 audit(1752966925.410:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 84.255957][ T30] audit: type=1326 audit(1752966925.410:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 84.285093][ T30] audit: type=1326 audit(1752966925.410:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa07b0e9a9 code=0x7ffc0000 [ 84.320289][ T5124] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 84.335175][ T5132] loop3: detected capacity change from 0 to 512 [ 84.347250][ T5124] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.359156][ T5132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.382956][ T5132] EXT4-fs (loop3): 1 truncate cleaned up [ 84.391432][ T5132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.417733][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.484739][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.495674][ T30] audit: type=1326 audit(1752966925.740:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 84.542769][ T5150] loop4: detected capacity change from 0 to 128 [ 84.561239][ T5153] loop3: detected capacity change from 0 to 736 [ 84.563724][ T5155] loop2: detected capacity change from 0 to 1024 [ 84.576215][ T30] audit: type=1326 audit(1752966925.740:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 84.602737][ T30] audit: type=1326 audit(1752966925.740:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 84.630023][ T30] audit: type=1326 audit(1752966925.740:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c983e9a9 code=0x7ffc0000 [ 84.669726][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.725305][ T5162] vxcan1 speed is unknown, defaulting to 1000 [ 84.738124][ T5155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 84.753135][ T5155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.753135][ T5155] [ 84.766345][ T5155] EXT4-fs (loop2): Total free blocks count 0 [ 84.774531][ T5155] EXT4-fs (loop2): Free/Dirty block details [ 84.781698][ T5155] EXT4-fs (loop2): free_blocks=0 [ 84.787422][ T5155] EXT4-fs (loop2): dirty_blocks=0 [ 84.793130][ T5155] EXT4-fs (loop2): Block reservation details [ 84.799441][ T5155] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 84.810709][ T5150] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 84.824705][ T5150] FAT-fs (loop4): Filesystem has been set read-only [ 84.836088][ T5150] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 84.867315][ T5162] lo speed is unknown, defaulting to 1000 [ 84.889569][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.905962][ T5167] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 84.918835][ T5167] netlink: 'syz.3.553': attribute type 4 has an invalid length. [ 85.056262][ T5179] loop3: detected capacity change from 0 to 512 [ 85.202548][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.248180][ T5179] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.267262][ T5179] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.556: corrupted inode contents [ 85.282757][ T5179] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.556: mark_inode_dirty error [ 85.321129][ T5179] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.556: corrupted inode contents [ 85.335879][ T5179] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.556: mark_inode_dirty error [ 85.532856][ T5190] vxcan1 speed is unknown, defaulting to 1000 [ 85.682081][ T5190] lo speed is unknown, defaulting to 1000 [ 85.855692][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.893564][ T5195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.949951][ T5195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.001160][ T5202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 86.012525][ T5202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 86.018937][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 86.064265][ T5195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.100515][ T5202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 86.112406][ T5202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 86.129243][ T5205] loop3: detected capacity change from 0 to 512 [ 86.158200][ T5195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.194296][ T5212] loop3: detected capacity change from 0 to 128 [ 86.208448][ T5202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 86.219001][ T5202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 86.236426][ T5208] vxcan1 speed is unknown, defaulting to 1000 [ 86.278201][ T5208] lo speed is unknown, defaulting to 1000 [ 86.293603][ T5195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.309150][ T5213] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 86.318973][ T5213] FAT-fs (loop3): Filesystem has been set read-only [ 86.319060][ T5213] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 86.319796][ T5195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.364350][ T5195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.375942][ T5202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52936 - 0 [ 86.386430][ T5202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 86.424238][ T5195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.463088][ T5202] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 52936 - 0 [ 86.472312][ T5202] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.495724][ T5202] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 52936 - 0 [ 86.505941][ T5202] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.538336][ T5202] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 52936 - 0 [ 86.547704][ T5202] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.571844][ T5202] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 52936 - 0 [ 86.581689][ T5202] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 86.581964][ T5220] hub 2-0:1.0: USB hub found [ 86.606891][ T5220] hub 2-0:1.0: 8 ports detected [ 87.444689][ T5246] loop3: detected capacity change from 0 to 1024 [ 87.511088][ T5246] EXT4-fs: Ignoring removed nobh option [ 87.517180][ T5246] EXT4-fs: Ignoring removed bh option [ 87.634984][ T5251] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.651098][ T5246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.690468][ T5246] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 87.718999][ T3401] ================================================================== [ 87.728182][ T3401] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 87.735654][ T3401] [ 87.738349][ T3401] read-write to 0xffff888237c29d24 of 4 bytes by task 9 on cpu 0: [ 87.748263][ T3401] wq_worker_running+0x95/0x120 [ 87.754283][ T3401] schedule_timeout+0xb7/0x170 [ 87.759969][ T3401] msleep+0x50/0x90 [ 87.764289][ T3401] nsim_fib_event_work+0x1ebc/0x21a0 [ 87.770689][ T3401] process_scheduled_works+0x4cb/0x9d0 [ 87.776461][ T3401] worker_thread+0x582/0x770 [ 87.781587][ T3401] kthread+0x489/0x510 [ 87.785937][ T3401] ret_from_fork+0xda/0x150 [ 87.790920][ T3401] ret_from_fork_asm+0x1a/0x30 [ 87.795974][ T3401] [ 87.798407][ T3401] read to 0xffff888237c29d24 of 4 bytes by task 3401 on cpu 1: [ 87.806509][ T3401] kick_pool+0x49/0x2d0 [ 87.810964][ T3401] __queue_work+0x8d6/0xb60 [ 87.816198][ T3401] queue_work_on+0xd1/0x160 [ 87.820943][ T3401] process_srcu+0x999/0xbc0 [ 87.826084][ T3401] process_scheduled_works+0x4cb/0x9d0 [ 87.831598][ T3401] worker_thread+0x582/0x770 [ 87.837168][ T3401] kthread+0x489/0x510 [ 87.842137][ T3401] ret_from_fork+0xda/0x150 [ 87.848326][ T3401] ret_from_fork_asm+0x1a/0x30 [ 87.853853][ T3401] [ 87.856457][ T3401] value changed: 0x00000000 -> 0x00000001 [ 87.862717][ T3401] [ 87.865145][ T3401] Reported by Kernel Concurrency Sanitizer on: [ 87.871473][ T3401] CPU: 1 UID: 0 PID: 3401 Comm: kworker/1:5 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 87.885738][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.896688][ T3401] Workqueue: rcu_gp process_srcu [ 87.902282][ T3401] ================================================================== [ 87.923277][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.