last executing test programs: 2.853287366s ago: executing program 3 (id=4636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000100001002abd7004ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="104e0600016a030058001280110001006272696467655f736c617665000000004000058004001800060002000e000000050001"], 0x78}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05b90be2495f467d25159c564661d11040413840a187d5b330932fec03b00c6d6277b2c6d96f3c1a70eb676e74d49f4081bd9535039b69701c23d30986fadc5d8da42be2cd655b607d2b3cf5de4039aa0781503924f40f8ad7fd1514cfabb36f54813eafe8a7f1a6e8d2f9a55dbeb44043663fdc71f4dee18a2ac0d10d4a47f7577555887ce701a854c2744dfc43ef432d64f2", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="03000000020000000300"/28], 0x50) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="000000007b8af8ff000000"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x5}, 0x18) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r6, r9, 0xfffffffffffffc01, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0x34, 0x18, 0x300, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x255}}]}]}, 0x34}}, 0x0) 2.704722099s ago: executing program 0 (id=4640): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x8}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) close(r2) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='GPL\x00', 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f00000002c0)={[{@noblock_validity}, {@dioread_lock}, {@nobarrier}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x0, 0x459, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000000)='./file0\x00', 0x21ea0995) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)={0x1, 0x0, @auto=[0x22, 0x28, 0x2f, 0x16, 0x39, 0x20, 0x26, 0x12]}, 0x10, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x9}, 0x1c) 2.592460301s ago: executing program 2 (id=4641): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800040, &(0x7f0000000200)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0x3, 0x589, &(0x7f0000001d80)="$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") open(0x0, 0x64842, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c40)="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", 0x2d1}], 0x1}}], 0x1, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 2.561456911s ago: executing program 2 (id=4642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$tun(r0, 0x0, 0xfebd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 2.402892433s ago: executing program 4 (id=4644): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5673}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.354645644s ago: executing program 4 (id=4645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {}, {@stripe={'stripe', 0x3d, 0x1ff}}, {@resgid}, {@orlov}, {@grpjquota, 0x2e}, {@bh}, {@errors_remount}, {@nomblk_io_submit}, {@delalloc}], [], 0x2c}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000af1000000000000000000000a02000000000000000000000b000100000000000000000005000000000000"], 0x0, 0x56}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)=""/231, 0xe7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x0, &(0x7f0000001700)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRES32=r2], 0x0, 0xffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="852000000400000085100900000000000000fcff0800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001830000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018200000", @ANYRES32=r4, @ANYBLOB="000000001300000090980000fcffffff183000000500"/32], &(0x7f0000000040)='GPL\x00', 0x5, 0x48, &(0x7f00000002c0)=""/72, 0x40f00, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x5, 0x5, 0xc}], 0x10, 0x1}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000400)=r10) 2.044422759s ago: executing program 3 (id=4647): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.97283773s ago: executing program 4 (id=4648): socket$inet6(0xa, 0x2, 0x3a) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "2308d3", 0x1000, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1}}}}}}}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, 0x0, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0xb88, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x4, 0x2, 0x10, 0x6, 0xbc4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x6c, 0x5, 0x24, 0x10, 0xc, 0x48, 0xa791548275c7500a, 0x60, 0x4, 0x3, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x4, 0x5, 0x7, 0x7, 0x0, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x6, 0x5, 0x6, 0xf, 0x3, 0xfc7, 0x10]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6, 0x9, 0x1b, 0xc]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x100, 0x1, 0xf001, 0x2c95, 0xea, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x6}, {0x4, 0x2}, {0x5, 0x8}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x2}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x1}, {}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0xff, 0x30, 0x8, 0x1, 0x6, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x1, 0x1b, 0x12, 0xc, 0x1b, 0x24, 0x4, 0x30, 0x6, 0x24, 0x12, 0x38, 0x18, 0x2, 0x18, 0x36, 0x60, 0x24, 0x60, 0xb, 0x24, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x82, 0x7, 0x9, 0x8, 0x3, 0x43, 0x2, 0xfffb]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x4}, {0x4, 0x2}, {0x4}, {0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x1}, {}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x8}, {0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x9}, {0x7, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xe, 0x0, 0xfff4, 0xc3, 0x10, 0x6, 0x491]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x1, 0x4, 0x24, 0xc, 0x9, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6956, 0x1, 0x81, 0x5, 0x7fff, 0x8, 0x6]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x1}, {0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x7}, {0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x6, 0x4}, {0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0xa}, {0x6, 0x8}, {}, {0x0, 0xa}, {0x7, 0x2}, {0x5}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x1}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xff, 0x400, 0x3, 0x9, 0x0, 0xa8fc]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x6c, 0xc, 0x48, 0x30, 0xc, 0x48, 0x4, 0x18, 0x18, 0x1, 0x16, 0x3bd1b5f7abb703d, 0x6c, 0xb, 0x24, 0x60, 0x6, 0x16]}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x1}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x3, 0x6}, {0x4, 0x5}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x3, 0xcd, 0x3, 0x1, 0x6, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x5, 0xfffb, 0xc4, 0xb136, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x30, 0xc, 0x5, 0x30, 0xb, 0x6c, 0x16, 0x30, 0x24, 0x30, 0x36, 0x16, 0x9, 0x6c, 0x9, 0x2, 0x3b, 0x6c, 0x30, 0x0, 0x4, 0x60, 0xb, 0x16, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x6c, 0x16, 0x5, 0x2, 0x6c, 0x6, 0x30, 0x9, 0x2, 0x9, 0xb, 0xf, 0x12, 0x60, 0x48, 0x48, 0x12, 0x30, 0x60, 0x5, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x30, 0x48, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x1}, {0x5}, {0x6, 0x5}, {0x4}, {0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x14}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x1e}, {0x6, 0xa}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x5}, {0x6, 0x9}, {}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8213, 0x9, 0x401, 0x49c, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x2, 0x9a, 0xffff, 0x7, 0x1ff, 0x58bc, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x21e5, 0x3b2, 0x200, 0x0, 0x9, 0xd, 0x4, 0x100]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2264, 0x3, 0x10, 0x5, 0x8, 0x0, 0x7, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x36, 0x30, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x7, 0x6, 0x7, 0x1000, 0x809, 0x19]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x40, 0x2, 0x7, 0x120, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x6}, {0x7, 0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x6}, {0x4, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x6}, {0x0, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf2, 0x5, 0xff, 0x7, 0x5, 0x4, 0x7, 0x400]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1}, {0x7, 0x8}, {0x5, 0x7}, {0x7, 0x6}, {0x6, 0x6}, {0x4, 0x3}, {0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x9, 0x44f7, 0xffc, 0x1, 0x0, 0x3]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x36, 0x36, 0xa, 0x2, 0x1, 0x36, 0x6c, 0x13, 0x16, 0x16, 0x37, 0x1, 0x36, 0x18, 0x18, 0x1, 0x16, 0x30, 0x36, 0x1, 0x9, 0x6c, 0x60, 0x36, 0x6, 0x30, 0x2, 0x4, 0x2, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc446, 0x0, 0xfffb, 0x3963, 0x800, 0x3, 0x0, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x8}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x2}, {0x3}, {0x3}, {0x1, 0x4}, {0x3}, {0x4, 0x7}, {0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0xa}, {0x4}, {0x7, 0x2}, {}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x662, 0x5, 0x0, 0x1, 0x9, 0xabaa, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfb2, 0x3ff, 0xfffd, 0x800, 0x401, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x30, 0x1b, 0x9, 0x30, 0x9, 0x3, 0xc, 0x36, 0x60, 0x18, 0x5, 0x12, 0x1, 0xc, 0xc, 0x30, 0x36, 0x1, 0x3, 0x6, 0x5, 0x30, 0x6, 0x3, 0xb, 0x12, 0x2, 0x36, 0x12, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x530, 0x9, 0xa19, 0x8, 0x1, 0xe0f, 0x14df, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x6, 0x8, 0xc, 0x6, 0x7, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x4, 0x1, 0x7fff, 0xddd, 0x800, 0x4]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x5, 0x7}, {0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x8}, {0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x1}, {0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x7}, {0x6, 0x7}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x8}, {0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x6, 0x1b, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3170, 0x3555, 0x0, 0x9670, 0x6, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x7, 0xb, 0x4, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x6}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff, 0x7, 0x5, 0x6, 0x6, 0x7, 0x5]}}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x4}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x5}, {0x6, 0x5}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x1b, 0xc, 0xb, 0x1, 0x9, 0x30, 0x6c, 0x16, 0x30, 0x9, 0x1, 0x1, 0x3, 0x1b, 0x3, 0x5, 0x2, 0x18, 0x1b, 0x18, 0x20, 0x18, 0x4, 0x16, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x7, 0x2, 0xf3c, 0x0, 0xf0c5, 0x9, 0x40]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x12, 0x16, 0x1, 0xc, 0x12, 0x0, 0x48, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x1, 0x18, 0xb, 0x18, 0x30, 0x19f09b970e64c93a, 0x12, 0x12, 0x16, 0x6, 0x2, 0x2, 0x36, 0x1, 0x2, 0x3, 0x24, 0x3, 0x36, 0x9, 0x16, 0x1b, 0x5, 0x5, 0x60, 0x60, 0x2, 0x18, 0xb, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x7, 0xf, 0x7, 0x5, 0x5, 0x5]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x5, 0xa}, {0x3, 0x5}, {0x4, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0xa}, {0x2, 0x5}, {}, {0x6, 0x2}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x8}, {0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x9}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x1ff, 0x8, 0xfff, 0x9, 0x1, 0xfff0]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x16, 0x3, 0xb, 0x3, 0x1, 0x60, 0x3, 0x11, 0x1, 0x16, 0x43, 0x6c, 0x16, 0x18, 0x21, 0x30, 0x3b, 0x1b, 0x60, 0x9, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x5}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x8}, {0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x9}, {}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x3}, {0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x2}, {0x3, 0x5}, {0x5, 0xa}, {}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x4, 0x1d}, {0x7, 0x9}, {0x6, 0x9}, {0x3, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x6c, 0x60, 0x5, 0x1, 0xc, 0x1b, 0x6c, 0x5, 0x48, 0x9, 0x5b, 0x5, 0x6, 0x18, 0x24, 0x60, 0x60, 0xb, 0x39, 0x1b, 0x18, 0x30, 0x36, 0x1, 0x60, 0x60, 0x6c, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8001, 0x8, 0x8001, 0x647, 0x1ff, 0x4cd]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x1, 0x6, 0x9, 0xd47d, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f4, 0xa, 0x7, 0x7ff, 0x9, 0x8001, 0x9, 0xfe00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x7}, {0x3, 0x5}, {0x4}, {0x0, 0x8}, {0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x4}, {0x4, 0x2}, {0x2}, {0x5, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x5, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x7}, {}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x1}, {0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x80, 0xffff, 0x200, 0x1200, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89f7, 0x6, 0x1, 0x80, 0x1ff, 0x48, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x93a7, 0xbd6, 0x4, 0x8, 0x1c, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0xc, 0x36, 0x9, 0x60, 0x30, 0x48, 0x1b, 0x1b, 0x5, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x2, 0xe, 0x1ff, 0xfff9, 0x6, 0x5, 0x10]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x16, 0x1b, 0x60, 0x1b, 0x1, 0x5, 0x3, 0x12, 0xb, 0x48, 0x60, 0x36, 0x0, 0x18, 0x60, 0x1, 0x12, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x616, 0x70e, 0xffff, 0x40, 0x7, 0xff, 0x8, 0xcd5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fd, 0x200, 0x6, 0x4, 0x80, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x46, 0x36, 0x4, 0x6c, 0x60, 0x18, 0x16, 0x36, 0x12, 0x6, 0xc, 0xe, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x4, 0x81, 0x4, 0x85, 0x86, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xb88}}, 0x200440c1) 1.921169861s ago: executing program 4 (id=4649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x2, 0xf, 0x4, 0x7, 0x21, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x9e98daf160de81f3, 0x20, 0x0, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x4}}, @sadb_ident={0x2, 0x1, 0x2, 0x0, 0x7}, @sadb_x_sec_ctx={0x18, 0x18, 0x1, 0x3, 0xb4, "bf5bf5fbf4c088bc50a95109d0539b455271d8e596e22f422a968683cfa90a12cec72c62a635754615ea1cb36ac950f98ad20c72f1e0670728486f279b1a6567f77d3ef5ef00ed382efda24df92f14732fc182d041c77156860c8f22278cfc4ef0499634296e778f2b6c6218a94d9074852839a7aa4e4e8cf4e8c645031be9fcfcf509f785580aa375c65d0b60fbd84f97d352ad3c6b9ceefe3f0563db242849d4268a45e8b01d988d7837cb490139bc236dc83f"}]}, 0x108}}, 0x20000001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x88}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 1.847658672s ago: executing program 0 (id=4650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) unshare(0x22020400) r2 = socket$inet6(0xa, 0x80800, 0x0) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4, 0xfffffffc}, 0x63) 1.090565043s ago: executing program 1 (id=4651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000007569d1a61d6b90df13382c000000e9000000000000000000bb4d55276aaa21b5097295eb1294905e60fc2f44772c504046426c476a8d797f6e4f19e25a6d35c33da034c81f67b82ecc9a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sigaltstack(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f0000000700)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000140)="4401", 0x2}, {&(0x7f00000003c0)='O', 0x1}, {&(0x7f00000004c0)="1ca0c9120c66fe48fb8f9c3b747a7d146ae8ba9c7cf4a65e7650ee3a35b3f9230c0cb277468f20675f51512bdb08c356ecaf8f17240320c819d02a5afd3e167dfc77ad45ac765ca87dd817e4dcd9ed7f9719b6143000e4c111eb1900d2f09e28ad75cd6326b7d756", 0x68}, {&(0x7f0000003880)="673f47ecffa0931e47a2d733e7fbc5fe416b1745c8b23f6719f954db610e52b161430dd227163e54234db08c62c9e8ca8e033c9097881fa4a9cb2c6f7718ecf44c7e239197533337206481bc05ba7f915520fd88fc3b4b3b24c87c6b5e9c66542c52f0f72ea5a9abb6480cbcaf58bb4c3e644843a1040f409e6faec629010bab6dff34840450d44312189c1a045c3047c173d8ec1d20904c295edfadc83d96f9dba0dfdf352cbe104b36983c392fc6d659a80dd4a765632d8ecaeaed9ebf43dbc18e1819c1d2e8439d28dbbad53de4d5534a8c03429755e272f088b790d6429d607b8ee3644985e37eeecfdface47a0a95a106c67765486cbc1f6ee65de2be2a7c1f2a15b13f66eca7a9a5bee782d34c349041ce2616644b4105f2717bb6fb37ea400d8670196be77130d4e5cd058e4d9573e112162c38549f4eaa8389cdbed88937711d0331f37214891ddf5bae04c49f1e22ade15a241eadd055a1533ea77e9e972dc6488af378df87c6d35f157964a738bc978211d66beb7b9029911d635d258e81371ebae7986ad728fcc5c7fe731734b8fb3370eb263312a4ae763d60b5e70647afbc558e8b496355327363b2b0258940087a8a484b27763f943e31c1e3cb2bf9f6daebc6b5505e5bab5f62cc63b6bc9af9ae2ee5c2423dd6494d36989f257271f31e25c507b13c39089ca386e005216bf700051298f0e5f118da3c81b67f0f1e1a30601fe5e8b0c5cc5caed0f86030194d22904e05f85a21eb4d08e9339d86bc1cd6e96c51fad01d17749b7f1407149a0bc48797685f1e75805b2aad0b3a140bfbc82b5c38396060959d8a9faf76b1e5e7eb6758ab4a6b9268455a696b04e70b214e75796cc084043c9d193ce9eab5dcf57988f10d71346328e1b2c6daa7b50be4adc066f9b89b07f3f279e8f261611f18c03d5f916497469f15b1bb4af13ac64f4e66a70b8ab4cfa969f5cfb6d5e58e43ea0891b254c5ceb4ced9b8df0315816fae2435ff943333efecf97e0047146f9bfae92c6424ff2585ac6b0d3962ea409f498271f7dbde58daa67d7e5a13fe5e8f13ae72ef6591e90246329c6281e500a023be165ece88212b48a112da5e8ce3c57f948daeb0d29e648ba08a92867949da1f0ad3ec2dd414f62932de3c7d2a89feb42bccdf428288adedb639e09096f7ff54496a15562efe2265d63542ac40db836010971858a746bd785bb51ccfa0c796265153ff54ef2a79eb19a79dfc45b53138b2c0bb72b3f57ff39850262af83c4d0fe56f623d461a302d70ff5b4e89c72110e5150548621f91c0b052712ad27f234ab4b0741b8276a14e19765b6914e8a8aa738454dcdf5622e711746d4e02acd6cede80713a1a992ec9483e5f17c0ad0381848f217a255cc50c5057a48fc84b8e56e282963b4cfbea4cabde256e1be6730f34a8a40a7f8dcf18073266605aad1ae4a23abb52bbc45d65f9e3c2ecc2ee7b2b6c0a3dd50d1c5f5d0984dd065782beb14549de0d0b7efec65803404e2173f70904cd162a031d612dc2d103aeef1ea7247a327d1b7b8b255074973f01fb8df70567e25bfb4847d95fe68cb452cb5b0be380f680c91d74a36b4854154de8eee92675564c5976db7781d54c4423b9628b1aa403bb8c8fca6a1b72ad583ac50300d4a74dce81b3c6755bdb7b3a7059848f4c6d1e4e66a8f8bc1b6060c9230fba6a8aa25ffae0adeabbfcb7857a427436361d23e045d8e01cf33c23fb5f232bf8255fbfebf2a59e437be18f23e51422a45ac4e87e47bc82184e3ef442b906afe10ccbb573e72d82ec119c08f6d060346a34d9b6403359d929f7c5e8be074bef9e982376558e81206f93371ed8e7d86d319c9f616b9e7109fc0959dc0accf175f27da7deaa6ddd32912b6ad391662b8ec1bc7a7afca8f482dec3dfab1ce5020d7e32559669980e047ed158edd71924019cb1b61bc5b0e31c738f7a71c1eb403691daa0702ea6526881ff43f6dbdb8f96c30df4fa6183206e6c04a95f12c96fadb817b7e783463d143cb72154523eee32c5584a3fbda4fd80d62b4c901e287a4bdce5a0e38676f5ac667018d07c2f6aeba5e1bcdea2b3ea0a27d6d5a35582c0f8a56ee9dede52f8cd5f0f8c8c4a25575f78080ace222938bfcf70ebe0eb716edb43b540d9edc6aadc13d8ff91666c8b86d32cc07c2a8f69a4243a2b12645fe448dc14a85e0b1d13b0fc110839560c0af7c66c77a3e790a91a4e38db757df0a88570b2202f82e6c4cece0959b0809a953d03485f2a74e6bad91cddd648f8ff811102d0f1221f06288251f7ca12127d40af2863d59052bb53d362e4ca3cafc3dc127dc71dc0599bbe007bd199ff4fc743c3f44320ea4e3bb1d1664758473629fc028ecc12c1108c873ecf99c77b63c1b98e55dc91ea649fc1c93a8d2cb99353397c2acabf2c9ab8ec445a3512d94470f3d557bf65966350946950d2b96ce5ca1758d4cc56122afb29c581a9ab21e8793c2283c013ed996ae1c2387b8139e585eb5a604db0589da4dcfe352a4b671b5ccaf36b90225f27546fa3992e385f5a897b46f15dcf1f770a3c546020f2b08da7d41a7ffa3888a3e3fd2fa3383504997937031d252c63958d2eed962fc8fe5b92134ce0349a9e763f68dc1d0dfd9c6a87497749cffed312a268a6eab9e6cc195834ec46dc87325678e0527916df881a5d6cdf484bd92a1fd3dbc3669902a32388300dae1d28895fcba4ba0ad4ada3cc413d36419c21ca582c6d43fcd01beaad61b8bdbf08460e6a050e6601af45e36165ce37c0ab73fa8273a4409a927a03d3b855d62de0e685dc7ed460d4d4a6d4c485a685b0f730933cb6b8166993c894487461db65c8c7b7964b6996ca2b09bdeb5827f4393aa79633d77f1e7959cfd477d4b7b0b2aa8c6efc9b25b22a82ba6a8f95a7a6d80b74a9d51d00d614b1feb58ec4752127ad3c71d26114642b35c447334d9f7a8969d916db9bb15d3e2fc57f29f0d9af0b28f44f8ccd4cfd5d8110b470ca6e5702200d8865211b7bb51c9e6409f50d1ca3094c29637b468ce115cc4a2cfda11101ee3a92506929dc63825035942455334cc0efc0bbc9ee2afc410f8094cb0da1c0cf4cab6f239972c464852e3e617f417fa1c695b012058a21d31914e92f72ba8eb12b66159287605dccc15761a115f79a953bc5b6d646062565ce2ac6afcad39d4ba140209a7f50316dd4f69c08489bc8d0e17ecfee881f5dc1dbffbe4577efa7788ad8431e89392f92a76c7ea4e67cd1cb250c36f5a0b9aba5126328b150e27a72d62726e8df7fe83d5cfeda836bfe663da1d8f9698651a8cd1ee47fa61c49ee7dc0676dfc27960dd656acc16f70223a9c567380bc5de9d8c069aa05154b39fdbc8091f469cc8228a9e92b103abed9e7257f35dcd5c4b4a9ed7cf8ed843cfe7a7228c333a0d0a6add3c659f10118210b3977de764d98cc159886e9afcc2872587823844de9b6845ac4406b12a718eed65b6ec3ead700b680c100efb587d8c8107d74d83819b8ef4407a0336c1e1cb99716e381dff6e501773c54dbb5ce805e4373c05a98929aaca02709f1b2f6bc79f0c6d5010bc5558924de11a037d93e8937e99b3aab3d3185f079ac8860760336f8ee87f4de52848be9757508d24ddca62744c6a87fda363b4b25a9e51b7d877ec361f7b3a5fb48b4548e12218381081bf696d1dd8eb17ff0e471626659e0818212b63556b2d792f2c117934104e863aa5de2338a4affdad743a894e17ebdc5fee4892a7d2c191cf705e21378c1b7e196e55bce5552ddabd866a8a30bbc62a663abb6e4fb254704fbdc711bf9a7907ba18ae44f537928abd7fcda18b0da897c349b4cc8b0529ae713066b79b03581ff1a0fe4e4d3e40653b5d31e2509e5c2a47cd25ca7d7547ea59a041052cd310e2f1da8d1a934ea08d24883c872e9000a01cc1e32337b2387bc96eeb0a89dbdc0987d483c714525a43719eeaa0d4f02b61abd2afe7f4c4cb0c752580a8d96b8d33191e724549d8766b3e157aaccd6aae844763c62097c7ec6e15ba11a4f6f95e65125ca64a1184d254c7a212885ae29cc1cd0ecd815a0cb17d1ddb2bf7020abd0d029fa9c8e79743c11c284698312e6eb64347582ee697febb9867d560bbc92cf9f4070bab051650c98043461e0eefb2cb648d48633c8bfd92e53a6848d23b2d9ac95e16c1d51f84dde12d2321edc6817b3b53ee057d010d712849766851dc526c379f01bdebd1a1e1c0fbdef9689ebf35ae6408e19c1a8a8bafca34f17138e21c11eeffb20da772525526dca6a43ce4a2f3b561fb0208183d5e8e00ab221b5287d5a4542b68165d90b165b2f1bbb45d5ae6ed8b6ff5b1c255bb8dbee99c2d6db7f2b3b9fd7b765059f0b5af83dfab4d48cc8a8cba534936c672b1eac8581a52b4787eafcbca20e19738183aa0b0266515f41ec9f65addda3ae705932c9bc87675653ba8712c0ddfd9cc1575e48d097ae06c81782916dccf9c7fa37fa72565fc2928b783b2a6e43b52704ab263c273a1a4d62a1686d564daec0ed93468264700348addea664c2793fca13c409eae703335bbf4b16c2d0288b3fa029667423c5cbc11198716aa2d0ebae552d2c4703da8a24a7021a980ad6371521f2d1685841cc8a3f420ee46c9e538121a5475bd47635856dd4d3f745227c2101c489c412d449ebba1fa67329482d5bd1c3f9ba8daa325c19a60ef2081b4ded1282d4e0513c45f0bd52bc8ae3616fda2ed601f87f857a575288e2772b360a9fa41cacc66e09e3f2359a51ff903c66b4ebf39096858ca6f865b91e78e029cbaf61322b48c9c2fecfa87e5de58a5115bd9d1b6681cb73a224815239d35e70a54ff5cbe5f401a4c940eeed6c1f18d380da1fa404d11d3fa439ceee82b8a9342510c81efb95d10d8b4018c74380bb7b9928e21519f5ab318cd43485f44730da4a1d7dd3342a96b7d45d565cda90370c394dc409ad785a0e2900379386daea8e89712cab38e9dad379cb9562b36cfe176f3b4a83d3c06384f8145fc676d6a346cda727a5326a0dad23ca66d9f224ef92008ef334e2652c2988ff2a9b777783015ab2f238481680b36dab4c3485cb0c27385dab01185ecb44972c304c6b7d338c1c6c7e7eee1587a14699464ea8bdef515b5d0d6f86f094b8381f49554a718114114e95f5a6b24cae0a003da7709fddb935e20a914de68e9f716ca75f7eb902b0adcd988bb52958a6f3ce5f2129f0386410b1aaed08dfa9d63191e8b992a0b3843aabf9cc2a867648862c23cbab25c6c2a7a793732afefc236ccd2cb82cf05e5f2a0a8114ded67c1287e08ebb97b5242d760c74db1c05c144be9d74d8ed485c30d43485be7c04d81da0b57973bef41e9fb58e1d52e85f23f520dc6cfed009b9add75ccf9105373067cca5f3052a3950e310e16c3190196e4109e2167d9cc24d7ad2a1b859a8062af8eb99979b051a486eb0b0df1f804cf00bd815ad67cd8fa2433d594f7c69719f98cfd76e3f30d81c860e3d12c5d9c28bbc26b36e1a45eedf6b725d22963398c5dda4f23ff0c874baae6fe3128eb0335d7e0a23a74c9a78ba2aa74764df719e23d3902ebf64e9621b728bdba49a8434aed3fe4656429855274303b5cd56b477e88dc8662c3ab823dd1939259f8a62b0131c40ebe541438b4e917209d9bfbcf4c1faf2154b8a9db742731cc725e896aa491f370932c88ef625ca7d6bd759d01daa8a85ac8ae1f8051bdc0bf4d8899099437c566fa4fb2b682843b07ead18e8b96daf3538a3b07f8b8452d5ba72e886b068bd3c", 0x1000}, {&(0x7f0000000a80)="4c5b139b008db4a15b26d1429e5f3ff10dd4cf87c896aa66d2031454f8222d1d75f0a8d1dfdc5c17085a1f6ad66e7761d3cca7127f87dd223dcdf698ad2e9ee516d41eea2e36e3452fe770af878c8d603f3580e0fa659105fb5fc24ddcce8db6674b751560621b5aa530e7cb2956582c17a7a0f28752497d3d3ce3bbffc17b2be11cee38de095a92af0bd5f56c4594feff87a682a110245347483021ac11bb76ac3937ee68cf1b453dae5e1d1d7e9356e1214584747c9a26a54a9332679974c9439f68ef41b553da11ef503ded972a5cb9c75a367b2759e03979f3db1c6d661d82ab8a558805c0", 0xe7}], 0x6) 1.064516454s ago: executing program 3 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.061044934s ago: executing program 0 (id=4653): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.027241324s ago: executing program 0 (id=4654): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x32) 993.455965ms ago: executing program 2 (id=4655): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) 968.611435ms ago: executing program 4 (id=4656): r0 = memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x17) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa44, 0x2, 0x0, 0x9, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) set_mempolicy(0x8006, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000008009ecda3cd0000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000440)=0x10001, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) 963.126996ms ago: executing program 3 (id=4657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) unshare(0x22020400) r2 = socket$inet6(0xa, 0x80800, 0x0) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x6, 0x4, 0x1, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x63) 933.461186ms ago: executing program 1 (id=4658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 885.112466ms ago: executing program 3 (id=4659): r0 = memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x17) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa44, 0x2, 0x0, 0x9, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000008009ecda3cd0000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000440)=0x10001, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) 883.793297ms ago: executing program 0 (id=4660): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0x8}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) close(r3) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='GPL\x00', 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f00000002c0)={[{@noblock_validity}, {@dioread_lock}, {@nobarrier}, {@nojournal_checksum}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x0, 0x459, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000000)='./file0\x00', 0x21ea0995) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)={0x1, 0x0, @auto=[0x22, 0x28, 0x2f, 0x16, 0x39, 0x20, 0x26, 0x12]}, 0x10, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x9}, 0x1c) 876.698857ms ago: executing program 1 (id=4661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rmdir(0x0) (fail_nth: 2) 581.495011ms ago: executing program 1 (id=4662): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 575.951581ms ago: executing program 3 (id=4663): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) 548.641702ms ago: executing program 4 (id=4664): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 366.653144ms ago: executing program 1 (id=4665): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, 0x0, 0x0}, 0x20) mkdir(0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x208442, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r3, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) pivot_root(0x0, 0x0) io_uring_enter(r3, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 203.021027ms ago: executing program 2 (id=4666): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000001d3d0dc41b6300"/26, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) keyctl$instantiate(0xc, r1, &(0x7f0000000700)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '/dev/snapshot\x00', 0x20, 0x5, 0x20, [0x30, 0xfa, 0x32, 0x30, 0x32, 0x63, 0x33, 0x35, 0x37, 0x36]}, 0x42, r1) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/73, 0x49}], 0x1) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="c8", 0x1}], 0x1}, 0x800) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x1) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x3a, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = inotify_init1(0x100000) fcntl$notify(r6, 0x402, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) keyctl$chown(0x4, r1, 0xee01, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 27.11546ms ago: executing program 2 (id=4667): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x10, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES64=r5], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x1a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8000000000}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) r12 = creat(&(0x7f0000000140)='./file0\x00', 0x2) close(r12) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x44000) r15 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r15, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="010000004d9eaff1ad704c982bbad9ae5bc645b3249c231119015241e4ea", @ANYRES16=r14, @ANYBLOB="08002dbd7000fedbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100010032000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x80090) recvmmsg(r15, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r15}}) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r8, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r16 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r16) 26.35599ms ago: executing program 1 (id=4668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 875.81µs ago: executing program 2 (id=4669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{0x0}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {}, {@stripe={'stripe', 0x3d, 0x1ff}}, {@resgid}, {@orlov}, {@grpjquota, 0x2e}, {@bh}, {@errors_remount}, {@nomblk_io_submit}, {@delalloc}], [], 0x2c}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00"/43], 0x0, 0x56}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)=""/231, 0xe7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x0, &(0x7f0000001700)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRES32=r2], 0x0, 0xffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="852000000400000085100900000000000000fcff0800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001830000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018200000", @ANYRES32=r4, @ANYBLOB="000000001300000090980000fcffffff183000000500"/32], &(0x7f0000000040)='GPL\x00', 0x5, 0x48, &(0x7f00000002c0)=""/72, 0x40f00, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x5, 0x5, 0xc}], 0x10, 0x1}, 0x94) 0s ago: executing program 0 (id=4670): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x32) kernel console output (not intermixed with test programs): age read [ 229.050576][T13883] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3740: bg 0: block 248: padding at end of block bitmap is not set [ 229.058275][T13886] loop9: unable to read partition table [ 229.058391][T13886] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 229.058391][T13886] ) failed (rc=-5) [ 229.097167][T13883] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3740: Failed to acquire dquot type 1 [ 229.115310][T13883] EXT4-fs (loop0): 1 truncate cleaned up [ 229.124570][T13883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.138763][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3743'. [ 229.255451][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.275942][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 229.395348][T13909] loop1: detected capacity change from 0 to 512 [ 229.402087][T13909] EXT4-fs: Ignoring removed orlov option [ 229.409883][T13909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.438041][T13909] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.3749: inode #0: comm syz.1.3749: iget: illegal inode # [ 229.462724][T13909] EXT4-fs (loop1): Remounting filesystem read-only [ 229.469287][T13909] EXT4-fs (loop1): get orphan inode failed [ 229.477922][T13909] EXT4-fs (loop1): mount failed [ 229.489604][T13915] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 229.602476][T13919] loop0: detected capacity change from 0 to 1024 [ 229.619459][T13919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.649755][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3754'. [ 229.719275][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.795399][T13931] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 229.921125][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 230.007227][T13941] hub 9-0:1.0: USB hub found [ 230.025633][T13941] hub 9-0:1.0: 8 ports detected [ 230.275835][T13965] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 230.406999][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 230.407017][ T29] audit: type=1326 audit(1752826448.783:46739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.437017][ T29] audit: type=1326 audit(1752826448.783:46740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.460697][ T29] audit: type=1326 audit(1752826448.783:46741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.484347][ T29] audit: type=1326 audit(1752826448.783:46742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.508101][ T29] audit: type=1326 audit(1752826448.783:46743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.531806][ T29] audit: type=1326 audit(1752826448.783:46744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.555466][ T29] audit: type=1326 audit(1752826448.783:46745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.579062][ T29] audit: type=1326 audit(1752826448.783:46746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.602867][ T29] audit: type=1400 audit(1752826448.793:46748): avc: denied { unlink } for pid=11694 comm="syz-executor" name="file0" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 230.625767][ T29] audit: type=1326 audit(1752826448.783:46747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 230.655751][T13976] netlink: 'syz.2.3773': attribute type 1 has an invalid length. [ 230.678639][T13978] hub 9-0:1.0: USB hub found [ 230.686506][T13978] hub 9-0:1.0: 8 ports detected [ 231.211047][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3787'. [ 231.331138][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3790'. [ 231.524670][T14035] loop3: detected capacity change from 0 to 512 [ 231.546009][T14035] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3799: Failed to acquire dquot type 1 [ 231.570799][T14035] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3799: corrupted inode contents [ 231.595451][T14035] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3799: mark_inode_dirty error [ 231.635559][T14035] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3799: corrupted inode contents [ 231.675473][T14035] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3799: mark_inode_dirty error [ 231.694900][T14047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3804'. [ 231.714024][T14035] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3799: corrupted inode contents [ 231.741621][T14035] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 231.759218][T14035] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3799: corrupted inode contents [ 231.775827][T14035] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3799: mark_inode_dirty error [ 231.788845][T14035] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 231.814340][T14035] EXT4-fs (loop3): 1 truncate cleaned up [ 231.826463][T14035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.856180][T14035] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.911576][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.925109][T14055] tipc: Enabling of bearer rejected, already enabled [ 232.051018][T14075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3817'. [ 232.125717][T14081] loop4: detected capacity change from 0 to 512 [ 232.145453][T14081] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3820: Failed to acquire dquot type 1 [ 232.160234][T14081] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3820: corrupted inode contents [ 232.173873][T14081] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3820: mark_inode_dirty error [ 232.186286][T14081] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3820: corrupted inode contents [ 232.202046][T14081] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3820: mark_inode_dirty error [ 232.215756][T14081] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3820: corrupted inode contents [ 232.229036][T14081] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 232.239211][T14081] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3820: corrupted inode contents [ 232.252251][T14081] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3820: mark_inode_dirty error [ 232.264928][T14081] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 232.274907][T14081] EXT4-fs (loop4): 1 truncate cleaned up [ 232.281212][T14081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.294065][T14081] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.317491][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.341287][T14092] loop0: detected capacity change from 0 to 512 [ 232.348469][T14092] EXT4-fs: Ignoring removed orlov option [ 232.355475][T14092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.364510][T14092] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.3822: inode #0: comm syz.0.3822: iget: illegal inode # [ 232.377887][T14092] EXT4-fs (loop0): Remounting filesystem read-only [ 232.384476][T14092] EXT4-fs (loop0): get orphan inode failed [ 232.390632][T14092] EXT4-fs (loop0): mount failed [ 232.527522][T14098] FAULT_INJECTION: forcing a failure. [ 232.527522][T14098] name failslab, interval 1, probability 0, space 0, times 0 [ 232.540353][T14098] CPU: 1 UID: 0 PID: 14098 Comm: syz.0.3825 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 232.540415][T14098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.540432][T14098] Call Trace: [ 232.540440][T14098] [ 232.540450][T14098] __dump_stack+0x1d/0x30 [ 232.540478][T14098] dump_stack_lvl+0xe8/0x140 [ 232.540503][T14098] dump_stack+0x15/0x1b [ 232.540563][T14098] should_fail_ex+0x265/0x280 [ 232.540602][T14098] should_failslab+0x8c/0xb0 [ 232.540652][T14098] kmem_cache_alloc_noprof+0x50/0x310 [ 232.540686][T14098] ? security_file_alloc+0x32/0x100 [ 232.540733][T14098] security_file_alloc+0x32/0x100 [ 232.540769][T14098] init_file+0x5c/0x1d0 [ 232.540862][T14098] alloc_empty_file+0x8b/0x200 [ 232.540894][T14098] path_openat+0x68/0x2170 [ 232.540932][T14098] ? mntput+0x4b/0x80 [ 232.540959][T14098] ? terminate_walk+0x27f/0x2a0 [ 232.540996][T14098] ? path_openat+0x1bf8/0x2170 [ 232.541026][T14098] ? _parse_integer_limit+0x170/0x190 [ 232.541129][T14098] do_filp_open+0x109/0x230 [ 232.541214][T14098] do_open_execat+0xd8/0x260 [ 232.541268][T14098] alloc_bprm+0x25/0x350 [ 232.541351][T14098] do_execveat_common+0x12e/0x750 [ 232.541395][T14098] ? getname_flags+0x154/0x3b0 [ 232.541423][T14098] __x64_sys_execveat+0x73/0x90 [ 232.541472][T14098] x64_sys_call+0x2dae/0x2fb0 [ 232.541501][T14098] do_syscall_64+0xd2/0x200 [ 232.541527][T14098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.541617][T14098] ? clear_bhb_loop+0x40/0x90 [ 232.541647][T14098] ? clear_bhb_loop+0x40/0x90 [ 232.541677][T14098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.541741][T14098] RIP: 0033:0x7fc09de6e9a9 [ 232.541762][T14098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.541783][T14098] RSP: 002b:00007fc09c4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 232.541836][T14098] RAX: ffffffffffffffda RBX: 00007fc09e095fa0 RCX: 00007fc09de6e9a9 [ 232.541849][T14098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 232.541861][T14098] RBP: 00007fc09c4cf090 R08: 0000000000001000 R09: 0000000000000000 [ 232.541875][T14098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.541922][T14098] R13: 0000000000000000 R14: 00007fc09e095fa0 R15: 00007ffce9eac7c8 [ 232.541948][T14098] [ 232.887368][T14112] loop1: detected capacity change from 0 to 512 [ 232.895793][T14112] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.3832: corrupted in-inode xattr: invalid ea_ino [ 232.910038][T14112] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3832: couldn't read orphan inode 15 (err -117) [ 232.922702][T14112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.971875][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.023489][T14126] loop3: detected capacity change from 0 to 512 [ 233.023779][T14126] EXT4-fs: Ignoring removed orlov option [ 233.023885][T14126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.038814][T14126] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.3834: inode #0: comm syz.3.3834: iget: illegal inode # [ 233.039050][T14126] EXT4-fs (loop3): Remounting filesystem read-only [ 233.039067][T14126] EXT4-fs (loop3): get orphan inode failed [ 233.039151][T14126] EXT4-fs (loop3): mount failed [ 233.164922][T14144] hub 9-0:1.0: USB hub found [ 233.169905][T14144] hub 9-0:1.0: 8 ports detected [ 233.170831][T14138] hub 6-0:1.0: USB hub found [ 233.182314][T14138] hub 6-0:1.0: 8 ports detected [ 233.227479][T14151] FAULT_INJECTION: forcing a failure. [ 233.227479][T14151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.241393][T14151] CPU: 0 UID: 0 PID: 14151 Comm: syz.1.3848 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 233.241441][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.241458][T14151] Call Trace: [ 233.241466][T14151] [ 233.241475][T14151] __dump_stack+0x1d/0x30 [ 233.241523][T14151] dump_stack_lvl+0xe8/0x140 [ 233.241551][T14151] dump_stack+0x15/0x1b [ 233.241615][T14151] should_fail_ex+0x265/0x280 [ 233.241702][T14151] should_fail+0xb/0x20 [ 233.241737][T14151] should_fail_usercopy+0x1a/0x20 [ 233.241779][T14151] strncpy_from_user+0x25/0x230 [ 233.241847][T14151] ? kmem_cache_alloc_noprof+0x186/0x310 [ 233.241882][T14151] ? getname_flags+0x80/0x3b0 [ 233.241912][T14151] getname_flags+0xae/0x3b0 [ 233.241941][T14151] io_mkdirat_prep+0x12d/0x190 [ 233.241974][T14151] io_submit_sqes+0x5e5/0xfd0 [ 233.242064][T14151] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 233.242103][T14151] ? 0xffffffff81000000 [ 233.242120][T14151] ? __rcu_read_unlock+0x4f/0x70 [ 233.242200][T14151] ? get_pid_task+0x96/0xd0 [ 233.242227][T14151] ? proc_fail_nth_write+0x12d/0x160 [ 233.242271][T14151] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.242315][T14151] ? vfs_write+0x75e/0x8e0 [ 233.242436][T14151] ? kmem_cache_free+0xdf/0x300 [ 233.242470][T14151] ? putname+0xda/0x100 [ 233.242563][T14151] __x64_sys_io_uring_enter+0x78/0x90 [ 233.242602][T14151] x64_sys_call+0x28c8/0x2fb0 [ 233.242623][T14151] do_syscall_64+0xd2/0x200 [ 233.242695][T14151] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.242730][T14151] ? clear_bhb_loop+0x40/0x90 [ 233.242755][T14151] ? clear_bhb_loop+0x40/0x90 [ 233.242851][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.242871][T14151] RIP: 0033:0x7f9cd564e9a9 [ 233.242907][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.242987][T14151] RSP: 002b:00007f9cd3caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 233.243006][T14151] RAX: ffffffffffffffda RBX: 00007f9cd5875fa0 RCX: 00007f9cd564e9a9 [ 233.243022][T14151] RDX: 000000000000696d RSI: 00000000000008ba RDI: 0000000000000003 [ 233.243038][T14151] RBP: 00007f9cd3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 233.243054][T14151] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 233.243066][T14151] R13: 0000000000000000 R14: 00007f9cd5875fa0 R15: 00007ffddc4a15a8 [ 233.243085][T14151] [ 233.507105][T14159] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 233.555150][T14163] __nla_validate_parse: 1 callbacks suppressed [ 233.555168][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3854'. [ 233.598127][T14165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3855'. [ 233.659864][T14170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 233.728566][T14174] hub 9-0:1.0: USB hub found [ 233.733422][T14174] hub 9-0:1.0: 8 ports detected [ 233.797650][T14182] loop4: detected capacity change from 0 to 512 [ 233.821888][T14182] EXT4-fs: Ignoring removed orlov option [ 233.829210][T14182] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.854782][T14182] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.3858: inode #0: comm syz.4.3858: iget: illegal inode # [ 233.883623][T14182] EXT4-fs (loop4): Remounting filesystem read-only [ 233.890196][T14182] EXT4-fs (loop4): get orphan inode failed [ 233.912482][T14182] EXT4-fs (loop4): mount failed [ 234.019375][T14195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 234.040914][T14192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3866'. [ 234.084447][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3870'. [ 234.132260][T14205] hub 9-0:1.0: USB hub found [ 234.137190][T14205] hub 9-0:1.0: 8 ports detected [ 234.226841][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 234.265326][T14218] loop2: detected capacity change from 0 to 512 [ 234.272426][T14218] EXT4-fs: Ignoring removed orlov option [ 234.278647][T14218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.287626][T14218] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.3877: inode #0: comm syz.2.3877: iget: illegal inode # [ 234.302874][T14218] EXT4-fs (loop2): Remounting filesystem read-only [ 234.309515][T14218] EXT4-fs (loop2): get orphan inode failed [ 234.316138][T14218] EXT4-fs (loop2): mount failed [ 234.516993][T14238] loop2: detected capacity change from 0 to 512 [ 234.523615][T14238] EXT4-fs: Ignoring removed orlov option [ 234.529453][T14238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.538125][T14238] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.3884: inode #0: comm syz.2.3884: iget: illegal inode # [ 234.551516][T14238] EXT4-fs (loop2): Remounting filesystem read-only [ 234.558154][T14238] EXT4-fs (loop2): get orphan inode failed [ 234.564239][T14238] EXT4-fs (loop2): mount failed [ 234.577770][T14241] hub 9-0:1.0: USB hub found [ 234.582714][T14241] hub 9-0:1.0: 8 ports detected [ 234.647788][T14245] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 234.898643][T14260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3896'. [ 234.911479][T14261] loop2: detected capacity change from 0 to 512 [ 234.919261][T14261] EXT4-fs: Ignoring removed orlov option [ 234.925274][T14261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.939294][T14261] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.3894: inode #0: comm syz.2.3894: iget: illegal inode # [ 234.954772][T14261] EXT4-fs (loop2): Remounting filesystem read-only [ 234.961358][T14261] EXT4-fs (loop2): get orphan inode failed [ 234.968928][T14261] EXT4-fs (loop2): mount failed [ 235.019334][T14267] FAULT_INJECTION: forcing a failure. [ 235.019334][T14267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.032598][T14267] CPU: 0 UID: 0 PID: 14267 Comm: syz.3.3898 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 235.032633][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.032650][T14267] Call Trace: [ 235.032663][T14267] [ 235.032672][T14267] __dump_stack+0x1d/0x30 [ 235.032762][T14267] dump_stack_lvl+0xe8/0x140 [ 235.032866][T14267] dump_stack+0x15/0x1b [ 235.032881][T14267] should_fail_ex+0x265/0x280 [ 235.032908][T14267] should_fail+0xb/0x20 [ 235.032948][T14267] should_fail_usercopy+0x1a/0x20 [ 235.032989][T14267] _copy_from_iter+0xcf/0xe40 [ 235.033071][T14267] ? __build_skb_around+0x1a0/0x200 [ 235.033111][T14267] ? __alloc_skb+0x223/0x320 [ 235.033145][T14267] netlink_sendmsg+0x471/0x6b0 [ 235.033165][T14267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.033230][T14267] __sock_sendmsg+0x145/0x180 [ 235.033262][T14267] ____sys_sendmsg+0x31e/0x4e0 [ 235.033309][T14267] ___sys_sendmsg+0x17b/0x1d0 [ 235.033455][T14267] __x64_sys_sendmsg+0xd4/0x160 [ 235.033620][T14267] x64_sys_call+0x2999/0x2fb0 [ 235.033641][T14267] do_syscall_64+0xd2/0x200 [ 235.033658][T14267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.033697][T14267] ? clear_bhb_loop+0x40/0x90 [ 235.033770][T14267] ? clear_bhb_loop+0x40/0x90 [ 235.033791][T14267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.033811][T14267] RIP: 0033:0x7f5ceb2ee9a9 [ 235.033824][T14267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.033892][T14267] RSP: 002b:00007f5ce9957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.033909][T14267] RAX: ffffffffffffffda RBX: 00007f5ceb515fa0 RCX: 00007f5ceb2ee9a9 [ 235.033921][T14267] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 235.033932][T14267] RBP: 00007f5ce9957090 R08: 0000000000000000 R09: 0000000000000000 [ 235.033958][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.033969][T14267] R13: 0000000000000000 R14: 00007f5ceb515fa0 R15: 00007ffd4988e4c8 [ 235.034050][T14267] [ 235.292220][T14271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'. [ 235.301382][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3901'. [ 235.338375][T14280] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 235.351139][T14284] loop0: detected capacity change from 0 to 512 [ 235.358990][T14284] EXT4-fs: Ignoring removed orlov option [ 235.372539][T14284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.394104][T14284] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.3900: inode #0: comm syz.0.3900: iget: illegal inode # [ 235.394158][T14286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3907'. [ 235.424756][T14284] EXT4-fs (loop0): Remounting filesystem read-only [ 235.431336][T14284] EXT4-fs (loop0): get orphan inode failed [ 235.438764][T14284] EXT4-fs (loop0): mount failed [ 235.541234][ T29] kauditd_printk_skb: 1035 callbacks suppressed [ 235.541250][ T29] audit: type=1326 audit(1752826453.913:47778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.577578][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3913'. [ 235.588433][ T29] audit: type=1326 audit(1752826453.943:47779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.612838][ T29] audit: type=1326 audit(1752826453.943:47780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.636610][ T29] audit: type=1326 audit(1752826453.943:47781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.661036][ T29] audit: type=1326 audit(1752826453.943:47782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.685394][ T29] audit: type=1326 audit(1752826453.943:47783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.709043][ T29] audit: type=1326 audit(1752826453.943:47784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.733431][ T29] audit: type=1326 audit(1752826453.953:47785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.757104][ T29] audit: type=1326 audit(1752826453.953:47786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.781323][ T29] audit: type=1326 audit(1752826453.953:47787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 235.880294][T14309] loop0: detected capacity change from 0 to 128 [ 235.895283][T14309] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.910059][T14309] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.946096][T14319] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 235.959013][T11372] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.999486][T14323] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 236.081119][T14332] loop0: detected capacity change from 0 to 512 [ 236.096167][T14332] EXT4-fs: Ignoring removed orlov option [ 236.115272][T14332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.129417][T14332] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.3924: inode #0: comm syz.0.3924: iget: illegal inode # [ 236.147916][T14332] EXT4-fs (loop0): Remounting filesystem read-only [ 236.154582][T14332] EXT4-fs (loop0): get orphan inode failed [ 236.160860][T14332] EXT4-fs (loop0): mount failed [ 236.194568][T14344] loop1: detected capacity change from 0 to 512 [ 236.206563][T14344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.219305][T14344] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.370075][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.382947][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.389136][T14359] loop0: detected capacity change from 0 to 512 [ 236.405023][T14359] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3936: Failed to acquire dquot type 1 [ 236.417681][T14359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3936: corrupted inode contents [ 236.433254][T14359] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3936: mark_inode_dirty error [ 236.446900][T14359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3936: corrupted inode contents [ 236.459860][T14359] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3936: mark_inode_dirty error [ 236.473962][T14359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3936: corrupted inode contents [ 236.486200][T14359] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 236.495066][T14359] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3936: corrupted inode contents [ 236.507152][T14359] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3936: mark_inode_dirty error [ 236.519119][T14359] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 236.534465][T14365] hub 9-0:1.0: USB hub found [ 236.539556][T14359] EXT4-fs (loop0): 1 truncate cleaned up [ 236.543656][T14367] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 236.545425][T14365] hub 9-0:1.0: 8 ports detected [ 236.557805][T14359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.570512][T14359] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.596219][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.670613][T14412] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 238.587971][T14443] __nla_validate_parse: 4 callbacks suppressed [ 238.588025][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 238.607243][T14445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3971'. [ 238.816705][T14451] loop0: detected capacity change from 0 to 512 [ 238.825382][T14451] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 238.833806][T14451] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3973: invalid indirect mapped block 2683928664 (level 1) [ 238.848140][T14451] EXT4-fs (loop0): 1 truncate cleaned up [ 238.855015][T14451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.037485][T14460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3976'. [ 239.159130][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3981'. [ 239.216337][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.245011][T14476] loop2: detected capacity change from 0 to 512 [ 239.251833][T14476] EXT4-fs: Ignoring removed orlov option [ 239.258414][T14476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.274259][T14476] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.3982: inode #0: comm syz.2.3982: iget: illegal inode # [ 239.296044][T14476] EXT4-fs (loop2): Remounting filesystem read-only [ 239.302650][T14476] EXT4-fs (loop2): get orphan inode failed [ 239.309082][T14476] EXT4-fs (loop2): mount failed [ 239.518673][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3987'. [ 239.571949][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3988'. [ 239.665091][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.711166][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3992'. [ 239.763475][T14503] loop0: detected capacity change from 0 to 512 [ 239.770145][T14503] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.778469][T14503] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 239.787205][T14503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 239.793622][T14503] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 239.803571][T14503] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3994: attempt to clear invalid blocks 2 len 1 [ 239.818714][T14503] EXT4-fs (loop0): Remounting filesystem read-only [ 239.825642][T14503] EXT4-fs (loop0): 1 truncate cleaned up [ 239.831794][T14503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.847185][T14503] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 240.046158][T14508] loop3: detected capacity change from 0 to 512 [ 240.053069][T14508] EXT4-fs: Ignoring removed orlov option [ 240.059008][T14508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.067082][T14508] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.3995: inode #0: comm syz.3.3995: iget: illegal inode # [ 240.080350][T14508] EXT4-fs (loop3): Remounting filesystem read-only [ 240.086998][T14508] EXT4-fs (loop3): get orphan inode failed [ 240.093004][T14508] EXT4-fs (loop3): mount failed [ 240.222498][T14515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3998'. [ 240.255199][T14517] loop3: detected capacity change from 0 to 128 [ 240.263917][T14517] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.276244][T14517] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.303426][T11808] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.356391][T14528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4003'. [ 240.391664][T14529] hub 9-0:1.0: USB hub found [ 240.396993][T14529] hub 9-0:1.0: 8 ports detected [ 240.545108][ T29] kauditd_printk_skb: 1426 callbacks suppressed [ 240.545128][ T29] audit: type=1326 audit(1752826458.903:49212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.1.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 240.640714][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4008'. [ 240.725625][T14543] hub 9-0:1.0: USB hub found [ 240.730444][T14543] hub 9-0:1.0: 8 ports detected [ 240.915224][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.940098][ T29] audit: type=1326 audit(1752826459.313:49213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.016392][ T29] audit: type=1326 audit(1752826459.343:49214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.040697][ T29] audit: type=1326 audit(1752826459.343:49215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.065012][ T29] audit: type=1326 audit(1752826459.343:49216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.088752][ T29] audit: type=1326 audit(1752826459.343:49217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.113089][ T29] audit: type=1326 audit(1752826459.343:49218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.136792][ T29] audit: type=1326 audit(1752826459.343:49219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.161164][ T29] audit: type=1326 audit(1752826459.353:49220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.2.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 241.170340][T14536] audit: audit_backlog=65 > audit_backlog_limit=64 [ 241.208469][T14553] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 241.361334][T14564] hub 9-0:1.0: USB hub found [ 241.375393][T14564] hub 9-0:1.0: 8 ports detected [ 241.400376][T14567] loop1: detected capacity change from 0 to 2048 [ 241.413951][T14567] EXT4-fs: Ignoring removed nobh option [ 241.435662][T14567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.466230][T14574] loop2: detected capacity change from 0 to 128 [ 241.497642][T14574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.524721][T14574] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.588457][T11694] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.700981][T14585] FAULT_INJECTION: forcing a failure. [ 241.700981][T14585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.714196][T14585] CPU: 0 UID: 0 PID: 14585 Comm: syz.4.4024 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 241.714328][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.714346][T14585] Call Trace: [ 241.714355][T14585] [ 241.714365][T14585] __dump_stack+0x1d/0x30 [ 241.714390][T14585] dump_stack_lvl+0xe8/0x140 [ 241.714410][T14585] dump_stack+0x15/0x1b [ 241.714492][T14585] should_fail_ex+0x265/0x280 [ 241.714538][T14585] should_fail+0xb/0x20 [ 241.714584][T14585] should_fail_usercopy+0x1a/0x20 [ 241.714627][T14585] _copy_to_user+0x20/0xa0 [ 241.714707][T14585] simple_read_from_buffer+0xb5/0x130 [ 241.714741][T14585] proc_fail_nth_read+0x100/0x140 [ 241.714783][T14585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.714899][T14585] vfs_read+0x1a0/0x6f0 [ 241.714929][T14585] ? __rcu_read_unlock+0x4f/0x70 [ 241.715004][T14585] ? __fget_files+0x184/0x1c0 [ 241.715028][T14585] ? __sys_setsockopt+0x18e/0x200 [ 241.715075][T14585] ksys_read+0xda/0x1a0 [ 241.715114][T14585] __x64_sys_read+0x40/0x50 [ 241.715198][T14585] x64_sys_call+0x2d77/0x2fb0 [ 241.715229][T14585] do_syscall_64+0xd2/0x200 [ 241.715300][T14585] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.715332][T14585] ? clear_bhb_loop+0x40/0x90 [ 241.715354][T14585] ? clear_bhb_loop+0x40/0x90 [ 241.715377][T14585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.715406][T14585] RIP: 0033:0x7f075855d3bc [ 241.715510][T14585] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.715579][T14585] RSP: 002b:00007f0756bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.715606][T14585] RAX: ffffffffffffffda RBX: 00007f0758785fa0 RCX: 00007f075855d3bc [ 241.715679][T14585] RDX: 000000000000000f RSI: 00007f0756bc70a0 RDI: 0000000000000007 [ 241.715694][T14585] RBP: 00007f0756bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.715707][T14585] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 241.715719][T14585] R13: 0000000000000000 R14: 00007f0758785fa0 R15: 00007ffcc697e558 [ 241.715741][T14585] [ 242.692611][T14600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 242.701059][T14596] loop4: detected capacity change from 0 to 8192 [ 242.732631][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.769575][T14608] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 242.853195][T14614] loop4: detected capacity change from 0 to 512 [ 242.892004][T14614] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.938985][T14614] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 242.969295][T14628] loop1: detected capacity change from 0 to 512 [ 242.990224][T14614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.997576][T14614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 243.028035][T14614] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4036: attempt to clear invalid blocks 2 len 1 [ 243.045217][T14628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.052873][T14632] loop2: detected capacity change from 0 to 512 [ 243.058147][T14614] EXT4-fs (loop4): Remounting filesystem read-only [ 243.071755][T14628] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.097895][T14614] EXT4-fs (loop4): 1 truncate cleaned up [ 243.106304][T14632] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4043: Failed to acquire dquot type 1 [ 243.112873][T14614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.118512][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4043: corrupted inode contents [ 243.143647][T14632] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.4043: mark_inode_dirty error [ 243.155660][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4043: corrupted inode contents [ 243.168992][T14632] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4043: mark_inode_dirty error [ 243.182442][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4043: corrupted inode contents [ 243.196568][T14632] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 243.207564][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4043: corrupted inode contents [ 243.226576][T14632] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.4043: mark_inode_dirty error [ 243.250535][T14632] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 243.270825][T14632] EXT4-fs (loop2): 1 truncate cleaned up [ 243.285038][T14632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.299963][T14632] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.370368][T14649] tipc: Enabling of bearer rejected, already enabled [ 243.410343][T14651] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 243.460458][T14655] loop0: detected capacity change from 0 to 128 [ 243.469363][T14655] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.482511][T14655] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.506308][T11372] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.571893][T14664] tmpfs: Bad value for 'mpol' [ 243.577434][T14664] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 243.685580][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.797862][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.800228][T14680] __nla_validate_parse: 2 callbacks suppressed [ 243.800248][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4063'. [ 243.891731][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.915663][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 244.037961][T14712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4077'. [ 244.088695][T14718] netlink: 'syz.1.4079': attribute type 4 has an invalid length. [ 244.112324][T14720] FAULT_INJECTION: forcing a failure. [ 244.112324][T14720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.125613][T14720] CPU: 1 UID: 0 PID: 14720 Comm: syz.1.4080 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 244.125713][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.125738][T14720] Call Trace: [ 244.125746][T14720] [ 244.125755][T14720] __dump_stack+0x1d/0x30 [ 244.125776][T14720] dump_stack_lvl+0xe8/0x140 [ 244.125797][T14720] dump_stack+0x15/0x1b [ 244.125819][T14720] should_fail_ex+0x265/0x280 [ 244.125913][T14720] should_fail+0xb/0x20 [ 244.125943][T14720] should_fail_usercopy+0x1a/0x20 [ 244.125989][T14720] strncpy_from_user+0x25/0x230 [ 244.126012][T14720] ? kmem_cache_alloc_noprof+0x186/0x310 [ 244.126090][T14720] ? getname_flags+0x80/0x3b0 [ 244.126126][T14720] getname_flags+0xae/0x3b0 [ 244.126155][T14720] __x64_sys_link+0x40/0x70 [ 244.126242][T14720] x64_sys_call+0x2af9/0x2fb0 [ 244.126271][T14720] do_syscall_64+0xd2/0x200 [ 244.126294][T14720] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.126329][T14720] ? clear_bhb_loop+0x40/0x90 [ 244.126357][T14720] ? clear_bhb_loop+0x40/0x90 [ 244.126380][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.126461][T14720] RIP: 0033:0x7f9cd564e9a9 [ 244.126478][T14720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.126560][T14720] RSP: 002b:00007f9cd3caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 244.126586][T14720] RAX: ffffffffffffffda RBX: 00007f9cd5875fa0 RCX: 00007f9cd564e9a9 [ 244.126603][T14720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.126619][T14720] RBP: 00007f9cd3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 244.126636][T14720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.126652][T14720] R13: 0000000000000001 R14: 00007f9cd5875fa0 R15: 00007ffddc4a15a8 [ 244.126675][T14720] [ 244.370098][T14724] loop1: detected capacity change from 0 to 512 [ 244.394370][T14724] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4081: Failed to acquire dquot type 1 [ 244.407489][T14724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4081: corrupted inode contents [ 244.419733][T14724] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.4081: mark_inode_dirty error [ 244.432773][T14724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4081: corrupted inode contents [ 244.445980][T14724] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4081: mark_inode_dirty error [ 244.458607][T14724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4081: corrupted inode contents [ 244.471812][T14724] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 244.481905][T14724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.4081: corrupted inode contents [ 244.496178][T14724] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.4081: mark_inode_dirty error [ 244.507622][T14724] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 244.518088][T14724] EXT4-fs (loop1): 1 truncate cleaned up [ 244.524397][T14724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.538314][T14724] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.678992][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4084'. [ 244.813178][T14741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14741 comm=syz.0.4087 [ 244.849288][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4087'. [ 244.881825][T14745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4089'. [ 244.947938][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4092'. [ 245.016001][T14760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4096'. [ 245.059440][T14761] loop0: detected capacity change from 0 to 512 [ 245.070393][T14761] EXT4-fs: Ignoring removed orlov option [ 245.078936][T14763] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 245.082560][T14761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.112443][T14761] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.4095: inode #0: comm syz.0.4095: iget: illegal inode # [ 245.163373][T14761] EXT4-fs (loop0): Remounting filesystem read-only [ 245.170047][T14761] EXT4-fs (loop0): get orphan inode failed [ 245.193489][T14761] EXT4-fs (loop0): mount failed [ 245.224600][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.303372][T14780] serio: Serial port ptm0 [ 245.369958][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4105'. [ 245.441686][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4107'. [ 245.555497][T14804] loop3: detected capacity change from 0 to 512 [ 245.573687][T14804] EXT4-fs: Ignoring removed orlov option [ 245.579566][T14804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.601997][T14804] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4108: inode #0: comm syz.3.4108: iget: illegal inode # [ 245.629341][T14804] EXT4-fs (loop3): Remounting filesystem read-only [ 245.635918][T14804] EXT4-fs (loop3): get orphan inode failed [ 245.662076][T14804] EXT4-fs (loop3): mount failed [ 245.750607][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 245.750624][ T29] audit: type=1326 audit(1752826464.123:49787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.780524][ T29] audit: type=1326 audit(1752826464.123:49788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.804970][ T29] audit: type=1326 audit(1752826464.143:49789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.829536][ T29] audit: type=1326 audit(1752826464.143:49790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.853172][ T29] audit: type=1326 audit(1752826464.143:49791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.877659][ T29] audit: type=1326 audit(1752826464.143:49792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.901345][ T29] audit: type=1326 audit(1752826464.143:49793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.925804][ T29] audit: type=1326 audit(1752826464.143:49794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.949468][ T29] audit: type=1326 audit(1752826464.143:49795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 245.973743][ T29] audit: type=1326 audit(1752826464.143:49796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14808 comm="syz.0.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc09de6e9a9 code=0x7ffc0000 [ 246.052694][T14819] netlink: 'syz.3.4115': attribute type 29 has an invalid length. [ 246.134883][T14829] netlink: 'syz.2.4119': attribute type 4 has an invalid length. [ 246.142797][T14829] netlink: 'syz.2.4119': attribute type 3 has an invalid length. [ 246.327513][T14841] loop2: detected capacity change from 0 to 512 [ 246.338782][T14841] EXT4-fs: Ignoring removed orlov option [ 246.351166][T14841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.396824][T14841] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.4125: inode #0: comm syz.2.4125: iget: illegal inode # [ 246.421678][T14841] EXT4-fs (loop2): Remounting filesystem read-only [ 246.428279][T14841] EXT4-fs (loop2): get orphan inode failed [ 246.486946][T14841] EXT4-fs (loop2): mount failed [ 246.638487][T14864] netlink: 'syz.4.4134': attribute type 9 has an invalid length. [ 246.976251][T14886] loop4: detected capacity change from 0 to 512 [ 246.992748][T14886] EXT4-fs: Ignoring removed orlov option [ 247.019549][T14886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.039292][T14886] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.4143: inode #0: comm syz.4.4143: iget: illegal inode # [ 247.062747][T14886] EXT4-fs (loop4): Remounting filesystem read-only [ 247.069310][T14886] EXT4-fs (loop4): get orphan inode failed [ 247.092529][T14886] EXT4-fs (loop4): mount failed [ 247.318237][T14915] tipc: Enabling of bearer rejected, already enabled [ 247.326873][T14917] loop3: detected capacity change from 0 to 164 [ 247.335489][T14917] ISOFS: unable to read i-node block [ 247.340841][T14917] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 247.368465][T14919] hub 9-0:1.0: USB hub found [ 247.374797][T14919] hub 9-0:1.0: 8 ports detected [ 248.153784][T14953] FAULT_INJECTION: forcing a failure. [ 248.153784][T14953] name failslab, interval 1, probability 0, space 0, times 0 [ 248.166739][T14953] CPU: 1 UID: 0 PID: 14953 Comm: syz.1.4173 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 248.166775][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.166788][T14953] Call Trace: [ 248.166794][T14953] [ 248.166801][T14953] __dump_stack+0x1d/0x30 [ 248.166822][T14953] dump_stack_lvl+0xe8/0x140 [ 248.166897][T14953] dump_stack+0x15/0x1b [ 248.166920][T14953] should_fail_ex+0x265/0x280 [ 248.166965][T14953] should_failslab+0x8c/0xb0 [ 248.166987][T14953] kmem_cache_alloc_node_noprof+0x57/0x320 [ 248.167041][T14953] ? __alloc_skb+0x101/0x320 [ 248.167078][T14953] __alloc_skb+0x101/0x320 [ 248.167211][T14953] netlink_alloc_large_skb+0xba/0xf0 [ 248.167249][T14953] netlink_sendmsg+0x3cf/0x6b0 [ 248.167269][T14953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.167293][T14953] __sock_sendmsg+0x145/0x180 [ 248.167323][T14953] ____sys_sendmsg+0x31e/0x4e0 [ 248.167391][T14953] ___sys_sendmsg+0x17b/0x1d0 [ 248.167441][T14953] __x64_sys_sendmsg+0xd4/0x160 [ 248.167558][T14953] x64_sys_call+0x2999/0x2fb0 [ 248.167584][T14953] do_syscall_64+0xd2/0x200 [ 248.167605][T14953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 248.167637][T14953] ? clear_bhb_loop+0x40/0x90 [ 248.167774][T14953] ? clear_bhb_loop+0x40/0x90 [ 248.167817][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.167846][T14953] RIP: 0033:0x7f9cd564e9a9 [ 248.167866][T14953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.167909][T14953] RSP: 002b:00007f9cd3caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.167990][T14953] RAX: ffffffffffffffda RBX: 00007f9cd5875fa0 RCX: 00007f9cd564e9a9 [ 248.168007][T14953] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 248.168024][T14953] RBP: 00007f9cd3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 248.168118][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.168130][T14953] R13: 0000000000000000 R14: 00007f9cd5875fa0 R15: 00007ffddc4a15a8 [ 248.168155][T14953] [ 248.666498][T14980] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 248.820845][T14989] __nla_validate_parse: 9 callbacks suppressed [ 248.820865][T14989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4188'. [ 248.842849][T14986] loop0: detected capacity change from 0 to 8192 [ 248.918374][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4194'. [ 249.085947][T15013] hub 9-0:1.0: USB hub found [ 249.092564][T15013] hub 9-0:1.0: 8 ports detected [ 249.326135][T15019] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 249.456218][T14997] bond_slave_0: entered promiscuous mode [ 249.462003][T14997] bond_slave_1: entered promiscuous mode [ 249.477007][T15023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4203'. [ 249.501363][T14997] macsec1: entered allmulticast mode [ 249.506746][T14997] bond0: entered allmulticast mode [ 249.511879][T14997] bond_slave_0: entered allmulticast mode [ 249.517679][T14997] bond_slave_1: entered allmulticast mode [ 249.547742][T14997] bond0: left allmulticast mode [ 249.552715][T14997] bond_slave_0: left allmulticast mode [ 249.558287][T14997] bond_slave_1: left allmulticast mode [ 249.563969][T14997] bond_slave_0: left promiscuous mode [ 249.569393][T14997] bond_slave_1: left promiscuous mode [ 249.594521][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4205'. [ 249.747560][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4207'. [ 249.811496][T15036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4209'. [ 249.894906][T15040] loop1: detected capacity change from 0 to 128 [ 249.922779][T15040] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.950975][T15046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15046 comm=syz.0.4214 [ 249.964842][T15040] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.979331][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4216'. [ 250.017783][T11545] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.093819][T15059] loop3: detected capacity change from 0 to 512 [ 250.104053][T15059] EXT4-fs: Ignoring removed orlov option [ 250.109943][T15059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.125947][T15059] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4217: inode #0: comm syz.3.4217: iget: illegal inode # [ 250.149326][T15059] EXT4-fs (loop3): Remounting filesystem read-only [ 250.155911][T15059] EXT4-fs (loop3): get orphan inode failed [ 250.165144][T15063] loop0: detected capacity change from 0 to 512 [ 250.176582][T15063] EXT4-fs: dax option not supported [ 250.182493][T15059] EXT4-fs (loop3): mount failed [ 250.256557][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4222'. [ 250.302751][T15070] FAULT_INJECTION: forcing a failure. [ 250.302751][T15070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.316081][T15070] CPU: 1 UID: 0 PID: 15070 Comm: syz.1.4224 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 250.316151][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.316169][T15070] Call Trace: [ 250.316177][T15070] [ 250.316187][T15070] __dump_stack+0x1d/0x30 [ 250.316272][T15070] dump_stack_lvl+0xe8/0x140 [ 250.316291][T15070] dump_stack+0x15/0x1b [ 250.316307][T15070] should_fail_ex+0x265/0x280 [ 250.316407][T15070] should_fail+0xb/0x20 [ 250.316444][T15070] should_fail_usercopy+0x1a/0x20 [ 250.316492][T15070] _copy_from_user+0x1c/0xb0 [ 250.316552][T15070] ___sys_sendmsg+0xc1/0x1d0 [ 250.316612][T15070] __x64_sys_sendmsg+0xd4/0x160 [ 250.316663][T15070] x64_sys_call+0x2999/0x2fb0 [ 250.316764][T15070] do_syscall_64+0xd2/0x200 [ 250.316783][T15070] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.316812][T15070] ? clear_bhb_loop+0x40/0x90 [ 250.316890][T15070] ? clear_bhb_loop+0x40/0x90 [ 250.316921][T15070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.316950][T15070] RIP: 0033:0x7f9cd564e9a9 [ 250.316969][T15070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.316990][T15070] RSP: 002b:00007f9cd3caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.317057][T15070] RAX: ffffffffffffffda RBX: 00007f9cd5875fa0 RCX: 00007f9cd564e9a9 [ 250.317070][T15070] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 250.317082][T15070] RBP: 00007f9cd3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 250.317094][T15070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.317180][T15070] R13: 0000000000000000 R14: 00007f9cd5875fa0 R15: 00007ffddc4a15a8 [ 250.317202][T15070] [ 250.556888][T15079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4228'. [ 250.689621][T15087] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 250.787543][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4234'. [ 250.846938][T15098] loop1: detected capacity change from 0 to 512 [ 250.864025][T15098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.865842][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 250.865861][ T29] audit: type=1400 audit(1752826469.243:50341): avc: denied { create } for pid=15097 comm="syz.3.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 250.933236][ T29] audit: type=1400 audit(1752826469.263:50342): avc: denied { write } for pid=15096 comm="syz.1.4237" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 250.955243][ T29] audit: type=1400 audit(1752826469.303:50343): avc: denied { connect } for pid=15097 comm="syz.3.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.368196][T15123] FAULT_INJECTION: forcing a failure. [ 251.368196][T15123] name failslab, interval 1, probability 0, space 0, times 0 [ 251.381665][T15123] CPU: 0 UID: 0 PID: 15123 Comm: syz.0.4245 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 251.381704][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.381721][T15123] Call Trace: [ 251.381729][T15123] [ 251.381739][T15123] __dump_stack+0x1d/0x30 [ 251.381766][T15123] dump_stack_lvl+0xe8/0x140 [ 251.381786][T15123] dump_stack+0x15/0x1b [ 251.381842][T15123] should_fail_ex+0x265/0x280 [ 251.381930][T15123] should_failslab+0x8c/0xb0 [ 251.381953][T15123] __kmalloc_noprof+0xa5/0x3e0 [ 251.382034][T15123] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 251.382066][T15123] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 251.382101][T15123] genl_family_rcv_msg_doit+0x48/0x1b0 [ 251.382152][T15123] ? security_capable+0x83/0x90 [ 251.382186][T15123] ? ns_capable+0x7d/0xb0 [ 251.382211][T15123] genl_rcv_msg+0x422/0x460 [ 251.382359][T15123] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 251.382468][T15123] netlink_rcv_skb+0x120/0x220 [ 251.382503][T15123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.382543][T15123] genl_rcv+0x28/0x40 [ 251.382587][T15123] netlink_unicast+0x5a8/0x680 [ 251.382628][T15123] netlink_sendmsg+0x58b/0x6b0 [ 251.382656][T15123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.382683][T15123] __sock_sendmsg+0x145/0x180 [ 251.382796][T15123] ____sys_sendmsg+0x31e/0x4e0 [ 251.382844][T15123] ___sys_sendmsg+0x17b/0x1d0 [ 251.382917][T15123] __x64_sys_sendmsg+0xd4/0x160 [ 251.382962][T15123] x64_sys_call+0x2999/0x2fb0 [ 251.383009][T15123] do_syscall_64+0xd2/0x200 [ 251.383033][T15123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 251.383114][T15123] ? clear_bhb_loop+0x40/0x90 [ 251.383143][T15123] ? clear_bhb_loop+0x40/0x90 [ 251.383174][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.383204][T15123] RIP: 0033:0x7fc09de6e9a9 [ 251.383299][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.383411][T15123] RSP: 002b:00007fc09c4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.383437][T15123] RAX: ffffffffffffffda RBX: 00007fc09e095fa0 RCX: 00007fc09de6e9a9 [ 251.383460][T15123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 251.383472][T15123] RBP: 00007fc09c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 251.383484][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.383547][T15123] R13: 0000000000000000 R14: 00007fc09e095fa0 R15: 00007ffce9eac7c8 [ 251.383573][T15123] [ 251.832754][T15137] hub 9-0:1.0: USB hub found [ 251.842517][T15137] hub 9-0:1.0: 8 ports detected [ 251.915707][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.001661][T15147] loop2: detected capacity change from 0 to 512 [ 252.037409][T15147] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.037832][ T29] audit: type=1326 audit(1752826470.393:50344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.067652][ T29] audit: type=1326 audit(1752826470.393:50345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.091418][ T29] audit: type=1326 audit(1752826470.393:50346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.115141][ T29] audit: type=1326 audit(1752826470.393:50347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.139021][ T29] audit: type=1326 audit(1752826470.393:50348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.139501][T15150] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 252.162656][ T29] audit: type=1326 audit(1752826470.393:50349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.162696][ T29] audit: type=1326 audit(1752826470.393:50350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15146 comm="syz.1.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 252.219957][T15147] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 252.228801][T15147] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.235275][T15147] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 252.267434][T15147] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4255: attempt to clear invalid blocks 2 len 1 [ 252.282282][T15147] EXT4-fs (loop2): Remounting filesystem read-only [ 252.289785][T15147] EXT4-fs (loop2): 1 truncate cleaned up [ 252.296060][T15147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.906840][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.034227][T15193] tipc: Enabling of bearer rejected, already enabled [ 253.143807][T15205] tipc: Enabling of bearer rejected, already enabled [ 253.163492][T15209] loop2: detected capacity change from 0 to 512 [ 253.180442][T15209] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.195052][T15209] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 253.205039][T15209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.211403][T15209] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 253.221230][T15209] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4280: attempt to clear invalid blocks 2 len 1 [ 253.236160][T15209] EXT4-fs (loop2): Remounting filesystem read-only [ 253.245215][T15209] EXT4-fs (loop2): 1 truncate cleaned up [ 253.267372][T15207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.284456][T15209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.349312][T15207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.418196][T15221] loop4: detected capacity change from 0 to 1024 [ 253.433714][T15207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.453208][T15221] EXT4-fs: Ignoring removed orlov option [ 253.458957][T15221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.470202][T15225] tipc: Enabling of bearer rejected, already enabled [ 253.484165][T15221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.515154][T15207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.537684][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.580676][T15207] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.595435][T15207] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.608916][T15207] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.620996][T15207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.769403][T15241] loop3: detected capacity change from 0 to 512 [ 253.778491][T15241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.019931][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.466486][T15264] loop4: detected capacity change from 0 to 512 [ 254.485061][T15264] EXT4-fs: Ignoring removed orlov option [ 254.490821][T15264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.526757][T15271] __nla_validate_parse: 4 callbacks suppressed [ 254.526771][T15271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4303'. [ 254.534745][T15264] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.4299: inode #0: comm syz.4.4299: iget: illegal inode # [ 254.558809][T15264] EXT4-fs (loop4): Remounting filesystem read-only [ 254.565514][T15264] EXT4-fs (loop4): get orphan inode failed [ 254.571612][T15264] EXT4-fs (loop4): mount failed [ 254.599975][T15273] loop2: detected capacity change from 0 to 512 [ 254.668434][T15273] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.698665][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.708236][T15273] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 254.735647][T15273] EXT4-fs (loop2): orphan cleanup on readonly fs [ 254.742049][T15273] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 254.762195][T15273] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4304: attempt to clear invalid blocks 2 len 1 [ 254.777197][T15281] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003 [ 254.781808][T15273] EXT4-fs (loop2): Remounting filesystem read-only [ 254.794432][T15273] EXT4-fs (loop2): 1 truncate cleaned up [ 254.800609][T15273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.847657][T15288] hub 9-0:1.0: USB hub found [ 254.867418][T15288] hub 9-0:1.0: 8 ports detected [ 254.885660][T15293] loop4: detected capacity change from 0 to 512 [ 254.906548][T15293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.929449][T15293] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.959173][T15297] loop3: detected capacity change from 0 to 512 [ 254.975767][T15293] batadv_slave_0: entered promiscuous mode [ 254.985746][T15297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.005533][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4311'. [ 255.049166][T15293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.118988][T15293] batadv_slave_0 (unregistering): left promiscuous mode [ 255.119044][T15293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.223470][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.369849][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4315'. [ 255.474268][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.793073][T15318] loop1: detected capacity change from 0 to 512 [ 255.813834][T15318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.833799][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.836058][T15318] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.895308][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 255.895321][ T29] audit: type=1400 audit(1752826474.273:50871): avc: denied { append } for pid=15317 comm="syz.1.4320" path="/230/file1/hugetlb.1GB.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 255.955287][ T29] audit: type=1326 audit(1752826474.333:50872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.4320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cd564e9a9 code=0x0 [ 255.979535][T15326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15326 comm=syz.3.4321 [ 256.021112][ T29] audit: type=1400 audit(1752826474.393:50873): avc: denied { map } for pid=15317 comm="syz.1.4320" path="/230/file1/hugetlb.1GB.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 256.173487][ T29] audit: type=1326 audit(1752826474.553:50874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.197162][ T29] audit: type=1326 audit(1752826474.553:50875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.223959][ T29] audit: type=1326 audit(1752826474.593:50876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.248263][ T29] audit: type=1326 audit(1752826474.593:50877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.271969][ T29] audit: type=1326 audit(1752826474.593:50878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.296390][ T29] audit: type=1326 audit(1752826474.593:50879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.320065][ T29] audit: type=1326 audit(1752826474.593:50880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 256.384751][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4327'. [ 256.466105][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 256.469682][T15355] loop0: detected capacity change from 0 to 512 [ 256.499620][T15355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.516812][T15355] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.636933][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.942652][T15379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4341'. [ 257.328677][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.344795][T15392] loop3: detected capacity change from 0 to 512 [ 257.367365][T15392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.385137][T15392] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.410642][T15402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15402 comm=syz.0.4349 [ 257.457490][T15406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4350'. [ 257.517108][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4353'. [ 257.710594][T15421] FAULT_INJECTION: forcing a failure. [ 257.710594][T15421] name failslab, interval 1, probability 0, space 0, times 0 [ 257.723596][T15421] CPU: 1 UID: 0 PID: 15421 Comm: syz.0.4357 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 257.723632][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.723646][T15421] Call Trace: [ 257.723652][T15421] [ 257.723660][T15421] __dump_stack+0x1d/0x30 [ 257.723685][T15421] dump_stack_lvl+0xe8/0x140 [ 257.723707][T15421] dump_stack+0x15/0x1b [ 257.723729][T15421] should_fail_ex+0x265/0x280 [ 257.723845][T15421] should_failslab+0x8c/0xb0 [ 257.723867][T15421] kmem_cache_alloc_node_noprof+0x57/0x320 [ 257.723938][T15421] ? __alloc_skb+0x101/0x320 [ 257.723965][T15421] __alloc_skb+0x101/0x320 [ 257.724037][T15421] ? audit_log_start+0x365/0x6c0 [ 257.724092][T15421] audit_log_start+0x380/0x6c0 [ 257.724126][T15421] audit_seccomp+0x48/0x100 [ 257.724191][T15421] ? __seccomp_filter+0x68c/0x10d0 [ 257.724214][T15421] __seccomp_filter+0x69d/0x10d0 [ 257.724244][T15421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.724348][T15421] ? vfs_write+0x75e/0x8e0 [ 257.724376][T15421] ? __rcu_read_unlock+0x4f/0x70 [ 257.724396][T15421] ? __fget_files+0x184/0x1c0 [ 257.724455][T15421] __secure_computing+0x82/0x150 [ 257.724475][T15421] syscall_trace_enter+0xcf/0x1e0 [ 257.724529][T15421] do_syscall_64+0xac/0x200 [ 257.724617][T15421] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.724645][T15421] ? clear_bhb_loop+0x40/0x90 [ 257.724664][T15421] ? clear_bhb_loop+0x40/0x90 [ 257.724710][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.724736][T15421] RIP: 0033:0x7fc09de6e9a9 [ 257.724751][T15421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.724775][T15421] RSP: 002b:00007fc09c4cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c9 [ 257.724869][T15421] RAX: ffffffffffffffda RBX: 00007fc09e095fa0 RCX: 00007fc09de6e9a9 [ 257.724886][T15421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.724898][T15421] RBP: 00007fc09c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 257.724909][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.724920][T15421] R13: 0000000000000000 R14: 00007fc09e095fa0 R15: 00007ffce9eac7c8 [ 257.724983][T15421] [ 257.972739][T15424] FAULT_INJECTION: forcing a failure. [ 257.972739][T15424] name failslab, interval 1, probability 0, space 0, times 0 [ 257.985433][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.0.4358 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 257.985466][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.985481][T15424] Call Trace: [ 257.985520][T15424] [ 257.985528][T15424] __dump_stack+0x1d/0x30 [ 257.985553][T15424] dump_stack_lvl+0xe8/0x140 [ 257.985576][T15424] dump_stack+0x15/0x1b [ 257.985596][T15424] should_fail_ex+0x265/0x280 [ 257.985674][T15424] should_failslab+0x8c/0xb0 [ 257.985700][T15424] kmem_cache_alloc_noprof+0x50/0x310 [ 257.985730][T15424] ? __inet_hash_connect+0xbdf/0x1350 [ 257.985813][T15424] __inet_hash_connect+0xbdf/0x1350 [ 257.985859][T15424] inet6_hash_connect+0xaf/0xc0 [ 257.985890][T15424] tcp_v6_connect+0x972/0xc10 [ 257.985927][T15424] ? rb_insert_color+0x277/0x2b0 [ 257.985990][T15424] __inet_stream_connect+0x166/0x7e0 [ 257.986029][T15424] ? tcp_sendmsg_fastopen+0x172/0x520 [ 257.986059][T15424] ? should_failslab+0x8c/0xb0 [ 257.986186][T15424] ? __kmalloc_cache_noprof+0x189/0x320 [ 257.986218][T15424] tcp_sendmsg_fastopen+0x43a/0x520 [ 257.986251][T15424] tcp_sendmsg_locked+0x26e8/0x2c10 [ 257.986281][T15424] ? __rcu_read_unlock+0x4f/0x70 [ 257.986309][T15424] ? __account_obj_stock+0x211/0x350 [ 257.986396][T15424] ? __rcu_read_unlock+0x4f/0x70 [ 257.986421][T15424] ? avc_has_perm_noaudit+0x1b1/0x200 [ 257.986454][T15424] ? avc_has_perm+0xd3/0x150 [ 257.986547][T15424] ? _raw_spin_unlock_bh+0x36/0x40 [ 257.986578][T15424] ? __pfx_tcp_sendmsg+0x10/0x10 [ 257.986608][T15424] tcp_sendmsg+0x2f/0x50 [ 257.986636][T15424] inet6_sendmsg+0x76/0xd0 [ 257.986732][T15424] __sock_sendmsg+0x8b/0x180 [ 257.986760][T15424] ____sys_sendmsg+0x345/0x4e0 [ 257.986800][T15424] ___sys_sendmsg+0x17b/0x1d0 [ 257.986918][T15424] __sys_sendmmsg+0x178/0x300 [ 257.986967][T15424] __x64_sys_sendmmsg+0x57/0x70 [ 257.987076][T15424] x64_sys_call+0x2f2f/0x2fb0 [ 257.987101][T15424] do_syscall_64+0xd2/0x200 [ 257.987121][T15424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.987151][T15424] ? clear_bhb_loop+0x40/0x90 [ 257.987214][T15424] ? clear_bhb_loop+0x40/0x90 [ 257.987259][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.987301][T15424] RIP: 0033:0x7fc09de6e9a9 [ 257.987317][T15424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.987403][T15424] RSP: 002b:00007fc09c4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.987424][T15424] RAX: ffffffffffffffda RBX: 00007fc09e095fa0 RCX: 00007fc09de6e9a9 [ 257.987438][T15424] RDX: 0000000000000001 RSI: 0000200000004a80 RDI: 0000000000000006 [ 257.987452][T15424] RBP: 00007fc09c4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 257.987466][T15424] R10: 00000000200880c0 R11: 0000000000000246 R12: 0000000000000001 [ 257.987479][T15424] R13: 0000000000000000 R14: 00007fc09e095fa0 R15: 00007ffce9eac7c8 [ 257.987499][T15424] [ 258.319778][T15426] hub 9-0:1.0: USB hub found [ 258.329444][T15426] hub 9-0:1.0: 8 ports detected [ 258.346596][T15428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4360'. [ 258.357933][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.449672][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4364'. [ 258.481529][T15442] loop4: detected capacity change from 0 to 512 [ 258.493909][T15442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.532854][T15442] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.570564][T15452] loop0: detected capacity change from 0 to 2048 [ 258.592768][T15455] loop1: detected capacity change from 0 to 512 [ 258.600538][T15452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.635029][T15455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.648457][T15455] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.806330][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.331602][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.484835][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.544097][T15493] loop1: detected capacity change from 0 to 512 [ 259.566991][T15493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.662013][T15499] __nla_validate_parse: 3 callbacks suppressed [ 259.662032][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4387'. [ 259.831074][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4390'. [ 260.001221][T15517] loop0: detected capacity change from 0 to 512 [ 260.014748][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4396'. [ 260.034694][T15517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.068064][T15517] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.402750][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.459544][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4398'. [ 260.650104][T15535] hub 9-0:1.0: USB hub found [ 260.661729][T15537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4402'. [ 260.662087][T15535] hub 9-0:1.0: 8 ports detected [ 260.758442][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4407'. [ 260.789004][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4406'. [ 260.826877][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4408'. [ 260.837542][T15554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4409'. [ 260.856934][T15556] loop3: detected capacity change from 0 to 512 [ 260.884138][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.896432][T15556] EXT4-fs: Ignoring removed orlov option [ 260.903721][T15556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.910472][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 260.910488][ T29] audit: type=1326 audit(1752826479.283:51746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd116985967 code=0x7ffc0000 [ 260.940325][ T29] audit: type=1326 audit(1752826479.283:51747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd11692ab89 code=0x7ffc0000 [ 260.964984][ T29] audit: type=1326 audit(1752826479.283:51748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 260.993936][ T29] audit: type=1326 audit(1752826479.293:51749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd116985967 code=0x7ffc0000 [ 261.017564][ T29] audit: type=1326 audit(1752826479.293:51750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd11692ab89 code=0x7ffc0000 [ 261.042190][ T29] audit: type=1326 audit(1752826479.293:51751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 261.066414][ T29] audit: type=1326 audit(1752826479.313:51752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd116985967 code=0x7ffc0000 [ 261.090056][ T29] audit: type=1326 audit(1752826479.313:51753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd11692ab89 code=0x7ffc0000 [ 261.114287][ T29] audit: type=1326 audit(1752826479.313:51754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd11698e9a9 code=0x7ffc0000 [ 261.138050][ T29] audit: type=1326 audit(1752826479.343:51755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15561 comm="syz.2.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd116985967 code=0x7ffc0000 [ 261.148141][T15567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4416'. [ 261.179986][T15556] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4410: inode #0: comm syz.3.4410: iget: illegal inode # [ 261.198301][T15556] EXT4-fs (loop3): Remounting filesystem read-only [ 261.204900][T15556] EXT4-fs (loop3): get orphan inode failed [ 261.205963][T15556] EXT4-fs (loop3): mount failed [ 261.271085][T15579] team1: entered promiscuous mode [ 261.286569][T15579] team1: entered allmulticast mode [ 261.341235][T15591] loop1: detected capacity change from 0 to 512 [ 261.360251][T15591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.374495][T15591] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.436709][T15602] loop4: detected capacity change from 0 to 128 [ 261.445840][T15602] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.462537][T15602] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.475442][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.509575][T12119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.543279][T15613] loop1: detected capacity change from 0 to 512 [ 261.555394][T15613] EXT4-fs: Ignoring removed orlov option [ 261.557650][T15611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15611 comm=syz.4.4431 [ 261.571690][T15613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.591680][T15613] /dev/loop1: Can't open blockdev [ 261.750180][T15626] loop2: detected capacity change from 0 to 164 [ 261.804555][T15636] loop4: detected capacity change from 0 to 128 [ 261.821143][T15636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.847068][T15636] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.892591][T12119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.937652][T15641] loop4: detected capacity change from 0 to 512 [ 261.982595][T15641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.010315][T15641] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.093790][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.144545][T15657] FAULT_INJECTION: forcing a failure. [ 262.144545][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 262.157279][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.3.4449 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 262.157318][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.157335][T15657] Call Trace: [ 262.157342][T15657] [ 262.157380][T15657] __dump_stack+0x1d/0x30 [ 262.157425][T15657] dump_stack_lvl+0xe8/0x140 [ 262.157451][T15657] dump_stack+0x15/0x1b [ 262.157468][T15657] should_fail_ex+0x265/0x280 [ 262.157503][T15657] ? __se_sys_memfd_create+0x1cc/0x590 [ 262.157610][T15657] should_failslab+0x8c/0xb0 [ 262.157633][T15657] __kmalloc_cache_noprof+0x4c/0x320 [ 262.157666][T15657] ? fput+0x8f/0xc0 [ 262.157699][T15657] __se_sys_memfd_create+0x1cc/0x590 [ 262.157826][T15657] __x64_sys_memfd_create+0x31/0x40 [ 262.157865][T15657] x64_sys_call+0x122f/0x2fb0 [ 262.157965][T15657] do_syscall_64+0xd2/0x200 [ 262.157983][T15657] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.158016][T15657] ? clear_bhb_loop+0x40/0x90 [ 262.158093][T15657] ? clear_bhb_loop+0x40/0x90 [ 262.158202][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.158234][T15657] RIP: 0033:0x7f5ceb2ee9a9 [ 262.158255][T15657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.158312][T15657] RSP: 002b:00007f5ce9956e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 262.158337][T15657] RAX: ffffffffffffffda RBX: 000000000000069f RCX: 00007f5ceb2ee9a9 [ 262.158350][T15657] RDX: 00007f5ce9956ef0 RSI: 0000000000000000 RDI: 00007f5ceb371634 [ 262.158423][T15657] RBP: 0000200000000f00 R08: 00007f5ce9956bb7 R09: 00007f5ce9956e40 [ 262.158440][T15657] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000800 [ 262.158456][T15657] R13: 00007f5ce9956ef0 R14: 00007f5ce9956eb0 R15: 0000200000000140 [ 262.158474][T15657] [ 262.434210][T15661] loop3: detected capacity change from 0 to 164 [ 262.983849][T15706] loop1: detected capacity change from 0 to 512 [ 263.038887][T15706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.122010][T15706] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.210951][T15715] x_tables: duplicate underflow at hook 2 [ 263.308420][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.651983][T15752] loop3: detected capacity change from 0 to 512 [ 263.664251][T15752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.720711][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.200523][T15788] loop0: detected capacity change from 0 to 512 [ 264.224096][T15788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.238634][T15788] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.375783][T15800] loop1: detected capacity change from 0 to 512 [ 264.404925][T15800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.419047][T15800] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.453935][T15812] loop4: detected capacity change from 0 to 512 [ 264.467800][T15812] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.486017][T15812] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 264.503963][T15812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 264.510459][T15812] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 264.520201][T15812] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4511: attempt to clear invalid blocks 2 len 1 [ 264.533299][T15812] EXT4-fs (loop4): Remounting filesystem read-only [ 264.540098][T15812] EXT4-fs (loop4): 1 truncate cleaned up [ 264.546348][T15812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.943533][T15830] __nla_validate_parse: 12 callbacks suppressed [ 264.943566][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 265.061549][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.180759][T15843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4523'. [ 265.213436][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.288890][T15853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4529'. [ 265.304524][T15851] hub 9-0:1.0: USB hub found [ 265.318611][T15851] hub 9-0:1.0: 8 ports detected [ 265.324258][T12119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.358005][T15860] loop4: detected capacity change from 0 to 128 [ 265.369081][T15860] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.381881][T15860] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.424457][T12119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.481069][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4524'. [ 265.520327][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4536'. [ 265.596800][T15884] loop2: detected capacity change from 0 to 512 [ 265.624651][T15884] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.643208][T15884] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 265.653646][T15884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 265.660102][T15884] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 265.692938][T15888] 9pnet_fd: Insufficient options for proto=fd [ 265.699814][T15884] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4541: attempt to clear invalid blocks 2 len 1 [ 265.726158][T15890] hub 9-0:1.0: USB hub found [ 265.742468][T15890] hub 9-0:1.0: 8 ports detected [ 265.748442][T15884] EXT4-fs (loop2): Remounting filesystem read-only [ 265.762586][T15884] EXT4-fs (loop2): 1 truncate cleaned up [ 265.763064][T15884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.817615][T15894] loop3: detected capacity change from 0 to 128 [ 265.831677][T15894] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.846470][T15894] ext4 filesystem being mounted at /338/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.880638][T11808] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.940079][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 266.066976][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4550'. [ 266.077171][T15911] loop0: detected capacity change from 0 to 512 [ 266.101631][T15911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.104425][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4552'. [ 266.145135][T15911] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.156654][T15920] 9pnet_fd: Insufficient options for proto=fd [ 266.191637][ T29] kauditd_printk_skb: 1541 callbacks suppressed [ 266.191656][ T29] audit: type=1326 audit(1752826484.563:53297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.230523][ T29] audit: type=1326 audit(1752826484.563:53298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.254526][ T29] audit: type=1326 audit(1752826484.563:53299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.278439][ T29] audit: type=1326 audit(1752826484.573:53300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.302362][ T29] audit: type=1326 audit(1752826484.573:53301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.326237][ T29] audit: type=1326 audit(1752826484.573:53302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.350006][ T29] audit: type=1326 audit(1752826484.573:53303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.373796][ T29] audit: type=1326 audit(1752826484.573:53304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.397426][ T29] audit: type=1326 audit(1752826484.573:53305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.421153][ T29] audit: type=1326 audit(1752826484.573:53306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz.1.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cd564e9a9 code=0x7ffc0000 [ 266.460658][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.496304][T15934] loop3: detected capacity change from 0 to 512 [ 266.518341][T15934] EXT4-fs: Ignoring removed orlov option [ 266.526790][T15934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.550671][T15934] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4558: inode #0: comm syz.3.4558: iget: illegal inode # [ 266.619074][T15934] EXT4-fs (loop3): Remounting filesystem read-only [ 266.626470][T15934] EXT4-fs (loop3): get orphan inode failed [ 266.650096][T15934] EXT4-fs (loop3): mount failed [ 266.691886][T15943] loop1: detected capacity change from 0 to 512 [ 266.709393][T15943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.931062][T11372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.957012][T15954] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 267.207118][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4564'. [ 267.336962][T15971] loop3: detected capacity change from 0 to 512 [ 267.354687][T15975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4571'. [ 267.365628][T15971] EXT4-fs: Ignoring removed orlov option [ 267.385279][T15971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.395589][T15971] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4569: inode #0: comm syz.3.4569: iget: illegal inode # [ 267.426442][T15971] EXT4-fs (loop3): Remounting filesystem read-only [ 267.433812][T15971] EXT4-fs (loop3): get orphan inode failed [ 267.454560][T15971] EXT4-fs (loop3): mount failed [ 267.602586][T15985] tipc: Enabling of bearer rejected, already enabled [ 267.619443][T11545] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.714641][T15992] loop3: detected capacity change from 0 to 1024 [ 267.767117][T15992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.896016][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.953363][T16013] hub 9-0:1.0: USB hub found [ 267.962298][T16013] hub 9-0:1.0: 8 ports detected [ 268.004829][T16020] loop3: detected capacity change from 0 to 512 [ 268.014595][T16020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.043743][T16023] loop2: detected capacity change from 0 to 512 [ 268.050509][T16023] EXT4-fs: Ignoring removed orlov option [ 268.072537][T16023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.082055][T16023] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.4586: inode #0: comm syz.2.4586: iget: illegal inode # [ 268.098505][T16023] EXT4-fs (loop2): Remounting filesystem read-only [ 268.105928][T16023] EXT4-fs (loop2): get orphan inode failed [ 268.120522][T16026] tipc: Enabling of bearer rejected, already enabled [ 268.128883][T16023] EXT4-fs (loop2): mount failed [ 268.351089][T16042] loop1: detected capacity change from 0 to 512 [ 268.452296][T16052] hub 9-0:1.0: USB hub found [ 268.457983][T16052] hub 9-0:1.0: 8 ports detected [ 268.980438][T16066] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 269.108477][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.175320][T16071] 9pnet_fd: Insufficient options for proto=fd [ 269.249002][T16074] loop4: detected capacity change from 0 to 128 [ 269.259848][T16074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.286657][T16074] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.333497][T12119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.583683][T16097] loop3: detected capacity change from 0 to 164 [ 269.593358][T16097] Unable to read rock-ridge attributes [ 269.616054][T16097] Unable to read rock-ridge attributes [ 269.626779][T16097] bio_check_eod: 47 callbacks suppressed [ 269.626798][T16097] syz.3.4616: attempt to access beyond end of device [ 269.626798][T16097] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 269.671346][T16097] syz.3.4616: attempt to access beyond end of device [ 269.671346][T16097] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 269.851632][T16103] SELinux: Context system_u:object_r:auditctl_exec_t:s0 is not valid (left unmapped). [ 269.930207][T16106] loop2: detected capacity change from 0 to 128 [ 269.950701][T16106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.986519][T16106] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.010138][T16114] __nla_validate_parse: 4 callbacks suppressed [ 270.010206][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4625'. [ 270.055470][T11694] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.120606][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'. [ 270.138803][T16123] 9pnet_fd: Insufficient options for proto=fd [ 270.264627][T16128] loop3: detected capacity change from 0 to 512 [ 270.271347][T16128] EXT4-fs: Ignoring removed orlov option [ 270.278892][T16128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.297149][T16128] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.4629: inode #0: comm syz.3.4629: iget: illegal inode # [ 270.322911][T16128] EXT4-fs (loop3): Remounting filesystem read-only [ 270.329567][T16128] EXT4-fs (loop3): get orphan inode failed [ 270.336087][T16128] EXT4-fs (loop3): mount failed [ 270.441826][T16141] FAULT_INJECTION: forcing a failure. [ 270.441826][T16141] name failslab, interval 1, probability 0, space 0, times 0 [ 270.454947][T16141] CPU: 1 UID: 0 PID: 16141 Comm: syz.3.4635 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 270.454987][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.455036][T16141] Call Trace: [ 270.455043][T16141] [ 270.455118][T16141] __dump_stack+0x1d/0x30 [ 270.455153][T16141] dump_stack_lvl+0xe8/0x140 [ 270.455178][T16141] dump_stack+0x15/0x1b [ 270.455252][T16141] should_fail_ex+0x265/0x280 [ 270.455290][T16141] should_failslab+0x8c/0xb0 [ 270.455347][T16141] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 270.455386][T16141] ? shmem_alloc_inode+0x34/0x50 [ 270.455433][T16141] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 270.455470][T16141] shmem_alloc_inode+0x34/0x50 [ 270.455503][T16141] alloc_inode+0x40/0x170 [ 270.455580][T16141] new_inode+0x1d/0xe0 [ 270.455601][T16141] shmem_get_inode+0x244/0x750 [ 270.455673][T16141] ? __se_sys_memfd_create+0x1cc/0x590 [ 270.455717][T16141] __shmem_file_setup+0x113/0x210 [ 270.455756][T16141] shmem_file_setup+0x3b/0x50 [ 270.455822][T16141] __se_sys_memfd_create+0x2c3/0x590 [ 270.455857][T16141] __x64_sys_memfd_create+0x31/0x40 [ 270.455976][T16141] x64_sys_call+0x122f/0x2fb0 [ 270.456006][T16141] do_syscall_64+0xd2/0x200 [ 270.456042][T16141] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.456078][T16141] ? clear_bhb_loop+0x40/0x90 [ 270.456124][T16141] ? clear_bhb_loop+0x40/0x90 [ 270.456150][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.456178][T16141] RIP: 0033:0x7f5ceb2ee9a9 [ 270.456202][T16141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.456288][T16141] RSP: 002b:00007f5ce9956e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 270.456313][T16141] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f5ceb2ee9a9 [ 270.456326][T16141] RDX: 00007f5ce9956ef0 RSI: 0000000000000000 RDI: 00007f5ceb371634 [ 270.456357][T16141] RBP: 0000200000000640 R08: 00007f5ce9956bb7 R09: 00007f5ce9956e40 [ 270.456374][T16141] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 270.456392][T16141] R13: 00007f5ce9956ef0 R14: 00007f5ce9956eb0 R15: 00002000000001c0 [ 270.456419][T16141] [ 270.728997][T16145] loop0: detected capacity change from 0 to 128 [ 270.737835][T16145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.750504][T16145] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.773550][T11372] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.955560][T16159] loop2: detected capacity change from 0 to 1024 [ 270.974128][T16159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.990052][T16159] netlink: 'wޣ': attribute type 7 has an invalid length. [ 271.007695][T11694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.194192][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 271.194224][ T29] audit: type=1326 audit(1752826489.573:54427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ceb2e5967 code=0x7ffc0000 [ 271.227153][ T29] audit: type=1326 audit(1752826489.573:54428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ceb28ab89 code=0x7ffc0000 [ 271.250919][ T29] audit: type=1326 audit(1752826489.573:54429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 271.275482][ T29] audit: type=1326 audit(1752826489.583:54430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ceb2e5967 code=0x7ffc0000 [ 271.299026][ T29] audit: type=1326 audit(1752826489.583:54431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ceb28ab89 code=0x7ffc0000 [ 271.323420][ T29] audit: type=1326 audit(1752826489.583:54432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 271.347037][ T29] audit: type=1326 audit(1752826489.593:54433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ceb2e5967 code=0x7ffc0000 [ 271.371324][ T29] audit: type=1326 audit(1752826489.593:54434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ceb28ab89 code=0x7ffc0000 [ 271.395702][ T29] audit: type=1326 audit(1752826489.593:54435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5ceb2ee9a9 code=0x7ffc0000 [ 271.419444][ T29] audit: type=1326 audit(1752826489.603:54436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16142 comm="syz.3.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ceb2e5967 code=0x7ffc0000 [ 271.421412][T16173] loop4: detected capacity change from 0 to 512 [ 271.449779][T16173] EXT4-fs: Ignoring removed orlov option [ 271.455785][T16173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.464031][T16173] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.4645: inode #0: comm syz.4.4645: iget: illegal inode # [ 271.483706][T16173] EXT4-fs (loop4): Remounting filesystem read-only [ 271.490315][T16173] EXT4-fs (loop4): get orphan inode failed [ 271.497902][T16173] EXT4-fs (loop4): mount failed [ 271.545318][T16178] loop3: detected capacity change from 0 to 512 [ 271.553942][T16178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.621824][T16182] hub 9-0:1.0: USB hub found [ 271.627336][T16182] hub 9-0:1.0: 8 ports detected [ 271.696287][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4649'. [ 271.708059][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 271.714545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.722442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.730294][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.738189][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.746065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.753978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.761811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.769725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.777597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.785501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.793373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.801251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.809305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.817194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.825066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.832955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.840811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.848710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.856584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.864594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.872495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.880374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.888230][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.896466][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.904338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.912204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.920082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.927961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.935845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.943709][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.951587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.959494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.967375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.975268][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.983222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.991534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.999390][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.007261][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.015123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.023013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.030882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.039002][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.046878][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.054764][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.062674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.071937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.079868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.087744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.095594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.103448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.111300][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.119167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.127081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.135021][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.142919][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.150775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.158679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.166553][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.174414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.182306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.190201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.198077][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.205952][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.213842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.221693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.229598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.237467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.245377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.253250][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.261122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.269004][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.276886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.284762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.292654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.300518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.308410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.316310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.324179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.332051][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.339934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.347840][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.355733][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.363605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.371470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.379344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.387206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.395069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.403053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.410936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.418904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.426787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.434676][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.442556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.450414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.458266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.466146][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.473991][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.481877][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.489723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.497595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 272.505420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.522761][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.721404][T16217] FAULT_INJECTION: forcing a failure. [ 272.721404][T16217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.734733][T16217] CPU: 1 UID: 0 PID: 16217 Comm: syz.1.4661 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 272.734763][T16217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.734780][T16217] Call Trace: [ 272.734788][T16217] [ 272.734797][T16217] __dump_stack+0x1d/0x30 [ 272.734826][T16217] dump_stack_lvl+0xe8/0x140 [ 272.734853][T16217] dump_stack+0x15/0x1b [ 272.734875][T16217] should_fail_ex+0x265/0x280 [ 272.734964][T16217] should_fail+0xb/0x20 [ 272.735016][T16217] should_fail_usercopy+0x1a/0x20 [ 272.735059][T16217] strncpy_from_user+0x25/0x230 [ 272.735082][T16217] ? kmem_cache_alloc_noprof+0x186/0x310 [ 272.735156][T16217] ? getname_flags+0x80/0x3b0 [ 272.735180][T16217] getname_flags+0xae/0x3b0 [ 272.735205][T16217] __x64_sys_rmdir+0x21/0x40 [ 272.735321][T16217] x64_sys_call+0x2ae3/0x2fb0 [ 272.735351][T16217] do_syscall_64+0xd2/0x200 [ 272.735375][T16217] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.735411][T16217] ? clear_bhb_loop+0x40/0x90 [ 272.735464][T16217] ? clear_bhb_loop+0x40/0x90 [ 272.735561][T16217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.735659][T16217] RIP: 0033:0x7f9cd564e9a9 [ 272.735713][T16217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.735737][T16217] RSP: 002b:00007f9cd3caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 272.735763][T16217] RAX: ffffffffffffffda RBX: 00007f9cd5875fa0 RCX: 00007f9cd564e9a9 [ 272.735781][T16217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.735798][T16217] RBP: 00007f9cd3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 272.735815][T16217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.735830][T16217] R13: 0000000000000000 R14: 00007f9cd5875fa0 R15: 00007ffddc4a15a8 [ 272.735851][T16217] [ 273.015893][T16225] loop3: detected capacity change from 0 to 512 [ 273.037923][T16225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.605636][T16244] loop2: detected capacity change from 0 to 512 [ 273.612566][T16225] ================================================================== [ 273.612841][T16244] EXT4-fs: Ignoring removed orlov option [ 273.620688][T16225] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 273.626961][T16244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.635184][T16225] [ 273.635195][T16225] read-write to 0xffff888104897b50 of 8 bytes by task 16231 on cpu 0: [ 273.635218][T16225] __filemap_add_folio+0x5b9/0x7d0 [ 273.643469][T16244] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.4669: inode #0: comm syz.2.4669: iget: illegal inode # [ 273.644161][T16225] filemap_add_folio+0x98/0x1b0 [ 273.652789][T16244] EXT4-fs (loop2): Remounting filesystem read-only [ 273.657462][T16225] __filemap_get_folio+0x31e/0x6b0 [ 273.657506][T16225] ext4_write_begin+0x234/0xd30 [ 273.670624][T16244] EXT4-fs (loop2): get orphan inode failed [ 273.675294][T16225] ext4_da_write_begin+0x1e0/0x670 [ 273.675339][T16225] generic_perform_write+0x184/0x490 [ 273.675365][T16225] ext4_buffered_write_iter+0x1ee/0x3c0 [ 273.675396][T16225] ext4_file_write_iter+0xdbf/0xf00 [ 273.675423][T16225] iter_file_splice_write+0x5ef/0x970 [ 273.675459][T16225] direct_splice_actor+0x153/0x2a0 [ 273.675493][T16225] splice_direct_to_actor+0x30f/0x680 [ 273.675530][T16225] do_splice_direct+0xda/0x150 [ 273.675561][T16225] do_sendfile+0x380/0x650 [ 273.675590][T16225] __x64_sys_sendfile64+0x105/0x150 [ 273.675613][T16225] x64_sys_call+0xb39/0x2fb0 [ 273.675641][T16225] do_syscall_64+0xd2/0x200 [ 273.675662][T16225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.675689][T16225] [ 273.675698][T16225] read to 0xffff888104897b50 of 8 bytes by task 16225 on cpu 1: [ 273.675716][T16225] filemap_write_and_wait_range+0x59/0x340 [ 273.675759][T16225] ext4_file_write_iter+0xe04/0xf00 [ 273.675782][T16225] iter_file_splice_write+0x5ef/0x970 [ 273.675819][T16225] direct_splice_actor+0x153/0x2a0 [ 273.675854][T16225] splice_direct_to_actor+0x30f/0x680 [ 273.675887][T16225] do_splice_direct+0xda/0x150 [ 273.675922][T16225] do_sendfile+0x380/0x650 [ 273.675947][T16225] __x64_sys_sendfile64+0x105/0x150 [ 273.675970][T16225] x64_sys_call+0xb39/0x2fb0 [ 273.675999][T16225] do_syscall_64+0xd2/0x200 [ 273.676022][T16225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.676049][T16225] [ 273.676054][T16225] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 273.676068][T16225] [ 273.676072][T16225] Reported by Kernel Concurrency Sanitizer on: [ 273.676084][T16225] CPU: 1 UID: 0 PID: 16225 Comm: syz.3.4663 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 273.676121][T16225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.676139][T16225] ================================================================== [ 273.902559][T16244] EXT4-fs (loop2): mount failed [ 273.921626][T11808] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.