last executing test programs: 4.750465162s ago: executing program 4 (id=1884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.715255373s ago: executing program 4 (id=1885): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') r1 = epoll_create1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000002}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x2, 0x4, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000008fdff00000000000300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r4, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 1.44833317s ago: executing program 4 (id=1924): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2b, 0x80801, 0x1) pipe2(&(0x7f0000001cc0), 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 1.370286743s ago: executing program 4 (id=1926): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)="4e680dad52390fcf7117b5af5b568a87b412eff6ef804bc215441c2ee439a0077547d89d52bc54058ea008587c54a58302a9f4be1a35e1a06afaad3d55d1f94fdac1bdac4ae1d5cd", 0x48, r0}, 0x68) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xe0000003}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.334268054s ago: executing program 0 (id=1927): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe59) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 1.237350099s ago: executing program 0 (id=1931): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r7 = eventfd(0x4) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x8000f28, 0x0) splice(r11, 0x0, r10, 0x0, 0x7f, 0xe) write(r9, 0x0, 0x0) 1.069772716s ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) 998.951679ms ago: executing program 1 (id=1935): syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x8c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0xa00) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 684.964571ms ago: executing program 3 (id=1937): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2b, 0x80801, 0x1) pipe2(&(0x7f0000001cc0), 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 656.633143ms ago: executing program 3 (id=1938): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000cdd) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 596.517155ms ago: executing program 1 (id=1939): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x4000cdd) close_range(r0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 551.602447ms ago: executing program 3 (id=1940): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x10001) write(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) io_setup(0x3, &(0x7f00000002c0)=0x0) r7 = eventfd(0x3ff) io_submit(r6, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r5, &(0x7f0000000300)="e3f706520e3ac7ea6a0efa95dde19faf3d43807e5b86de87ad54c6614100ac9e6c667ed86440d0737e9a8530be415c27e7dafb676e20ff6a09024513832601a65b75dfec37c84a14fa5345dce0eb0a23e0d65333b1a16339b63faa801a36c3d65607c45656c5175fccbfd10c1a0948cf9dfea309025e14f72e7ba9bbe3ba20f73f9b77889c6eb52ca0f734ef0dac07544d6ca1a98d24790e09f0ca5c7ba6316aefae99f512706a74c423fec8b5366b29a2538cc91e8e8d76", 0xb8, 0x80000000, 0x0, 0x1, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x10, r5, &(0x7f0000000400)="8f1f3bfeda30c666edbf911c05c083ab3e5cf32e0c29ffb2ac342bfc8c80107b637a3d6dc9cc149aa984ebb7be75f8c9", 0x30, 0x81, 0x0, 0x3}]) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)={0xb50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x4, 0x7, 0x5, 0x4b39, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x18, 0x5, 0x36, 0x65, 0x48, 0x12, 0x16, 0x2, 0xb, 0x60, 0x1, 0x3, 0x4, 0x4, 0xc, 0x16, 0xb, 0x30, 0x1, 0x4, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xc70, 0x6, 0x1, 0x5, 0x8001, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x36, 0x5, 0x9, 0x5, 0x18, 0x18, 0x48, 0x1b, 0x5, 0x9, 0x4, 0x12, 0x12, 0x5, 0x1, 0x6c, 0x6c, 0x48, 0x24, 0x2, 0x6c, 0x5, 0x2, 0x24, 0x48, 0x16, 0x3, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x18, 0xc, 0x1b, 0x16, 0x62, 0x30, 0x36, 0x1b, 0x1b, 0x48, 0x9, 0x1, 0x2, 0x0, 0x6c, 0x60, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xe0, 0x5, 0x3, 0x7, 0x4, 0x1000, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7, 0x100, 0x7, 0x1, 0x25ce, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x9}, {0x4, 0x8}, {}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1a}, {0x1, 0x1}, {0x7, 0x12}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x1}, {0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x1, 0xfe18, 0x101, 0x7, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x16, 0x16, 0x24, 0xc, 0x1b, 0x18, 0x16, 0x5, 0x18, 0xb, 0x0, 0x4, 0x4, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x5}, {0x6, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x4, 0x81, 0x2000, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x16, 0x36, 0x1, 0x36, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x5, 0x8, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x60, 0x12, 0x6c, 0xc, 0x5, 0x60, 0x4, 0x60, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x401, 0x3, 0x3, 0x1000, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xb922, 0x7, 0x9, 0x8, 0xe24, 0x8]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0xb}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x2, 0x12, 0x1, 0x18, 0x48, 0x12, 0x3, 0x6c, 0x12, 0x30, 0x5, 0x24, 0xc, 0x16, 0x16, 0x2, 0x60, 0xb, 0x24, 0x1b, 0xc, 0xc, 0x4, 0x1, 0xb, 0x6, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x5, 0x3}, {0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x360, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x7, 0x2}, {0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x5}, {0x3, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xcd12, 0x8001, 0x1, 0x2, 0x4, 0xc449, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x4, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {}, {0x1, 0x2}, {}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc000, 0x7e7, 0x6, 0x3ff8, 0x7fff, 0x40, 0x7]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x5}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x5, 0x3, 0x4, 0x0, 0x3fc0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x7cc5, 0x3, 0x67, 0x1, 0x8f0, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6, 0x16, 0x6, 0x16, 0x30]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x404, 0x8, 0x81, 0x3, 0xca7, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xe, 0x46, 0x8, 0xe, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x2, 0xb, 0x6c, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3e0, 0x8, 0x6, 0x0, 0x2918, 0x4000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6f0, 0xa, 0x954d, 0x6, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x60, 0x12, 0x48, 0x5, 0x13, 0x2, 0x36, 0x24, 0x24, 0x5, 0x1b, 0x5, 0x5, 0x24, 0x2, 0x0, 0x5, 0x12, 0x36, 0x60, 0x12, 0x16, 0x18, 0x36, 0x1, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x3, 0x7ff, 0x2, 0x2, 0xfff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x73, 0x98e6, 0x2, 0x2, 0xf, 0x401]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x5}, {0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1f}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x18, 0x12, 0xc, 0x30, 0x1b, 0x1]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x30, 0xc, 0x48, 0x12, 0x60, 0xb, 0x36, 0x1, 0x5a, 0x6, 0x18, 0x1, 0x2, 0x24, 0x4, 0x48, 0x36, 0x12, 0x2, 0x2, 0x16, 0x3, 0x36, 0xc, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4a3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0xfffc, 0x7, 0x841, 0x4, 0x6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x2}, {0x4, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x0, 0x6, 0xfff, 0x1000, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x863b3885aa607b50}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7}, {0x4, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff, 0x4800, 0x4, 0x1a0, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1698, 0x8001, 0x9, 0x1, 0xd57, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x200, 0x7, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e6, 0x629a, 0x6, 0xfffd, 0x2, 0xd3, 0xca6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0xa, 0x0, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x1, 0xc, 0x24, 0x36, 0x48, 0x1b, 0x36, 0x30, 0x12, 0xc, 0x6c, 0x48, 0x16, 0x1, 0x4, 0x2, 0x6c, 0xb, 0x30, 0x48, 0x1, 0x6c, 0x2, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x6, 0x0, 0x1, 0x2, 0xfff1, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xf9e7, 0x6, 0xb, 0x7, 0x6, 0xb10e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0x9, 0xdc, 0x2, 0x9, 0x5, 0xc, 0x49]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x9, 0x1, 0x80, 0xd, 0x10, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x9, 0x60, 0xb, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x8, 0x977, 0xa, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0xf704, 0x6, 0x4, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc128, 0x6, 0x6, 0xfe, 0x7fff]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x2, 0x1}, {}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x1f}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x9, 0x5, 0x35, 0x3, 0x1, 0x1b, 0x24, 0xc, 0x36, 0x36, 0x30, 0xb, 0x6c, 0x0, 0x39, 0x60, 0x30, 0x9, 0x60, 0x3, 0x1b, 0xb, 0x9, 0xc, 0x1, 0xc, 0x6c, 0x20]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8817, 0x8, 0x0, 0x392, 0x800, 0x1, 0x1, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x6dac, 0x0, 0x2, 0x0, 0xe5c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x7}, {0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x80, 0x9, 0x100, 0x10, 0x9, 0x0, 0x3de1]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xd3ac, 0x10, 0x1, 0xf21, 0x0, 0x8000]}}]}]}, @NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1293, 0x12a0, 0xa, 0x0, 0x5, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x4, 0x36, 0xb]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x80, 0x5, 0x5, 0xd, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xd420, 0xfa1, 0xe52e, 0x3, 0x0, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x6c, 0x6c, 0x6, 0x4, 0x48, 0x1b, 0x3, 0x1b, 0x30, 0x6c, 0x36, 0x60, 0x5, 0x12, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x7b]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x8, 0x6, 0x6, 0x8, 0xbf9b, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xb50}, 0x1, 0x0, 0x0, 0x20000091}, 0x14) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 499.803159ms ago: executing program 2 (id=1941): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe59) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 478.58092ms ago: executing program 0 (id=1942): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socket(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000003980), 0x4f}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000011c0)="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"}, {&(0x7f0000000380)="aa0b733d4eefbc32882484ec41ddcee5b6dac0908fd3feef26391dae506670796c30bbed51a20720bc50a9fdd37be055acc835c9eabe0e590d79ad4c1806442e752bc30b35f854e77eba9e9ffa094a28a3704c4ec2d63f343b0fb6074297bafc1e47019563b418e85afa647ff813900a028004f0c4dc216dc0604dec537f8bfe2c211fc4658fe78edb42f96d530fa291499499c08c22b9ca9a1547e83f88272476869133d79eb4910c3599183e4dbb6cdaf73bd713bc9aa5e3fc7365434ef2f2c0817e0c354648d61e58af55da0518a16181879fa8212c8e02395e9d44d8d001dc2e0a2994b06bca73396f9d513a14f4e9e537074c"}, {&(0x7f00000002c0)="3a4108c8aab529fe73599629a780cc36f3cb30ac7833c3f9f18aa8c9883bbcac36574d0243126c5f12a435676ef432d463bf30b255591f475e7097619bd07e3ffd41752e63b730843df98b417a509c6d534b633d463e7f4c15cfa7b98aa9ac7e90dfab9e44f316a3f1b10375815bc704fae3f5190bab0530cd406a"}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000002900000036000000010000000000000005020000040102040105c204000100010000000000000000290000003200000000000000000000000000ffff64010102", @ANYRES32, @ANYBLOB="0000000000000000000000002900000039ddaa001d00020300000000fe8800000000000000000000000001010000000000000000290000000b0000000000000300000000"]}}], 0x1, 0x4c94) 447.067642ms ago: executing program 1 (id=1943): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x9}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0x7, [{0xa, 0x1, 0x3}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000400)=""/166, 0x42, 0xa6, 0x0, 0x7fff, 0x10000, @value=r0}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x20}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xfffffffffffffff4) io_setup(0x2, &(0x7f0000000000)=0x0) r7 = eventfd(0x4) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x8000f28, 0x0) splice(r11, 0x0, r10, 0x0, 0x7f, 0xe) write(r9, 0x0, 0x0) 446.586332ms ago: executing program 4 (id=1944): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) pipe2(&(0x7f0000000040), 0x800) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x79c, 0xe, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) 389.969934ms ago: executing program 0 (id=1947): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) io_setup(0x3, &(0x7f00000002c0)=0x0) r8 = eventfd(0x3ff) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r6, &(0x7f0000000300)="e3f706520e3ac7ea6a0efa95dde19faf3d43807e5b86de87ad54c6614100ac9e6c667ed86440d0737e9a8530be415c27e7dafb676e20ff6a09024513832601a65b75dfec37c84a14fa5345dce0eb0a23e0d65333b1a16339b63faa801a36c3d65607c45656c5175fccbfd10c1a0948cf9dfea309025e14f72e7ba9bbe3ba20f73f9b77889c6eb52ca0f734ef0dac07544d6ca1a98d24790e09f0ca5c7ba6316aefae99f512706a74c423fec8b5366b29a2538cc91e8e8d76", 0xb8, 0x80000000, 0x0, 0x1, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x10, r6, &(0x7f0000000400)="8f1f3bfeda30c666edbf911c05c083ab3e5cf32e0c29ffb2ac342bfc8c80107b637a3d6dc9cc149aa984ebb7be75f8c9", 0x30, 0x81, 0x0, 0x3}]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)={0xb30, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x4, 0x7, 0x5, 0x4b39, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x18, 0x5, 0x36, 0x65, 0x48, 0x12, 0x16, 0x2, 0xb, 0x60, 0x1, 0x3, 0x4, 0x4, 0xc, 0x16, 0xb, 0x30, 0x1, 0x4, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xc70, 0x6, 0x1, 0x5, 0x8001, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x36, 0x5, 0x9, 0x5, 0x18, 0x18, 0x48, 0x1b, 0x5, 0x9, 0x4, 0x12, 0x12, 0x5, 0x1, 0x6c, 0x6c, 0x48, 0x24, 0x2, 0x6c, 0x5, 0x2, 0x24, 0x48, 0x16, 0x3, 0x36, 0x3, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x18, 0xc, 0x1b, 0x16, 0x62, 0x30, 0x36, 0x1b, 0x1b, 0x48, 0x9, 0x1, 0x2, 0x0, 0x6c, 0x60, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xe0, 0x5, 0x3, 0x7, 0x4, 0x1000, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7, 0x100, 0x7, 0x1, 0x25ce, 0x3]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x9}, {0x4, 0x8}, {}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x1a}, {0x1, 0x1}, {0x7, 0x12}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x1}, {0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x1, 0xfe18, 0x101, 0x7, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x16, 0x16, 0x24, 0xc, 0x1b, 0x18, 0x16, 0x5, 0x18, 0xb, 0x0, 0x4, 0x4, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x4}, {0x5}, {0x6, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x4, 0x81, 0x2000, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x16, 0x36, 0x1, 0x36, 0x24, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x5, 0x5, 0x8, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x60, 0x12, 0x6c, 0xc, 0x5, 0x60, 0x4, 0x60, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x401, 0x3, 0x3, 0x1000, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xb922, 0x7, 0x9, 0x8, 0xe24, 0x8]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0xa}, {0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0xb}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x2, 0x12, 0x1, 0x18, 0x48, 0x12, 0x3, 0x6c, 0x12, 0x30, 0x5, 0x24, 0xc, 0x16, 0x16, 0x2, 0x60, 0xb, 0x24, 0x1b, 0xc, 0xc, 0x4, 0x1, 0xb, 0x6, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x5, 0x3}, {0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x360, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x5}, {0x7, 0x2}, {0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x7}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x5}, {0x3, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xcd12, 0x8001, 0x1, 0x2, 0x4, 0xc449, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x4, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x1, 0xa}, {0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {}, {0x1, 0x2}, {}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc000, 0x7e7, 0x6, 0x3ff8, 0x7fff, 0x40, 0x7]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x5}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x8}, {}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x5, 0x3, 0x4, 0x0, 0x3fc0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x7cc5, 0x3, 0x67, 0x1, 0x8f0, 0x7]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x1}, {0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6, 0x16, 0x6, 0x16, 0x30]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x404, 0x8, 0x81, 0x3, 0xca7, 0x5, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xe, 0x46, 0x8, 0xe, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x2, 0xb, 0x6c, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x9}, {0x6}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3e0, 0x8, 0x6, 0x0, 0x2918, 0x4000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6f0, 0xa, 0x954d, 0x6, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x60, 0x12, 0x48, 0x5, 0x13, 0x2, 0x36, 0x24, 0x24, 0x5, 0x1b, 0x5, 0x5, 0x24, 0x2, 0x0, 0x5, 0x12, 0x36, 0x60, 0x12, 0x16, 0x18, 0x36, 0x1, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x3, 0x7ff, 0x2, 0x2, 0xfff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x73, 0x98e6, 0x2, 0x2, 0xf, 0x401]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x5}, {0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1f}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6}, {0x5, 0x1}, {}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x18, 0x12, 0xc, 0x30, 0x1b, 0x1]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x30, 0xc, 0x48, 0x12, 0x60, 0xb, 0x36, 0x1, 0x5a, 0x6, 0x18, 0x1, 0x2, 0x24, 0x4, 0x48, 0x36, 0x12, 0x2, 0x2, 0x16, 0x3, 0x36, 0xc, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x6, 0x3ff, 0x1, 0x0, 0x4a3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0xfffc, 0x7, 0x841, 0x4, 0x6]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x8}, {0x1, 0x5}, {0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x2}, {0x4, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xf, 0x0, 0x6, 0xfff, 0x1000, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x863b3885aa607b50}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7}, {0x4, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff, 0x4800, 0x4, 0x1a0, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1698, 0x8001, 0x9, 0x1, 0xd57, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x200, 0x7, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1e6, 0x629a, 0x6, 0xfffd, 0x2, 0xd3, 0xca6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0xa, 0x0, 0x7, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x1, 0xc, 0x24, 0x36, 0x48, 0x1b, 0x36, 0x30, 0x12, 0xc, 0x6c, 0x48, 0x16, 0x1, 0x4, 0x2, 0x6c, 0xb, 0x30, 0x48, 0x1, 0x6c, 0x2, 0x18, 0x16, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x6, 0x0, 0x1, 0x2, 0xfff1, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xf9e7, 0x6, 0xb, 0x7, 0x6, 0xb10e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0x9, 0xdc, 0x2, 0x9, 0x5, 0xc, 0x49]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x9, 0x1, 0x80, 0xd, 0x10, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x9, 0x60, 0xb, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x8, 0x977, 0xa, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0xf704, 0x6, 0x4, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc128, 0x6, 0x6, 0xfe, 0x7fff]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x2, 0x1}, {}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x1f}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x9, 0x5, 0x35, 0x3, 0x1, 0x1b, 0x24, 0xc, 0x36, 0x36, 0x30, 0xb, 0x6c, 0x0, 0x39, 0x60, 0x30, 0x9, 0x60, 0x3, 0x1b, 0xb, 0x9, 0xc, 0x1, 0xc, 0x6c, 0x20]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8817, 0x8, 0x0, 0x392, 0x800, 0x1, 0x1, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x6dac, 0x0, 0x2, 0x0, 0xe5c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x7}, {0x5}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x80, 0x9, 0x100, 0x10, 0x9, 0x0, 0x3de1]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xd3ac, 0x10, 0x1, 0xf21, 0x0, 0x8000]}}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x80, 0x5, 0x5, 0xd, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x6c, 0x6c, 0x6, 0x4, 0x48, 0x1b, 0x3, 0x30, 0x6c, 0x36, 0x60, 0x5, 0x12, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x7b]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x8, 0x6, 0x6, 0x8, 0xbf9b, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xb30}, 0x1, 0x0, 0x0, 0x20000091}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 389.112144ms ago: executing program 3 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r2}}, 0x40) 376.138495ms ago: executing program 2 (id=1949): syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x8c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0xa00) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x86c9460748f085ce}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 369.495705ms ago: executing program 3 (id=1950): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000cdd) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 300.869108ms ago: executing program 3 (id=1951): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001001641b020a31876de53e131a9ad00b3da1c646a54ebcff1d480a6162eade604b48d3917d7bf86cebd7cf44a6fdd4bdf8f71a093f6380a6d62de414a8"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x2, 0x8}, {0x7, 0xd}, {0x5, 0x5}, {0x400, 0x8}, {0x1, 0x6000}]}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000240)=""/121) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 264.888919ms ago: executing program 1 (id=1952): rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) 235.32914ms ago: executing program 2 (id=1953): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 157.177132][ T8453] __dump_stack+0x1d/0x30 [ 157.177153][ T8453] dump_stack_lvl+0xe8/0x140 [ 157.177179][ T8453] dump_stack+0x15/0x1b [ 157.177199][ T8453] should_fail_ex+0x265/0x280 [ 157.177289][ T8453] should_fail+0xb/0x20 [ 157.177371][ T8453] should_fail_usercopy+0x1a/0x20 [ 157.177397][ T8453] _copy_from_iter+0xd2/0xe80 [ 157.177438][ T8453] ? alloc_pages_mpol+0x217/0x260 [ 157.177469][ T8453] copy_page_from_iter+0x178/0x2a0 [ 157.177498][ T8453] tun_get_user+0x679/0x26e0 [ 157.177585][ T8453] ? ref_tracker_alloc+0x1f2/0x2f0 [ 157.177633][ T8453] tun_chr_write_iter+0x15e/0x210 [ 157.177669][ T8453] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 157.177719][ T8453] vfs_write+0x52a/0x960 [ 157.177750][ T8453] ksys_write+0xda/0x1a0 [ 157.177823][ T8453] __x64_sys_write+0x40/0x50 [ 157.177857][ T8453] x64_sys_call+0x2802/0x3000 [ 157.177939][ T8453] do_syscall_64+0xd2/0x200 [ 157.177965][ T8453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.178009][ T8453] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.178051][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.178079][ T8453] RIP: 0033:0x7fb8858ae1ff [ 157.178099][ T8453] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 157.178122][ T8453] RSP: 002b:00007fb8842f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 157.178147][ T8453] RAX: ffffffffffffffda RBX: 00007fb885b06090 RCX: 00007fb8858ae1ff [ 157.178227][ T8453] RDX: 000000000000004a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 157.178242][ T8453] RBP: 00007fb8842f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.178255][ T8453] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 157.178269][ T8453] R13: 00007fb885b06128 R14: 00007fb885b06090 R15: 00007ffd7d3b0548 [ 157.178292][ T8453] [ 157.411662][ T8425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.489723][ T8462] loop2: detected capacity change from 0 to 512 [ 157.525523][ T8462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.543990][ T8462] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.603411][ T8462] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.1066: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 157.656439][ T8425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.710873][ T8462] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.1066: directory missing '.' [ 157.826672][ T8473] loop3: detected capacity change from 0 to 128 [ 157.930856][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.196586][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.205044][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.213628][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.300453][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.334209][ T8482] Falling back ldisc for ptm1. [ 158.513053][ T8489] xt_hashlimit: size too large, truncated to 1048576 [ 158.535178][ T8494] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 158.752109][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.758386][ T8515] loop3: detected capacity change from 0 to 512 [ 158.839025][ T8515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.899403][ T8515] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1080: iget: bad i_size value: 38620345925642 [ 158.926650][ T8515] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1080: couldn't read orphan inode 15 (err -117) [ 158.952856][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'. [ 158.973088][ T8515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.997604][ T8515] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 159.030806][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.065809][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1088'. [ 159.081936][ T8548] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 159.188722][ T8558] siw: device registration error -23 [ 159.192573][ T8548] bond1 (unregistering): Released all slaves [ 159.327011][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 159.347237][ T8570] FAULT_INJECTION: forcing a failure. [ 159.347237][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 159.359992][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.0.1093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.360018][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.360030][ T8570] Call Trace: [ 159.360042][ T8570] [ 159.360051][ T8570] __dump_stack+0x1d/0x30 [ 159.360206][ T8570] dump_stack_lvl+0xe8/0x140 [ 159.360227][ T8570] dump_stack+0x15/0x1b [ 159.360244][ T8570] should_fail_ex+0x265/0x280 [ 159.360343][ T8570] should_failslab+0x8c/0xb0 [ 159.360370][ T8570] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 159.360462][ T8570] ? __alloc_skb+0x101/0x320 [ 159.360500][ T8570] __alloc_skb+0x101/0x320 [ 159.360529][ T8570] netlink_alloc_large_skb+0xbf/0xf0 [ 159.360563][ T8570] netlink_sendmsg+0x3cf/0x6b0 [ 159.360733][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.360758][ T8570] __sock_sendmsg+0x145/0x180 [ 159.360789][ T8570] ____sys_sendmsg+0x31e/0x4e0 [ 159.360816][ T8570] ___sys_sendmsg+0x17b/0x1d0 [ 159.360849][ T8570] __x64_sys_sendmsg+0xd4/0x160 [ 159.360912][ T8570] x64_sys_call+0x191e/0x3000 [ 159.360978][ T8570] do_syscall_64+0xd2/0x200 [ 159.361006][ T8570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.361040][ T8570] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.361114][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.361141][ T8570] RIP: 0033:0x7f6c3bf5f749 [ 159.361159][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.361239][ T8570] RSP: 002b:00007f6c3a9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.361258][ T8570] RAX: ffffffffffffffda RBX: 00007f6c3c1b5fa0 RCX: 00007f6c3bf5f749 [ 159.361270][ T8570] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 159.361283][ T8570] RBP: 00007f6c3a9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 159.361376][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.361388][ T8570] R13: 00007f6c3c1b6038 R14: 00007f6c3c1b5fa0 R15: 00007ffdb09356c8 [ 159.361406][ T8570] [ 159.600606][ T8580] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.638330][ T8580] SELinux: failed to load policy [ 159.666407][ T8582] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.679785][ T8582] SELinux: policydb version 586747130 does not match my version range 15-35 [ 159.689071][ T8582] SELinux: failed to load policy [ 159.745425][ T8590] loop1: detected capacity change from 0 to 2048 [ 159.779365][ T8589] loop4: detected capacity change from 0 to 512 [ 159.794134][ T4436] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 159.799497][ T4436] loop1: partition table partially beyond EOD, truncated [ 159.815956][ T8589] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1099: EA inode hash validation failed [ 159.871522][ T4436] loop1: p1 size 917504 extends beyond EOD, truncated [ 159.880473][ T8589] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1099: corrupted inode contents [ 159.902667][ T4436] loop1: p2 start 4278190080 is beyond EOD, truncated [ 159.912796][ T8589] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1099: mark_inode_dirty error [ 159.949091][ T4436] loop1: p4 size 8192 extends beyond EOD, truncated [ 159.959649][ T8589] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1099: corrupted inode contents [ 159.981341][ T4436] loop1: p5 size 917504 extends beyond EOD, truncated [ 159.988593][ T8589] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1099: mark_inode_dirty error [ 160.000839][ T4436] loop1: p6 size 8192 extends beyond EOD, truncated [ 160.017279][ T8589] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1099: mark inode dirty (error -117) [ 160.030573][ T8589] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 160.039943][ T8589] EXT4-fs (loop4): 1 orphan inode deleted [ 160.048004][ T8589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.062887][ T8600] program syz.1.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.163825][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.197984][ T8590] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 160.203244][ T8590] loop1: partition table partially beyond EOD, truncated [ 160.242862][ T8590] loop1: p1 size 917504 extends beyond EOD, truncated [ 160.257198][ T8590] loop1: p2 start 4278190080 is beyond EOD, truncated [ 160.265391][ T8590] loop1: p4 size 8192 extends beyond EOD, truncated [ 160.274291][ T8590] loop1: p5 size 917504 extends beyond EOD, truncated [ 160.285124][ T8590] loop1: p6 size 8192 extends beyond EOD, truncated [ 160.327226][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 160.335451][ T8619] wg1 speed is unknown, defaulting to 1000 [ 160.396070][ T5419] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.423448][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 160.424813][ T4436] udevd[4436]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 160.435336][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 160.454403][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 160.467488][ T8637] loop2: detected capacity change from 0 to 128 [ 160.487875][ T4081] udevd[4081]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 160.610841][ T8651] FAULT_INJECTION: forcing a failure. [ 160.610841][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 160.623622][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.0.1111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.623647][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.623657][ T8651] Call Trace: [ 160.623662][ T8651] [ 160.623668][ T8651] __dump_stack+0x1d/0x30 [ 160.623686][ T8651] dump_stack_lvl+0xe8/0x140 [ 160.623712][ T8651] dump_stack+0x15/0x1b [ 160.623725][ T8651] should_fail_ex+0x265/0x280 [ 160.623741][ T8651] should_failslab+0x8c/0xb0 [ 160.623785][ T8651] __kvmalloc_node_noprof+0x12e/0x670 [ 160.623810][ T8651] ? __se_sys_add_key+0x1ee/0x350 [ 160.623904][ T8651] __se_sys_add_key+0x1ee/0x350 [ 160.623929][ T8651] __x64_sys_add_key+0x67/0x80 [ 160.623973][ T8651] x64_sys_call+0x28c8/0x3000 [ 160.624056][ T8651] do_syscall_64+0xd2/0x200 [ 160.624074][ T8651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.624096][ T8651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.624185][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.624201][ T8651] RIP: 0033:0x7f6c3bf5f749 [ 160.624213][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.624227][ T8651] RSP: 002b:00007f6c3a9bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 160.624241][ T8651] RAX: ffffffffffffffda RBX: 00007f6c3c1b5fa0 RCX: 00007f6c3bf5f749 [ 160.624311][ T8651] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 160.624321][ T8651] RBP: 00007f6c3a9bf090 R08: fffffffffffffffd R09: 0000000000000000 [ 160.624341][ T8651] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 160.624351][ T8651] R13: 00007f6c3c1b6038 R14: 00007f6c3c1b5fa0 R15: 00007ffdb09356c8 [ 160.624365][ T8651] [ 160.836011][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 160.854108][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 160.873248][ T8658] Falling back ldisc for ptm2. [ 160.922898][ T8663] loop0: detected capacity change from 0 to 128 [ 161.057165][ T8688] siw: device registration error -23 [ 161.239552][ T8708] siw: device registration error -23 [ 161.474269][ T8722] Falling back ldisc for ptm2. [ 161.669144][ T8729] loop1: detected capacity change from 0 to 512 [ 161.685374][ T8729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.698998][ T8729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 161.716955][ T8729] System zones: 1-12 [ 161.723216][ T8729] EXT4-fs (loop1): 1 truncate cleaned up [ 161.737590][ T8729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.820397][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.829072][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.909379][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 161.909395][ T29] audit: type=1326 audit(1764533742.316:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 161.946087][ T29] audit: type=1326 audit(1764533742.344:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 161.969552][ T29] audit: type=1326 audit(1764533742.344:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 161.993087][ T29] audit: type=1326 audit(1764533742.344:8603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.016580][ T29] audit: type=1326 audit(1764533742.344:8604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.040074][ T29] audit: type=1326 audit(1764533742.344:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.063494][ T29] audit: type=1326 audit(1764533742.344:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.086968][ T29] audit: type=1326 audit(1764533742.344:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.110434][ T29] audit: type=1326 audit(1764533742.344:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.133939][ T29] audit: type=1326 audit(1764533742.344:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8736 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 162.259112][ T8743] 8021q: VLANs not supported on sit0 [ 162.415950][ T8747] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1136'. [ 162.432330][ T8747] 0: reclassify loop, rule prio 0, protocol 800 [ 162.535824][ T3484] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.826603][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.862802][ T8758] Falling back ldisc for ptm0. [ 162.953064][ T8767] loop3: detected capacity change from 0 to 512 [ 162.962758][ T8767] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1144: EA inode hash validation failed [ 162.976558][ T8767] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1144: corrupted inode contents [ 162.992923][ T8767] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.1144: mark_inode_dirty error [ 163.000155][ T8770] Falling back ldisc for ptm0. [ 163.005472][ T8767] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.1144: corrupted inode contents [ 163.021748][ T8767] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.1144: mark_inode_dirty error [ 163.034672][ T8767] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1144: mark inode dirty (error -117) [ 163.047645][ T8767] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 163.047979][ T8767] EXT4-fs (loop3): 1 orphan inode deleted [ 163.065837][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 163.070944][ T3717] Bluetooth: hci1: command 0x1003 tx timeout [ 163.079685][ T8767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.251117][ T8777] FAULT_INJECTION: forcing a failure. [ 163.251117][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.264359][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.1.1148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.264458][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.264473][ T8777] Call Trace: [ 163.264478][ T8777] [ 163.264485][ T8777] __dump_stack+0x1d/0x30 [ 163.264576][ T8777] dump_stack_lvl+0xe8/0x140 [ 163.264594][ T8777] dump_stack+0x15/0x1b [ 163.264608][ T8777] should_fail_ex+0x265/0x280 [ 163.264624][ T8777] should_fail+0xb/0x20 [ 163.264638][ T8777] should_fail_usercopy+0x1a/0x20 [ 163.264702][ T8777] strncpy_from_user+0x25/0x230 [ 163.264793][ T8777] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 163.264822][ T8777] __se_sys_memfd_create+0x1ff/0x590 [ 163.264902][ T8777] __x64_sys_memfd_create+0x31/0x40 [ 163.264923][ T8777] x64_sys_call+0x2ac2/0x3000 [ 163.264942][ T8777] do_syscall_64+0xd2/0x200 [ 163.264960][ T8777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.265031][ T8777] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.265066][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.265084][ T8777] RIP: 0033:0x7fb8858af749 [ 163.265139][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.265154][ T8777] RSP: 002b:00007fb884316e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 163.265170][ T8777] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007fb8858af749 [ 163.265181][ T8777] RDX: 00007fb884316ef0 RSI: 0000000000000000 RDI: 00007fb885934960 [ 163.265191][ T8777] RBP: 0000200000001a40 R08: 00007fb884316bb7 R09: 00007fb884316e40 [ 163.265201][ T8777] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 163.265261][ T8777] R13: 00007fb884316ef0 R14: 00007fb884316eb0 R15: 0000200000000440 [ 163.265276][ T8777] [ 163.461740][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.553152][ T8785] wg1 speed is unknown, defaulting to 1000 [ 163.593243][ T8783] Falling back ldisc for ptm0. [ 163.605757][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 163.648764][ T8792] FAULT_INJECTION: forcing a failure. [ 163.648764][ T8792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.661965][ T8792] CPU: 0 UID: 0 PID: 8792 Comm: syz.4.1152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.661998][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.662014][ T8792] Call Trace: [ 163.662021][ T8792] [ 163.662033][ T8792] __dump_stack+0x1d/0x30 [ 163.662061][ T8792] dump_stack_lvl+0xe8/0x140 [ 163.662086][ T8792] dump_stack+0x15/0x1b [ 163.662109][ T8792] should_fail_ex+0x265/0x280 [ 163.662133][ T8792] should_fail+0xb/0x20 [ 163.662153][ T8792] should_fail_usercopy+0x1a/0x20 [ 163.662221][ T8792] strncpy_from_user+0x25/0x230 [ 163.662254][ T8792] ? kmem_cache_alloc_noprof+0x242/0x480 [ 163.662288][ T8792] ? getname_flags+0x80/0x3b0 [ 163.662405][ T8792] getname_flags+0xae/0x3b0 [ 163.662442][ T8792] do_sys_openat2+0x60/0x110 [ 163.662467][ T8792] __x64_sys_openat+0xf2/0x120 [ 163.662570][ T8792] x64_sys_call+0x2eab/0x3000 [ 163.662597][ T8792] do_syscall_64+0xd2/0x200 [ 163.662623][ T8792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.662672][ T8792] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.662736][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.662755][ T8792] RIP: 0033:0x7fa10f6bdf90 [ 163.662770][ T8792] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 163.662790][ T8792] RSP: 002b:00007fa10e126f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 163.662812][ T8792] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa10f6bdf90 [ 163.662826][ T8792] RDX: 0000000000000002 RSI: 00007fa10e126fa0 RDI: 00000000ffffff9c [ 163.662912][ T8792] RBP: 00007fa10e126fa0 R08: 0000000000000000 R09: 0000000000000000 [ 163.662925][ T8792] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 163.662939][ T8792] R13: 00007fa10f916038 R14: 00007fa10f915fa0 R15: 00007ffebb93b6a8 [ 163.662960][ T8792] [ 163.910146][ T8803] Falling back ldisc for ptm1. [ 163.949080][ T8798] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.001284][ T8798] SELinux: failed to load policy [ 164.157416][ T8831] netlink: 'syz.1.1159': attribute type 6 has an invalid length. [ 164.180001][ T8830] loop4: detected capacity change from 0 to 128 [ 164.204821][ T8835] netlink: 'syz.2.1161': attribute type 6 has an invalid length. [ 164.262055][ T8843] siw: device registration error -23 [ 164.360876][ T8860] siw: device registration error -23 [ 164.472049][ T8876] wg1 speed is unknown, defaulting to 1000 [ 164.530602][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 164.551664][ T8886] Falling back ldisc for ptm1. [ 164.604107][ T8893] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 164.827042][ T8906] loop4: detected capacity change from 0 to 512 [ 164.851229][ T8906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.896645][ T8906] EXT4-fs (loop4): 1 truncate cleaned up [ 164.907928][ T8906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.161619][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.184660][ T8924] wg1 speed is unknown, defaulting to 1000 [ 165.230721][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 165.242362][ T8934] siw: device registration error -23 [ 165.255670][ T8931] Falling back ldisc for ptm0. [ 165.450304][ T8942] siw: device registration error -23 [ 165.685858][ T8951] loop4: detected capacity change from 0 to 512 [ 165.731121][ T8966] loop1: detected capacity change from 0 to 512 [ 165.742253][ T8951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.771419][ T8966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.782413][ T8951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 165.792109][ T8951] System zones: 1-12 [ 165.793276][ T8966] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1188: iget: bad i_size value: 38620345925642 [ 165.830362][ T8951] EXT4-fs (loop4): 1 truncate cleaned up [ 165.843368][ T8966] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1188: couldn't read orphan inode 15 (err -117) [ 165.870388][ T8951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.880346][ T8966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.926143][ T8984] Falling back ldisc for ptm0. [ 165.985807][ T8966] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.032165][ T8995] loop3: detected capacity change from 0 to 512 [ 166.039810][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.059780][ T8996] wg1 speed is unknown, defaulting to 1000 [ 166.066753][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.078533][ T8995] EXT4-fs: Ignoring removed i_version option [ 166.084572][ T8995] EXT4-fs: dax option not supported [ 166.094357][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.104653][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 166.170862][ T9002] FAULT_INJECTION: forcing a failure. [ 166.170862][ T9002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.184086][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.1.1195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.184131][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.184145][ T9002] Call Trace: [ 166.184152][ T9002] [ 166.184161][ T9002] __dump_stack+0x1d/0x30 [ 166.184187][ T9002] dump_stack_lvl+0xe8/0x140 [ 166.184274][ T9002] dump_stack+0x15/0x1b [ 166.184296][ T9002] should_fail_ex+0x265/0x280 [ 166.184333][ T9002] should_fail+0xb/0x20 [ 166.184348][ T9002] should_fail_usercopy+0x1a/0x20 [ 166.184375][ T9002] _copy_from_user+0x1c/0xb0 [ 166.184490][ T9002] proc_control+0x43/0xa0 [ 166.184524][ T9002] usbdev_ioctl+0x93c/0x1700 [ 166.184653][ T9002] ? __pfx_usbdev_ioctl+0x10/0x10 [ 166.184716][ T9002] __se_sys_ioctl+0xce/0x140 [ 166.184742][ T9002] __x64_sys_ioctl+0x43/0x50 [ 166.184767][ T9002] x64_sys_call+0x1816/0x3000 [ 166.184798][ T9002] do_syscall_64+0xd2/0x200 [ 166.184868][ T9002] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.184917][ T9002] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.184959][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.185012][ T9002] RIP: 0033:0x7fb8858af749 [ 166.185027][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.185049][ T9002] RSP: 002b:00007fb884317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.185071][ T9002] RAX: ffffffffffffffda RBX: 00007fb885b05fa0 RCX: 00007fb8858af749 [ 166.185086][ T9002] RDX: 0000200000000280 RSI: 00000000c0185500 RDI: 0000000000000009 [ 166.185101][ T9002] RBP: 00007fb884317090 R08: 0000000000000000 R09: 0000000000000000 [ 166.185116][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.185127][ T9002] R13: 00007fb885b06038 R14: 00007fb885b05fa0 R15: 00007ffd7d3b0548 [ 166.185173][ T9002] [ 166.700136][ T9021] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.733218][ T9021] SELinux: failed to load policy [ 166.749016][ T9011] Process accounting resumed [ 166.812419][ T9027] Falling back ldisc for ptm0. [ 166.882766][ T9035] loop1: detected capacity change from 0 to 1024 [ 166.919879][ T9035] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.940246][ T9035] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.946968][ T9035] EXT4-fs error (device loop1): ext4_quota_enable:7136: comm syz.1.1207: inode #2304: comm syz.1.1207: iget: illegal inode # [ 166.966079][ T9043] loop2: detected capacity change from 0 to 512 [ 166.992875][ T9035] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.1207: Bad quota inode: 2304, type: 2 [ 167.008288][ T9044] Falling back ldisc for ptm0. [ 167.026895][ T9043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.039826][ T9043] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.050847][ T9035] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 167.071516][ T9043] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.1208: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 167.078828][ T9035] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 167.092744][ T9043] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.1208: directory missing '.' [ 167.116054][ T9035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.335318][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 167.335348][ T29] audit: type=1400 audit(1764533747.368:9084): avc: denied { connect } for pid=9034 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.539926][ T9047] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 167.560040][ T9047] EXT4-fs error (device loop1): ext4_quota_enable:7136: comm syz.1.1207: inode #2304: comm syz.1.1207: iget: illegal inode # [ 167.593568][ T9047] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.1207: Bad quota inode: 2304, type: 2 [ 167.622900][ T9047] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 167.815752][ T9060] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.853862][ T9060] SELinux: failed to load policy [ 167.889425][ T29] audit: type=1326 audit(1764533747.901:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 167.914156][ T29] audit: type=1326 audit(1764533747.901:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 167.937710][ T29] audit: type=1326 audit(1764533747.901:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 167.961344][ T29] audit: type=1326 audit(1764533747.901:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 167.984818][ T29] audit: type=1326 audit(1764533747.901:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 168.008276][ T29] audit: type=1326 audit(1764533747.901:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 168.031904][ T29] audit: type=1326 audit(1764533747.901:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 168.055365][ T29] audit: type=1326 audit(1764533747.901:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 168.078816][ T29] audit: type=1326 audit(1764533747.901:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 168.176239][ T9062] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.206141][ T9070] loop0: detected capacity change from 0 to 512 [ 168.214696][ T9070] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.321648][ T9070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 168.363696][ T9070] System zones: 1-12 [ 168.663977][ T9070] EXT4-fs (loop0): 1 truncate cleaned up [ 168.701553][ T9062] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.862903][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.019442][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.124717][ T9062] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.209604][ T9091] siw: device registration error -23 [ 169.221370][ T9093] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 169.243711][ T9062] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.353877][ T9100] Falling back ldisc for ptm0. [ 169.376548][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.383760][ T9104] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.426974][ T9104] SELinux: failed to load policy [ 169.432129][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.475241][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.599453][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.859747][ T9161] loop3: detected capacity change from 0 to 128 [ 170.186778][ T3310] EXT4-fs unmount: 4 callbacks suppressed [ 170.186797][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.205272][ T9165] siw: device registration error -23 [ 170.354155][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.383082][ T9184] loop2: detected capacity change from 0 to 512 [ 170.395832][ T9184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.408689][ T9184] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.427014][ T9188] loop1: detected capacity change from 0 to 128 [ 170.433866][ T9184] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.1239: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 170.459621][ T9184] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.1239: directory missing '.' [ 170.856203][ T9213] loop4: detected capacity change from 0 to 512 [ 170.878217][ T9218] Falling back ldisc for ptm1. [ 170.883571][ T9213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.904823][ T9213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 170.927731][ T9213] System zones: 1-12 [ 170.943578][ T9213] EXT4-fs (loop4): 1 truncate cleaned up [ 170.958505][ T9213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.052963][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.066317][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.236438][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.293375][ T9245] Falling back ldisc for ptm2. [ 171.468492][ T9257] siw: device registration error -23 [ 171.606651][ T9264] loop2: detected capacity change from 0 to 512 [ 171.620857][ T9264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.644007][ T9264] EXT4-fs (loop2): 1 truncate cleaned up [ 171.650311][ T9264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.690777][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.962724][ T9280] loop3: detected capacity change from 0 to 128 [ 171.969625][ T9280] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.981994][ T9280] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.139231][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.190018][ T9290] siw: device registration error -23 [ 172.339407][ T9299] siw: device registration error -23 [ 172.551621][ T3717] Bluetooth: hci0: command 0x1003 tx timeout [ 172.557864][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.669818][ T9314] loop2: detected capacity change from 0 to 1024 [ 172.676655][ T9314] EXT4-fs: Ignoring removed orlov option [ 172.692728][ T9314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.707455][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 172.707471][ T29] audit: type=1326 audit(1764533752.410:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.758674][ T29] audit: type=1326 audit(1764533752.410:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.782287][ T29] audit: type=1326 audit(1764533752.410:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.805960][ T29] audit: type=1326 audit(1764533752.410:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.829570][ T29] audit: type=1326 audit(1764533752.410:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.853018][ T29] audit: type=1326 audit(1764533752.410:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.853560][ T9320] loop3: detected capacity change from 0 to 128 [ 172.876543][ T29] audit: type=1326 audit(1764533752.410:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.906312][ T29] audit: type=1326 audit(1764533752.420:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.929755][ T29] audit: type=1326 audit(1764533752.420:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.953159][ T29] audit: type=1326 audit(1764533752.420:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9313 comm="syz.2.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 172.987948][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.089710][ T9324] loop2: detected capacity change from 0 to 512 [ 173.101979][ T9324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.116000][ T9324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 173.124364][ T9324] System zones: 1-12 [ 173.131282][ T9324] EXT4-fs (loop2): 1 truncate cleaned up [ 173.139031][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.218226][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.227969][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.312369][ T9329] loop4: detected capacity change from 0 to 128 [ 173.325420][ T9329] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.338008][ T9329] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.442954][ T9339] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.480174][ T9348] loop0: detected capacity change from 0 to 512 [ 173.487005][ T9347] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1275'. [ 173.507059][ T9348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.549619][ T9348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 173.596345][ T9348] System zones: 1-12 [ 173.609608][ T9348] EXT4-fs (loop0): 1 truncate cleaned up [ 173.622122][ T9348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.662797][ T9339] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.717172][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.736582][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.793699][ T9339] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.875187][ T9339] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.954096][ T9376] loop4: detected capacity change from 0 to 512 [ 173.968869][ T9376] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1283: EA inode hash validation failed [ 173.981817][ T9376] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1283: corrupted inode contents [ 173.995019][ T9376] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1283: mark_inode_dirty error [ 174.007098][ T9376] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1283: corrupted inode contents [ 174.037010][ T1086] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.047034][ T9376] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1283: mark_inode_dirty error [ 174.059560][ T9376] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1283: mark inode dirty (error -117) [ 174.076545][ T9376] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 174.085893][ T9376] EXT4-fs (loop4): 1 orphan inode deleted [ 174.092604][ T9376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.116206][ T1086] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.133675][ T9380] loop1: detected capacity change from 0 to 128 [ 174.157673][ T1086] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.167154][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.207586][ T5419] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.222976][ T9382] Falling back ldisc for ptm2. [ 174.255197][ T9384] loop4: detected capacity change from 0 to 128 [ 174.262262][ T9384] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.275016][ T9384] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.311561][ T9386] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 174.369839][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.811041][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.935390][ T3484] Bluetooth: hci0: command 0x1003 tx timeout [ 174.941595][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.309871][ T9428] wg1 speed is unknown, defaulting to 1000 [ 175.341486][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 175.560967][ T9443] loop2: detected capacity change from 0 to 512 [ 175.578612][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.591562][ T9443] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.605811][ T9443] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.1296: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 175.627397][ T9443] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.1296: directory missing '.' [ 175.671108][ T9448] loop3: detected capacity change from 0 to 128 [ 175.679103][ T9450] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.680524][ T9448] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.702657][ T9448] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.725575][ T9450] SELinux: failed to load policy [ 175.809567][ T9458] siw: device registration error -23 [ 176.025179][ T9465] wg1 speed is unknown, defaulting to 1000 [ 176.209436][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 176.218567][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 176.235303][ T3717] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 176.427786][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.000299][ T9475] Falling back ldisc for ptm0. [ 177.127492][ T9491] loop2: detected capacity change from 0 to 128 [ 177.140576][ T9491] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.170186][ T9491] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.174928][ T9496] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 177.265733][ T9504] loop2: detected capacity change from 0 to 512 [ 177.278450][ T9506] siw: device registration error -23 [ 177.287224][ T9504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.347846][ T9504] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1313: iget: bad i_size value: 38620345925642 [ 177.360745][ T9496] SELinux: failed to load policy [ 177.391479][ T9504] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1313: couldn't read orphan inode 15 (err -117) [ 177.416721][ T9521] Falling back ldisc for ptm0. [ 177.453626][ T9504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.480746][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.513044][ T9504] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 177.545839][ T9536] loop0: detected capacity change from 0 to 128 [ 177.571930][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.879185][ T9546] Falling back ldisc for ptm0. [ 178.229938][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 178.229958][ T29] audit: type=1326 audit(1764533757.556:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 178.259774][ T29] audit: type=1326 audit(1764533757.556:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 178.892537][ T9590] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.958826][ T9590] SELinux: failed to load policy [ 178.985692][ T9594] Falling back ldisc for ptm0. [ 179.031052][ T29] audit: type=1326 audit(1764533758.332:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.054797][ T29] audit: type=1326 audit(1764533758.332:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.125784][ T29] audit: type=1326 audit(1764533758.388:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.149497][ T29] audit: type=1326 audit(1764533758.388:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.172997][ T29] audit: type=1326 audit(1764533758.388:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.248680][ T29] audit: type=1326 audit(1764533758.482:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.322629][ T9596] Process accounting resumed [ 179.336299][ T29] audit: type=1326 audit(1764533758.613:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.359925][ T29] audit: type=1326 audit(1764533758.613:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9600 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 179.470659][ T9640] loop4: detected capacity change from 0 to 128 [ 180.502607][ T3484] Bluetooth: hci0: command 0x1003 tx timeout [ 180.506725][ T3717] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.571019][ T9656] siw: device registration error -23 [ 180.777397][ T9676] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.808781][ T9676] SELinux: failed to load policy [ 180.869657][ T9688] loop1: detected capacity change from 0 to 512 [ 180.870420][ T9687] Falling back ldisc for ptm0. [ 180.878324][ T9688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.911475][ T9688] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1344: iget: bad i_size value: 38620345925642 [ 180.924600][ T9688] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1344: couldn't read orphan inode 15 (err -117) [ 180.954001][ T9688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.972873][ T9688] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 181.026172][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.042182][ T9708] siw: device registration error -23 [ 181.082802][ T9713] siw: device registration error -23 [ 181.146448][ T9711] loop1: detected capacity change from 0 to 512 [ 181.161687][ T9711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.181477][ T9711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 181.190211][ T9711] System zones: 1-12 [ 181.202109][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 181.223944][ T9711] EXT4-fs (loop1): 1 truncate cleaned up [ 181.235592][ T9711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.261667][ T9726] Falling back ldisc for ptm0. [ 181.347531][ T9734] Falling back ldisc for ptm0. [ 181.374588][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.399192][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.523478][ T9722] loop2: detected capacity change from 0 to 128 [ 181.533073][ T9722] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.556442][ T9722] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #2: comm syz.2.1351: corrupted xattr block 5: invalid header [ 181.570048][ T9722] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 181.581318][ T9722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.605602][ T3717] Bluetooth: hci1: command 0x1003 tx timeout [ 181.608443][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 181.695369][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.759071][ T9772] loop0: detected capacity change from 0 to 128 [ 181.772451][ T9771] wg1 speed is unknown, defaulting to 1000 [ 181.798571][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 181.830655][ T9776] Falling back ldisc for ptm1. [ 181.965629][ T9786] Falling back ldisc for ptm1. [ 182.038057][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.255574][ T9798] wg1 speed is unknown, defaulting to 1000 [ 182.266328][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 182.283923][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 182.311274][ T9803] FAULT_INJECTION: forcing a failure. [ 182.311274][ T9803] name failslab, interval 1, probability 0, space 0, times 0 [ 182.324150][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz.3.1374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.324179][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.324194][ T9803] Call Trace: [ 182.324203][ T9803] [ 182.324209][ T9803] __dump_stack+0x1d/0x30 [ 182.324253][ T9803] dump_stack_lvl+0xe8/0x140 [ 182.324271][ T9803] dump_stack+0x15/0x1b [ 182.324354][ T9803] should_fail_ex+0x265/0x280 [ 182.324376][ T9803] should_failslab+0x8c/0xb0 [ 182.324408][ T9803] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 182.324488][ T9803] ? __alloc_skb+0x101/0x320 [ 182.324521][ T9803] __alloc_skb+0x101/0x320 [ 182.324633][ T9803] netlink_alloc_large_skb+0xbf/0xf0 [ 182.324672][ T9803] netlink_sendmsg+0x3cf/0x6b0 [ 182.324709][ T9803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.324781][ T9803] __sock_sendmsg+0x145/0x180 [ 182.324811][ T9803] ____sys_sendmsg+0x31e/0x4e0 [ 182.324844][ T9803] ___sys_sendmsg+0x17b/0x1d0 [ 182.324883][ T9803] __x64_sys_sendmsg+0xd4/0x160 [ 182.324912][ T9803] x64_sys_call+0x191e/0x3000 [ 182.324940][ T9803] do_syscall_64+0xd2/0x200 [ 182.324969][ T9803] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.324995][ T9803] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.325111][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.325130][ T9803] RIP: 0033:0x7f61e448f749 [ 182.325194][ T9803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.325211][ T9803] RSP: 002b:00007f61e2eef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.325232][ T9803] RAX: ffffffffffffffda RBX: 00007f61e46e5fa0 RCX: 00007f61e448f749 [ 182.325243][ T9803] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 182.325257][ T9803] RBP: 00007f61e2eef090 R08: 0000000000000000 R09: 0000000000000000 [ 182.325272][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.325286][ T9803] R13: 00007f61e46e6038 R14: 00007f61e46e5fa0 R15: 00007ffc2e272588 [ 182.325309][ T9803] [ 182.328451][ T9803] loop3: detected capacity change from 0 to 128 [ 182.332283][ T9806] Falling back ldisc for ptm1. [ 182.425411][ T9803] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.555927][ T9812] Falling back ldisc for ptm1. [ 182.584992][ T9803] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.1374: corrupted xattr block 5: invalid header [ 182.642446][ T9803] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 182.659356][ T9803] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.680605][ T9817] loop1: detected capacity change from 0 to 1024 [ 182.695818][ T9825] IPv6: Can't replace route, no match found [ 182.722899][ T9817] EXT4-fs: Ignoring removed orlov option [ 182.759349][ T9817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.783054][ T9837] loop2: detected capacity change from 0 to 1024 [ 182.789863][ T9837] EXT4-fs: Ignoring removed orlov option [ 182.818169][ T9837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.910573][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.005021][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.066659][ T9867] wg1 speed is unknown, defaulting to 1000 [ 183.089382][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 183.145167][ T9883] IPv6: Can't replace route, no match found [ 183.207830][ T9887] Falling back ldisc for ptm1. [ 183.337623][ T9904] siw: device registration error -23 [ 183.914726][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.915977][ T3717] Bluetooth: hci0: command 0x1003 tx timeout [ 183.983504][ T9913] Process accounting resumed [ 184.037417][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 184.037498][ T29] audit: type=1404 audit(1764533763.010:10677): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 184.082286][ T29] audit: type=1404 audit(1764533763.038:10678): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 184.097441][ T29] audit: type=1400 audit(1764533763.038:10679): avc: denied { create } for pid=9917 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 184.118353][ T29] audit: type=1400 audit(1764533763.038:10680): avc: denied { write } for pid=9917 comm="syz.1.1401" path="socket:[21403]" dev="sockfs" ino=21403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 184.147230][ T29] audit: type=1400 audit(1764533763.094:10681): avc: denied { read write } for pid=9917 comm="syz.1.1401" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 184.170895][ T29] audit: type=1400 audit(1764533763.094:10682): avc: denied { open } for pid=9917 comm="syz.1.1401" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 184.194414][ T29] audit: type=1400 audit(1764533763.094:10683): avc: denied { prog_load } for pid=9917 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.213579][ T29] audit: type=1400 audit(1764533763.094:10684): avc: denied { bpf } for pid=9917 comm="syz.1.1401" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.234202][ T29] audit: type=1400 audit(1764533763.094:10685): avc: denied { perfmon } for pid=9917 comm="syz.1.1401" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.264890][ T29] audit: type=1400 audit(1764533763.113:10686): avc: denied { prog_run } for pid=9917 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.460769][ T9926] Falling back ldisc for ptm0. [ 184.562688][ T9932] siw: device registration error -23 [ 184.698769][ T9944] wg1 speed is unknown, defaulting to 1000 [ 184.730627][ T9947] FAULT_INJECTION: forcing a failure. [ 184.730627][ T9947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.740058][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1413'. [ 184.743872][ T9947] CPU: 0 UID: 0 PID: 9947 Comm: syz.4.1409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.743908][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.743925][ T9947] Call Trace: [ 184.743934][ T9947] [ 184.743946][ T9947] __dump_stack+0x1d/0x30 [ 184.744026][ T9947] dump_stack_lvl+0xe8/0x140 [ 184.744054][ T9947] dump_stack+0x15/0x1b [ 184.744079][ T9947] should_fail_ex+0x265/0x280 [ 184.744199][ T9947] should_fail+0xb/0x20 [ 184.744221][ T9947] should_fail_usercopy+0x1a/0x20 [ 184.744249][ T9947] _copy_to_user+0x20/0xa0 [ 184.744284][ T9947] simple_read_from_buffer+0xb5/0x130 [ 184.744319][ T9947] proc_fail_nth_read+0x10e/0x150 [ 184.744424][ T9947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.744466][ T9947] vfs_read+0x1a8/0x770 [ 184.744500][ T9947] ? __rcu_read_unlock+0x4f/0x70 [ 184.744535][ T9947] ? __fget_files+0x184/0x1c0 [ 184.744602][ T9947] ksys_read+0xda/0x1a0 [ 184.744644][ T9947] __x64_sys_read+0x40/0x50 [ 184.744677][ T9947] x64_sys_call+0x27c0/0x3000 [ 184.744780][ T9947] do_syscall_64+0xd2/0x200 [ 184.744808][ T9947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.744848][ T9947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.744902][ T9947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.745003][ T9947] RIP: 0033:0x7fa10f6be15c [ 184.745023][ T9947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.745049][ T9947] RSP: 002b:00007fa10e127030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.745075][ T9947] RAX: ffffffffffffffda RBX: 00007fa10f915fa0 RCX: 00007fa10f6be15c [ 184.745092][ T9947] RDX: 000000000000000f RSI: 00007fa10e1270a0 RDI: 0000000000000006 [ 184.745113][ T9947] RBP: 00007fa10e127090 R08: 0000000000000000 R09: 0000000000000000 [ 184.745127][ T9947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.745138][ T9947] R13: 00007fa10f916038 R14: 00007fa10f915fa0 R15: 00007ffebb93b6a8 [ 184.745228][ T9947] [ 185.003635][ T9952] loop4: detected capacity change from 0 to 1024 [ 185.018685][ T9952] EXT4-fs: Ignoring removed orlov option [ 185.068828][ T3717] Bluetooth: hci0: sending frame failed (-49) [ 185.075029][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 185.090660][ T9952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.106450][ T9957] loop2: detected capacity change from 0 to 128 [ 185.256384][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.280005][ T9972] siw: device registration error -23 [ 185.341154][ T9979] siw: device registration error -23 [ 185.516435][ T9988] Falling back ldisc for ptm0. [ 185.532418][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.550277][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.575997][ T9986] loop0: detected capacity change from 0 to 512 [ 185.595309][ T9986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1427: ea_inode with extended attributes [ 185.608656][ T9986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1427: error while reading EA inode 11 err=-117 [ 185.625959][ T9986] EXT4-fs (loop0): 1 orphan inode deleted [ 185.632336][ T9986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.655426][ T9986] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 186.023995][T10009] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 186.262955][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.437256][T10015] loop1: detected capacity change from 0 to 512 [ 186.460636][T10015] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.519033][T10015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 186.523008][T10045] Falling back ldisc for ptm0. [ 186.538974][T10015] System zones: 1-12 [ 186.567176][T10015] EXT4-fs (loop1): 1 truncate cleaned up [ 186.585338][T10015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.621524][T10057] loop4: detected capacity change from 0 to 1024 [ 186.628561][T10057] EXT4-fs: Ignoring removed orlov option [ 186.656800][T10057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.764744][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.776338][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.799592][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.842109][T10073] loop4: detected capacity change from 0 to 1024 [ 186.858032][T10075] siw: device registration error -23 [ 186.880758][T10073] EXT4-fs: Ignoring removed orlov option [ 186.901931][T10073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.988066][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.027704][T10083] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.578411][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.872707][T10114] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.948982][T10117] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 188.039405][T10123] Falling back ldisc for ptm1. [ 188.248310][T10131] wg1 speed is unknown, defaulting to 1000 [ 188.281755][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 188.302971][T10127] loop4: detected capacity change from 0 to 512 [ 188.316867][T10137] siw: device registration error -23 [ 188.323710][T10127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.336483][T10127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 188.349439][T10127] System zones: 1-12 [ 188.365100][T10127] EXT4-fs (loop4): 1 truncate cleaned up [ 188.383894][T10142] IPv6: Can't replace route, no match found [ 188.404908][T10127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.435435][T10146] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 188.560022][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.583454][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.971259][ T3717] Bluetooth: hci0: command 0x1003 tx timeout [ 189.001392][T10181] siw: device registration error -23 [ 189.007245][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.447433][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.739628][T10208] loop1: detected capacity change from 0 to 1024 [ 189.756111][T10208] EXT4-fs: Ignoring removed orlov option [ 189.788729][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 189.788746][ T29] audit: type=1326 audit(1764533768.389:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.827109][ T29] audit: type=1326 audit(1764533768.426:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.828365][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.850885][ T29] audit: type=1326 audit(1764533768.426:11352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.886468][ T29] audit: type=1326 audit(1764533768.436:11353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.910117][ T29] audit: type=1326 audit(1764533768.436:11354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.933724][ T29] audit: type=1326 audit(1764533768.436:11355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.957464][ T29] audit: type=1326 audit(1764533768.436:11356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 189.981064][ T29] audit: type=1326 audit(1764533768.436:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 190.004736][ T29] audit: type=1326 audit(1764533768.436:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 190.028477][ T29] audit: type=1326 audit(1764533768.436:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10217 comm="syz.0.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3bf5f749 code=0x7ffc0000 [ 190.069169][T10236] IPv6: Can't replace route, no match found [ 190.098039][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.117041][T10211] loop4: detected capacity change from 0 to 512 [ 190.156631][T10211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.210461][T10211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 190.229628][T10211] System zones: 1-12 [ 190.250706][T10211] EXT4-fs (loop4): 1 truncate cleaned up [ 190.262044][T10211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.283473][T10253] loop3: detected capacity change from 0 to 1024 [ 190.298246][T10253] EXT4-fs: Ignoring removed orlov option [ 190.466131][T10253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.530518][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.582529][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.770577][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.818811][T10269] siw: device registration error -23 [ 191.037355][T10285] Falling back ldisc for ptm0. [ 191.115712][T10266] Process accounting resumed [ 191.182846][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.261867][T10302] siw: device registration error -23 [ 191.654233][T10323] Falling back ldisc for ptm1. [ 191.842669][T10327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.934862][T10329] wg1 speed is unknown, defaulting to 1000 [ 191.963883][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 192.004390][T10338] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.017909][T10338] SELinux: policydb version 586747130 does not match my version range 15-35 [ 192.026762][T10338] SELinux: failed to load policy [ 192.057084][T10341] loop4: detected capacity change from 0 to 128 [ 192.085090][T10341] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.098148][T10341] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.396213][T10363] Falling back ldisc for ptm0. [ 192.622326][T10371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10371 comm=syz.2.1533 [ 192.665480][T10378] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.693366][T10354] Process accounting resumed [ 193.815335][T10388] siw: device registration error -23 [ 193.824127][T10398] loop1: detected capacity change from 0 to 128 [ 193.831147][T10398] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.871491][T10401] Falling back ldisc for ptm0. [ 193.894590][T10398] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.961039][T10405] IPv6: Can't replace route, no match found [ 194.074238][T10424] loop3: detected capacity change from 0 to 128 [ 194.399966][T10452] loop1: detected capacity change from 0 to 512 [ 194.441381][T10452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.482731][T10452] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.554375][T10452] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.1552: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 194.592523][T10426] Process accounting resumed [ 194.601944][T10452] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.1552: directory missing '.' [ 194.632647][T10461] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 194.663178][T10464] siw: device registration error -23 [ 194.771280][T10468] loop4: detected capacity change from 0 to 512 [ 194.796620][T10468] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1557: EA inode hash validation failed [ 194.809743][T10468] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1557: corrupted inode contents [ 194.824740][T10468] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1557: mark_inode_dirty error [ 194.848120][T10468] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1557: corrupted inode contents [ 194.861586][T10468] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1557: mark_inode_dirty error [ 194.877870][T10468] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1557: mark inode dirty (error -117) [ 194.890770][T10468] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 194.900172][T10468] EXT4-fs (loop4): 1 orphan inode deleted [ 194.906630][T10468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.997622][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.164164][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.454615][T10480] siw: device registration error -23 [ 197.494838][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.615427][T10504] IPv6: Can't replace route, no match found [ 197.643822][T10510] loop1: detected capacity change from 0 to 1024 [ 197.663953][T10510] EXT4-fs: Ignoring removed orlov option [ 197.717589][T10510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.774860][T10522] siw: device registration error -23 [ 197.782661][T10498] loop3: detected capacity change from 0 to 512 [ 197.792700][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 197.792717][ T29] audit: type=1326 audit(1764533775.882:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 197.822616][ T29] audit: type=1326 audit(1764533775.882:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 197.887220][T10498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.954593][T10498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 197.962993][ T29] audit: type=1326 audit(1764533775.882:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 197.986693][ T29] audit: type=1326 audit(1764533775.882:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.004187][T10498] System zones: [ 198.010335][ T29] audit: type=1326 audit(1764533775.882:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.010372][ T29] audit: type=1326 audit(1764533775.882:11959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.010404][ T29] audit: type=1326 audit(1764533775.882:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.010459][ T29] audit: type=1326 audit(1764533775.882:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.010526][ T29] audit: type=1326 audit(1764533775.882:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.010560][ T29] audit: type=1326 audit(1764533775.882:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 198.015422][T10498] 1-12 [ 198.063027][T10512] Process accounting resumed [ 198.168697][T10498] [ 198.179966][T10498] EXT4-fs (loop3): 1 truncate cleaned up [ 198.197476][T10498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.214026][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.238651][T10540] loop4: detected capacity change from 0 to 512 [ 198.261735][T10540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.287172][T10540] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.303989][T10540] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.1573: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 198.343681][T10540] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.1573: directory missing '.' [ 198.381982][T10534] Process accounting resumed [ 198.438346][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.449228][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.733578][T10564] wg1 speed is unknown, defaulting to 1000 [ 198.754244][T10561] siw: device registration error -23 [ 198.768818][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'. [ 199.163869][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.195544][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.473502][T10579] loop0: detected capacity change from 0 to 1024 [ 199.486003][T10579] EXT4-fs: Ignoring removed orlov option [ 199.543708][T10579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.662296][T10574] Process accounting resumed [ 199.699065][T10595] wg1 speed is unknown, defaulting to 1000 [ 199.745118][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 199.761181][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.788499][T10601] loop3: detected capacity change from 0 to 1024 [ 199.801058][T10601] EXT4-fs: Ignoring removed orlov option [ 199.870102][T10607] IPv6: Can't replace route, no match found [ 199.876685][T10601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.912266][T10604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.948938][T10612] loop0: detected capacity change from 0 to 512 [ 199.963271][T10612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.990118][T10615] loop2: detected capacity change from 0 to 1024 [ 199.994306][T10612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 200.002827][T10615] EXT4-fs: Ignoring removed orlov option [ 200.018079][T10612] System zones: 1-12 [ 200.022676][T10612] EXT4-fs (loop0): 1 truncate cleaned up [ 200.029142][T10612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.059916][T10615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.126395][T10604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.158507][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.168135][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.191432][T10604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.287381][ T1086] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.324557][T10604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.388142][T10634] wg1 speed is unknown, defaulting to 1000 [ 200.416773][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 200.474243][T10640] loop1: detected capacity change from 0 to 1024 [ 200.488579][T10644] IPv6: Can't replace route, no match found [ 200.499057][T10640] EXT4-fs: Ignoring removed orlov option [ 200.530214][T10646] Falling back ldisc for ptm1. [ 200.620642][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.660049][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.706275][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.772881][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.837469][T10667] wg1 speed is unknown, defaulting to 1000 [ 200.867395][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 201.007716][T10680] siw: device registration error -23 [ 201.215250][T10702] Falling back ldisc for ptm1. [ 201.353040][T10718] loop3: detected capacity change from 0 to 128 [ 201.359880][T10718] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.372119][T10718] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.678749][T10733] wg1 speed is unknown, defaulting to 1000 [ 201.720153][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 201.761510][T10740] loop3: detected capacity change from 0 to 1024 [ 201.777275][T10740] EXT4-fs: Ignoring removed orlov option [ 201.970600][T10753] loop0: detected capacity change from 0 to 128 [ 201.979627][T10753] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.998914][T10753] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.198367][T10768] wg1 speed is unknown, defaulting to 1000 [ 202.248619][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 202.470971][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 202.477198][ T3717] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.032552][T10782] siw: device registration error -23 [ 203.173365][T10786] loop1: detected capacity change from 0 to 1024 [ 203.193838][T10786] EXT4-fs: Ignoring removed orlov option [ 203.221798][T10786] EXT4-fs mount: 7 callbacks suppressed [ 203.221868][T10786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.252921][ T29] kauditd_printk_skb: 1029 callbacks suppressed [ 203.252934][ T29] audit: type=1326 audit(1764533780.990:12993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.309722][ T29] audit: type=1326 audit(1764533781.018:12994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.333425][ T29] audit: type=1326 audit(1764533781.018:12995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.357145][ T29] audit: type=1326 audit(1764533781.018:12996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.380981][ T29] audit: type=1326 audit(1764533781.018:12997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.404654][ T29] audit: type=1326 audit(1764533781.018:12998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.428499][ T29] audit: type=1326 audit(1764533781.018:12999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.452131][ T29] audit: type=1326 audit(1764533781.018:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.476079][ T29] audit: type=1326 audit(1764533781.018:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.499752][ T29] audit: type=1326 audit(1764533781.018:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 203.549215][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.567797][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.639034][T10800] loop3: detected capacity change from 0 to 128 [ 203.661107][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 203.738493][T10806] loop4: detected capacity change from 0 to 128 [ 203.963869][T10817] loop0: detected capacity change from 0 to 1024 [ 203.981216][T10813] Process accounting resumed [ 203.982998][T10817] EXT4-fs: Ignoring removed orlov option [ 204.000730][T10817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.129617][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.261278][T10833] loop0: detected capacity change from 0 to 512 [ 204.378941][T10833] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1661: EA inode hash validation failed [ 204.391971][T10833] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1661: corrupted inode contents [ 204.404176][T10833] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.1661: mark_inode_dirty error [ 204.416025][T10833] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1661: corrupted inode contents [ 204.428436][T10833] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1661: mark_inode_dirty error [ 204.440919][T10833] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1661: mark inode dirty (error -117) [ 204.453823][T10833] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 204.462992][T10833] EXT4-fs (loop0): 1 orphan inode deleted [ 204.469802][T10833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.559374][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.584408][ T58] Bluetooth: hci2: Frame reassembly failed (-84) [ 204.655018][T10840] loop0: detected capacity change from 0 to 128 [ 204.852134][T10850] siw: device registration error -23 [ 205.216044][T10854] loop2: detected capacity change from 0 to 1024 [ 205.222899][T10854] EXT4-fs: Ignoring removed orlov option [ 205.240676][T10854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.318545][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.359831][ T5419] Bluetooth: hci3: Frame reassembly failed (-84) [ 205.426514][T10861] loop2: detected capacity change from 0 to 128 [ 205.720261][ T6499] Bluetooth: hci0: command 0x1003 tx timeout [ 205.720262][ T3717] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.805785][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.805874][ T3717] Bluetooth: hci1: command 0x1003 tx timeout [ 205.888818][T10867] loop1: detected capacity change from 0 to 1024 [ 205.896804][T10867] EXT4-fs: Ignoring removed orlov option [ 205.914384][T10867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.969186][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.006926][T10873] loop1: detected capacity change from 0 to 128 [ 206.013855][T10873] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.026461][T10873] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.501289][T10887] loop4: detected capacity change from 0 to 512 [ 206.527489][T10887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.592495][T10887] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.616847][T10887] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.1678: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 206.698087][T10887] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.1678: directory missing '.' [ 206.746916][ T3484] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 206.746944][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 207.303078][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.343151][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.379185][T10918] loop3: detected capacity change from 0 to 128 [ 207.386456][ T3717] Bluetooth: hci1: sending frame failed (-49) [ 207.395669][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 207.432604][T10920] loop4: detected capacity change from 0 to 128 [ 207.440880][T10923] loop0: detected capacity change from 0 to 1024 [ 207.451253][T10923] EXT4-fs: Ignoring removed orlov option [ 207.475624][T10923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.516400][ T3864] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 207.522716][ T44] Bluetooth: hci3: command 0x1003 tx timeout [ 207.548887][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.736154][T10936] siw: device registration error -23 [ 207.895224][T10943] wg1 speed is unknown, defaulting to 1000 [ 207.921350][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 208.022956][T10951] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.035110][T10953] loop4: detected capacity change from 0 to 128 [ 208.050995][T10953] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.064644][T10951] SELinux: failed to load policy [ 208.073499][T10953] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.166964][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 208.216825][T10967] siw: device registration error -23 [ 208.245453][T10971] loop4: detected capacity change from 0 to 128 [ 208.431797][T10969] Process accounting resumed [ 208.575707][T10989] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.610547][T10989] SELinux: failed to load policy [ 208.651738][T10995] loop0: detected capacity change from 0 to 128 [ 208.671874][T10997] loop1: detected capacity change from 0 to 1024 [ 208.678741][T10995] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.692781][T10997] EXT4-fs: Ignoring removed orlov option [ 208.699354][T10995] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.719388][T10997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.722871][T10984] loop2: detected capacity change from 0 to 512 [ 208.739519][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 208.739535][ T29] audit: type=1326 audit(1764533786.117:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.769388][ T29] audit: type=1326 audit(1764533786.117:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.793058][ T29] audit: type=1326 audit(1764533786.117:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.817209][ T29] audit: type=1326 audit(1764533786.117:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.818829][T10984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.840854][ T29] audit: type=1326 audit(1764533786.117:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.840889][ T29] audit: type=1326 audit(1764533786.117:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.847678][ T29] audit: type=1326 audit(1764533786.117:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.863213][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.876643][ T29] audit: type=1326 audit(1764533786.126:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.924850][T10984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 208.933640][ T29] audit: type=1326 audit(1764533786.126:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 208.933677][ T29] audit: type=1326 audit(1764533786.126:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10996 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8858af749 code=0x7ffc0000 [ 209.021370][T10984] System zones: 1-12 [ 209.035440][T10984] EXT4-fs (loop2): 1 truncate cleaned up [ 209.045915][T10984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.178095][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.188548][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.274478][T11004] Process accounting resumed [ 209.482998][ T3484] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.485254][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 209.818572][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.337983][ T3864] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 210.340811][ T3484] Bluetooth: hci1: command 0x1003 tx timeout [ 210.391873][T11100] loop3: detected capacity change from 0 to 512 [ 210.574930][T11100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.594271][T11100] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.614875][T11098] Process accounting resumed [ 210.647238][T11100] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.3.1730: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 210.688869][T11100] EXT4-fs error (device loop3): ext4_get_first_dir_block:3540: inode #12: comm syz.3.1730: directory missing '.' [ 210.862622][T11139] loop0: detected capacity change from 0 to 512 [ 210.872846][T11139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.886353][T11139] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1737: iget: bad i_size value: 38620345925642 [ 210.899899][T11139] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1737: couldn't read orphan inode 15 (err -117) [ 210.948024][T11139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.038863][T11139] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.061983][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.249760][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.526217][T11172] Process accounting resumed [ 211.925689][T11196] loop2: detected capacity change from 0 to 1024 [ 211.941976][T11196] EXT4-fs: Ignoring removed orlov option [ 211.972190][T11196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.047101][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.622886][T11234] loop1: detected capacity change from 0 to 512 [ 212.722384][T11234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.831192][T11234] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.860191][T11234] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.1754: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 212.925745][T11234] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.1754: directory missing '.' [ 213.027953][T11256] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.117967][T11256] SELinux: failed to load policy [ 213.186399][T11262] loop0: detected capacity change from 0 to 512 [ 213.193971][T11262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.222504][T11262] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1764: iget: bad i_size value: 38620345925642 [ 213.250424][T11262] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1764: couldn't read orphan inode 15 (err -117) [ 213.275857][T11262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.302755][T11262] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 213.348756][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.381384][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.638054][T11285] wg1 speed is unknown, defaulting to 1000 [ 213.820864][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 213.869151][T11294] siw: device registration error -23 [ 214.127127][T11301] loop4: detected capacity change from 0 to 512 [ 214.191585][T11301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.244447][T11305] loop0: detected capacity change from 0 to 512 [ 214.281763][T11301] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1776: iget: bad i_size value: 38620345925642 [ 214.329952][T11305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.348578][T11301] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1776: couldn't read orphan inode 15 (err -117) [ 214.378731][T11305] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.475350][T11301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.488063][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 214.488157][ T29] audit: type=1326 audit(1764533791.496:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.495153][T11305] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.0.1777: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 214.517982][ T29] audit: type=1326 audit(1764533791.496:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.561941][ T29] audit: type=1326 audit(1764533791.496:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.575105][T11305] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.1777: directory missing '.' [ 214.585615][ T29] audit: type=1326 audit(1764533791.496:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.621214][ T29] audit: type=1326 audit(1764533791.496:14337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.644787][ T29] audit: type=1326 audit(1764533791.496:14338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.668447][ T29] audit: type=1326 audit(1764533791.496:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.692147][ T29] audit: type=1326 audit(1764533791.496:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.715835][ T29] audit: type=1326 audit(1764533791.496:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.731456][T11325] IPv6: Can't replace route, no match found [ 214.739498][ T29] audit: type=1326 audit(1764533791.496:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 214.770353][T11301] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 214.801567][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.853711][T11332] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.900030][T11334] siw: device registration error -23 [ 214.910980][T11332] SELinux: failed to load policy [ 215.039617][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.835552][T11357] Process accounting resumed [ 215.877648][T11368] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.916794][T11368] SELinux: failed to load policy [ 215.953741][T11375] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.966651][T11376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11376 comm=syz.3.1800 [ 215.985662][T11375] SELinux: failed to load policy [ 216.106675][T11390] loop0: detected capacity change from 0 to 512 [ 216.124874][T11390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1806: ea_inode with extended attributes [ 216.141846][T11390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1806: error while reading EA inode 11 err=-117 [ 216.157260][T11390] EXT4-fs (loop0): 1 orphan inode deleted [ 216.163408][T11390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.188625][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.433477][T11394] Process accounting resumed [ 216.439687][T11406] siw: device registration error -23 [ 216.687478][T11413] siw: device registration error -23 [ 216.870262][T11417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11417 comm=syz.4.1812 [ 217.054387][T11420] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.105216][T11420] SELinux: failed to load policy [ 218.004200][T11456] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 218.048827][T11456] SELinux: failed to load policy [ 218.548006][T11475] Process accounting resumed [ 218.688874][T11501] loop2: detected capacity change from 0 to 512 [ 218.821414][T11501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.876612][T11507] siw: device registration error -23 [ 219.086692][T11501] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1831: iget: bad i_size value: 38620345925642 [ 219.225775][T11501] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1831: couldn't read orphan inode 15 (err -117) [ 219.268148][T11501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.297184][T11501] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 219.332426][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.876805][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 219.876819][ T29] audit: type=1326 audit(1764533796.539:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 219.946216][ T29] audit: type=1326 audit(1764533796.576:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 219.970007][ T29] audit: type=1326 audit(1764533796.576:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 219.993687][ T29] audit: type=1326 audit(1764533796.586:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.017483][ T29] audit: type=1326 audit(1764533796.586:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.041085][ T29] audit: type=1326 audit(1764533796.586:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.064672][ T29] audit: type=1326 audit(1764533796.586:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.088506][ T29] audit: type=1326 audit(1764533796.586:14920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.112114][ T29] audit: type=1326 audit(1764533796.586:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.135730][ T29] audit: type=1326 audit(1764533796.586:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11548 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e448f749 code=0x7ffc0000 [ 220.342109][T11575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 220.378045][T11575] SELinux: failed to load policy [ 220.454970][T11589] IPv6: Can't replace route, no match found [ 220.517595][T11594] loop0: detected capacity change from 0 to 512 [ 220.532899][T11594] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1846: EA inode hash validation failed [ 220.547619][T11594] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1846: corrupted inode contents [ 220.565979][T11594] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.1846: mark_inode_dirty error [ 220.577881][T11594] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1846: corrupted inode contents [ 220.591734][T11594] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1846: mark_inode_dirty error [ 220.607410][T11594] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1846: mark inode dirty (error -117) [ 220.620204][T11594] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 220.629355][T11594] EXT4-fs (loop0): 1 orphan inode deleted [ 220.635483][T11594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.686949][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.800114][T11619] loop0: detected capacity change from 0 to 512 [ 220.828048][T11619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.841109][T11619] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.856233][T11619] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.0.1852: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 220.877403][T11619] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.1852: directory missing '.' [ 220.908956][T11626] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 220.941305][T11626] SELinux: failed to load policy [ 220.946505][T11628] loop3: detected capacity change from 0 to 128 [ 220.957062][T11628] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.084646][T11628] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 221.709954][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.738430][T11632] Process accounting resumed [ 221.881825][T11658] loop0: detected capacity change from 0 to 1024 [ 221.892352][T11658] EXT4-fs: Ignoring removed orlov option [ 221.910141][T11658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.947163][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.086151][T11680] siw: device registration error -23 [ 222.195216][T11679] siw: device registration error -23 [ 223.069813][T11708] loop2: detected capacity change from 0 to 1024 [ 223.091534][T11708] EXT4-fs: Ignoring removed orlov option [ 223.113212][T11708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.141310][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.276742][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.343187][T11725] loop4: detected capacity change from 0 to 128 [ 223.426716][T11729] siw: device registration error -23 [ 223.506900][T11734] Falling back ldisc for ptm2. [ 223.766691][T11755] siw: device registration error -23 [ 224.108132][T11782] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.147564][T11782] SELinux: failed to load policy [ 224.755397][T11800] siw: device registration error -23 [ 224.870958][T11807] loop3: detected capacity change from 0 to 1024 [ 224.881392][T11807] EXT4-fs: Ignoring removed orlov option [ 224.917339][T11807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.958329][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.136808][T11818] IPv6: Can't replace route, no match found [ 225.316064][T11825] IPv6: Can't replace route, no match found [ 225.375235][T11832] loop3: detected capacity change from 0 to 128 [ 225.382760][T11832] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.397386][ T29] kauditd_printk_skb: 628 callbacks suppressed [ 225.397399][ T29] audit: type=1326 audit(1764533801.703:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.428402][T11832] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.444467][ T29] audit: type=1326 audit(1764533801.703:15552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.468077][ T29] audit: type=1326 audit(1764533801.703:15553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.491761][ T29] audit: type=1326 audit(1764533801.703:15554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.515458][ T29] audit: type=1326 audit(1764533801.703:15555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.539128][ T29] audit: type=1326 audit(1764533801.703:15556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.562726][ T29] audit: type=1326 audit(1764533801.703:15557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.586364][ T29] audit: type=1326 audit(1764533801.703:15558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.610023][ T29] audit: type=1326 audit(1764533801.712:15559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.633668][ T29] audit: type=1326 audit(1764533801.712:15560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9737f749 code=0x7ffc0000 [ 225.673969][ T3864] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.689987][T11839] Falling back ldisc for ptm0. [ 225.772533][T11838] siw: device registration error -23 [ 225.785350][T11842] siw: device registration error -23 [ 226.340264][T11863] IPv6: Can't replace route, no match found [ 226.436586][T11866] loop0: detected capacity change from 0 to 1024 [ 226.516397][T11866] EXT4-fs: Ignoring removed orlov option [ 226.546592][T11870] IPv6: Can't replace route, no match found [ 226.553061][T11866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.641503][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.962725][T11919] loop3: detected capacity change from 0 to 512 [ 226.990938][T11919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.142108][T11919] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1934: iget: bad i_size value: 38620345925642 [ 227.155668][T11919] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1934: couldn't read orphan inode 15 (err -117) [ 227.168543][T11919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.182976][T11919] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 227.203093][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.327767][T11951] loop3: detected capacity change from 0 to 1024 [ 227.334779][T11951] EXT4-fs: Ignoring removed orlov option [ 227.368506][T11951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.402245][T11960] loop1: detected capacity change from 0 to 1024 [ 227.410492][T11960] EXT4-fs: Ignoring removed orlov option [ 227.421253][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.458229][T11960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.505280][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.616694][T11988] loop3: detected capacity change from 0 to 1024 [ 227.629005][T11988] EXT4-fs: Ignoring removed orlov option [ 227.634656][T11990] Falling back ldisc for ptm0. [ 227.646362][T11988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.672780][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.878034][T12021] loop0: detected capacity change from 0 to 1024 [ 227.886021][T12021] EXT4-fs: Ignoring removed orlov option [ 227.907266][T12021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.949013][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.989066][ T4436] ================================================================== [ 227.991181][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 227.997193][ T4436] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 228.010457][ T4436] [ 228.012788][ T4436] write to 0xffff8881068700f4 of 4 bytes by task 3303 on cpu 1: [ 228.020424][ T4436] shmem_mknod+0x137/0x180 [ 228.024855][ T4436] shmem_create+0x34/0x50 [ 228.029210][ T4436] path_openat+0x1105/0x2170 [ 228.033803][ T4436] do_filp_open+0x109/0x230 [ 228.038307][ T4436] do_sys_openat2+0xa6/0x110 [ 228.042911][ T4436] __x64_sys_openat+0xf2/0x120 [ 228.047674][ T4436] x64_sys_call+0x2eab/0x3000 [ 228.052353][ T4436] do_syscall_64+0xd2/0x200 [ 228.056860][ T4436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.062760][ T4436] [ 228.065093][ T4436] read to 0xffff8881068700f4 of 4 bytes by task 4436 on cpu 0: [ 228.072637][ T4436] fill_mg_cmtime+0x5b/0x260 [ 228.077238][ T4436] generic_fillattr+0x24a/0x340 [ 228.082102][ T4436] shmem_getattr+0x181/0x200 [ 228.086706][ T4436] vfs_getattr_nosec+0x146/0x1e0 [ 228.091665][ T4436] vfs_statx+0x113/0x390 [ 228.095940][ T4436] vfs_fstatat+0x115/0x170 [ 228.100377][ T4436] __se_sys_newfstatat+0x55/0x260 [ 228.105425][ T4436] __x64_sys_newfstatat+0x55/0x70 [ 228.110470][ T4436] x64_sys_call+0x135a/0x3000 [ 228.115156][ T4436] do_syscall_64+0xd2/0x200 [ 228.119667][ T4436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.125562][ T4436] [ 228.127883][ T4436] value changed: 0x084f8c9d -> 0x08570fcf [ 228.133593][ T4436] [ 228.135911][ T4436] Reported by Kernel Concurrency Sanitizer on: [ 228.142069][ T4436] CPU: 0 UID: 0 PID: 4436 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.151372][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.161434][ T4436] ================================================================== [ 228.172824][T12034] loop2: detected capacity change from 0 to 128 [ 228.188199][T12036] loop0: detected capacity change from 0 to 128 [ 228.196688][T12036] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.221289][T12036] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.177192][ T3484] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.179492][ T3864] Bluetooth: hci0: command 0x1003 tx timeout