last executing test programs: 5.596311707s ago: executing program 1 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r1, 0x6, 0xfffffffffffffffa) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.458047968s ago: executing program 1 (id=2505): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000080)=' ', 0x1, 0x8000) truncate(&(0x7f0000000000)='./file1\x00', 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.518814654s ago: executing program 0 (id=2507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r1, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x202) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000180)={0x50, &(0x7f0000002340)="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"}) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") sendmmsg$sock(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000640)="cdc0e1ab9e6b2ab4bd873cc2cd16496023e6e54cfffa6adcbbbe145420e313468ee68b6696de6c58f453af5680b79a339731fde0206ef33d72bac64a55237fbf26a3c60e1861bce8df85f1cc6749b7787fa9b1645b997b587ff2b3eb351172f15b90c65d420d1de633b7f6a7c523929f5a2aa467485f2d54d5086e9379d078c48e3d99800de770d7ae6051", 0x8b}, {&(0x7f0000000380)="f0f8b3802641367487f92df5ff0b476cefd7a88b1e1e67753d231a4492779e67fc08d89980f6d66ac749ed9c926ff1722ec8e18aefb87ba1e553aa2ac8a16f226cd048b388cd9bef16c26f76cc63db6b4948ef9d145216283454e476f4", 0x5d}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0xf3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xfffffffffffffe0d}}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="6fbd84ad1cd965cae42a1afd48765613a1aa3463ccd4ccfa5d5a2ba9df000000010000000112f23d84304c3fe330ac49c9296af362de3e1ccfda74b32469f1dbdc7aa71f60e3a37ff537e35d56d8b2db78f3fc2063b1ff7f00604181722596c9100f5198fe12ac7569", 0x69}, {&(0x7f0000000940)="c95e7689ee4cfb00f67fcc", 0xb}, {&(0x7f0000000980)="ef34a7310ffa078b1c2ac5e8d57d6149b84863484e73afdb0c706069736f55a72be631489b728c26f4530d884636efa6ba0587655e8e56d63e97d84ca6518f6ae6cc", 0x42}, {&(0x7f0000000a00)="970bb57db3ea8d0cc8686de02ff08857c3f442ab1378b9", 0x17}, {&(0x7f0000000a40)="140f73c7c59a393260f574d3c9bd5967ca52c6e51d4b34c346f58c116cdfaa291eb46aeee02a8cee162a5a49314bfc1bee0a47cbb945e5ab0b52be1ff9d8247668df9be02b4c97cac67560d7432c71b39438655d7a0a261e4eeb", 0x5a}], 0x5, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}], 0x2, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 3.122225037s ago: executing program 2 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x2d00, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.046520573s ago: executing program 3 (id=2516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2.949158461s ago: executing program 0 (id=2517): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @loopback, 0x0}, &(0x7f00000002c0)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c90}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.765508706s ago: executing program 2 (id=2519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a004d603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) setgroups(0x1, &(0x7f0000000740)=[r3]) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000300)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@resgid={'resgid', 0x3d, r3}}, {@minixdf}]}, 0x4, 0x534, &(0x7f0000001080)="$eJzs3cFvHFcZAPBvNt7YSZw6hR4AAQ2lEFCUtb1praoX0gsIVZUQFScOqbG3luXdrOXdiNrk4By5VyISJ+A/4MYBqScO3LjBjUs5IAWIQHUlJBbN7Njd2rv2QtY7sff3k8Yz781kv/e8ee/tPGvnBTCxrkfEbkRcjIh3ImIuz0/yLe50t/S6j548WNl78mAliU7n7b8n2fk0L3r+TepK/pozEfH970T8KDkat7W9s7Fcr9e28vR8u7E539reubVeynOqS4tLC6/dfrU6srq+2Pj142+vv/mD3/7mSx/+YfebP0mLNfvTq9m53nqMUrfq5ZjtyZuKiDdPI1hBpvL/P5w9aWv7TES8lLX/ubiQvZsAwHnW6cxFZ643DQCcd+n9/2wkpUo+FzAbpVKl0p3DeyEul+rNVvvmXPP+vdXI5rCuRbn07nq9tpDPFV6LcpKmF7PjT9LVT6Xfr92OiOcj4v3pS9n5ykqzvlrkBx8AmGBXDo3//5rujv+9ykUVDgA4PTNFFwAAGDvjPwBMnkHjf/KfMRcEABib/+H+37cDAeCcMP8PAJPH+A8Ak+fE8f/heMoBAIzF9956K906e93nX+8/qfvWaq21UWncX6msNLc2K2vN5lq9VlnpdE56vXqzubn4ykGytb1zt9G8f699d72xvFa7W/MsAQAo3vMvfvCndNDfff1StkXPWg7GajjfSkUXACjMhaILABTG93lgcg1xj28aAM65Pkv0duUTBMmgCx5Z/BXOqhufN/8Pk+pp5v/NHcDZ9v/N/39r5OUAxs8YDpOr00mOrPmffFzMWsQAwHiY4wcG/v0/N/ARIY9GXxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K2azLSlVsrXAd9OfpUol4mpEXIty8u56vbYQEc9FxB+ny9NperHoQgMAT6n01yRf/+vG3Muzh89eTD6ezvYR8eOfv/2z95bb7a3FNP8fB/ntR2n+pfZW9WIRFQAAet05mpWN39V833Mj/9GTByv72ziL+PiN7uKiady9fOuemYqpbD8T5Yi4/M8kT3eln1cujCD+7sOI+Nx+/WfivZ4Is9kcSHfl08Px09hXRx6/9/d/OH7pU/UtZefSfTn7XXw2DhUOONEHb3T7ybztpU08b3+luJ7t+7f/mayHenpp/5c2170j/V/poP+7cCR+krX56wfp40vy+JXfffdIZmeue+5hxBem+sVPDuIn/fvf8stD1vHPX/zyS4POdX4RcaNv/fdXpG5k3ex8u7E539reubXeWF6rrdXuVatLi0sLr91+tTqfzVF3f/6+X4y/vX7zuUHx0/pfHhB/5vj6x9eGrP8v//3OD79yTPxvfLX/+//CMfHTMfHrQ8Zfvnxn4PLdafzVw/W/EsO8/3FzyPgf/mVndchLAYAxaG3vbCzX67WtEw7Sz5onXeNg+IP03v4ZKEZ2ELsRo3rBbFIiIvpek36ifjaqfFoHSWHRfzXqFyy6ZwJO2yeNvuiSAAAAAAAAAAAAAAAAg7S2dzam+39ba2QHRdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8+u/AQAA//8j6cQ7") getgroups(0x2, &(0x7f0000000480)=[r3, r3]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0xca, {0x0, 0x2, 0x6}, 0x69, 0x0, r4, 0x8, 0x8, 0x8, 0x817, 0xffffffffffffff81, 0x0, 0xa5, 0x5614, 0x7, 0x9, 0x2, 0x9, 0x9, 0xf36, 0x480000000}}, 0xa0) sendmsg$nl_xfrm(r0, 0x0, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) 2.516021346s ago: executing program 1 (id=2520): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x575, &(0x7f0000000c80)="$eJzs3UtrXFUcAPD/nWTSpzaFUlREAi6s1E6axEcFF3WtxYLu65BMQ8mkUzKT0sSC7cKupbgRCuJeXLssfgEXfoaCFoqUoAs3kTu5N8+ZPCfJ1Pn94IZz7mPOOXPv/+ScnAwTQM8aSn8UIl6NiG+TiFMRkWTH+iM7OLR03sLzu+PplsTi4ud/Jc3z0nz+Wvl1J7LMKxHx6zcR5wsby63PzU+Vq9XKTJYfbkzfGq7PzV+4MV2erExWbo6OjV16b2z0ww/e33Dt4i7b+vbVf77/7HFfljv9MInLcTLLrW7HHtxbnRmKoew9KcbldSeOdKCwbpK03PvzgdeDnenL4rwYaR9wKvqyqAf+/75Of58CPSrZcfz/XtyfmgAHKx8H5HP7Ds2DXxjPPl6aAG1sf//S30biaHNudHwhWTMzSue7gx0oPy3jlz8fPUy36NzfIQC2dO9+RFzs71/b/x1r9nBDe3zti9s4Z30Z+j84OI/T8c87rcY/heXxT7QY/5xoEbu7sXX8F552oJi20vHfR63GvyuNHexbWgWLl5pjvmJy/Ua1kvZtL0fEuSgeSfObredcWnjSdslq9fgv3dLy87HgksLT/iNrr5koN8p7afNqz+5HvNZy/Jss3/+kxf1P34+r2yzjbOXRG+2Obd3+/bX4Y8RbLec/Kytayebrk8PN52E4fyo2+vvB2d/alX/Y7U/v//HN2z+YrF6vre+8jB+O/luJNSG1Yk37Y/vP/0DyRTM9kO27U240ZkYiBpJPl/cX8v2jK9fm+fz8tP3n3ty8/2v1/KcjpC/X1Kr9qvSDMz+93u5YN9z/iZb3f3l2u+7+7zzx5JOvBtqVv73+791m6ly2Zzv933YruJf3DgAAAAAAALpNISJORlIoLacLhVJp6f87zsTxQrVWb5y/Xpu9ORHNz8oORrGQr3SfWvX/ECPZimGeH12XH4uI0xHxXd+xZr40XqtOHHbjAQAAAAAAAAAAAAAAAAAAoEucaPP5/9QffYddO2Df+cpv6F1bxn8nvukJ6Ep+/0PvEv/Qu8Q/9C7xD71L/EPvEv/Qu8Q/9C7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAB119cqVdFtceH53PM1P3J6bnardvjBRqU+VpmfHS+O1mVulyVptslopjdemt3q9aq12a2Q0Zu8MNyr1xnB9bv7adG32ZuPajenyZOVapXggrQIAAAAAAAAAAAAAAAAAAIAXS31ufqpcrVZmJCR2lejvjmp0ReJYRHRBNdYl4uiursodOdQOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAi4r8AAAD//5+PMes=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x3) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000600)=0x4) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0x9, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) 2.193831193s ago: executing program 2 (id=2522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x18, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9219, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x8}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) futex_waitv(&(0x7f00000004c0)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}, {0x40000000, 0x0, 0x82}], 0x3, 0x0, 0x0, 0x0) fcntl$lock(r7, 0x7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x10) write$selinux_validatetrans(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a61646d696e5f7061737377645f6578000000003a73302073797374656d5f753a6f626a6563745f723a68616c645f6b65796d61705f657865635f743a7330203030303030303030303030303030303030303033202f69656e7400b1a71e2de52d71d8bb36c69376eb6e8252233e0fbc50936abdf81ce04e7d85c16912bbf4e9493341433c3a6737bc5ecd7336"], 0x75) fcntl$lock(r7, 0x26, 0x0) 2.004490788s ago: executing program 1 (id=2523): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="be14729b9a2e5b2eaac6e6c0fdf55b17708cfb4a2eea350ee8e91df18a2c11c318af44665a2dd70dce56"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x10000, 0xb, 0x1, 0x8, 0xb, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) getrandom(0x0, 0x0, 0x0) gettid() r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x8e1, 0x8, 0x0, 0xffffffff, 0x0, r0}, 0x0, 0x0) io_setup(0x5, &(0x7f0000000240)) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) 1.914484645s ago: executing program 0 (id=2524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r1, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x202) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000180)={0x50, &(0x7f0000002340)="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"}) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") sendmmsg$sock(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000640)="cdc0e1ab9e6b2ab4bd873cc2cd16496023e6e54cfffa6adcbbbe145420e313468ee68b6696de6c58f453af5680b79a339731fde0206ef33d72bac64a55237fbf26a3c60e1861bce8df85f1cc6749b7787fa9b1645b997b587ff2b3eb351172f15b90c65d420d1de633b7f6a7c523929f5a2aa467485f2d54d5086e9379d078c48e3d99800de770d7ae6051", 0x8b}, {&(0x7f0000000380)="f0f8b3802641367487f92df5ff0b476cefd7a88b1e1e67753d231a4492779e67fc08d89980f6d66ac749ed9c926ff1722ec8e18aefb87ba1e553aa2ac8a16f226cd048b388cd9bef16c26f76cc63db6b4948ef9d145216283454e476f4", 0x5d}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0xf3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xfffffffffffffe0d}}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="6fbd84ad1cd965cae42a1afd48765613a1aa3463ccd4ccfa5d5a2ba9df000000010000000112f23d84304c3fe330ac49c9296af362de3e1ccfda74b32469f1dbdc7aa71f60e3a37ff537e35d56d8b2db78f3fc2063b1ff7f00604181722596c9100f5198fe12ac7569", 0x69}, {&(0x7f0000000940)="c95e7689ee4cfb00f67fcc", 0xb}, {&(0x7f0000000980)="ef34a7310ffa078b1c2ac5e8d57d6149b84863484e73afdb0c706069736f55a72be631489b728c26f4530d884636efa6ba0587655e8e56d63e97d84ca6518f6ae6cc", 0x42}, {&(0x7f0000000a00)="970bb57db3ea8d0cc8686de02ff08857c3f442ab1378b9", 0x17}, {&(0x7f0000000a40)="140f73c7c59a393260f574d3c9bd5967ca52c6e51d4b34c346f58c116cdfaa291eb46aeee02a8cee162a5a49314bfc1bee0a47cbb945e5ab0b52be1ff9d8247668df9be02b4c97cac67560d7432c71b39438655d7a0a261e4eeb", 0x5a}], 0x5, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}], 0x2, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 1.810226144s ago: executing program 3 (id=2526): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket(0xa, 0x1, 0x0) getsockopt(r2, 0x0, 0x1fcf51d8, 0x0, &(0x7f0000001ffc)) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="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", @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}, 0x1, 0x0, 0x0, 0x22044804}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@gettclass={0x24, 0x2a, 0x108, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xffff}, {0xfff3, 0x2}, {0x8, 0xf}}, ["", "", "", ""]}, 0x24}}, 0x4000040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000b1000006000024d2540f17714c58", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="05"], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x48) close(r1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) write$selinux_attr(r0, 0x0, 0x0) 1.683811014s ago: executing program 2 (id=2527): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, &(0x7f0000000600)=[{0x0}], 0x1) mmap(&(0x7f000045d000/0x2000)=nil, 0x2000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x447b3000) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 1.494850689s ago: executing program 4 (id=2529): socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 1.410807566s ago: executing program 3 (id=2530): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001300)={0xb98, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7fff, 0x8}}}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0xbb60, 0xfff3, 0x2, 0x2, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1dd, 0x400, 0x7f, 0xe3b2, 0xff, 0xb, 0x62]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x6, 0x16, 0xc, 0x4, 0x36, 0x36, 0x16]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x2, 0x228, 0x8, 0x10, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x10, 0x0, 0x9, 0x2e, 0x7ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfffd, 0x1f, 0x3, 0x2, 0x8, 0xd8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x8, 0x4, 0x2ed4, 0x2, 0x5, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7f, 0xaae3, 0x400, 0x2, 0x1, 0xc9b, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9ce, 0x7, 0x6, 0x9, 0x7, 0x7, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xffff, 0x4, 0xd1, 0x5, 0x34, 0x16]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf, 0x8, 0x4, 0x6000, 0x2, 0xffff, 0x5]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x1, 0xa}, {0x3, 0x16}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40a, 0x7, 0x8, 0x6, 0x6, 0x3, 0x7, 0x4]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x0, 0x3ff, 0x5, 0x7fff, 0x8000, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x200, 0x0, 0x8, 0x1, 0x4000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xa, 0x1, 0x80, 0x7, 0x401, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6926, 0xb, 0xb9, 0xb, 0x9dc, 0x9, 0x80, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}]}]}, @NL80211_ATTR_TID_CONFIG={0x8ec, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd6a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x30, 0xc, 0x64, 0x3, 0x12, 0x18, 0x18, 0x4, 0x1, 0x67, 0x60]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x10, 0x8, 0x4, 0x4, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x10, 0x6, 0x1, 0xf000, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x60, 0x24, 0xb, 0x6, 0x18, 0xb, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x1d2, 0x80, 0x6, 0xe, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xffff, 0x2, 0x8, 0x0, 0xb1f4, 0x81]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x9, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbfb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xd50, 0x2, 0x9, 0x10, 0xa1, 0x40, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7e2, 0x40, 0x2, 0x9, 0x9ec, 0x3778, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x3}, {0x2, 0x2}, {}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x2, 0x7f, 0x8, 0x3, 0xff80, 0xf50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0d, 0xffb9, 0x4b06, 0x80, 0x80, 0x7fff, 0xff, 0x3]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x5, 0x12, 0x1b, 0x24, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x9, 0x9, 0xc, 0x5, 0xc, 0x36, 0x60, 0x18, 0x4, 0x5, 0x36, 0x5ad1ba4ac0b3fe0a, 0x30, 0x1, 0x5, 0x1, 0x60, 0x24, 0x22, 0x48, 0x60, 0x0, 0x36, 0x18, 0x6c, 0x4, 0x1b, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x5, 0x3c69, 0x300, 0x9, 0x5, 0x54]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7fff, 0x7ff, 0xa, 0x7fff, 0x400, 0x6, 0x1d6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x4, 0x7, 0x2, 0xd4a, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0x60, 0x0, 0x0, 0x1b, 0x3, 0x9, 0x6c, 0x24, 0xb, 0x5, 0x48, 0x2, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0xdb, 0xf001, 0x6, 0x7, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x8e62, 0x81, 0x5, 0x2, 0x7ff, 0x6e]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x1, 0x7, 0x6, 0xf, 0x3, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x865, 0x4, 0x3, 0x4, 0xfffa, 0x76, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xd, 0x81, 0x1, 0x48, 0x1ff, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x3}, {0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x7, 0xa}, {0x2}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x2}, {0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0xe, 0x2, 0x6, 0x735e, 0x71, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x6}, {0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x8}, {0x3}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x2}, {0x5}, {0x2, 0x2}, {0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x3}, {0x0, 0x2}, {0x2}, {0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x14}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {}, {0x0, 0xa}, {0x5, 0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x6}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x5}, {}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x3}, {0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x0, 0xa}, {0x7}, {0x5}, {0x3, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x30, 0x6, 0x30, 0x4, 0x1a, 0x1, 0x3, 0x24, 0x27, 0x1, 0x48, 0x36, 0x30, 0x4, 0x36, 0x36, 0x30, 0x60, 0x3, 0x5, 0x9, 0x21, 0x24, 0x9, 0x60, 0x48]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x1, 0x4, 0xfff7, 0x2, 0x5, 0x1000, 0x4e]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x80, 0x0, 0xfff1, 0x5, 0x7, 0x7b8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x6, 0x60, 0xc, 0x48, 0x18, 0x16, 0x1b, 0x16, 0x12, 0x48, 0x28, 0xc, 0x16, 0x5, 0x36, 0x12]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x6, 0x1ffe, 0x8000, 0x80, 0x8000, 0x75]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x7ff, 0x9c8c, 0x4, 0x4, 0x5, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1, 0x7, 0x5, 0x9, 0x8, 0xdb6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc637, 0x8, 0x3, 0x6, 0x81, 0x8, 0xc]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x48, 0x36, 0x2, 0xc, 0x2]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3ff, 0x7ff, 0x8, 0x7ff, 0x4, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d, 0x581, 0x0, 0x101, 0x4, 0x2, 0xf, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0x9, 0x4, 0x1ff, 0x2, 0x4, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x800, 0x9, 0x81, 0x9, 0x9, 0x9571]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x60, 0x36, 0x18, 0xc, 0xc, 0x6, 0x3d, 0x6, 0x9, 0x1e, 0x60, 0x13, 0x6, 0x6c, 0x1, 0x12, 0x3, 0x60, 0x4, 0x6, 0x2, 0x2, 0x30, 0x2, 0x60, 0x36, 0x3, 0x4, 0x74]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x6}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x1, 0x4, 0x3, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x7}, {0x1, 0x3}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1ff, 0x9, 0x7, 0xb, 0xfeff, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x6c, 0x18, 0x24, 0x12, 0x1, 0x18, 0x420a83065afece6f, 0x3, 0x18, 0x60, 0x60, 0x6c, 0x24, 0x12, 0xb, 0x0, 0x6c, 0x8, 0x16, 0x6, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x1, 0xb7b1, 0x6, 0xa50, 0x9, 0x4, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xff01, 0x8, 0x8, 0x9, 0x4, 0x1800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x27, 0x0, 0x7, 0x9, 0x7, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x6, 0x30, 0x3, 0x16, 0x36, 0x60, 0x16, 0x1b, 0xd, 0x48, 0x48, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x101, 0x4, 0x9, 0x451, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb5, 0x154, 0x9, 0x4, 0x3, 0x4, 0xfd68, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x3}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x6}, {0x1}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x1, 0x36, 0x2, 0x9, 0x4, 0xb, 0x18, 0x5, 0x60, 0x60, 0xc, 0x1, 0x3, 0x2, 0x3, 0x48, 0x0, 0x16, 0x58, 0x36, 0x30, 0x4, 0x18, 0x3, 0x3, 0x6, 0x4, 0x48, 0x30]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x16, 0x32, 0x16]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x3}, {0x7, 0x4}, {0x2, 0x8}, {0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {}, {0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}]}]}]}, 0xb98}, 0x1, 0x0, 0x0, 0x801}, 0xc0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) 1.387629007s ago: executing program 4 (id=2531): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @loopback, 0x0}, &(0x7f00000002c0)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c90}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 749.033319ms ago: executing program 1 (id=2532): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a004d603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) setgroups(0x1, &(0x7f0000000740)=[r3]) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000300)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@resgid={'resgid', 0x3d, r3}}, {@minixdf}]}, 0x4, 0x534, &(0x7f0000001080)="$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") getgroups(0x2, &(0x7f0000000480)=[r3, r3]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0xca, {0x0, 0x2, 0x6}, 0x69, 0x0, r4, 0x8, 0x8, 0x8, 0x817, 0xffffffffffffff81, 0x0, 0xa5, 0x5614, 0x7, 0x9, 0x2, 0x9, 0x9, 0xf36, 0x480000000}}, 0xa0) sendmsg$nl_xfrm(r0, 0x0, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) 719.005512ms ago: executing program 4 (id=2533): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 637.933678ms ago: executing program 2 (id=2534): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 630.910449ms ago: executing program 4 (id=2535): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) 564.583594ms ago: executing program 0 (id=2536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) close(r2) 546.495975ms ago: executing program 3 (id=2537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ftruncate(0xffffffffffffffff, 0x8800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000008000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000004400050020010000000000000000000000000002000000002b"], 0xfc}}, 0x200408c0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 531.078967ms ago: executing program 4 (id=2538): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 505.718789ms ago: executing program 2 (id=2539): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b703000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 419.198236ms ago: executing program 0 (id=2540): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket(0xa, 0x1, 0x0) getsockopt(r2, 0x0, 0x1fcf51d8, 0x0, &(0x7f0000001ffc)) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="31d821154745fd2a55a805827618b1168f12e2bb42b46555416b7263bd154b36c7daeee4ac9e455a5c50485b70d175400f6da25528d67071b767822b88a9d882c96cf15136c1958f7219848ccedfaaac0c2bb67c4b740f45e3c940fe62f6c30f65de294d840c6fdacbbdc5e02ae19cc4dcc52ad8d3800a14887498d165fd28464d4215c5eb89642073b2c55bee93a12c7329a93e3c45f19db4bd89fa447ccd221b363f3b2e66852a09955f998b30713b8e1672e73f2d47e640e151dd3083462b1f62b31e5981e18829f3cbbbe74a116665bea2a9b8ac2435c16b85e8a029b44b80c702c9ec87a52fe1f37db71949b98ffae42f7f2bbb1deb5d050a", @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}, 0x1, 0x0, 0x0, 0x22044804}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@gettclass={0x24, 0x2a, 0x108, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xffff}, {0xfff3, 0x2}, {0x8, 0xf}}, ["", "", "", ""]}, 0x24}}, 0x4000040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000b1000006000024d2540f17714c58", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="05"], 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x48) close(r1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) write$selinux_attr(r0, 0x0, 0x0) 388.403338ms ago: executing program 1 (id=2541): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 379.150399ms ago: executing program 4 (id=2542): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r1, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x202) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000180)={0x50, &(0x7f0000002340)="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"}) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") sendmmsg$sock(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000640)="cdc0e1ab9e6b2ab4bd873cc2cd16496023e6e54cfffa6adcbbbe145420e313468ee68b6696de6c58f453af5680b79a339731fde0206ef33d72bac64a55237fbf26a3c60e1861bce8df85f1cc6749b7787fa9b1645b997b587ff2b3eb351172f15b90c65d420d1de633b7f6a7c523929f5a2aa467485f2d54d5086e9379d078c48e3d99800de770d7ae6051", 0x8b}, {&(0x7f0000000380)="f0f8b3802641367487f92df5ff0b476cefd7a88b1e1e67753d231a4492779e67fc08d89980f6d66ac749ed9c926ff1722ec8e18aefb87ba1e553aa2ac8a16f226cd048b388cd9bef16c26f76cc63db6b4948ef9d145216283454e476f4", 0x5d}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0xf3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xfffffffffffffe0d}}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="6fbd84ad1cd965cae42a1afd48765613a1aa3463ccd4ccfa5d5a2ba9df000000010000000112f23d84304c3fe330ac49c9296af362de3e1ccfda74b32469f1dbdc7aa71f60e3a37ff537e35d56d8b2db78f3fc2063b1ff7f00604181722596c9100f5198fe12ac7569", 0x69}, {&(0x7f0000000940)="c95e7689ee4cfb00f67fcc", 0xb}, {&(0x7f0000000980)="ef34a7310ffa078b1c2ac5e8d57d6149b84863484e73afdb0c706069736f55a72be631489b728c26f4530d884636efa6ba0587655e8e56d63e97d84ca6518f6ae6cc", 0x42}, {&(0x7f0000000a00)="970bb57db3ea8d0cc8686de02ff08857c3f442ab1378b9", 0x17}, {&(0x7f0000000a40)="140f73c7c59a393260f574d3c9bd5967ca52c6e51d4b34c346f58c116cdfaa291eb46aeee02a8cee162a5a49314bfc1bee0a47cbb945e5ab0b52be1ff9d8247668df9be02b4c97cac67560d7432c71b39438655d7a0a261e4eeb", 0x5a}], 0x5, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}], 0x2, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x7fe, 0x1, 0x103, 0xd, 0x8001, 0x4}, 0x20) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 341.598212ms ago: executing program 3 (id=2543): quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0xee01, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 33.433247ms ago: executing program 3 (id=2544): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x20000000004, 0x2c2}, {0x0, 0xe}, 0xfffffffd, 0x1}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="be14729b9a2e5b2eaac6e6c0fdf55b17708cfb4a2eea350ee8e91df18a2c11c318af44665a2dd70dce56"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x10000, 0xb, 0x1, 0x8, 0xb, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) getrandom(0x0, 0x0, 0x0) gettid() r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x8e1, 0x8, 0x0, 0xffffffff, 0x0, r0}, 0x0, 0x0) io_setup(0x5, &(0x7f0000000240)) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) 0s ago: executing program 0 (id=2545): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 1326 audit(1755212148.498:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83db1aebe9 code=0x7ffc0000 [ 142.954534][ T9108] EXT4-fs: Ignoring removed orlov option [ 142.974927][ T29] audit: type=1326 audit(1755212148.498:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83db1aebe9 code=0x7ffc0000 [ 143.003935][ T29] audit: type=1326 audit(1755212148.498:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9105 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f83db1aebe9 code=0x7ffc0000 [ 143.036323][ T9108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.060715][ T9111] loop3: detected capacity change from 0 to 1024 [ 143.067532][ T9111] EXT4-fs: Ignoring removed orlov option [ 143.100602][ T9114] loop4: detected capacity change from 0 to 512 [ 143.116403][ T9114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 143.124932][ T9114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.134630][ T9114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1948: corrupted inode contents [ 143.148064][ T9114] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1948: mark_inode_dirty error [ 143.160950][ T9114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1948: corrupted inode contents [ 143.175080][ T9114] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1948: mark_inode_dirty error [ 143.187056][ T9119] serio: Serial port ttyS3 [ 143.199389][ T9114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1948: corrupted inode contents [ 143.213560][ T9114] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 143.223366][ T9114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1948: corrupted inode contents [ 143.236944][ T9114] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1948: mark_inode_dirty error [ 143.274032][ T9114] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 143.286528][ T9114] EXT4-fs (loop4): 1 truncate cleaned up [ 143.292699][ T8767] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 143.332029][ T9123] loop0: detected capacity change from 0 to 8192 [ 143.364397][ T9114] loop4: detected capacity change from 0 to 512 [ 143.397589][ T9114] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.422510][ T9114] EXT4-fs (loop4): mount failed [ 143.491028][ T9131] random: crng reseeded on system resumption [ 143.584968][ T9137] random: crng reseeded on system resumption [ 143.649115][ T9143] loop2: detected capacity change from 0 to 512 [ 143.667117][ T9143] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.701172][ T9148] loop4: detected capacity change from 0 to 1024 [ 143.708053][ T9148] EXT4-fs: Ignoring removed orlov option [ 143.774922][ T9154] loop0: detected capacity change from 0 to 1024 [ 143.782619][ T9154] EXT4-fs: Ignoring removed orlov option [ 143.898648][ T9157] serio: Serial port ttyS3 [ 143.991041][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 144.062862][ T9167] rdma_op ffff88811a387980 conn xmit_rdma 0000000000000000 [ 144.213177][ T9175] random: crng reseeded on system resumption [ 144.291694][ T9183] loop1: detected capacity change from 0 to 8192 [ 144.310625][ T9185] loop3: detected capacity change from 0 to 1024 [ 144.318176][ T9185] EXT4-fs: Ignoring removed orlov option [ 144.337174][ T9188] loop0: detected capacity change from 0 to 512 [ 144.344751][ T9188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.367406][ T9188] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.536383][ T9196] loop4: detected capacity change from 0 to 1024 [ 144.543194][ T9196] EXT4-fs: Ignoring removed orlov option [ 144.671451][ T9200] serio: Serial port ttyS3 [ 144.733966][ T9210] FAULT_INJECTION: forcing a failure. [ 144.733966][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 144.746702][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.1980 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 144.746752][ T9210] Tainted: [W]=WARN [ 144.746759][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.746775][ T9210] Call Trace: [ 144.746783][ T9210] [ 144.746793][ T9210] __dump_stack+0x1d/0x30 [ 144.746819][ T9210] dump_stack_lvl+0xe8/0x140 [ 144.746925][ T9210] dump_stack+0x15/0x1b [ 144.746947][ T9210] should_fail_ex+0x265/0x280 [ 144.746987][ T9210] should_failslab+0x8c/0xb0 [ 144.747070][ T9210] kmem_cache_alloc_node_noprof+0x57/0x320 [ 144.747108][ T9210] ? __alloc_skb+0x101/0x320 [ 144.747189][ T9210] ? __rcu_read_unlock+0x4f/0x70 [ 144.747269][ T9210] __alloc_skb+0x101/0x320 [ 144.747311][ T9210] kcm_sendmsg+0x1551/0x1700 [ 144.747344][ T9210] ? avc_has_perm+0xf7/0x180 [ 144.747377][ T9210] ? selinux_socket_sendmsg+0x175/0x1b0 [ 144.747421][ T9210] ? __pfx_kcm_sendmsg+0x10/0x10 [ 144.747465][ T9210] __sock_sendmsg+0x145/0x180 [ 144.747497][ T9210] sock_write_iter+0x165/0x1b0 [ 144.747600][ T9210] ? __pfx_sock_write_iter+0x10/0x10 [ 144.747627][ T9210] vfs_write+0x527/0x960 [ 144.747663][ T9210] ksys_write+0xda/0x1a0 [ 144.747693][ T9210] __x64_sys_write+0x40/0x50 [ 144.747722][ T9210] x64_sys_call+0x27fe/0x2ff0 [ 144.747807][ T9210] do_syscall_64+0xd2/0x200 [ 144.747889][ T9210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.747917][ T9210] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.747949][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.747984][ T9210] RIP: 0033:0x7f83db1aebe9 [ 144.748002][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.748069][ T9210] RSP: 002b:00007f83d9c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.748092][ T9210] RAX: ffffffffffffffda RBX: 00007f83db3d5fa0 RCX: 00007f83db1aebe9 [ 144.748105][ T9210] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000006 [ 144.748117][ T9210] RBP: 00007f83d9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 144.748129][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.748176][ T9210] R13: 00007f83db3d6038 R14: 00007f83db3d5fa0 R15: 00007ffddc388018 [ 144.748196][ T9210] [ 145.031987][ T9215] random: crng reseeded on system resumption [ 145.048600][ T9214] random: crng reseeded on system resumption [ 145.153950][ T9223] loop3: detected capacity change from 0 to 512 [ 145.163783][ T9223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.186470][ T9223] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.202352][ T9229] loop2: detected capacity change from 0 to 1024 [ 145.207308][ T9225] loop1: detected capacity change from 0 to 8192 [ 145.224420][ T9229] EXT4-fs: Ignoring removed orlov option [ 145.355768][ T9237] serio: Serial port ttyS3 [ 145.521429][ T9247] loop1: detected capacity change from 0 to 1024 [ 145.528225][ T9247] EXT4-fs: Ignoring removed orlov option [ 145.643233][ T9254] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 145.682896][ T9258] random: crng reseeded on system resumption [ 146.027868][ T9277] loop2: detected capacity change from 0 to 512 [ 146.034533][ T9275] loop1: detected capacity change from 0 to 1024 [ 146.041316][ T9275] EXT4-fs: Ignoring removed orlov option [ 146.047934][ T9277] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.131495][ T9287] random: crng reseeded on system resumption [ 146.156543][ T9288] serio: Serial port ttyS3 [ 146.323283][ T9293] random: crng reseeded on system resumption [ 146.396616][ T9298] loop3: detected capacity change from 0 to 512 [ 146.413850][ T9298] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.422047][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 146.437954][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2010'. [ 146.442696][ T9298] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2009: bg 0: block 248: padding at end of block bitmap is not set [ 146.488936][ T9298] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2009: Failed to acquire dquot type 1 [ 146.513847][ T9298] EXT4-fs (loop3): 1 truncate cleaned up [ 146.533782][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2009'. [ 146.565259][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 146.612296][ T9306] loop4: detected capacity change from 0 to 512 [ 146.635466][ T9308] loop3: detected capacity change from 0 to 512 [ 146.656052][ T9308] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.667361][ T9306] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.678286][ T9308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.694720][ T9308] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2011: corrupted inode contents [ 146.708855][ T9308] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2011: mark_inode_dirty error [ 146.721126][ T9308] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2011: corrupted inode contents [ 146.735309][ T9308] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2011: mark_inode_dirty error [ 146.747375][ T9308] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2011: corrupted inode contents [ 146.761574][ T9308] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 146.771057][ T9308] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2011: corrupted inode contents [ 146.795792][ T9308] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2011: mark_inode_dirty error [ 146.807682][ T9308] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 146.817969][ T9308] EXT4-fs (loop3): 1 truncate cleaned up [ 146.823889][ T8767] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 146.893803][ T9308] loop3: detected capacity change from 0 to 512 [ 146.936454][ T9308] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.997142][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 147.018695][ T9334] FAULT_INJECTION: forcing a failure. [ 147.018695][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 147.031560][ T9334] CPU: 1 UID: 0 PID: 9334 Comm: syz.0.2022 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 147.031609][ T9334] Tainted: [W]=WARN [ 147.031686][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.031704][ T9334] Call Trace: [ 147.031712][ T9334] [ 147.031723][ T9334] __dump_stack+0x1d/0x30 [ 147.031751][ T9334] dump_stack_lvl+0xe8/0x140 [ 147.031778][ T9334] dump_stack+0x15/0x1b [ 147.031801][ T9334] should_fail_ex+0x265/0x280 [ 147.031913][ T9334] should_failslab+0x8c/0xb0 [ 147.031947][ T9334] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 147.031985][ T9334] ? sidtab_sid2str_get+0xa0/0x130 [ 147.032095][ T9334] kmemdup_noprof+0x2b/0x70 [ 147.032137][ T9334] sidtab_sid2str_get+0xa0/0x130 [ 147.032158][ T9334] security_sid_to_context_core+0x1eb/0x2e0 [ 147.032248][ T9334] security_sid_to_context+0x27/0x40 [ 147.032275][ T9334] selinux_lsmprop_to_secctx+0x67/0xf0 [ 147.032378][ T9334] security_lsmprop_to_secctx+0x43/0x80 [ 147.032415][ T9334] audit_log_task_context+0x77/0x190 [ 147.032463][ T9334] audit_log_task+0xf4/0x250 [ 147.032530][ T9334] audit_seccomp+0x61/0x100 [ 147.032636][ T9334] ? __seccomp_filter+0x68c/0x10d0 [ 147.032667][ T9334] __seccomp_filter+0x69d/0x10d0 [ 147.032698][ T9334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.032737][ T9334] ? vfs_write+0x7e8/0x960 [ 147.032810][ T9334] ? __rcu_read_unlock+0x4f/0x70 [ 147.032840][ T9334] ? __fget_files+0x184/0x1c0 [ 147.032877][ T9334] __secure_computing+0x82/0x150 [ 147.032907][ T9334] syscall_trace_enter+0xcf/0x1e0 [ 147.032940][ T9334] do_syscall_64+0xac/0x200 [ 147.033004][ T9334] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.033028][ T9334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.033056][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.033086][ T9334] RIP: 0033:0x7f2eb460ebe9 [ 147.033106][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.033202][ T9334] RSP: 002b:00007f2eb3077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 147.033227][ T9334] RAX: ffffffffffffffda RBX: 00007f2eb4835fa0 RCX: 00007f2eb460ebe9 [ 147.033267][ T9334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 147.033283][ T9334] RBP: 00007f2eb3077090 R08: 0000000000000000 R09: 0000000000000000 [ 147.033298][ T9334] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 147.033309][ T9334] R13: 00007f2eb4836038 R14: 00007f2eb4835fa0 R15: 00007ffdf4318038 [ 147.033334][ T9334] [ 147.034228][ T9308] EXT4-fs (loop3): mount failed [ 147.341395][ T9340] loop4: detected capacity change from 0 to 512 [ 147.395131][ T9346] FAULT_INJECTION: forcing a failure. [ 147.395131][ T9346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.408313][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.3.2026 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 147.408393][ T9346] Tainted: [W]=WARN [ 147.408402][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.408418][ T9346] Call Trace: [ 147.408426][ T9346] [ 147.408432][ T9342] loop0: detected capacity change from 0 to 8192 [ 147.408436][ T9346] __dump_stack+0x1d/0x30 [ 147.408463][ T9346] dump_stack_lvl+0xe8/0x140 [ 147.408483][ T9346] dump_stack+0x15/0x1b [ 147.408512][ T9346] should_fail_ex+0x265/0x280 [ 147.408534][ T9346] should_fail+0xb/0x20 [ 147.408563][ T9346] should_fail_usercopy+0x1a/0x20 [ 147.408597][ T9346] _copy_from_user+0x1c/0xb0 [ 147.408706][ T9346] ___sys_sendmsg+0xc1/0x1d0 [ 147.408771][ T9346] __x64_sys_sendmsg+0xd4/0x160 [ 147.408837][ T9346] x64_sys_call+0x191e/0x2ff0 [ 147.408867][ T9346] do_syscall_64+0xd2/0x200 [ 147.408974][ T9346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 147.409009][ T9346] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.409043][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.409074][ T9346] RIP: 0033:0x7f3b4366ebe9 [ 147.409139][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.409165][ T9346] RSP: 002b:00007f3b420d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.409192][ T9346] RAX: ffffffffffffffda RBX: 00007f3b43895fa0 RCX: 00007f3b4366ebe9 [ 147.409210][ T9346] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 147.409229][ T9346] RBP: 00007f3b420d7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.409247][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.409265][ T9346] R13: 00007f3b43896038 R14: 00007f3b43895fa0 R15: 00007fff34295a18 [ 147.409296][ T9346] [ 147.411334][ T9338] loop1: detected capacity change from 0 to 764 [ 147.606800][ T9340] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.723324][ T9350] rdma_rxe: rxe_newlink: failed to add lo [ 147.732234][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 147.781774][ T9349] hsr_slave_1 (unregistering): left promiscuous mode [ 147.809849][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 147.809870][ T29] audit: type=1326 audit(1755212153.528:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f83db1aebe9 code=0x7ffc0000 [ 147.812680][ T9338] loop1: detected capacity change from 0 to 128 [ 147.816310][ T29] audit: type=1326 audit(1755212153.528:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83db1aec23 code=0x7ffc0000 [ 147.816405][ T29] audit: type=1326 audit(1755212153.528:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83db1ad69f code=0x7ffc0000 [ 147.869568][ T9352] loop4: detected capacity change from 0 to 512 [ 147.874830][ T9338] msdos: Bad value for 'fmask' [ 147.892859][ T29] audit: type=1326 audit(1755212153.528:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f83db1aec77 code=0x7ffc0000 [ 147.903345][ T9352] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.903912][ T29] audit: type=1326 audit(1755212153.528:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83db1ad550 code=0x7ffc0000 [ 147.960576][ T29] audit: type=1326 audit(1755212153.528:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83db1ae7eb code=0x7ffc0000 [ 147.984302][ T29] audit: type=1326 audit(1755212153.588:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f83db1ad84a code=0x7ffc0000 [ 148.008114][ T29] audit: type=1326 audit(1755212153.588:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f83db1ad84a code=0x7ffc0000 [ 148.031480][ T29] audit: type=1326 audit(1755212153.588:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f83db1ad457 code=0x7ffc0000 [ 148.055031][ T29] audit: type=1326 audit(1755212153.588:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.1.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83db1b038a code=0x7ffc0000 [ 148.092575][ T9352] EXT4-fs (loop4): 1 truncate cleaned up [ 148.286070][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 148.327043][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'. [ 148.330266][ T9368] random: crng reseeded on system resumption [ 148.392345][ T9372] loop0: detected capacity change from 0 to 512 [ 148.415578][ T9373] tipc: New replicast peer: 255.255.255.255 [ 148.421700][ T9373] tipc: Enabled bearer , priority 10 [ 148.441201][ T9375] loop1: detected capacity change from 0 to 512 [ 148.448876][ T9372] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.475928][ T9372] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2037: Failed to acquire dquot type 1 [ 148.502321][ T9375] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.641130][ T9382] loop0: detected capacity change from 0 to 8192 [ 148.711328][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 148.819466][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 148.830872][ T9388] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.879373][ T9396] IPVS: Error connecting to the multicast addr [ 148.967134][ T9405] loop3: detected capacity change from 0 to 1024 [ 148.994561][ T9405] EXT4-fs: Ignoring removed orlov option [ 149.015381][ T9410] loop0: detected capacity change from 0 to 512 [ 149.033742][ T9410] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.044976][ T9413] loop4: detected capacity change from 0 to 512 [ 149.053348][ T9413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.086148][ T9420] loop0: detected capacity change from 0 to 512 [ 149.093590][ T9420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.097220][ T9413] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.123624][ T9420] EXT4-fs (loop0): 1 truncate cleaned up [ 149.229663][ T9426] loop0: detected capacity change from 0 to 512 [ 149.237483][ T9426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.248655][ T9426] EXT4-fs (loop0): 1 truncate cleaned up [ 149.534275][ T3383] tipc: Node number set to 1774996301 [ 149.983325][ T9452] loop2: detected capacity change from 0 to 512 [ 150.006175][ T9452] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.032655][ T9458] loop1: detected capacity change from 0 to 1024 [ 150.054664][ T9458] EXT4-fs: Ignoring removed orlov option [ 150.135698][ T9460] loop4: detected capacity change from 0 to 8192 [ 150.376171][ T9477] loop3: detected capacity change from 0 to 4096 [ 150.512164][ T9488] loop1: detected capacity change from 0 to 512 [ 150.537600][ T9488] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.628311][ T9494] loop1: detected capacity change from 0 to 8192 [ 150.661132][ T9477] FAULT_INJECTION: forcing a failure. [ 150.661132][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 150.673871][ T9477] CPU: 1 UID: 0 PID: 9477 Comm: syz.3.2073 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 150.673917][ T9477] Tainted: [W]=WARN [ 150.673954][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.673970][ T9477] Call Trace: [ 150.673978][ T9477] [ 150.673988][ T9477] __dump_stack+0x1d/0x30 [ 150.674015][ T9477] dump_stack_lvl+0xe8/0x140 [ 150.674048][ T9477] dump_stack+0x15/0x1b [ 150.674068][ T9477] should_fail_ex+0x265/0x280 [ 150.674090][ T9477] should_failslab+0x8c/0xb0 [ 150.674121][ T9477] kmem_cache_alloc_noprof+0x50/0x310 [ 150.674165][ T9477] ? ext4_mb_new_blocks+0x79f/0x2080 [ 150.674205][ T9477] ext4_mb_new_blocks+0x79f/0x2080 [ 150.674243][ T9477] ? ext4_ext_search_right+0x30b/0x4f0 [ 150.674313][ T9477] ? ext4_inode_to_goal_block+0x1be/0x1e0 [ 150.674419][ T9477] ext4_ext_map_blocks+0xff5/0x38a0 [ 150.674465][ T9477] ext4_map_blocks+0x5ee/0xd00 [ 150.674493][ T9477] ? ext4_get_group_desc+0x16b/0x190 [ 150.674536][ T9477] ext4_iomap_begin+0x88d/0xe00 [ 150.674605][ T9477] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 150.674635][ T9477] iomap_iter+0x32f/0x730 [ 150.674676][ T9477] ? should_failslab+0x8c/0xb0 [ 150.674738][ T9477] __iomap_dio_rw+0x708/0x1250 [ 150.674779][ T9477] ? ext4_journal_check_start+0x11a/0x1b0 [ 150.674801][ T9477] iomap_dio_rw+0x40/0x90 [ 150.674824][ T9477] ext4_file_write_iter+0xad9/0xf00 [ 150.674902][ T9477] do_iter_readv_writev+0x49c/0x540 [ 150.674940][ T9477] vfs_writev+0x2df/0x8b0 [ 150.675029][ T9477] __se_sys_pwritev2+0xfc/0x1c0 [ 150.675140][ T9477] __x64_sys_pwritev2+0x67/0x80 [ 150.675176][ T9477] x64_sys_call+0x2c55/0x2ff0 [ 150.675255][ T9477] do_syscall_64+0xd2/0x200 [ 150.675283][ T9477] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.675314][ T9477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.675358][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.675465][ T9477] RIP: 0033:0x7f3b4366ebe9 [ 150.675481][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.675506][ T9477] RSP: 002b:00007f3b420d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 150.675529][ T9477] RAX: ffffffffffffffda RBX: 00007f3b43895fa0 RCX: 00007f3b4366ebe9 [ 150.675546][ T9477] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 150.675562][ T9477] RBP: 00007f3b420d7090 R08: 0000000000000000 R09: 0000000000000003 [ 150.675579][ T9477] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 150.675672][ T9477] R13: 00007f3b43896038 R14: 00007f3b43895fa0 R15: 00007fff34295a18 [ 150.675694][ T9477] [ 151.055739][ T9502] loop4: detected capacity change from 0 to 512 [ 151.071284][ T9502] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 151.084964][ T9502] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.091626][ T9508] loop1: detected capacity change from 0 to 1024 [ 151.097806][ T9502] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2082: Block bitmap for bg 0 marked uninitialized [ 151.098564][ T9508] EXT4-fs: Ignoring removed orlov option [ 151.111647][ T9502] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 151.130273][ T9502] EXT4-fs (loop4): 1 orphan inode deleted [ 151.136070][ T9508] serio: Serial port ttyS3 [ 151.148301][ T9502] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 151.191224][ T9502] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 151.207029][ T9511] loop3: detected capacity change from 0 to 8192 [ 151.289258][ T9527] random: crng reseeded on system resumption [ 151.404771][ T9531] random: crng reseeded on system resumption [ 151.460723][ T9534] FAULT_INJECTION: forcing a failure. [ 151.460723][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.473985][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.2.2095 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 151.474028][ T9534] Tainted: [W]=WARN [ 151.474036][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.474099][ T9534] Call Trace: [ 151.474106][ T9534] [ 151.474115][ T9534] __dump_stack+0x1d/0x30 [ 151.474205][ T9534] dump_stack_lvl+0xe8/0x140 [ 151.474235][ T9534] dump_stack+0x15/0x1b [ 151.474256][ T9534] should_fail_ex+0x265/0x280 [ 151.474283][ T9534] should_fail+0xb/0x20 [ 151.474306][ T9534] should_fail_usercopy+0x1a/0x20 [ 151.474333][ T9534] _copy_to_user+0x20/0xa0 [ 151.474380][ T9534] simple_read_from_buffer+0xb5/0x130 [ 151.474409][ T9534] proc_fail_nth_read+0x10e/0x150 [ 151.474444][ T9534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.474517][ T9534] vfs_read+0x1a5/0x770 [ 151.474539][ T9534] ? __rcu_read_unlock+0x4f/0x70 [ 151.474565][ T9534] ? __fget_files+0x184/0x1c0 [ 151.474592][ T9534] ? finish_task_switch+0xad/0x2b0 [ 151.474621][ T9534] ksys_read+0xda/0x1a0 [ 151.474681][ T9534] __x64_sys_read+0x40/0x50 [ 151.474773][ T9534] x64_sys_call+0x27bc/0x2ff0 [ 151.474796][ T9534] do_syscall_64+0xd2/0x200 [ 151.474830][ T9534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.474861][ T9534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.474947][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.474973][ T9534] RIP: 0033:0x7f564ed3d5fc [ 151.474992][ T9534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.475094][ T9534] RSP: 002b:00007f564d7a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.475117][ T9534] RAX: ffffffffffffffda RBX: 00007f564ef65fa0 RCX: 00007f564ed3d5fc [ 151.475133][ T9534] RDX: 000000000000000f RSI: 00007f564d7a70a0 RDI: 0000000000000008 [ 151.475212][ T9534] RBP: 00007f564d7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.475228][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.475244][ T9534] R13: 00007f564ef66038 R14: 00007f564ef65fa0 R15: 00007ffd51de7598 [ 151.475270][ T9534] [ 151.727908][ T9538] __nla_validate_parse: 15 callbacks suppressed [ 151.727923][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 151.749213][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 151.758761][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'. [ 151.791642][ T9546] FAULT_INJECTION: forcing a failure. [ 151.791642][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 151.804724][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.3.2101 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 151.804820][ T9546] Tainted: [W]=WARN [ 151.804829][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.804844][ T9546] Call Trace: [ 151.804852][ T9546] [ 151.804900][ T9546] __dump_stack+0x1d/0x30 [ 151.804922][ T9546] dump_stack_lvl+0xe8/0x140 [ 151.804940][ T9546] dump_stack+0x15/0x1b [ 151.804956][ T9546] should_fail_ex+0x265/0x280 [ 151.804977][ T9546] ? sctp_datamsg_from_user+0x57/0x950 [ 151.805060][ T9546] should_failslab+0x8c/0xb0 [ 151.805084][ T9546] __kmalloc_cache_noprof+0x4c/0x320 [ 151.805138][ T9546] sctp_datamsg_from_user+0x57/0x950 [ 151.805167][ T9546] ? sctp_primitive_ASSOCIATE+0x71/0x90 [ 151.805209][ T9546] sctp_sendmsg_to_asoc+0xa56/0xf20 [ 151.805307][ T9546] ? sctp_connect_new_asoc+0x29c/0x3a0 [ 151.805351][ T9546] sctp_sendmsg+0x1263/0x18d0 [ 151.805499][ T9546] ? selinux_socket_sendmsg+0x131/0x1b0 [ 151.805537][ T9546] ? __pfx_sctp_sendmsg+0x10/0x10 [ 151.805576][ T9546] inet_sendmsg+0xc5/0xd0 [ 151.805597][ T9546] __sock_sendmsg+0x102/0x180 [ 151.805673][ T9546] __sys_sendto+0x268/0x330 [ 151.805715][ T9546] __x64_sys_sendto+0x76/0x90 [ 151.805762][ T9546] x64_sys_call+0x2d05/0x2ff0 [ 151.805789][ T9546] do_syscall_64+0xd2/0x200 [ 151.805821][ T9546] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.805846][ T9546] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.805877][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.805944][ T9546] RIP: 0033:0x7f3b4366ebe9 [ 151.805961][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.805980][ T9546] RSP: 002b:00007f3b420d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 151.806003][ T9546] RAX: ffffffffffffffda RBX: 00007f3b43895fa0 RCX: 00007f3b4366ebe9 [ 151.806019][ T9546] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 151.806034][ T9546] RBP: 00007f3b420d7090 R08: 0000200000000140 R09: 000000000000001c [ 151.806086][ T9546] R10: 0000000024044851 R11: 0000000000000246 R12: 0000000000000002 [ 151.806098][ T9546] R13: 00007f3b43896038 R14: 00007f3b43895fa0 R15: 00007fff34295a18 [ 151.806116][ T9546] [ 152.216111][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 152.247811][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 152.256908][ T9577] loop3: detected capacity change from 0 to 1024 [ 152.263801][ T9577] EXT4-fs: Ignoring removed orlov option [ 152.272520][ T9579] netlink: 'syz.4.2116': attribute type 1 has an invalid length. [ 152.276434][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2112'. [ 152.298864][ T9579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.336460][ T9577] serio: Serial port ttyS3 [ 152.382006][ T9590] loop2: detected capacity change from 0 to 1024 [ 152.383780][ T9587] loop4: detected capacity change from 0 to 512 [ 152.389369][ T9590] EXT4-fs: Ignoring removed orlov option [ 152.409511][ T9587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.430260][ T9587] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.560733][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 152.613036][ T9611] random: crng reseeded on system resumption [ 152.727593][ T9617] loop2: detected capacity change from 0 to 512 [ 152.734816][ T9617] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 152.746901][ T9617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 152.753537][ T9617] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2131: Block bitmap for bg 0 marked uninitialized [ 152.767214][ T9617] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 152.776266][ T9617] EXT4-fs (loop2): 1 orphan inode deleted [ 152.784992][ T9617] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 152.796092][ T9617] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 153.034186][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 153.078870][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 153.078889][ T29] audit: type=1326 audit(1755212158.798:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.133979][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 153.140463][ T29] audit: type=1326 audit(1755212158.798:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.166382][ T29] audit: type=1326 audit(1755212158.828:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.190166][ T29] audit: type=1326 audit(1755212158.828:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.213787][ T29] audit: type=1326 audit(1755212158.828:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.213890][ T29] audit: type=1326 audit(1755212158.828:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.213926][ T29] audit: type=1326 audit(1755212158.828:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.214043][ T29] audit: type=1326 audit(1755212158.828:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.214233][ T29] audit: type=1326 audit(1755212158.828:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9637 comm="syz.0.2138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eb460ebe9 code=0x7ffc0000 [ 153.340108][ T9647] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2140'. [ 153.419499][ T9652] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.432819][ T29] audit: type=1326 audit(1755212159.148:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83db1aebe9 code=0x7ffc0000 [ 153.601134][ T9669] FAULT_INJECTION: forcing a failure. [ 153.601134][ T9669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.614357][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.4.2152 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 153.614400][ T9669] Tainted: [W]=WARN [ 153.614409][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.614425][ T9669] Call Trace: [ 153.614432][ T9669] [ 153.614440][ T9669] __dump_stack+0x1d/0x30 [ 153.614503][ T9669] dump_stack_lvl+0xe8/0x140 [ 153.614527][ T9669] dump_stack+0x15/0x1b [ 153.614548][ T9669] should_fail_ex+0x265/0x280 [ 153.614576][ T9669] should_fail+0xb/0x20 [ 153.614598][ T9669] should_fail_usercopy+0x1a/0x20 [ 153.614661][ T9669] _copy_from_user+0x1c/0xb0 [ 153.614746][ T9669] ___sys_sendmsg+0xc1/0x1d0 [ 153.614867][ T9669] __x64_sys_sendmsg+0xd4/0x160 [ 153.614924][ T9669] x64_sys_call+0x191e/0x2ff0 [ 153.614953][ T9669] do_syscall_64+0xd2/0x200 [ 153.614987][ T9669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.615035][ T9669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.615091][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.615119][ T9669] RIP: 0033:0x7f4bb7baebe9 [ 153.615137][ T9669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.615161][ T9669] RSP: 002b:00007f4bb660f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.615250][ T9669] RAX: ffffffffffffffda RBX: 00007f4bb7dd5fa0 RCX: 00007f4bb7baebe9 [ 153.615267][ T9669] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000007 [ 153.615314][ T9669] RBP: 00007f4bb660f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.615343][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.615359][ T9669] R13: 00007f4bb7dd6038 R14: 00007f4bb7dd5fa0 R15: 00007ffccf3d6eb8 [ 153.615385][ T9669] [ 153.632057][ T9671] loop1: detected capacity change from 0 to 1024 [ 153.811180][ T9671] EXT4-fs: Ignoring removed orlov option [ 153.980735][ T9683] random: crng reseeded on system resumption [ 154.146409][ T9691] FAULT_INJECTION: forcing a failure. [ 154.146409][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 154.159174][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.1.2159 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 154.159278][ T9691] Tainted: [W]=WARN [ 154.159287][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.159304][ T9691] Call Trace: [ 154.159313][ T9691] [ 154.159324][ T9691] __dump_stack+0x1d/0x30 [ 154.159351][ T9691] dump_stack_lvl+0xe8/0x140 [ 154.159374][ T9691] dump_stack+0x15/0x1b [ 154.159391][ T9691] should_fail_ex+0x265/0x280 [ 154.159487][ T9691] should_failslab+0x8c/0xb0 [ 154.159591][ T9691] kmem_cache_alloc_noprof+0x50/0x310 [ 154.159623][ T9691] ? audit_log_start+0x365/0x6c0 [ 154.159670][ T9691] audit_log_start+0x365/0x6c0 [ 154.159764][ T9691] audit_seccomp+0x48/0x100 [ 154.159806][ T9691] ? __seccomp_filter+0x68c/0x10d0 [ 154.159896][ T9691] __seccomp_filter+0x69d/0x10d0 [ 154.159925][ T9691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.160035][ T9691] ? vfs_write+0x7e8/0x960 [ 154.160057][ T9691] ? __rcu_read_unlock+0x4f/0x70 [ 154.160092][ T9691] ? __fget_files+0x184/0x1c0 [ 154.160168][ T9691] __secure_computing+0x82/0x150 [ 154.160192][ T9691] syscall_trace_enter+0xcf/0x1e0 [ 154.160216][ T9691] do_syscall_64+0xac/0x200 [ 154.160298][ T9691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.160330][ T9691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.160362][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.160384][ T9691] RIP: 0033:0x7f83db1aebe9 [ 154.160399][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.160484][ T9691] RSP: 002b:00007f83d9c17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 154.160509][ T9691] RAX: ffffffffffffffda RBX: 00007f83db3d5fa0 RCX: 00007f83db1aebe9 [ 154.160525][ T9691] RDX: 000020000009de80 RSI: 0000200000000240 RDI: 0000000000000003 [ 154.160541][ T9691] RBP: 00007f83d9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 154.160552][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.160564][ T9691] R13: 00007f83db3d6038 R14: 00007f83db3d5fa0 R15: 00007ffddc388018 [ 154.160597][ T9691] [ 154.586491][ T9707] FAULT_INJECTION: forcing a failure. [ 154.586491][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 154.599497][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.0.2165 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 154.599600][ T9707] Tainted: [W]=WARN [ 154.599607][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.599620][ T9707] Call Trace: [ 154.599627][ T9707] [ 154.599635][ T9707] __dump_stack+0x1d/0x30 [ 154.599660][ T9707] dump_stack_lvl+0xe8/0x140 [ 154.599685][ T9707] dump_stack+0x15/0x1b [ 154.599710][ T9707] should_fail_ex+0x265/0x280 [ 154.599766][ T9707] should_failslab+0x8c/0xb0 [ 154.599794][ T9707] kmem_cache_alloc_node_noprof+0x57/0x320 [ 154.599832][ T9707] ? __alloc_skb+0x101/0x320 [ 154.599951][ T9707] __alloc_skb+0x101/0x320 [ 154.599993][ T9707] ? audit_log_start+0x365/0x6c0 [ 154.600047][ T9707] audit_log_start+0x380/0x6c0 [ 154.600081][ T9707] audit_seccomp+0x48/0x100 [ 154.600135][ T9707] ? __seccomp_filter+0x68c/0x10d0 [ 154.600164][ T9707] __seccomp_filter+0x69d/0x10d0 [ 154.600199][ T9707] ? _raw_spin_unlock+0x26/0x50 [ 154.600241][ T9707] __secure_computing+0x82/0x150 [ 154.600268][ T9707] syscall_trace_enter+0xcf/0x1e0 [ 154.600328][ T9707] do_syscall_64+0xac/0x200 [ 154.600360][ T9707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.600392][ T9707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.600443][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.600471][ T9707] RIP: 0033:0x7f2eb460d5fc [ 154.600542][ T9707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.600565][ T9707] RSP: 002b:00007f2eb3077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.600588][ T9707] RAX: ffffffffffffffda RBX: 00007f2eb4835fa0 RCX: 00007f2eb460d5fc [ 154.600622][ T9707] RDX: 000000000000000f RSI: 00007f2eb30770a0 RDI: 0000000000000008 [ 154.600637][ T9707] RBP: 00007f2eb3077090 R08: 0000000000000000 R09: 0000000000000000 [ 154.600650][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.600661][ T9707] R13: 00007f2eb4836038 R14: 00007f2eb4835fa0 R15: 00007ffdf4318038 [ 154.600681][ T9707] [ 154.836060][ T9711] random: crng reseeded on system resumption [ 154.885529][ T9717] loop3: detected capacity change from 0 to 1024 [ 154.892625][ T9717] EXT4-fs: Ignoring removed orlov option [ 154.913976][ T9715] loop1: detected capacity change from 0 to 8192 [ 155.011339][ T9724] loop4: detected capacity change from 0 to 512 [ 155.020232][ T9724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.782088][ T9731] FAULT_INJECTION: forcing a failure. [ 155.782088][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 155.794838][ T9731] CPU: 1 UID: 0 PID: 9731 Comm: syz.0.2173 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 155.794886][ T9731] Tainted: [W]=WARN [ 155.794892][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.794904][ T9731] Call Trace: [ 155.794912][ T9731] [ 155.794922][ T9731] __dump_stack+0x1d/0x30 [ 155.794953][ T9731] dump_stack_lvl+0xe8/0x140 [ 155.794978][ T9731] dump_stack+0x15/0x1b [ 155.795000][ T9731] should_fail_ex+0x265/0x280 [ 155.795021][ T9731] should_failslab+0x8c/0xb0 [ 155.795046][ T9731] kmem_cache_alloc_node_noprof+0x57/0x320 [ 155.795087][ T9731] ? __alloc_skb+0x101/0x320 [ 155.795148][ T9731] __alloc_skb+0x101/0x320 [ 155.795191][ T9731] kcm_sendmsg+0x1551/0x1700 [ 155.795254][ T9731] ? avc_has_perm+0xf7/0x180 [ 155.795286][ T9731] ? selinux_socket_sendmsg+0x175/0x1b0 [ 155.795330][ T9731] ? __pfx_kcm_sendmsg+0x10/0x10 [ 155.795401][ T9731] __sock_sendmsg+0x145/0x180 [ 155.795451][ T9731] sock_write_iter+0x165/0x1b0 [ 155.795490][ T9731] ? __pfx_sock_write_iter+0x10/0x10 [ 155.795519][ T9731] vfs_write+0x527/0x960 [ 155.795606][ T9731] ksys_write+0xda/0x1a0 [ 155.795636][ T9731] __x64_sys_write+0x40/0x50 [ 155.795740][ T9731] x64_sys_call+0x27fe/0x2ff0 [ 155.795768][ T9731] do_syscall_64+0xd2/0x200 [ 155.795804][ T9731] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.795827][ T9731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.795874][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.795903][ T9731] RIP: 0033:0x7f2eb460ebe9 [ 155.795923][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.795945][ T9731] RSP: 002b:00007f2eb3077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.795965][ T9731] RAX: ffffffffffffffda RBX: 00007f2eb4835fa0 RCX: 00007f2eb460ebe9 [ 155.795977][ T9731] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000006 [ 155.796043][ T9731] RBP: 00007f2eb3077090 R08: 0000000000000000 R09: 0000000000000000 [ 155.796058][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.796073][ T9731] R13: 00007f2eb4836038 R14: 00007f2eb4835fa0 R15: 00007ffdf4318038 [ 155.796097][ T9731] [ 156.029267][ T9724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.037195][ T9724] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2171: bg 0: block 248: padding at end of block bitmap is not set [ 156.054231][ T9724] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2171: Failed to acquire dquot type 1 [ 156.068017][ T9724] EXT4-fs (loop4): 1 truncate cleaned up [ 156.227938][ T9735] loop1: detected capacity change from 0 to 1024 [ 156.252741][ T9735] EXT4-fs: Ignoring removed orlov option [ 156.293785][ T9735] serio: Serial port ttyS3 [ 156.390284][ T9742] loop0: detected capacity change from 0 to 1024 [ 156.397702][ T9742] EXT4-fs: Ignoring removed orlov option [ 157.283489][ T9748] loop1: detected capacity change from 0 to 512 [ 157.293673][ T9750] __nla_validate_parse: 1 callbacks suppressed [ 157.293685][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 157.300346][ T9748] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.343993][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 157.355073][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'. [ 157.649571][ T9775] loop2: detected capacity change from 0 to 1024 [ 157.660307][ T9775] EXT4-fs: Ignoring removed orlov option [ 157.679958][ T9775] serio: Serial port ttyS3 [ 157.901681][ T9783] loop4: detected capacity change from 0 to 512 [ 157.925226][ T9783] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.141317][ T9789] loop4: detected capacity change from 0 to 512 [ 158.150499][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 158.156776][ T29] audit: type=1400 audit(1755212163.798:6572): avc: denied { recv } for pid=9786 comm="syz.4.2193" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 158.182304][ T29] audit: type=1400 audit(1755212163.838:6573): avc: denied { map_create } for pid=9786 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.201761][ T29] audit: type=1400 audit(1755212163.838:6574): avc: denied { bpf } for pid=9786 comm="syz.4.2193" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.222505][ T29] audit: type=1400 audit(1755212163.838:6575): avc: denied { map_read map_write } for pid=9786 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.243141][ T29] audit: type=1400 audit(1755212163.838:6576): avc: denied { prog_load } for pid=9786 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.262379][ T29] audit: type=1400 audit(1755212163.838:6577): avc: denied { bpf } for pid=9786 comm="syz.4.2193" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.273025][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 158.285162][ T29] audit: type=1400 audit(1755212163.838:6578): avc: denied { prog_load } for pid=9786 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.298913][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2194'. [ 158.310967][ T29] audit: type=1400 audit(1755212163.838:6579): avc: denied { bpf } for pid=9786 comm="syz.4.2193" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.340562][ T29] audit: type=1400 audit(1755212163.848:6580): avc: denied { prog_load } for pid=9786 comm="syz.4.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.359676][ T29] audit: type=1400 audit(1755212163.848:6581): avc: denied { bpf } for pid=9786 comm="syz.4.2193" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.425519][ T9789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.438480][ T9789] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.446435][ T9789] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2193: bg 0: block 248: padding at end of block bitmap is not set [ 158.462912][ T9789] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2193: Failed to acquire dquot type 1 [ 158.479865][ T9789] EXT4-fs (loop4): 1 truncate cleaned up [ 159.406851][ T9802] loop1: detected capacity change from 0 to 512 [ 159.446368][ T9802] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 159.454625][ T9802] EXT4-fs (loop1): blocks per group (4096) and clusters per group (8192) inconsistent [ 159.478796][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2199'. [ 159.655285][ T9806] random: crng reseeded on system resumption [ 159.892451][ T9810] loop2: detected capacity change from 0 to 512 [ 159.938704][ T9810] EXT4-fs mount: 88 callbacks suppressed [ 159.938810][ T9810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.966352][ T9810] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.978835][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.150278][ T9818] program syz.1.2200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.160033][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.177115][ T9817] loop4: detected capacity change from 0 to 1024 [ 160.204972][ T9817] EXT4-fs: Ignoring removed orlov option [ 160.213762][ T9818] loop1: detected capacity change from 0 to 1024 [ 160.230943][ T9817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.253929][ T9817] serio: Serial port ttyS3 [ 160.296720][ T9818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.380663][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 160.394007][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2207'. [ 160.469511][ T9802] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 160.477359][ T9802] netlink: 'syz.1.2200': attribute type 1 has an invalid length. [ 160.485129][ T9802] netlink: 170508 bytes leftover after parsing attributes in process `syz.1.2200'. [ 160.518210][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.618243][ T9828] loop2: detected capacity change from 0 to 8192 [ 160.957989][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.974011][ T9839] random: crng reseeded on system resumption [ 161.097882][ T9845] loop1: detected capacity change from 0 to 512 [ 161.174607][ T9848] loop3: detected capacity change from 0 to 512 [ 161.265632][ T9848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.331001][ T9848] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.339041][ T9848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2215: bg 0: block 248: padding at end of block bitmap is not set [ 161.355554][ T9848] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2215: Failed to acquire dquot type 1 [ 161.368084][ T9848] EXT4-fs (loop3): 1 truncate cleaned up [ 161.375031][ T9848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.478822][ T9845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.646736][ T9845] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.955869][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 161.981728][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.490485][ T9869] loop0: detected capacity change from 0 to 512 [ 162.522033][ T9869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.559827][ T9869] EXT4-fs (loop0): 1 truncate cleaned up [ 162.583905][ T9869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.862966][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.159961][ T29] kauditd_printk_skb: 1154 callbacks suppressed [ 163.159981][ T29] audit: type=1400 audit(1755212168.878:7732): avc: denied { perfmon } for pid=9866 comm="syz.1.2222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.187288][ T29] audit: type=1400 audit(1755212168.878:7733): avc: denied { perfmon } for pid=9866 comm="syz.1.2222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.208219][ T29] audit: type=1400 audit(1755212168.878:7734): avc: denied { perfmon } for pid=9866 comm="syz.1.2222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.229112][ T29] audit: type=1400 audit(1755212168.878:7735): avc: denied { perfmon } for pid=9866 comm="syz.1.2222" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.250009][ T29] audit: type=1400 audit(1755212168.878:7736): avc: denied { bpf } for pid=9866 comm="syz.1.2222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.277646][ T9877] loop4: detected capacity change from 0 to 8192 [ 163.286761][ T29] audit: type=1400 audit(1755212168.988:7737): avc: denied { read write } for pid=9876 comm="syz.4.2225" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.310854][ T29] audit: type=1400 audit(1755212168.988:7738): avc: denied { read write open } for pid=9876 comm="syz.4.2225" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.319393][ T9878] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.335884][ T29] audit: type=1400 audit(1755212168.998:7739): avc: denied { ioctl } for pid=9876 comm="syz.4.2225" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.368253][ T29] audit: type=1400 audit(1755212168.998:7740): avc: denied { bpf } for pid=9866 comm="syz.1.2222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.388919][ T29] audit: type=1400 audit(1755212168.998:7741): avc: denied { prog_run } for pid=9866 comm="syz.1.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.471059][ T9882] random: crng reseeded on system resumption [ 163.471786][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.693592][ T9888] loop1: detected capacity change from 0 to 8192 [ 163.773578][ T9892] loop4: detected capacity change from 0 to 512 [ 163.841359][ T9892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.874525][ T9892] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.945259][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.211991][ T9912] loop3: detected capacity change from 0 to 512 [ 164.227548][ T9910] __nla_validate_parse: 3 callbacks suppressed [ 164.227567][ T9910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2234'. [ 164.254864][ T9912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.262452][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 164.281459][ T9914] random: crng reseeded on system resumption [ 164.289802][ T9912] EXT4-fs (loop3): 1 truncate cleaned up [ 164.299368][ T9912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.823720][ T9925] serio: Serial port ttyS3 [ 165.026992][ T9924] loop1: detected capacity change from 0 to 2048 [ 165.088270][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.161287][ T9929] loop3: detected capacity change from 0 to 512 [ 165.204425][ T9929] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 165.212758][ T9929] EXT4-fs (loop3): blocks per group (4096) and clusters per group (8192) inconsistent [ 165.256799][ T9924] loop1: p2 p3 p7 [ 165.363436][ T9933] program syz.3.2242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.405761][ T9933] loop3: detected capacity change from 0 to 1024 [ 165.458773][ T9934] loop2: detected capacity change from 0 to 1024 [ 165.467626][ T9933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.490481][ T9934] EXT4-fs: Ignoring removed orlov option [ 165.515508][ T9934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.536725][ T9929] netlink: 'syz.3.2242': attribute type 2 has an invalid length. [ 165.544563][ T9929] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 165.552342][ T9929] netlink: 170508 bytes leftover after parsing attributes in process `syz.3.2242'. [ 165.596557][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.776104][ T9944] loop4: detected capacity change from 0 to 1024 [ 165.788495][ T9944] EXT4-fs: Ignoring removed orlov option [ 165.844738][ T9944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.117824][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.177578][ T9953] random: crng reseeded on system resumption [ 166.309027][ T9960] loop1: detected capacity change from 0 to 512 [ 166.416230][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.421603][ T9960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.444750][ T9960] EXT4-fs (loop1): 1 truncate cleaned up [ 166.451877][ T9960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.174701][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.435751][ T3396] Process accounting resumed [ 167.500592][ T9986] random: crng reseeded on system resumption [ 167.537171][ T9987] loop4: detected capacity change from 0 to 1024 [ 167.563883][ T9987] EXT4-fs: Ignoring removed nobh option [ 167.569539][ T9987] EXT4-fs: Ignoring removed bh option [ 167.616833][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 167.631483][ T9987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.686154][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2263'. [ 167.725973][ T9995] FAULT_INJECTION: forcing a failure. [ 167.725973][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 167.738741][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: syz.3.2265 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 167.738780][ T9995] Tainted: [W]=WARN [ 167.738787][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.738863][ T9995] Call Trace: [ 167.738873][ T9995] [ 167.738884][ T9995] __dump_stack+0x1d/0x30 [ 167.738915][ T9995] dump_stack_lvl+0xe8/0x140 [ 167.738936][ T9995] dump_stack+0x15/0x1b [ 167.738954][ T9995] should_fail_ex+0x265/0x280 [ 167.738978][ T9995] should_failslab+0x8c/0xb0 [ 167.739085][ T9995] kmem_cache_alloc_noprof+0x50/0x310 [ 167.739117][ T9995] ? sched_create_group+0x1d/0x80 [ 167.739220][ T9995] sched_create_group+0x1d/0x80 [ 167.739251][ T9995] cpu_cgroup_css_alloc+0xe/0x40 [ 167.739284][ T9995] cgroup_apply_control_enable+0x1fd/0xa30 [ 167.739384][ T9995] cgroup_apply_control+0x33/0x410 [ 167.739450][ T9995] ? __pfx_autoremove_wake_function+0x10/0x10 [ 167.739486][ T9995] ? cgroup_kn_lock_live+0x130/0x1e0 [ 167.739596][ T9995] cgroup_subtree_control_write+0x7d5/0xb80 [ 167.739637][ T9995] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 167.739747][ T9995] cgroup_file_write+0x197/0x350 [ 167.739775][ T9995] ? __pfx_cgroup_file_write+0x10/0x10 [ 167.739819][ T9995] kernfs_fop_write_iter+0x1be/0x2d0 [ 167.739873][ T9995] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 167.739935][ T9995] vfs_write+0x527/0x960 [ 167.739969][ T9995] ksys_write+0xda/0x1a0 [ 167.739999][ T9995] __x64_sys_write+0x40/0x50 [ 167.740035][ T9995] x64_sys_call+0x27fe/0x2ff0 [ 167.740070][ T9995] do_syscall_64+0xd2/0x200 [ 167.740102][ T9995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.740134][ T9995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.740165][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.740186][ T9995] RIP: 0033:0x7f3b4366ebe9 [ 167.740203][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.740225][ T9995] RSP: 002b:00007f3b420d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.740249][ T9995] RAX: ffffffffffffffda RBX: 00007f3b43895fa0 RCX: 00007f3b4366ebe9 [ 167.740330][ T9995] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005 [ 167.740375][ T9995] RBP: 00007f3b420d7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.740388][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.740403][ T9995] R13: 00007f3b43896038 R14: 00007f3b43895fa0 R15: 00007fff34295a18 [ 167.740429][ T9995] [ 168.031997][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 168.087712][ T9998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.161270][ T9998] loop0: detected capacity change from 0 to 128 [ 168.169712][ T29] kauditd_printk_skb: 1306 callbacks suppressed [ 168.169747][ T29] audit: type=1400 audit(1755212173.888:9048): avc: denied { recv } for pid=9997 comm="syz.0.2266" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 168.202353][ T9998] vfat: Unknown parameter '€' [ 168.229851][ T9983] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2260: Allocating blocks 497-513 which overlap fs metadata [ 168.231402][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.256525][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.267596][ T29] audit: type=1400 audit(1755212173.888:9049): avc: denied { recv } for pid=9997 comm="syz.0.2266" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 168.269275][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.294628][ T29] audit: type=1400 audit(1755212173.888:9050): avc: denied { recv } for pid=9997 comm="syz.0.2266" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 168.307954][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.332650][ T29] audit: type=1400 audit(1755212173.888:9051): avc: denied { mounton } for pid=9997 comm="syz.0.2266" path="/525/file0" dev="tmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 168.345277][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.367965][ T29] audit: type=1400 audit(1755212173.928:9052): avc: denied { read write } for pid=9997 comm="syz.0.2266" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.380636][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.404672][ T29] audit: type=1400 audit(1755212173.928:9053): avc: denied { read write open } for pid=9997 comm="syz.0.2266" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.417264][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.442156][ T29] audit: type=1400 audit(1755212173.928:9054): avc: denied { ioctl } for pid=9997 comm="syz.0.2266" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.454746][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.480169][ T29] audit: type=1400 audit(1755212173.968:9055): avc: denied { prog_load } for pid=10001 comm="syz.3.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.492808][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.511952][ T29] audit: type=1400 audit(1755212173.968:9056): avc: denied { bpf } for pid=10001 comm="syz.3.2267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.524575][ T9998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9998 comm=syz.0.2266 [ 168.545195][ T29] audit: type=1400 audit(1755212173.968:9057): avc: denied { perfmon } for pid=10001 comm="syz.3.2267" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.569821][T10003] loop1: detected capacity change from 0 to 512 [ 168.645716][T10003] EXT4-fs (loop1): 1 orphan inode deleted [ 168.654592][T10003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.686133][T10003] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.760006][ T9983] EXT4-fs (loop4): pa ffff88810048cc40: logic 576, phys. 433, len 5 [ 168.768082][ T9983] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 168.950816][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.185635][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.259171][T10020] loop0: detected capacity change from 0 to 512 [ 169.275575][T10021] loop1: detected capacity change from 0 to 1024 [ 169.295831][T10021] EXT4-fs: Ignoring removed orlov option [ 169.303124][T10020] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.318101][T10019] loop4: detected capacity change from 0 to 512 [ 169.322735][T10020] EXT4-fs (loop0): mount failed [ 169.328438][T10019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.332574][T10021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.355401][T10019] EXT4-fs (loop4): 1 truncate cleaned up [ 169.361437][T10019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.430657][T10019] lo speed is unknown, defaulting to 1000 [ 169.436760][T10019] lo speed is unknown, defaulting to 1000 [ 169.483180][T10019] lo speed is unknown, defaulting to 1000 [ 169.640131][T10034] random: crng reseeded on system resumption [ 169.857352][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.883187][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.943744][T10041] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2277'. [ 170.006764][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 170.295743][T10054] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2282'. [ 170.819061][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 170.822785][T10066] random: crng reseeded on system resumption [ 170.840766][T10061] hsr_slave_0: left promiscuous mode [ 170.890789][T10063] pim6reg: entered allmulticast mode [ 170.918517][T10063] loop1: detected capacity change from 0 to 512 [ 170.928237][T10063] EXT4-fs: Ignoring removed bh option [ 170.948871][T10063] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.959290][T10068] loop0: detected capacity change from 0 to 1024 [ 170.974120][T10068] EXT4-fs: Ignoring removed orlov option [ 170.990401][T10068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.108199][T10071] loop4: detected capacity change from 0 to 1024 [ 171.153917][T10071] EXT4-fs: Ignoring removed orlov option [ 171.197956][T10071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.440704][T10078] loop2: detected capacity change from 0 to 512 [ 171.452869][T10078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.480822][T10078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.545056][T10078] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.713289][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.734673][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.069571][T10097] random: crng reseeded on system resumption [ 172.207714][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.066399][T10111] loop0: detected capacity change from 0 to 1024 [ 173.085510][T10111] EXT4-fs: Ignoring removed orlov option [ 173.116511][T10108] loop3: detected capacity change from 0 to 512 [ 173.125231][T10108] EXT4-fs: Ignoring removed orlov option [ 173.169349][T10112] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 173.181500][ T29] kauditd_printk_skb: 1327 callbacks suppressed [ 173.181517][ T29] audit: type=1400 audit(1755212178.898:10384): avc: denied { relabelto } for pid=10104 comm="syz.2.2301" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 173.214103][ T29] audit: type=1400 audit(1755212178.898:10385): avc: denied { associate } for pid=10104 comm="syz.2.2301" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 173.279672][T10112] tipc: Enabling of bearer rejected, failed to enable media [ 173.287757][ T29] audit: type=1400 audit(1755212178.968:10386): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.313593][ T29] audit: type=1400 audit(1755212178.968:10387): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.339301][ T29] audit: type=1400 audit(1755212178.968:10388): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.365087][ T29] audit: type=1400 audit(1755212178.968:10389): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.390865][ T29] audit: type=1400 audit(1755212178.968:10390): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.416755][ T29] audit: type=1400 audit(1755212178.968:10391): avc: denied { prog_load } for pid=10104 comm="syz.2.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 173.436101][ T29] audit: type=1400 audit(1755212178.968:10392): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.461786][ T29] audit: type=1400 audit(1755212178.968:10393): avc: denied { recv } for pid=3301 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 173.545762][T10112] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 173.581021][T10112] team0: Port device dummy0 removed [ 173.592240][T10112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.017288][T10108] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2302: casefold flag without casefold feature [ 174.034172][T10111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.055056][T10108] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2302: couldn't read orphan inode 15 (err -117) [ 174.089735][T10108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.165061][T10125] loop4: detected capacity change from 0 to 512 [ 174.231936][T10125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.287974][T10125] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.309158][T10138] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.323377][T10138] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 174.466360][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.482318][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 174.512699][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.513288][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2313'. [ 174.693785][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 174.738020][T10146] loop3: detected capacity change from 0 to 8192 [ 174.759904][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 174.880941][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.962944][T10158] random: crng reseeded on system resumption [ 174.969448][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 174.998423][T10160] loop4: detected capacity change from 0 to 1024 [ 175.036838][T10160] EXT4-fs: Ignoring removed orlov option [ 175.065536][T10160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.132730][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 175.326279][T10174] loop2: detected capacity change from 0 to 1024 [ 175.355857][T10174] EXT4-fs: Ignoring removed orlov option [ 175.371507][T10174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.504541][T10179] loop1: detected capacity change from 0 to 512 [ 175.512780][T10179] EXT4-fs: Ignoring removed i_version option [ 175.518889][T10179] EXT4-fs: Ignoring removed bh option [ 175.550266][T10179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.610040][T10179] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.635344][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 175.788139][T10188] loop3: detected capacity change from 0 to 512 [ 175.799322][T10188] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.808522][T10188] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 175.845403][T10188] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 175.901693][T10188] System zones: 0-2, 18-18, 34-35 [ 175.934794][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.944006][T10188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.963966][T10188] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 176.008728][T10188] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 176.020390][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.039388][T10188] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 176.056671][T10188] FAULT_INJECTION: forcing a failure. [ 176.056671][T10188] name failslab, interval 1, probability 0, space 0, times 0 [ 176.069529][T10188] CPU: 1 UID: 0 PID: 10188 Comm: syz.3.2329 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 176.069568][T10188] Tainted: [W]=WARN [ 176.069576][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.069592][T10188] Call Trace: [ 176.069599][T10188] [ 176.069667][T10188] __dump_stack+0x1d/0x30 [ 176.069690][T10188] dump_stack_lvl+0xe8/0x140 [ 176.069713][T10188] dump_stack+0x15/0x1b [ 176.069733][T10188] should_fail_ex+0x265/0x280 [ 176.069759][T10188] should_failslab+0x8c/0xb0 [ 176.069838][T10188] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 176.069868][T10188] ? __d_alloc+0x3d/0x340 [ 176.069960][T10188] __d_alloc+0x3d/0x340 [ 176.069997][T10188] d_alloc_parallel+0x53/0xc60 [ 176.070036][T10188] ? __rcu_read_unlock+0x4f/0x70 [ 176.070058][T10188] ? __d_lookup+0x316/0x340 [ 176.070157][T10188] ? try_to_unlazy+0x25e/0x3a0 [ 176.070190][T10188] path_openat+0x6b5/0x2170 [ 176.070220][T10188] do_filp_open+0x109/0x230 [ 176.070258][T10188] do_sys_openat2+0xa6/0x110 [ 176.070298][T10188] __x64_sys_open+0xe6/0x110 [ 176.070331][T10188] x64_sys_call+0x1457/0x2ff0 [ 176.070386][T10188] do_syscall_64+0xd2/0x200 [ 176.070413][T10188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.070437][T10188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.070515][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.070536][T10188] RIP: 0033:0x7f3b4366ebe9 [ 176.070550][T10188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.070577][T10188] RSP: 002b:00007f3b420d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 176.070710][T10188] RAX: ffffffffffffffda RBX: 00007f3b43895fa0 RCX: 00007f3b4366ebe9 [ 176.070727][T10188] RDX: 0000000000000000 RSI: 0000000000145842 RDI: 00002000000005c0 [ 176.070754][T10188] RBP: 00007f3b420d7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.070767][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.070779][T10188] R13: 00007f3b43896038 R14: 00007f3b43895fa0 R15: 00007fff34295a18 [ 176.070798][T10188] [ 176.323482][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 176.426964][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.442188][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 176.447411][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.570804][T10198] loop3: detected capacity change from 0 to 512 [ 176.602020][T10198] EXT4-fs (loop3): bad geometry: block count 32768 exceeds size of device (64 blocks) [ 176.665561][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 176.787219][T10206] loop2: detected capacity change from 0 to 8192 [ 176.851177][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 176.975129][T10219] loop4: detected capacity change from 0 to 1024 [ 176.979401][T10218] loop1: detected capacity change from 0 to 512 [ 176.989066][T10213] loop0: detected capacity change from 0 to 2048 [ 176.997682][T10219] EXT4-fs: Ignoring removed orlov option [ 177.012846][T10218] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.022904][T10219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.035675][T10218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.047524][T10218] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2341: Failed to acquire dquot type 1 [ 177.069749][T10224] loop3: detected capacity change from 0 to 1024 [ 177.079500][T10218] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2341: bg 0: block 40: padding at end of block bitmap is not set [ 177.097126][T10218] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 177.112214][T10224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.126718][T10218] EXT4-fs (loop1): 1 truncate cleaned up [ 177.134477][T10218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.208263][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.259210][T10230] loop0: detected capacity change from 0 to 1024 [ 177.267098][T10233] serio: Serial port ttyS3 [ 177.274469][T10230] EXT4-fs: Ignoring removed orlov option [ 177.291311][T10230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.466714][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 177.492838][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.647269][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 177.711217][T10243] loop1: detected capacity change from 0 to 4096 [ 177.740989][T10243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.871817][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.990837][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.012053][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 178.210217][ T29] kauditd_printk_skb: 1876 callbacks suppressed [ 178.210237][ T29] audit: type=1400 audit(1755212183.928:12268): avc: denied { bpf } for pid=10259 comm="syz.2.2356" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.296973][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.316408][ T29] audit: type=1400 audit(1755212183.938:12269): avc: denied { bpf } for pid=10259 comm="syz.2.2356" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.337232][ T29] audit: type=1400 audit(1755212183.968:12270): avc: denied { recv } for pid=3289 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 178.363314][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.363345][ C1] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 178.363361][ C1] audit: backlog limit exceeded [ 178.378322][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.378360][ C1] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 178.378373][ C1] audit: backlog limit exceeded [ 178.378747][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.676799][T10276] FAULT_INJECTION: forcing a failure. [ 178.676799][T10276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.689934][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.4.2361 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 178.690038][T10276] Tainted: [W]=WARN [ 178.690047][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.690060][T10276] Call Trace: [ 178.690068][T10276] [ 178.690098][T10276] __dump_stack+0x1d/0x30 [ 178.690128][T10276] dump_stack_lvl+0xe8/0x140 [ 178.690208][T10276] dump_stack+0x15/0x1b [ 178.690232][T10276] should_fail_ex+0x265/0x280 [ 178.690262][T10276] should_fail+0xb/0x20 [ 178.690354][T10276] should_fail_usercopy+0x1a/0x20 [ 178.690403][T10276] _copy_from_user+0x1c/0xb0 [ 178.690442][T10276] __sys_bpf+0x178/0x7b0 [ 178.690488][T10276] __x64_sys_bpf+0x41/0x50 [ 178.690517][T10276] x64_sys_call+0x2aea/0x2ff0 [ 178.690627][T10276] do_syscall_64+0xd2/0x200 [ 178.690662][T10276] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.690691][T10276] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.690725][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.690779][T10276] RIP: 0033:0x7f4bb7baebe9 [ 178.690799][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.690820][T10276] RSP: 002b:00007f4bb660f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.690845][T10276] RAX: ffffffffffffffda RBX: 00007f4bb7dd5fa0 RCX: 00007f4bb7baebe9 [ 178.690867][T10276] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 0000000000000000 [ 178.690884][T10276] RBP: 00007f4bb660f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.690900][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.690916][T10276] R13: 00007f4bb7dd6038 R14: 00007f4bb7dd5fa0 R15: 00007ffccf3d6eb8 [ 178.690962][T10276] [ 179.056410][T10283] loop4: detected capacity change from 0 to 1024 [ 179.081004][T10283] EXT4-fs: Ignoring removed orlov option [ 179.133602][T10283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.369462][T10302] __nla_validate_parse: 6 callbacks suppressed [ 180.369478][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 180.397306][T10299] FAULT_INJECTION: forcing a failure. [ 180.397306][T10299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.410481][T10299] CPU: 1 UID: 0 PID: 10299 Comm: syz.1.2368 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 180.410586][T10299] Tainted: [W]=WARN [ 180.410595][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.410610][T10299] Call Trace: [ 180.410619][T10299] [ 180.410644][T10299] __dump_stack+0x1d/0x30 [ 180.410674][T10299] dump_stack_lvl+0xe8/0x140 [ 180.410701][T10299] dump_stack+0x15/0x1b [ 180.410794][T10299] should_fail_ex+0x265/0x280 [ 180.410864][T10299] should_fail+0xb/0x20 [ 180.410881][T10299] should_fail_usercopy+0x1a/0x20 [ 180.410908][T10299] core_sys_select+0x412/0x6e0 [ 180.410933][T10299] ? _parse_integer+0x27/0x40 [ 180.411039][T10299] __se_sys_select+0x1c9/0x210 [ 180.411064][T10299] __x64_sys_select+0x67/0x80 [ 180.411087][T10299] x64_sys_call+0x2a3a/0x2ff0 [ 180.411152][T10299] do_syscall_64+0xd2/0x200 [ 180.411187][T10299] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.411217][T10299] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.411291][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.411317][T10299] RIP: 0033:0x7f83db1aebe9 [ 180.411334][T10299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.411463][T10299] RSP: 002b:00007f83d9c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 180.411485][T10299] RAX: ffffffffffffffda RBX: 00007f83db3d5fa0 RCX: 00007f83db1aebe9 [ 180.411499][T10299] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 180.411551][T10299] RBP: 00007f83d9c17090 R08: 0000200000000200 R09: 0000000000000000 [ 180.411565][T10299] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 180.411579][T10299] R13: 00007f83db3d6038 R14: 00007f83db3d5fa0 R15: 00007ffddc388018 [ 180.411599][T10299] [ 180.608322][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2370'. [ 180.810690][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 180.811533][T10309] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 180.826235][T10309] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 180.833739][T10309] vhci_hcd vhci_hcd.0: Device attached [ 180.887473][T10316] veth0: entered promiscuous mode [ 180.898600][T10313] loop2: detected capacity change from 0 to 2048 [ 180.915048][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 180.992189][T10312] vhci_hcd: connection closed [ 180.992432][ T8777] vhci_hcd: stop threads [ 181.001508][ T8777] vhci_hcd: release socket [ 181.006052][ T8777] vhci_hcd: disconnect device [ 181.014147][ T3371] vhci_hcd: vhci_device speed not set [ 181.032266][T10320] loop4: detected capacity change from 0 to 512 [ 181.043628][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'. [ 181.069595][T10320] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.197347][T10324] loop0: detected capacity change from 0 to 8192 [ 181.303220][T10328] loop4: detected capacity change from 0 to 512 [ 181.326738][T10328] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.537329][T10330] loop2: detected capacity change from 0 to 512 [ 181.561359][T10330] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.656844][T10342] loop1: detected capacity change from 0 to 1024 [ 181.668261][T10342] EXT4-fs: Ignoring removed orlov option [ 181.852653][T10350] serio: Serial port ttyS3 [ 181.889760][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 181.932802][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2385'. [ 182.102181][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 182.283522][T10362] loop3: detected capacity change from 0 to 512 [ 182.298675][T10362] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.729914][T10375] loop4: detected capacity change from 0 to 1024 [ 182.758002][T10375] EXT4-fs: Ignoring removed orlov option [ 182.951870][T10388] serio: Serial port ttyS3 [ 183.025573][T10389] loop3: detected capacity change from 0 to 512 [ 183.036427][T10389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.066903][T10389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.076695][T10389] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2397: Failed to acquire dquot type 1 [ 183.089608][T10389] EXT4-fs (loop3): 1 truncate cleaned up [ 183.214768][ T29] kauditd_printk_skb: 1900 callbacks suppressed [ 183.214787][ T29] audit: type=1400 audit(1755212188.938:14161): avc: denied { bpf } for pid=10394 comm="syz.2.2399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.225802][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 183.261384][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'. [ 183.330475][ T29] audit: type=1400 audit(1755212188.938:14162): avc: denied { prog_load } for pid=10394 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.350424][ T29] audit: type=1400 audit(1755212188.938:14163): avc: denied { bpf } for pid=10394 comm="syz.2.2399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.371206][ T29] audit: type=1400 audit(1755212188.938:14164): avc: denied { prog_load } for pid=10394 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.390561][ T29] audit: type=1400 audit(1755212188.938:14165): avc: denied { bpf } for pid=10394 comm="syz.2.2399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.411315][ T29] audit: type=1400 audit(1755212188.938:14166): avc: denied { perfmon } for pid=10394 comm="syz.2.2399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.432924][ T29] audit: type=1400 audit(1755212188.938:14167): avc: denied { perfmon } for pid=10394 comm="syz.2.2399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.454197][ T29] audit: type=1400 audit(1755212188.938:14168): avc: denied { perfmon } for pid=10394 comm="syz.2.2399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.454232][ T29] audit: type=1400 audit(1755212188.938:14169): avc: denied { perfmon } for pid=10394 comm="syz.2.2399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.454263][ T29] audit: type=1400 audit(1755212188.938:14170): avc: denied { perfmon } for pid=10394 comm="syz.2.2399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.713480][T10404] loop2: detected capacity change from 0 to 1024 [ 183.726274][T10404] EXT4-fs: Ignoring removed orlov option [ 183.766799][T10406] loop0: detected capacity change from 0 to 1024 [ 183.825893][T10406] EXT4-fs: Ignoring removed orlov option [ 184.059769][T10417] loop1: detected capacity change from 0 to 128 [ 184.217117][T10423] loop2: detected capacity change from 0 to 1024 [ 184.230820][T10423] EXT4-fs: Ignoring removed orlov option [ 184.791396][T10437] loop3: detected capacity change from 0 to 1024 [ 184.804223][T10437] EXT4-fs: Ignoring removed orlov option [ 185.070030][T10443] loop0: detected capacity change from 0 to 512 [ 185.126580][T10443] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.208215][T10449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10449 comm=syz.4.2418 [ 185.449594][T10465] __nla_validate_parse: 13 callbacks suppressed [ 185.449613][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2427'. [ 185.491712][T10463] loop3: detected capacity change from 0 to 512 [ 185.506484][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2427'. [ 185.546388][T10463] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.698391][T10474] loop2: detected capacity change from 0 to 1024 [ 185.706871][T10474] EXT4-fs: Ignoring removed orlov option [ 185.923621][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2433'. [ 185.943217][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 186.140137][T10491] loop1: detected capacity change from 0 to 512 [ 186.150288][T10491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.170526][T10491] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.178631][T10491] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2437: bg 0: block 248: padding at end of block bitmap is not set [ 186.193772][T10491] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2437: Failed to acquire dquot type 1 [ 186.206903][T10491] EXT4-fs (loop1): 1 truncate cleaned up [ 186.311841][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 186.413166][T10499] loop3: detected capacity change from 0 to 8192 [ 186.481449][T10502] loop2: detected capacity change from 0 to 512 [ 186.500479][T10502] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.564921][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 186.581873][T10502] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.2442: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 186.604636][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2443'. [ 186.621491][T10502] EXT4-fs (loop2): Remounting filesystem read-only [ 186.658744][T10508] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2442'. [ 186.681141][T10508] 0ªî{X¹¦: renamed from gretap0 [ 186.701588][T10508] 0ªî{X¹¦: entered allmulticast mode [ 186.720621][T10508] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 187.096542][T10514] loop1: detected capacity change from 0 to 512 [ 187.124009][T10514] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.401070][T10526] loop4: detected capacity change from 0 to 512 [ 187.429301][T10526] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.606548][T10530] loop4: detected capacity change from 0 to 1024 [ 187.625373][T10530] EXT4-fs: Ignoring removed orlov option [ 187.742272][T10532] FAULT_INJECTION: forcing a failure. [ 187.742272][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 187.754950][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.1.2452 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 187.755013][T10532] Tainted: [W]=WARN [ 187.755022][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.755038][T10532] Call Trace: [ 187.755046][T10532] [ 187.755054][T10532] __dump_stack+0x1d/0x30 [ 187.755146][T10532] dump_stack_lvl+0xe8/0x140 [ 187.755198][T10532] dump_stack+0x15/0x1b [ 187.755214][T10532] should_fail_ex+0x265/0x280 [ 187.755299][T10532] should_failslab+0x8c/0xb0 [ 187.755374][T10532] kmem_cache_alloc_noprof+0x50/0x310 [ 187.755482][T10532] ? audit_log_start+0x365/0x6c0 [ 187.755513][T10532] audit_log_start+0x365/0x6c0 [ 187.755602][T10532] audit_seccomp+0x48/0x100 [ 187.755657][T10532] ? __seccomp_filter+0x68c/0x10d0 [ 187.755685][T10532] __seccomp_filter+0x69d/0x10d0 [ 187.755714][T10532] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.755747][T10532] ? vfs_write+0x7e8/0x960 [ 187.755774][T10532] __secure_computing+0x82/0x150 [ 187.755797][T10532] syscall_trace_enter+0xcf/0x1e0 [ 187.755830][T10532] do_syscall_64+0xac/0x200 [ 187.755860][T10532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.755887][T10532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.755913][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.755940][T10532] RIP: 0033:0x7f83db1aebe9 [ 187.756037][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.756055][T10532] RSP: 002b:00007f83d9c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.756074][T10532] RAX: ffffffffffffffda RBX: 00007f83db3d5fa0 RCX: 00007f83db1aebe9 [ 187.756121][T10532] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 187.756137][T10532] RBP: 00007f83d9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 187.756152][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.756167][T10532] R13: 00007f83db3d6038 R14: 00007f83db3d5fa0 R15: 00007ffddc388018 [ 187.756192][T10532] [ 187.860571][T10532] $Hÿ: renamed from bond0 (while UP) [ 188.014022][T10532] $Hÿ: entered promiscuous mode [ 188.019170][T10532] bond_slave_0: entered promiscuous mode [ 188.025026][T10532] bond_slave_1: entered promiscuous mode [ 188.030940][T10532] $Hÿ: left allmulticast mode [ 188.035845][T10532] bond_slave_0: left allmulticast mode [ 188.041325][T10532] bond_slave_1: left allmulticast mode [ 188.046844][T10532] geneve1: left allmulticast mode [ 188.136533][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 188.148677][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2454'. [ 188.228612][ T29] kauditd_printk_skb: 2109 callbacks suppressed [ 188.228629][ T29] audit: type=1400 audit(1755212193.948:16276): avc: denied { kernel } for pid=10537 comm="syz.1.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 188.254858][ T29] audit: type=1400 audit(1755212193.948:16277): avc: denied { perfmon } for pid=10536 comm="syz.2.2454" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.275926][ T29] audit: type=1400 audit(1755212193.948:16278): avc: denied { perfmon } for pid=10536 comm="syz.2.2454" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.297136][ T29] audit: type=1400 audit(1755212193.948:16279): avc: denied { perfmon } for pid=10536 comm="syz.2.2454" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.318350][ T29] audit: type=1400 audit(1755212193.948:16280): avc: denied { perfmon } for pid=10536 comm="syz.2.2454" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.339482][ T29] audit: type=1400 audit(1755212193.948:16281): avc: denied { bpf } for pid=10536 comm="syz.2.2454" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.396348][T10542] loop3: detected capacity change from 0 to 8192 [ 188.415694][T10544] loop4: detected capacity change from 0 to 1024 [ 188.424121][T10544] EXT4-fs: Ignoring removed orlov option [ 188.464823][ T29] audit: type=1400 audit(1755212193.948:16282): avc: denied { perfmon } for pid=10540 comm="syz.3.2456" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.486114][ T29] audit: type=1400 audit(1755212193.948:16283): avc: denied { perfmon } for pid=10540 comm="syz.3.2456" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.507385][ T29] audit: type=1400 audit(1755212193.948:16284): avc: denied { perfmon } for pid=10540 comm="syz.3.2456" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.528981][ T29] audit: type=1400 audit(1755212193.948:16285): avc: denied { perfmon } for pid=10540 comm="syz.3.2456" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.625911][T10548] serio: Serial port ttyS3 [ 189.098292][T10565] loop2: detected capacity change from 0 to 512 [ 190.620724][T10589] loop3: detected capacity change from 0 to 8192 [ 191.331765][T10599] loop0: detected capacity change from 0 to 512 [ 191.363476][T10599] EXT4-fs mount: 41 callbacks suppressed [ 191.363494][T10599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.370684][T10601] loop1: detected capacity change from 0 to 1024 [ 191.412874][T10599] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.447753][T10604] lo speed is unknown, defaulting to 1000 [ 191.453819][T10601] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.469094][T10606] __nla_validate_parse: 3 callbacks suppressed [ 191.469113][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 191.486225][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2480'. [ 191.495492][T10604] lo speed is unknown, defaulting to 1000 [ 191.504025][T10601] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 191.536441][T10601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 191.546311][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.558765][T10601] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2478: Failed to acquire dquot type 0 [ 191.596798][T10601] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2478: Failed to acquire dquot type 0 [ 191.606366][T10604] lo speed is unknown, defaulting to 1000 [ 191.652881][T10609] tipc: Started in network mode [ 191.657846][T10609] tipc: Node identity 4, cluster identity 4711 [ 191.664103][T10609] tipc: Node number set to 4 [ 191.676660][T10601] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2478: Freeing blocks not in datazone - block = 0, count = 4096 [ 191.715518][T10601] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2478: Failed to acquire dquot type 0 [ 191.740419][T10601] EXT4-fs (loop1): 1 orphan inode deleted [ 191.745394][T10613] $Hÿ: renamed from bond0 (while UP) [ 191.753741][T10613] $Hÿ: entered promiscuous mode [ 191.758930][T10613] ªªªªªª: entered promiscuous mode [ 191.764227][T10613] bond_slave_1: entered promiscuous mode [ 191.770076][T10613] $Hÿ: left allmulticast mode [ 191.774979][T10613] ªªªªªª: left allmulticast mode [ 191.776192][T10601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.780059][T10613] bond_slave_1: left allmulticast mode [ 191.797964][T10613] geneve1: left allmulticast mode [ 191.980298][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.874797][T10628] loop0: detected capacity change from 0 to 2048 [ 193.904485][ T29] kauditd_printk_skb: 1281 callbacks suppressed [ 193.904506][ T29] audit: type=1400 audit(1755212198.888:17559): avc: denied { map_create } for pid=10640 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.930134][ T29] audit: type=1400 audit(1755212198.888:17560): avc: denied { bpf } for pid=10640 comm="syz.4.2491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.950873][ T29] audit: type=1400 audit(1755212198.888:17561): avc: denied { map_read map_write } for pid=10640 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.970892][ T29] audit: type=1400 audit(1755212198.988:17562): avc: denied { prog_load } for pid=10640 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.990155][ T29] audit: type=1400 audit(1755212198.988:17563): avc: denied { bpf } for pid=10640 comm="syz.4.2491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.010945][ T29] audit: type=1400 audit(1755212199.088:17564): avc: denied { prog_load } for pid=10640 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.030253][ T29] audit: type=1400 audit(1755212199.088:17565): avc: denied { bpf } for pid=10640 comm="syz.4.2491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.051055][ T29] audit: type=1400 audit(1755212199.338:17566): avc: denied { recv } for pid=10627 comm="syz.1.2487" saddr=10.128.0.163 src=30036 daddr=10.128.10.26 dest=33418 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 194.076644][ T29] audit: type=1400 audit(1755212199.588:17567): avc: denied { create } for pid=10640 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.097526][ T29] audit: type=1400 audit(1755212199.598:17568): avc: denied { prog_load } for pid=10632 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.654971][T10628] Alternate GPT is invalid, using primary GPT. [ 194.661500][T10628] loop0: p2 p3 p7 [ 194.775002][T10647] loop2: detected capacity change from 0 to 8192 [ 195.010856][T10636] syz.0.2486 (10636) used greatest stack depth: 7344 bytes left [ 195.228190][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 195.279872][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'. [ 195.498711][T10653] $Hÿ: renamed from bond0 (while UP) [ 195.533763][T10653] $Hÿ: entered promiscuous mode [ 195.538901][T10653] bond_slave_0: entered promiscuous mode [ 195.544656][T10653] bond_slave_1: entered promiscuous mode [ 195.616904][T10666] FAULT_INJECTION: forcing a failure. [ 195.616904][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.630113][T10666] CPU: 1 UID: 0 PID: 10666 Comm: syz.1.2497 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 195.630158][T10666] Tainted: [W]=WARN [ 195.630167][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.630184][T10666] Call Trace: [ 195.630191][T10666] [ 195.630200][T10666] __dump_stack+0x1d/0x30 [ 195.630224][T10666] dump_stack_lvl+0xe8/0x140 [ 195.630245][T10666] dump_stack+0x15/0x1b [ 195.630262][T10666] should_fail_ex+0x265/0x280 [ 195.630282][T10666] should_fail+0xb/0x20 [ 195.630305][T10666] should_fail_usercopy+0x1a/0x20 [ 195.630391][T10666] _copy_from_user+0x1c/0xb0 [ 195.630430][T10666] kstrtouint_from_user+0x69/0xf0 [ 195.630460][T10666] ? 0xffffffff81000000 [ 195.630476][T10666] ? selinux_file_permission+0x1e4/0x320 [ 195.630506][T10666] proc_fail_nth_write+0x50/0x160 [ 195.630621][T10666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.630677][T10666] vfs_write+0x266/0x960 [ 195.630705][T10666] ? vfs_read+0x4e6/0x770 [ 195.630838][T10666] ? __rcu_read_unlock+0x4f/0x70 [ 195.630867][T10666] ? __fget_files+0x184/0x1c0 [ 195.630903][T10666] ksys_write+0xda/0x1a0 [ 195.630933][T10666] __x64_sys_write+0x40/0x50 [ 195.630959][T10666] x64_sys_call+0x27fe/0x2ff0 [ 195.631025][T10666] do_syscall_64+0xd2/0x200 [ 195.631059][T10666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.631088][T10666] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 195.631123][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.631179][T10666] RIP: 0033:0x7f83db1ad69f [ 195.631199][T10666] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 195.631223][T10666] RSP: 002b:00007f83d9bf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 195.631247][T10666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83db1ad69f [ 195.631264][T10666] RDX: 0000000000000001 RSI: 00007f83d9bf60a0 RDI: 0000000000000006 [ 195.631280][T10666] RBP: 00007f83d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.631362][T10666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 195.631378][T10666] R13: 00007f83db3d6128 R14: 00007f83db3d6090 R15: 00007ffddc388018 [ 195.631400][T10666] [ 195.977256][T10668] loop0: detected capacity change from 0 to 1024 [ 196.007916][T10668] EXT4-fs: Ignoring removed orlov option [ 196.060415][T10668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.285880][T10684] serio: Serial port ttyS3 [ 197.148275][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.266451][T10694] loop3: detected capacity change from 0 to 512 [ 197.304380][T10694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.335568][T10694] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.377054][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.485110][T10700] loop0: detected capacity change from 0 to 8192 [ 198.107164][T10695] loop1: detected capacity change from 0 to 1024 [ 198.153376][T10695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.256401][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 198.283917][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2509'. [ 198.313515][T10695] lo speed is unknown, defaulting to 1000 [ 198.320386][T10709] FAULT_INJECTION: forcing a failure. [ 198.320386][T10709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.333507][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.4.2511 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 198.333548][T10709] Tainted: [W]=WARN [ 198.333557][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.333604][T10709] Call Trace: [ 198.333684][T10709] [ 198.333694][T10709] __dump_stack+0x1d/0x30 [ 198.333722][T10709] dump_stack_lvl+0xe8/0x140 [ 198.333824][T10709] dump_stack+0x15/0x1b [ 198.333861][T10709] should_fail_ex+0x265/0x280 [ 198.333888][T10709] should_fail+0xb/0x20 [ 198.333915][T10709] should_fail_usercopy+0x1a/0x20 [ 198.333940][T10709] strncpy_from_user+0x25/0x230 [ 198.334028][T10709] ? kmem_cache_alloc_noprof+0x186/0x310 [ 198.334099][T10709] ? getname_flags+0x80/0x3b0 [ 198.334133][T10709] getname_flags+0xae/0x3b0 [ 198.334220][T10709] do_sys_openat2+0x60/0x110 [ 198.334263][T10709] __x64_sys_openat+0xf2/0x120 [ 198.334343][T10709] x64_sys_call+0x2e9c/0x2ff0 [ 198.334372][T10709] do_syscall_64+0xd2/0x200 [ 198.334461][T10709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.334489][T10709] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.334514][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.334541][T10709] RIP: 0033:0x7f4bb7baebe9 [ 198.334594][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.334618][T10709] RSP: 002b:00007f4bb660f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.334642][T10709] RAX: ffffffffffffffda RBX: 00007f4bb7dd5fa0 RCX: 00007f4bb7baebe9 [ 198.334655][T10709] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 198.334692][T10709] RBP: 00007f4bb660f090 R08: 0000000000000000 R09: 0000000000000000 [ 198.334708][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.334724][T10709] R13: 00007f4bb7dd6038 R14: 00007f4bb7dd5fa0 R15: 00007ffccf3d6eb8 [ 198.334750][T10709] [ 198.340721][T10695] lo speed is unknown, defaulting to 1000 [ 198.569429][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 198.633167][T10695] lo speed is unknown, defaulting to 1000 [ 198.737789][T10720] tipc: Enabled bearer , priority 0 [ 198.746243][T10718] tipc: Disabling bearer [ 198.924273][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 198.924301][ T29] audit: type=1400 audit(1755212204.638:18299): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.996823][ T29] audit: type=1400 audit(1755212204.648:18300): avc: denied { prog_load } for pid=10725 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.016130][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2518'. [ 199.025514][ T29] audit: type=1400 audit(1755212204.648:18301): avc: denied { bpf } for pid=10725 comm="syz.4.2518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.046291][ T29] audit: type=1400 audit(1755212204.648:18302): avc: denied { perfmon } for pid=10725 comm="syz.4.2518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.063250][T10730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.067413][ T29] audit: type=1400 audit(1755212204.648:18303): avc: denied { perfmon } for pid=10725 comm="syz.4.2518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.073914][T10730] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 199.094996][ T29] audit: type=1400 audit(1755212204.648:18304): avc: denied { perfmon } for pid=10725 comm="syz.4.2518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.102712][T10730] audit: backlog limit exceeded [ 199.128647][ T29] audit: type=1400 audit(1755212204.648:18305): avc: denied { perfmon } for pid=10725 comm="syz.4.2518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.190870][T10729] loop2: detected capacity change from 0 to 512 [ 199.217268][ T8771] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 199.283539][ T8771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 199.295832][ T8771] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.295832][ T8771] [ 199.305550][ T8771] EXT4-fs (loop1): Total free blocks count 0 [ 199.311640][ T8771] EXT4-fs (loop1): Free/Dirty block details [ 199.316684][T10729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.317611][ T8771] EXT4-fs (loop1): free_blocks=68451041280 [ 199.336026][ T8771] EXT4-fs (loop1): dirty_blocks=0 [ 199.341321][ T8771] EXT4-fs (loop1): Block reservation details [ 199.347361][ T8771] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 199.354448][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.406284][T10729] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.417660][T10735] loop4: detected capacity change from 0 to 512 [ 199.461204][T10735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.494470][T10735] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.508931][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.518995][T10739] loop1: detected capacity change from 0 to 1024 [ 199.547642][T10735] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 199.575161][T10739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.707387][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.875358][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.877851][T10747] nfs: Unknown parameter '' [ 200.049348][T10748] loop0: detected capacity change from 0 to 8192 [ 200.053004][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 200.070738][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 200.089276][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2526'. [ 200.139736][T10757] loop2: detected capacity change from 0 to 1024 [ 200.160642][T10757] EXT4-fs: Ignoring removed orlov option [ 200.184322][T10757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.475440][T10766] netlink: 'syz.3.2530': attribute type 3 has an invalid length. [ 200.935542][T10773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10773 comm=syz.3.2530 [ 201.070281][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.076835][T10776] loop1: detected capacity change from 0 to 512 [ 201.174932][T10776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.224537][T10776] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.235257][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 201.318874][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.423688][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 201.434595][T10796] loop4: detected capacity change from 0 to 8192 [ 201.465369][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2540'. [ 201.535775][T10802] loop2: detected capacity change from 0 to 512 [ 201.543824][T10801] loop1: detected capacity change from 0 to 1024 [ 201.566398][T10801] EXT4-fs: Ignoring removed orlov option [ 201.567668][T10802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.591368][T10802] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.605056][T10801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.713101][T10807] nfs: Unknown parameter '' [ 201.759960][T10808] ================================================================== [ 201.768087][T10808] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 201.777331][T10808] [ 201.779673][T10808] write to 0xffff888119d09300 of 4 bytes by task 10801 on cpu 0: [ 201.787413][T10808] writeback_single_inode+0x14a/0x3e0 [ 201.792861][T10808] sync_inode_metadata+0x5b/0x90 [ 201.797836][T10808] generic_buffers_fsync_noflush+0xd9/0x120 [ 201.803760][T10808] ext4_sync_file+0x1ab/0x690 [ 201.808483][T10808] vfs_fsync_range+0x10a/0x130 [ 201.813280][T10808] ext4_buffered_write_iter+0x34f/0x3c0 [ 201.818872][T10808] ext4_file_write_iter+0x383/0xf00 [ 201.824108][T10808] iter_file_splice_write+0x669/0x9e0 [ 201.829507][T10808] direct_splice_actor+0x156/0x2a0 [ 201.834925][T10808] splice_direct_to_actor+0x312/0x680 [ 201.840406][T10808] do_splice_direct+0xda/0x150 [ 201.845206][T10808] do_sendfile+0x380/0x650 [ 201.847335][T10812] serio: Serial port ttyS3 [ 201.849827][T10808] __x64_sys_sendfile64+0x105/0x150 [ 201.859460][T10808] x64_sys_call+0x2bb0/0x2ff0 [ 201.864170][T10808] do_syscall_64+0xd2/0x200 [ 201.868753][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.874694][T10808] [ 201.877032][T10808] read to 0xffff888119d09300 of 4 bytes by task 10808 on cpu 1: [ 201.884965][T10808] generic_buffers_fsync_noflush+0x80/0x120 [ 201.890894][T10808] ext4_sync_file+0x1ab/0x690 [ 201.895627][T10808] vfs_fsync_range+0x10a/0x130 [ 201.900427][T10808] ext4_buffered_write_iter+0x34f/0x3c0 [ 201.906067][T10808] ext4_file_write_iter+0x383/0xf00 [ 201.911299][T10808] iter_file_splice_write+0x669/0x9e0 [ 201.916720][T10808] direct_splice_actor+0x156/0x2a0 [ 201.921874][T10808] splice_direct_to_actor+0x312/0x680 [ 201.927261][T10808] do_splice_direct+0xda/0x150 [ 201.932213][T10808] do_sendfile+0x380/0x650 [ 201.936653][T10808] __x64_sys_sendfile64+0x105/0x150 [ 201.941877][T10808] x64_sys_call+0x2bb0/0x2ff0 [ 201.946588][T10808] do_syscall_64+0xd2/0x200 [ 201.951122][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.957131][T10808] [ 201.959631][T10808] value changed: 0x00000038 -> 0x00000002 [ 201.965351][T10808] [ 201.967681][T10808] Reported by Kernel Concurrency Sanitizer on: [ 201.973836][T10808] CPU: 1 UID: 0 PID: 10808 Comm: syz.1.2541 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 201.987915][T10808] Tainted: [W]=WARN [ 201.991742][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.001806][T10808] ================================================================== [ 202.112810][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.270398][T10817] loop0: detected capacity change from 0 to 8192 [ 202.353483][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.