last executing test programs: 5.609450289s ago: executing program 4 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 5.329585362s ago: executing program 4 (id=184): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file1\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000002740)=0x401, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xa, 0xfffffff8, 0x6, 0xd603, 0x4, 0x6, 0x3, {0x0, @in6={{0xa, 0x4e23, 0xffc4, @empty, 0x2}}, 0x8, 0x8, 0x9, 0x9, 0xffff90b2}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={r3}, 0x8) write$selinux_create(r1, 0x0, 0x0) write$selinux_create(r1, &(0x7f0000000040)=@objname={'system_u:object_r:hwdata_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x9, 0x20, './file0\x00'}, 0x59) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r9, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 4.611325579s ago: executing program 4 (id=197): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x4000804, &(0x7f0000000100)={0x2, 0x4e26, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) 4.017906807s ago: executing program 0 (id=204): socket(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ftruncate(r0, 0x80000001) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x3}, 0x18) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) readahead(r4, 0x100000000, 0x9) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) 3.726925031s ago: executing program 4 (id=205): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sync() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x0, 0xae, 0x4}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10010, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x40001) 3.067592893s ago: executing program 0 (id=212): socket(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ftruncate(r0, 0x80000001) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x3}, 0x18) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) readahead(r4, 0x100000000, 0x9) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.818813063s ago: executing program 0 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = socket$kcm(0x15, 0x5, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="85200000c458b5b1044bdab0", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000089f1d8000b6dae51d7359829c3bbb5dfdd967513b3b75d0ceeacffea3f2bda8e"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r2], &(0x7f00000007c0)=[{0x3, 0x1, 0x1, 0x5}], 0x10, 0x6}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}) fremovexattr(r3, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') 2.769933637s ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xb, &(0x7f0000000a00)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5af, &(0x7f0000001780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xc3, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 2.751986159s ago: executing program 1 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x4000804, &(0x7f0000000100)={0x2, 0x4e26, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.465227102s ago: executing program 4 (id=226): truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './cgroup.cpu/cgroup.procs\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r3) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r6, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r9}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x0, 0x0, 0x100000, 0x481, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 2.464830632s ago: executing program 3 (id=227): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x0, 0xae, 0x4}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10010, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40001) 2.448038183s ago: executing program 2 (id=228): socket(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ftruncate(r0, 0x80000001) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x3}, 0x18) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) readahead(r4, 0x100000000, 0x9) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.415566166s ago: executing program 32 (id=226): truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './cgroup.cpu/cgroup.procs\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r3) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r6, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r9}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x0, 0x0, 0x100000, 0x481, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 2.407442667s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@initdev, 0x0}, &(0x7f00000008c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote}, &(0x7f0000000980)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xc0, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1000c000}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10041}, 0x40004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20810}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x174, r13, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x379}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x229}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf6a9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x70}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]]}, 0x174}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70150000060a0b0400000000000000000200000008000b40000000040900010073797a30"], 0x1598}}, 0x4) r15 = socket(0x25, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r15}}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 2.374050089s ago: executing program 2 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 2.285369936s ago: executing program 3 (id=232): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0x600, 0x0, 0x1) 1.886071229s ago: executing program 0 (id=233): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) sync() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x0, 0xae, 0x4}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10010, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x40001) 1.885278379s ago: executing program 1 (id=234): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$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") r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x5058, 0x2, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x65, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ra={0x94, 0x4}]}}}}}) eventfd(0x1) dup3(r7, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r11, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}], 0x3) 1.884482479s ago: executing program 2 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000072030400000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e0200c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6040bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad6c85d52bc0f77dd1ab2ab157c4772422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4549af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42365ac92510d7e473b181ac964c8b116fdef9a2abae1cf01ce68abff28861aac88569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28c3dbf36a52b7d85e1e3814407982a754a9360b69c21488cd43ee3e23e4f758180062c2fe93ebe6e69ced9d4d5717413b78784b23ac55a02e0417c636a748003eea9131b93a565885fab4a335241cf4ca66139ab4cc7967405bce69171ff668838dd0fb274642b0026bf5ffd7806368882f690469a52ea8b77e776eb85da1b4d00cef047414aba6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000900) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000f2ffffff00cb0000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r9, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f00000000c0)={[{@abort}, {@jqfmt_vfsv0}]}, 0xff, 0x49c, &(0x7f0000001840)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 1.884023779s ago: executing program 3 (id=236): syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xb, &(0x7f0000000a00)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5af, &(0x7f0000001780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xc3, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.358778711s ago: executing program 1 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x5e, 0x0, 0x1}, 0x28) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x40d0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.356083911s ago: executing program 2 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000001040)={0xac8, 0x0, 0x622b734f207c6993, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x23}}}}, [@NL80211_ATTR_TID_CONFIG={0x6f0, 0x11d, 0x0, 0x1, [{0x2cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x278, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a1f, 0xfff, 0x2, 0x5, 0x2, 0x0, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x5, 0x7ff, 0xfff7, 0x6, 0xd2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x1, 0x2, 0x8, 0x2800, 0x5, 0x5, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x48, 0x2, 0x12, 0x48, 0x18, 0x6c, 0xc, 0x48, 0x0, 0x1, 0x1b, 0x6, 0x6c, 0x18, 0x6, 0x8, 0x12, 0x2, 0x9, 0xc, 0xc, 0x3, 0x2, 0x12]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x6}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0x9}, {0x3}, {0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0xa}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {}, {0x1, 0x4}, {0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x2, 0x12, 0x2, 0x16, 0x18, 0x36, 0x6, 0x48, 0x18, 0x30, 0x12, 0x6, 0x1b, 0x36, 0x3, 0xc, 0x12, 0x1b, 0x6, 0x6, 0x2, 0x30, 0x48, 0x6c, 0x5, 0x24, 0x60]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x1, 0x4, 0x40, 0x7, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x2, 0x2, 0x81, 0x9, 0x57, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd4, 0x1d, 0x719, 0x9, 0x3, 0x9, 0x9, 0x8e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xb, 0x7, 0xf, 0x7, 0x0, 0x3dfa]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x5aa, 0x2325, 0x9, 0x3, 0x200, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x10, 0xfffc, 0x962b, 0xb, 0xf, 0x9, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d2, 0x3, 0x6, 0x200, 0x4, 0x3fc, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff00, 0x5, 0x5, 0x6153, 0x9, 0xc, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x2, 0x5, 0x5c0c, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x5}, {0x6, 0xa}, {0x6, 0x7}, {0x2, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x1}, {0x7}, {0x0, 0x6}, {0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd3, 0xffff, 0x1, 0xaa, 0x4, 0x31a, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x6, 0xe, 0xfff, 0x3, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x3, 0x4, 0x1b, 0x0, 0xb, 0x6, 0x2, 0xc, 0x16, 0x16, 0x36, 0x0, 0x2, 0x16, 0xc, 0x5, 0x16, 0x60, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {0x5, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x3, 0x4, 0x7f, 0x3, 0x9, 0x2, 0x8000]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc05b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x1, 0x40, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2d, 0xfffb, 0x7f, 0x5, 0x6f04, 0xa, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xfffa, 0x7, 0x7, 0x1, 0x6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x7}, {0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {}, {0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0xfffa, 0x5, 0x9, 0x81, 0x7, 0x515]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x148, 0x6, 0x66, 0x58eb, 0x8, 0xf7d5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffff, 0x3ff, 0x0, 0x9, 0x1, 0xe, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x127b, 0x6, 0x4, 0x0, 0x4, 0x7eab, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0xfff8, 0x0, 0x9, 0x7, 0xfff, 0x1]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0x2}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x2}, {0x4, 0x4}, {0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x8, 0x89, 0x3ff, 0x2, 0x1, 0xffff, 0x7]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x16, 0x1, 0x12, 0x5, 0x16, 0x6c, 0x4, 0xb, 0x6c, 0x6, 0x30, 0xb]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb8, 0x9e, 0x7, 0x9, 0x81, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0xb, 0x58, 0x4, 0x1, 0x16, 0x16, 0x3, 0x4, 0xb, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6c6e, 0x5492, 0x2f94, 0x7, 0x5, 0x52, 0x1fb8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x1, 0x4, 0x24, 0x24, 0x6c, 0x60, 0x5, 0x54, 0x48, 0x2, 0xc, 0xc, 0x6c, 0x24, 0x1, 0x48, 0xb, 0x6, 0xbbcf0d50666781e, 0x1, 0x24, 0x12, 0x6, 0x5, 0x0, 0x30, 0xc, 0x3]}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x8, 0x9, 0x8972, 0x7ff, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x1f, 0x60, 0x4, 0xc, 0x24, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x12, 0x1b, 0x6c, 0x48, 0xc, 0x3, 0x2, 0x40, 0x1, 0x9, 0x3, 0xc, 0x36, 0x9, 0x3, 0x16, 0x44cac1fe7b58a3a8, 0x16, 0xb, 0x12, 0x0, 0x24, 0x6, 0x1, 0x1, 0x30, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6cc8, 0xf40b, 0x7, 0x1c7, 0xfffc, 0x1]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x6, 0xf701, 0x0, 0xa, 0x2, 0x100, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3b8, 0x11d, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x330, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x5, 0x1000, 0x7ff, 0x8, 0x1, 0x5, 0xd]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x9, 0x1b, 0x1b, 0x60, 0x2, 0x14, 0x5, 0x1, 0x4, 0xc, 0x30, 0x9, 0x6, 0xb, 0x36, 0x36, 0x48, 0xc, 0x24, 0x60, 0x12, 0x12, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x100, 0xee, 0xfffd, 0xff, 0x5, 0x8, 0xf000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x6c, 0x2, 0x36, 0x4, 0x12, 0x30, 0x24, 0x5, 0x36, 0x6c, 0xf, 0xb, 0x6c, 0x18, 0x1, 0x9, 0x48, 0x12, 0x4, 0x3, 0x9, 0x9, 0x1, 0x30, 0x12]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc, 0xfe01, 0x7, 0x20, 0xf9f, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x9}, {0x3, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x4, 0x2}, {0x4}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x16, 0x60, 0x6, 0x5, 0x9, 0x4, 0x12, 0x4, 0x18, 0x36, 0x6, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x10, 0x0, 0x1, 0x5, 0x3ff, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x1}, {0x0, 0x3}, {0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x2}, {0x4}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x9}, {}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x8}, {}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x6}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x6, 0x7, 0x5, 0x81, 0x7, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x2, 0x48, 0x9, 0x30, 0xc, 0x16, 0x1b, 0x36, 0x12, 0xf46da86297ffcb72, 0x12, 0x48, 0x1, 0x36, 0x5, 0x16, 0x60, 0x1, 0xc, 0x0, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7eb, 0x3, 0x9, 0x0, 0x8, 0x81, 0x7]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x3}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0xa}, {0x4, 0x9}, {0x7, 0x8}, {0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x3, 0xa}, {0x7}, {0x1, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x6c, 0x5, 0x1b, 0x24, 0x18, 0x9, 0x6, 0x1, 0x30, 0x2, 0x36, 0x4, 0x18, 0x1, 0x18, 0x5, 0x2, 0x4, 0x30, 0x4, 0x24, 0x30, 0x1, 0x1, 0x5, 0x95aaf2c051209641, 0x12, 0x4, 0x6, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x3}, {0x4, 0x4}, {0x2, 0x1}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x5}, {0x5, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x5, 0x8, 0x7fff, 0x3, 0x3ee, 0x1ed9, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x21, 0x60, 0x4, 0x3, 0x18, 0x36, 0x2, 0x5, 0x4, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x7}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x2}, {}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x6}, {0x1}, {0x7, 0xa}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x9}, {0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x4, 0x1}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x48, 0x3, 0x2a, 0x3, 0x60, 0x30, 0x1b, 0xb, 0x36, 0x10, 0x36, 0x48, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffa, 0x269, 0xb13, 0x101, 0x1000, 0x9, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xafec, 0x4, 0x2, 0x200, 0x8000, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x731}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000001}]}]}]}, 0xac8}, 0x1, 0x0, 0x0, 0x200c0892}, 0x4010) cachestat(r2, &(0x7f00000000c0)={0x10, 0xff}, &(0x7f0000000100), 0x0) 1.355286741s ago: executing program 3 (id=239): r0 = socket$inet6(0xa, 0x1, 0x0) getpgid(0x0) r1 = syz_io_uring_setup(0x28d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe8}, 0x0, 0x24040092}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000000000000"], 0xfd2, 0x800) 740.30707ms ago: executing program 0 (id=240): socket(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ftruncate(r0, 0x80000001) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000200)='sys_enter\x00', r2, 0x0, 0x3}, 0x18) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) readahead(r4, 0x100000000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) 739.809811ms ago: executing program 1 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@initdev, 0x0}, &(0x7f00000008c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @remote}, &(0x7f0000000980)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xc0, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1000c000}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10041}, 0x40004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20810}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x174, r13, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x379}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x229}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf6a9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x70}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]]}, 0x174}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70150000060a0b0400000000000000000200000008000b40000000040900010073797a30"], 0x1598}}, 0x4) r15 = socket(0x25, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r15}}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 739.21957ms ago: executing program 2 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = socket$kcm(0x15, 0x5, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="85200000c458b5b1044bdab0", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000089f1d8000b6dae51d7359829c3bbb5dfdd967513b3b75d0ceeacffea3f2bda8e"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r2], &(0x7f00000007c0)=[{0x3, 0x1, 0x1, 0x5}], 0x10, 0x6}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}) fremovexattr(r3, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') 738.88884ms ago: executing program 3 (id=243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x19) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = socket$igmp(0x2, 0x3, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x4000804, &(0x7f0000000100)={0x2, 0x4e26, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, 0x0) 715.674082ms ago: executing program 1 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 900.24µs ago: executing program 0 (id=245): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0x600, 0x0, 0x1) 450.11µs ago: executing program 1 (id=246): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x0, 0xae, 0x4}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10010, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40001) 0s ago: executing program 3 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080007401000000d0500020007000000080006400000000108000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000900) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000f2ffffff00cb0000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, r5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r9, 0x0, 0x20}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f00000000c0)={[{@abort}, {@jqfmt_vfsv0}]}, 0xff, 0x49c, &(0x7f0000001840)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.138009][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 17.138025][ T29] audit: type=1400 audit(1754493969.235:57): avc: denied { transition } for pid=3177 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.143210][ T29] audit: type=1400 audit(1754493969.235:58): avc: denied { noatsecure } for pid=3177 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.146759][ T29] audit: type=1400 audit(1754493969.245:59): avc: denied { write } for pid=3177 comm="sh" path="pipe:[2549]" dev="pipefs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.150294][ T29] audit: type=1400 audit(1754493969.245:60): avc: denied { rlimitinh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.152979][ T29] audit: type=1400 audit(1754493969.245:61): avc: denied { siginh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 24.430942][ T29] audit: type=1400 audit(1754493976.535:62): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.431942][ T3288] cgroup: Unknown subsys name 'net' [ 24.453858][ T29] audit: type=1400 audit(1754493976.535:63): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.481463][ T29] audit: type=1400 audit(1754493976.565:64): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.620426][ T3288] cgroup: Unknown subsys name 'cpuset' [ 24.626980][ T3288] cgroup: Unknown subsys name 'rlimit' [ 24.797026][ T29] audit: type=1400 audit(1754493976.895:65): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.820415][ T29] audit: type=1400 audit(1754493976.895:66): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.841077][ T29] audit: type=1400 audit(1754493976.895:67): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.861716][ T29] audit: type=1400 audit(1754493976.895:68): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.882204][ T29] audit: type=1400 audit(1754493976.905:69): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.890010][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.907225][ T29] audit: type=1400 audit(1754493976.905:70): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.939369][ T29] audit: type=1400 audit(1754493977.025:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.969293][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.164523][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 26.182421][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.244548][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.277782][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.285091][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.292314][ T3298] bridge_slave_0: entered allmulticast mode [ 26.298686][ T3298] bridge_slave_0: entered promiscuous mode [ 26.313267][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.321943][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.329065][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.336347][ T3298] bridge_slave_1: entered allmulticast mode [ 26.342747][ T3298] bridge_slave_1: entered promiscuous mode [ 26.348906][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.356140][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.363532][ T3299] bridge_slave_0: entered allmulticast mode [ 26.370141][ T3299] bridge_slave_0: entered promiscuous mode [ 26.379129][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.386513][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.393722][ T3299] bridge_slave_1: entered allmulticast mode [ 26.400305][ T3299] bridge_slave_1: entered promiscuous mode [ 26.442968][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.465961][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.476354][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.505828][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.526406][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.533545][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.540704][ T3311] bridge_slave_0: entered allmulticast mode [ 26.547080][ T3311] bridge_slave_0: entered promiscuous mode [ 26.573326][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.582493][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.589572][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.596930][ T3311] bridge_slave_1: entered allmulticast mode [ 26.603717][ T3311] bridge_slave_1: entered promiscuous mode [ 26.610683][ T3298] team0: Port device team_slave_0 added [ 26.622429][ T3299] team0: Port device team_slave_0 added [ 26.628403][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.635621][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.644399][ T3307] bridge_slave_0: entered allmulticast mode [ 26.650878][ T3307] bridge_slave_0: entered promiscuous mode [ 26.667573][ T3298] team0: Port device team_slave_1 added [ 26.678877][ T3299] team0: Port device team_slave_1 added [ 26.690103][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.697482][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.705007][ T3307] bridge_slave_1: entered allmulticast mode [ 26.711617][ T3307] bridge_slave_1: entered promiscuous mode [ 26.729990][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.755158][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.769192][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.776242][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.802270][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.813757][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.820835][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.846974][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.858047][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.865068][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.891286][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.902911][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.912342][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.919394][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.945540][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.966532][ T3311] team0: Port device team_slave_0 added [ 26.973257][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.995048][ T3311] team0: Port device team_slave_1 added [ 27.018870][ T3307] team0: Port device team_slave_0 added [ 27.024836][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.032002][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.039135][ T3308] bridge_slave_0: entered allmulticast mode [ 27.045832][ T3308] bridge_slave_0: entered promiscuous mode [ 27.052557][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.059693][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.066994][ T3308] bridge_slave_1: entered allmulticast mode [ 27.073497][ T3308] bridge_slave_1: entered promiscuous mode [ 27.085221][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.092236][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.118302][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.135458][ T3307] team0: Port device team_slave_1 added [ 27.146064][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.153075][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.179619][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.213508][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.229316][ T3298] hsr_slave_0: entered promiscuous mode [ 27.235449][ T3298] hsr_slave_1: entered promiscuous mode [ 27.254244][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.265908][ T3299] hsr_slave_0: entered promiscuous mode [ 27.273042][ T3299] hsr_slave_1: entered promiscuous mode [ 27.278856][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 27.284694][ T3299] Cannot create hsr debugfs directory [ 27.300956][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.307969][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.334057][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.345492][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.352579][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.378835][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.430088][ T3308] team0: Port device team_slave_0 added [ 27.451375][ T3311] hsr_slave_0: entered promiscuous mode [ 27.457336][ T3311] hsr_slave_1: entered promiscuous mode [ 27.463273][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.468994][ T3311] Cannot create hsr debugfs directory [ 27.475222][ T3308] team0: Port device team_slave_1 added [ 27.490330][ T3307] hsr_slave_0: entered promiscuous mode [ 27.496500][ T3307] hsr_slave_1: entered promiscuous mode [ 27.502735][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 27.508622][ T3307] Cannot create hsr debugfs directory [ 27.532877][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.539921][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.566280][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.593488][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.600499][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.626569][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.703620][ T3308] hsr_slave_0: entered promiscuous mode [ 27.709948][ T3308] hsr_slave_1: entered promiscuous mode [ 27.715896][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.721648][ T3308] Cannot create hsr debugfs directory [ 27.782756][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.794202][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.808911][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.818004][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.856508][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.870957][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.882816][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.897669][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.916028][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.931942][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.941028][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.952352][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.974603][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.991712][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.001629][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.019089][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.033804][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.063697][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.081740][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.091189][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.100139][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.108497][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.127931][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.135261][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.145691][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.152774][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.186284][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.224397][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.246806][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.258931][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.269630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.276721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.288684][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.297544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.304642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.323461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.330664][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.348581][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.355691][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.365998][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.380890][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.396209][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.403427][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.417405][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.429371][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.439843][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.471635][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.478844][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.498802][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.510063][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.530931][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.554237][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.573000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.580215][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.597492][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.612296][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.619446][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.652403][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.709730][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.745288][ T3311] veth0_vlan: entered promiscuous mode [ 28.779199][ T3311] veth1_vlan: entered promiscuous mode [ 28.800079][ T3298] veth0_vlan: entered promiscuous mode [ 28.815508][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.830998][ T3299] veth0_vlan: entered promiscuous mode [ 28.842826][ T3298] veth1_vlan: entered promiscuous mode [ 28.855941][ T3299] veth1_vlan: entered promiscuous mode [ 28.862843][ T3311] veth0_macvtap: entered promiscuous mode [ 28.879165][ T3307] veth0_vlan: entered promiscuous mode [ 28.887307][ T3311] veth1_macvtap: entered promiscuous mode [ 28.903762][ T3298] veth0_macvtap: entered promiscuous mode [ 28.913050][ T3307] veth1_vlan: entered promiscuous mode [ 28.925631][ T3299] veth0_macvtap: entered promiscuous mode [ 28.936254][ T3298] veth1_macvtap: entered promiscuous mode [ 28.946521][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.965563][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.974530][ T3307] veth0_macvtap: entered promiscuous mode [ 28.986023][ T3307] veth1_macvtap: entered promiscuous mode [ 28.992596][ T3299] veth1_macvtap: entered promiscuous mode [ 29.001117][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.015885][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.027764][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.037795][ T3308] veth0_vlan: entered promiscuous mode [ 29.048202][ T555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.057548][ T555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.066978][ T3308] veth1_vlan: entered promiscuous mode [ 29.077798][ T555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.087392][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.100769][ T555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.111212][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.123144][ T555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.142610][ T555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152435][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.161663][ T555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.183326][ T555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.196350][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.216097][ T555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.238191][ T3308] veth0_macvtap: entered promiscuous mode [ 29.245919][ T3471] FAULT_INJECTION: forcing a failure. [ 29.245919][ T3471] name failslab, interval 1, probability 0, space 0, times 1 [ 29.258769][ T3471] CPU: 0 UID: 0 PID: 3471 Comm: syz.3.4 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 29.258795][ T3471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.258884][ T3471] Call Trace: [ 29.258890][ T3471] [ 29.258964][ T3471] __dump_stack+0x1d/0x30 [ 29.258992][ T3471] dump_stack_lvl+0xe8/0x140 [ 29.259013][ T3471] dump_stack+0x15/0x1b [ 29.259031][ T3471] should_fail_ex+0x265/0x280 [ 29.259088][ T3471] should_failslab+0x8c/0xb0 [ 29.259116][ T3471] kmem_cache_alloc_noprof+0x50/0x310 [ 29.259147][ T3471] ? audit_log_start+0x365/0x6c0 [ 29.259230][ T3471] audit_log_start+0x365/0x6c0 [ 29.259259][ T3471] audit_seccomp+0x48/0x100 [ 29.259306][ T3471] ? __seccomp_filter+0x68c/0x10d0 [ 29.259326][ T3471] __seccomp_filter+0x69d/0x10d0 [ 29.259345][ T3471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 29.259420][ T3471] ? vfs_write+0x75e/0x8e0 [ 29.259444][ T3471] ? __rcu_read_unlock+0x4f/0x70 [ 29.259474][ T3471] ? __fget_files+0x184/0x1c0 [ 29.259533][ T3471] __secure_computing+0x82/0x150 [ 29.259552][ T3471] syscall_trace_enter+0xcf/0x1e0 [ 29.259575][ T3471] do_syscall_64+0xac/0x200 [ 29.259599][ T3471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 29.259683][ T3471] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.259780][ T3471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.259806][ T3471] RIP: 0033:0x7fb7b081ebe9 [ 29.259820][ T3471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.259830][ T3471] RSP: 002b:00007fb7aee87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 29.259844][ T3471] RAX: ffffffffffffffda RBX: 00007fb7b0a45fa0 RCX: 00007fb7b081ebe9 [ 29.259851][ T3471] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000069 [ 29.259858][ T3471] RBP: 00007fb7aee87090 R08: 0000000000000000 R09: 0000000000000000 [ 29.259865][ T3471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.259915][ T3471] R13: 00007fb7b0a46038 R14: 00007fb7b0a45fa0 R15: 00007ffc0cdba7e8 [ 29.259925][ T3471] [ 29.263217][ T555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.447126][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 29.447141][ T29] audit: type=1400 audit(1754493981.555:113): avc: denied { create } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.455286][ T3308] veth1_macvtap: entered promiscuous mode [ 29.461977][ C0] hrtimer: interrupt took 36996 ns [ 29.472314][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.511319][ T29] audit: type=1400 audit(1754493981.615:114): avc: denied { create } for pid=3478 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 29.537058][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.564455][ T29] audit: type=1400 audit(1754493981.655:115): avc: denied { write } for pid=3478 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 29.586555][ T555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.621329][ T3486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 29.633907][ T555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634368][ T555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634706][ T555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634750][ T555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634780][ T555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634818][ T555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634930][ T555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634972][ T555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.635013][ T555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.654120][ T29] audit: type=1326 audit(1754493981.755:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ec2debe9 code=0x7ffc0000 [ 29.654154][ T29] audit: type=1326 audit(1754493981.755:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ec2debe9 code=0x7ffc0000 [ 29.660361][ T29] audit: type=1326 audit(1754493981.755:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fa9ec2debe9 code=0x7ffc0000 [ 29.660618][ T29] audit: type=1326 audit(1754493981.755:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ec2debe9 code=0x7ffc0000 [ 29.660645][ T29] audit: type=1326 audit(1754493981.765:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ec2debe9 code=0x7ffc0000 [ 29.769074][ T3479] FAULT_INJECTION: forcing a failure. [ 29.769074][ T3479] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.769107][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: +}[@ Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 29.769134][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.769208][ T3479] Call Trace: [ 29.769214][ T3479] [ 29.769222][ T3479] __dump_stack+0x1d/0x30 [ 29.769243][ T3479] dump_stack_lvl+0xe8/0x140 [ 29.769271][ T3479] dump_stack+0x15/0x1b [ 29.769285][ T3479] should_fail_ex+0x265/0x280 [ 29.769378][ T3479] should_fail+0xb/0x20 [ 29.769409][ T3479] should_fail_usercopy+0x1a/0x20 [ 29.769437][ T3479] _copy_from_user+0x1c/0xb0 [ 29.769465][ T3479] ___sys_sendmsg+0xc1/0x1d0 [ 29.769509][ T3479] __x64_sys_sendmsg+0xd4/0x160 [ 29.769602][ T3479] x64_sys_call+0x191e/0x2ff0 [ 29.769627][ T3479] do_syscall_64+0xd2/0x200 [ 29.769652][ T3479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 29.769678][ T3479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.769720][ T3479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.769743][ T3479] RIP: 0033:0x7fb7b081ebe9 [ 29.769759][ T3479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.769783][ T3479] RSP: 002b:00007fb7aee87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.769805][ T3479] RAX: ffffffffffffffda RBX: 00007fb7b0a45fa0 RCX: 00007fb7b081ebe9 [ 29.769899][ T3479] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 29.769911][ T3479] RBP: 00007fb7aee87090 R08: 0000000000000000 R09: 0000000000000000 [ 29.769952][ T3479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.769963][ T3479] R13: 00007fb7b0a46038 R14: 00007fb7b0a45fa0 R15: 00007ffc0cdba7e8 [ 29.769980][ T3479] [ 29.778626][ T3479] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 29.807015][ T29] audit: type=1400 audit(1754493981.875:121): avc: denied { write } for pid=3478 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 30.216803][ T29] audit: type=1400 audit(1754493982.305:122): avc: denied { write } for pid=3494 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.271884][ T3499] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 30.285566][ T3493] loop4: detected capacity change from 0 to 512 [ 30.306252][ T3499] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 30.348437][ T3493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.361645][ T3493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.393200][ T3493] EXT4-fs (loop4): 1 truncate cleaned up [ 30.399351][ T3493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.461445][ T3504] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 30.487924][ T3509] loop1: detected capacity change from 0 to 512 [ 30.504124][ T3511] loop0: detected capacity change from 0 to 512 [ 30.549359][ T3509] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 30.644586][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.671981][ T3509] EXT4-fs (loop1): mount failed [ 30.760562][ T3522] GUP no longer grows the stack in syz.2.15 (3522): 200000005000-200000008000 (200000004000) [ 30.770848][ T3522] CPU: 0 UID: 0 PID: 3522 Comm: syz.2.15 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 30.770933][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.770988][ T3522] Call Trace: [ 30.770997][ T3522] [ 30.771006][ T3522] __dump_stack+0x1d/0x30 [ 30.771037][ T3522] dump_stack_lvl+0xe8/0x140 [ 30.771057][ T3522] dump_stack+0x15/0x1b [ 30.771073][ T3522] fixup_user_fault+0x50e/0x560 [ 30.771163][ T3522] fault_in_user_writeable+0x5d/0xd0 [ 30.771187][ T3522] futex_lock_pi+0x597/0x780 [ 30.771215][ T3522] ? __pfx_futex_wake_mark+0x10/0x10 [ 30.771269][ T3522] do_futex+0x21f/0x380 [ 30.771316][ T3522] __se_sys_futex+0x2ed/0x360 [ 30.771343][ T3522] ? __bpf_trace_sys_enter+0x10/0x30 [ 30.771370][ T3522] __x64_sys_futex+0x78/0x90 [ 30.771395][ T3522] x64_sys_call+0x2e39/0x2ff0 [ 30.771494][ T3522] do_syscall_64+0xd2/0x200 [ 30.771537][ T3522] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.771560][ T3522] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.771583][ T3522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.771604][ T3522] RIP: 0033:0x7fa9ec2debe9 [ 30.771643][ T3522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.771738][ T3522] RSP: 002b:00007fa9ea93f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.771760][ T3522] RAX: ffffffffffffffda RBX: 00007fa9ec505fa0 RCX: 00007fa9ec2debe9 [ 30.771773][ T3522] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 30.771786][ T3522] RBP: 00007fa9ec361e19 R08: 0000000000000000 R09: 0000000000000000 [ 30.771798][ T3522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.771819][ T3522] R13: 00007fa9ec506038 R14: 00007fa9ec505fa0 R15: 00007fffe4e88978 [ 30.771834][ T3522] [ 30.977247][ T3525] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 30.986617][ T3526] tipc: Enabling of bearer rejected, failed to enable media [ 31.010490][ T3528] loop3: detected capacity change from 0 to 164 [ 31.019962][ T3530] FAULT_INJECTION: forcing a failure. [ 31.019962][ T3530] name failslab, interval 1, probability 0, space 0, times 0 [ 31.033044][ T3530] CPU: 1 UID: 0 PID: 3530 Comm: syz.1.16 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 31.033076][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.033090][ T3530] Call Trace: [ 31.033098][ T3530] [ 31.033108][ T3530] __dump_stack+0x1d/0x30 [ 31.033181][ T3530] dump_stack_lvl+0xe8/0x140 [ 31.033201][ T3530] dump_stack+0x15/0x1b [ 31.033218][ T3530] should_fail_ex+0x265/0x280 [ 31.033255][ T3530] should_failslab+0x8c/0xb0 [ 31.033282][ T3530] kmem_cache_alloc_noprof+0x50/0x310 [ 31.033317][ T3530] ? flock_lock_inode+0x135/0xf60 [ 31.033347][ T3530] flock_lock_inode+0x135/0xf60 [ 31.033453][ T3530] ? file_has_perm+0x324/0x370 [ 31.033473][ T3530] locks_lock_inode_wait+0x6f/0x2a0 [ 31.033496][ T3530] ? selinux_file_lock+0x38/0x50 [ 31.033528][ T3530] __se_sys_flock+0x2f1/0x3b0 [ 31.033624][ T3530] __x64_sys_flock+0x31/0x40 [ 31.033647][ T3530] x64_sys_call+0x1e5a/0x2ff0 [ 31.033671][ T3530] do_syscall_64+0xd2/0x200 [ 31.033696][ T3530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.033737][ T3530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 31.033758][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.033778][ T3530] RIP: 0033:0x7fd5ef50ebe9 [ 31.033795][ T3530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.033813][ T3530] RSP: 002b:00007fd5edb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 31.033833][ T3530] RAX: ffffffffffffffda RBX: 00007fd5ef735fa0 RCX: 00007fd5ef50ebe9 [ 31.033902][ T3530] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 31.033929][ T3530] RBP: 00007fd5edb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.034012][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.034025][ T3530] R13: 00007fd5ef736038 R14: 00007fd5ef735fa0 R15: 00007fffd5defcd8 [ 31.034119][ T3530] [ 31.035330][ T3528] Unable to read rock-ridge attributes [ 31.110814][ T3525] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.246941][ T3525] bond0: (slave team0): Enslaving as an active interface with an up link [ 31.322514][ T3538] FAULT_INJECTION: forcing a failure. [ 31.322514][ T3538] name failslab, interval 1, probability 0, space 0, times 0 [ 31.335416][ T3538] CPU: 1 UID: 0 PID: 3538 Comm: syz.2.20 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 31.335451][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.335472][ T3538] Call Trace: [ 31.335479][ T3538] [ 31.335549][ T3538] __dump_stack+0x1d/0x30 [ 31.335576][ T3538] dump_stack_lvl+0xe8/0x140 [ 31.335597][ T3538] dump_stack+0x15/0x1b [ 31.335616][ T3538] should_fail_ex+0x265/0x280 [ 31.335679][ T3538] should_failslab+0x8c/0xb0 [ 31.335707][ T3538] kmem_cache_alloc_noprof+0x50/0x310 [ 31.335735][ T3538] ? getname_flags+0x80/0x3b0 [ 31.335765][ T3538] getname_flags+0x80/0x3b0 [ 31.335839][ T3538] user_path_at+0x28/0x130 [ 31.335867][ T3538] do_fchownat+0xb0/0x210 [ 31.335899][ T3538] __x64_sys_fchownat+0x64/0x80 [ 31.335930][ T3538] x64_sys_call+0x255a/0x2ff0 [ 31.336005][ T3538] do_syscall_64+0xd2/0x200 [ 31.336027][ T3538] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 31.336051][ T3538] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 31.336086][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.336110][ T3538] RIP: 0033:0x7fa9ec2debe9 [ 31.336128][ T3538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.336144][ T3538] RSP: 002b:00007fa9ea93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 31.336162][ T3538] RAX: ffffffffffffffda RBX: 00007fa9ec505fa0 RCX: 00007fa9ec2debe9 [ 31.336207][ T3538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 31.336228][ T3538] RBP: 00007fa9ea93f090 R08: 0000000000001000 R09: 0000000000000000 [ 31.336242][ T3538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.336256][ T3538] R13: 00007fa9ec506038 R14: 00007fa9ec505fa0 R15: 00007fffe4e88978 [ 31.336334][ T3538] [ 31.560185][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.918416][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.028173][ T3569] netlink: 'syz.2.28': attribute type 7 has an invalid length. [ 32.036064][ T3569] netlink: 140 bytes leftover after parsing attributes in process `syz.2.28'. [ 32.121321][ T3580] FAULT_INJECTION: forcing a failure. [ 32.121321][ T3580] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.134654][ T3580] CPU: 0 UID: 0 PID: 3580 Comm: syz.1.29 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 32.134718][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.134730][ T3580] Call Trace: [ 32.134737][ T3580] [ 32.134745][ T3580] __dump_stack+0x1d/0x30 [ 32.134767][ T3580] dump_stack_lvl+0xe8/0x140 [ 32.134847][ T3580] dump_stack+0x15/0x1b [ 32.134863][ T3580] should_fail_ex+0x265/0x280 [ 32.134894][ T3580] should_fail_alloc_page+0xf2/0x100 [ 32.134963][ T3580] __alloc_frozen_pages_noprof+0xff/0x360 [ 32.135072][ T3580] alloc_pages_mpol+0xb3/0x250 [ 32.135216][ T3580] folio_alloc_mpol_noprof+0x39/0x80 [ 32.135249][ T3580] shmem_get_folio_gfp+0x3cf/0xd60 [ 32.135279][ T3580] ? simple_xattr_get+0xb9/0x120 [ 32.135349][ T3580] shmem_write_begin+0xa8/0x190 [ 32.135378][ T3580] generic_perform_write+0x181/0x490 [ 32.135407][ T3580] shmem_file_write_iter+0xc5/0xf0 [ 32.135429][ T3580] iter_file_splice_write+0x5f2/0x970 [ 32.135455][ T3580] ? __pfx_iter_file_splice_write+0x10/0x10 [ 32.135544][ T3580] do_splice+0x977/0x10b0 [ 32.135564][ T3580] ? __rcu_read_unlock+0x4f/0x70 [ 32.135584][ T3580] ? __fget_files+0x184/0x1c0 [ 32.135643][ T3580] __se_sys_splice+0x26c/0x3a0 [ 32.135667][ T3580] __x64_sys_splice+0x78/0x90 [ 32.135702][ T3580] x64_sys_call+0x28a3/0x2ff0 [ 32.135725][ T3580] do_syscall_64+0xd2/0x200 [ 32.135869][ T3580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.135895][ T3580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.135919][ T3580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.135980][ T3580] RIP: 0033:0x7fd5ef50ebe9 [ 32.135997][ T3580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.136013][ T3580] RSP: 002b:00007fd5edb6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 32.136032][ T3580] RAX: ffffffffffffffda RBX: 00007fd5ef735fa0 RCX: 00007fd5ef50ebe9 [ 32.136046][ T3580] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 32.136058][ T3580] RBP: 00007fd5edb6f090 R08: 0020000000000007 R09: 000000000000000a [ 32.136071][ T3580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.136084][ T3580] R13: 00007fd5ef736038 R14: 00007fd5ef735fa0 R15: 00007fffd5defcd8 [ 32.136125][ T3580] [ 32.519175][ T3606] loop1: detected capacity change from 0 to 512 [ 32.530986][ T3608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 32.537571][ T3608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.545239][ T3608] vhci_hcd vhci_hcd.0: Device attached [ 32.559835][ T3609] vhci_hcd: connection closed [ 32.560972][ T31] vhci_hcd: stop threads [ 32.570057][ T31] vhci_hcd: release socket [ 32.574471][ T31] vhci_hcd: disconnect device [ 32.629912][ T3606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.696211][ T3625] FAULT_INJECTION: forcing a failure. [ 32.696211][ T3625] name failslab, interval 1, probability 0, space 0, times 0 [ 32.697613][ T3622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=3622 comm=syz.3.39 [ 32.708968][ T3625] CPU: 0 UID: 0 PID: 3625 Comm: syz.4.38 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 32.709000][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.709011][ T3625] Call Trace: [ 32.709094][ T3625] [ 32.709103][ T3625] __dump_stack+0x1d/0x30 [ 32.709136][ T3625] dump_stack_lvl+0xe8/0x140 [ 32.709155][ T3625] dump_stack+0x15/0x1b [ 32.709172][ T3625] should_fail_ex+0x265/0x280 [ 32.709207][ T3625] should_failslab+0x8c/0xb0 [ 32.709266][ T3625] kmem_cache_alloc_node_noprof+0x57/0x320 [ 32.709297][ T3625] ? __alloc_skb+0x101/0x320 [ 32.709328][ T3625] __alloc_skb+0x101/0x320 [ 32.709355][ T3625] ? audit_log_start+0x365/0x6c0 [ 32.709448][ T3625] audit_log_start+0x380/0x6c0 [ 32.709481][ T3625] audit_seccomp+0x48/0x100 [ 32.709588][ T3625] ? __seccomp_filter+0x68c/0x10d0 [ 32.709611][ T3625] __seccomp_filter+0x69d/0x10d0 [ 32.709652][ T3625] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 32.709681][ T3625] ? vfs_write+0x75e/0x8e0 [ 32.709743][ T3625] ? __rcu_read_unlock+0x4f/0x70 [ 32.709765][ T3625] ? __fget_files+0x184/0x1c0 [ 32.709799][ T3625] __secure_computing+0x82/0x150 [ 32.709820][ T3625] syscall_trace_enter+0xcf/0x1e0 [ 32.709846][ T3625] do_syscall_64+0xac/0x200 [ 32.709868][ T3625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.709912][ T3625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.709984][ T3625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.710007][ T3625] RIP: 0033:0x7f79e916ebe9 [ 32.710024][ T3625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.710059][ T3625] RSP: 002b:00007f79e77cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 32.710079][ T3625] RAX: ffffffffffffffda RBX: 00007f79e9395fa0 RCX: 00007f79e916ebe9 [ 32.710091][ T3625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 32.710242][ T3625] RBP: 00007f79e77cf090 R08: 0000000000000000 R09: 0000000000000000 [ 32.710255][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.710267][ T3625] R13: 00007f79e9396038 R14: 00007f79e9395fa0 R15: 00007ffdf54556a8 [ 32.710285][ T3625] [ 32.950433][ T3641] loop4: detected capacity change from 0 to 1024 [ 32.967133][ T3641] EXT4-fs: Mount option(s) incompatible with ext3 [ 33.020041][ T3641] loop4: detected capacity change from 0 to 1024 [ 33.095400][ T3641] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.41: Failed to acquire dquot type 0 [ 33.135743][ T3641] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 33.152480][ T3641] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 33.164826][ T3641] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.41: mark_inode_dirty error [ 33.177751][ T3641] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 33.201721][ T3641] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.41: mark_inode_dirty error [ 33.230103][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 33.246331][ T3641] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 33.274316][ T3641] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 33.285834][ T3653] loop0: detected capacity change from 0 to 128 [ 33.300830][ T3641] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 33.322573][ T3653] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.345454][ T3641] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.41: mark_inode_dirty error [ 33.362876][ T3653] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.373866][ T3658] FAULT_INJECTION: forcing a failure. [ 33.373866][ T3658] name failslab, interval 1, probability 0, space 0, times 0 [ 33.386939][ T3658] CPU: 1 UID: 0 PID: 3658 Comm: syz.3.47 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 33.386970][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 33.387063][ T3658] Call Trace: [ 33.387069][ T3658] [ 33.387082][ T3658] __dump_stack+0x1d/0x30 [ 33.387177][ T3658] dump_stack_lvl+0xe8/0x140 [ 33.387198][ T3658] dump_stack+0x15/0x1b [ 33.387217][ T3658] should_fail_ex+0x265/0x280 [ 33.387262][ T3658] should_failslab+0x8c/0xb0 [ 33.387354][ T3658] kmem_cache_alloc_noprof+0x50/0x310 [ 33.387382][ T3658] ? audit_log_start+0x365/0x6c0 [ 33.387413][ T3658] audit_log_start+0x365/0x6c0 [ 33.387472][ T3658] audit_seccomp+0x48/0x100 [ 33.387498][ T3658] ? __seccomp_filter+0x68c/0x10d0 [ 33.387596][ T3658] __seccomp_filter+0x69d/0x10d0 [ 33.387618][ T3658] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 33.387643][ T3658] ? vfs_write+0x75e/0x8e0 [ 33.387662][ T3658] ? __rcu_read_unlock+0x4f/0x70 [ 33.387736][ T3658] ? __fget_files+0x184/0x1c0 [ 33.387765][ T3658] __secure_computing+0x82/0x150 [ 33.387788][ T3658] syscall_trace_enter+0xcf/0x1e0 [ 33.387871][ T3658] do_syscall_64+0xac/0x200 [ 33.387919][ T3658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.387944][ T3658] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 33.387967][ T3658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.387991][ T3658] RIP: 0033:0x7fb7b081ebe9 [ 33.388010][ T3658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.388056][ T3658] RSP: 002b:00007fb7aee87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 33.388076][ T3658] RAX: ffffffffffffffda RBX: 00007fb7b0a45fa0 RCX: 00007fb7b081ebe9 [ 33.388123][ T3658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 33.388136][ T3658] RBP: 00007fb7aee87090 R08: 0000000000000000 R09: 0000000000000000 [ 33.388148][ T3658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.388159][ T3658] R13: 00007fb7b0a46038 R14: 00007fb7b0a45fa0 R15: 00007ffc0cdba7e8 [ 33.388174][ T3658] [ 33.402052][ T3641] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 33.535598][ T3661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 33.570143][ T3641] EXT4-fs (loop4): 1 truncate cleaned up [ 33.627923][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.629140][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.656426][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.660432][ T3641] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.698499][ T3667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 33.707675][ T3667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.51'. [ 33.728209][ T3665] loop1: detected capacity change from 0 to 1024 [ 33.749341][ T3665] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.760746][ T3665] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.773069][ T3665] JBD2: no valid journal superblock found [ 33.778856][ T3665] EXT4-fs (loop1): Could not load journal inode [ 33.778926][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.845930][ T3671] IPv4: Oversized IP packet from 127.202.26.0 [ 33.967282][ T3667] tipc: Can't bind to reserved service type 0 [ 33.996165][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 34.051138][ T3684] loop1: detected capacity change from 0 to 512 [ 34.066667][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.103896][ T3687] capability: warning: `syz.0.59' uses deprecated v2 capabilities in a way that may be insecure [ 34.198695][ T3695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.225187][ T3697] ------------[ cut here ]------------ [ 34.230752][ T3697] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 34.250047][ T3697] WARNING: CPU: 1 PID: 3697 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 34.260545][ T3697] Modules linked in: [ 34.264491][ T3697] CPU: 1 UID: 0 PID: 3697 Comm: syz.3.62 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 34.276881][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.287013][ T3697] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 34.293357][ T3697] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 a2 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 34.313141][ T3697] RSP: 0018:ffffc900022cb440 EFLAGS: 00010292 [ 34.319277][ T3697] RAX: fd306e293ba49d00 RBX: ffff88811aa8ab10 RCX: 0000000000080000 [ 34.327414][ T3697] RDX: ffffc900047ab000 RSI: 00000000000063ef RDI: 00000000000063f0 [ 34.335687][ T3697] RBP: 0000000000000000 R08: 0001c900022cb27f R09: 0000000000000000 [ 34.343893][ T3697] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811aa8aad0 [ 34.352192][ T3697] R13: ffff8881050f8000 R14: ffff8881050f8000 R15: ffff88811aa8ab08 [ 34.360267][ T3697] FS: 00007fb7aee876c0(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 34.369283][ T3697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.376282][ T3697] CR2: ffffffffd88f0000 CR3: 000000011aa62000 CR4: 00000000003506f0 [ 34.384307][ T3697] Call Trace: [ 34.387609][ T3697] [ 34.390571][ T3697] reg_set_min_max+0x215/0x260 [ 34.395379][ T3697] check_cond_jmp_op+0x1013/0x16e0 [ 34.400770][ T3697] do_check+0x332a/0x7a10 [ 34.405264][ T3697] do_check_common+0xc3a/0x1290 [ 34.410367][ T3697] bpf_check+0x942b/0xd9e0 [ 34.414865][ T3697] ? __rcu_read_unlock+0x4f/0x70 [ 34.419888][ T3697] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 34.425893][ T3697] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 34.431605][ T3697] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 34.437716][ T3697] ? css_rstat_updated+0xb7/0x240 [ 34.442895][ T3697] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 34.449229][ T3697] ? _find_next_zero_bit+0x29/0xa0 [ 34.454474][ T3697] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 34.460879][ T3697] ? css_rstat_updated+0xb7/0x240 [ 34.465929][ T3697] ? __rcu_read_unlock+0x4f/0x70 [ 34.471089][ T3697] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 34.476925][ T3697] ? should_fail_ex+0x30/0x280 [ 34.481946][ T3697] ? selinux_bpf_prog_load+0x36/0xf0 [ 34.487504][ T3697] ? should_failslab+0x8c/0xb0 [ 34.492346][ T3697] ? __kmalloc_cache_noprof+0x189/0x320 [ 34.497969][ T3697] ? selinux_bpf_prog_load+0xbf/0xf0 [ 34.503336][ T3697] ? security_bpf_prog_load+0x2c/0xa0 [ 34.508896][ T3697] bpf_prog_load+0xedd/0x1070 [ 34.513814][ T3697] ? security_bpf+0x2b/0x90 [ 34.518486][ T3697] __sys_bpf+0x462/0x7b0 [ 34.522887][ T3697] __x64_sys_bpf+0x41/0x50 [ 34.523252][ T3699] loop3: detected capacity change from 0 to 1764 [ 34.527353][ T3697] x64_sys_call+0x2aea/0x2ff0 [ 34.538625][ T3697] do_syscall_64+0xd2/0x200 [ 34.539830][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 34.539847][ T29] audit: type=1400 audit(1754493986.645:396): avc: denied { getopt } for pid=3694 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.543335][ T3697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.574392][ T3701] loop0: detected capacity change from 0 to 1024 [ 34.575467][ T3697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.587748][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.593720][ T3697] RIP: 0033:0x7fb7b081ebe9 [ 34.598158][ T3697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.600024][ T3701] EXT4-fs: Mount option(s) incompatible with ext3 [ 34.618021][ T3697] RSP: 002b:00007fb7aee87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.618051][ T3697] RAX: ffffffffffffffda RBX: 00007fb7b0a45fa0 RCX: 00007fb7b081ebe9 [ 34.633060][ T3697] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 34.649473][ T3697] RBP: 00007fb7b08a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 34.658132][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.666210][ T3697] R13: 00007fb7b0a46038 R14: 00007fb7b0a45fa0 R15: 00007ffc0cdba7e8 [ 34.674429][ T3697] [ 34.674443][ T3697] ---[ end trace 0000000000000000 ]--- [ 34.683297][ T3699] RRIP_1991A [ 34.752730][ T29] audit: type=1400 audit(1754493986.855:397): avc: denied { mount } for pid=3696 comm="syz.3.62" name="/" dev="loop3" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 34.822931][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.846734][ T3701] loop0: detected capacity change from 0 to 1024 [ 34.870710][ T3697] syz.3.62 (3697) used greatest stack depth: 10328 bytes left [ 34.899045][ T3701] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 34.908557][ T3701] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 34.918269][ T3701] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.63: Failed to acquire dquot type 0 [ 34.946833][ T29] audit: type=1400 audit(1754493987.005:398): avc: denied { create } for pid=3708 comm="syz.1.67" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.967646][ T29] audit: type=1400 audit(1754493987.005:399): avc: denied { write } for pid=3708 comm="syz.1.67" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 34.989836][ T29] audit: type=1400 audit(1754493987.005:400): avc: denied { open } for pid=3708 comm="syz.1.67" path="/14/file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.013021][ T29] audit: type=1400 audit(1754493987.005:401): avc: denied { ioctl } for pid=3708 comm="syz.1.67" path="/14/file0" dev="tmpfs" ino=96 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.041020][ T29] audit: type=1400 audit(1754493987.145:402): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 35.063648][ T3701] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 35.090094][ T3712] loop4: detected capacity change from 0 to 128 [ 35.100007][ T3701] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.63: corrupted inode contents [ 35.129629][ T29] audit: type=1400 audit(1754493987.225:403): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.137814][ T3712] vfat: Unknown parameter 'ÿÿÿÿ' [ 35.178836][ T3701] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.63: mark_inode_dirty error [ 35.202761][ T3719] FAULT_INJECTION: forcing a failure. [ 35.202761][ T3719] name failslab, interval 1, probability 0, space 0, times 0 [ 35.215521][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.3.71 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 35.215693][ T3719] Tainted: [W]=WARN [ 35.215700][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.215711][ T3719] Call Trace: [ 35.215716][ T3719] [ 35.215774][ T3719] __dump_stack+0x1d/0x30 [ 35.215801][ T3719] dump_stack_lvl+0xe8/0x140 [ 35.215834][ T3719] dump_stack+0x15/0x1b [ 35.215896][ T3719] should_fail_ex+0x265/0x280 [ 35.215925][ T3719] should_failslab+0x8c/0xb0 [ 35.215976][ T3719] kmem_cache_alloc_noprof+0x50/0x310 [ 35.216049][ T3719] ? audit_log_start+0x365/0x6c0 [ 35.216082][ T3719] audit_log_start+0x365/0x6c0 [ 35.216112][ T3719] audit_seccomp+0x48/0x100 [ 35.216155][ T3719] ? __seccomp_filter+0x68c/0x10d0 [ 35.216177][ T3719] __seccomp_filter+0x69d/0x10d0 [ 35.216201][ T3719] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 35.216252][ T3719] ? vfs_write+0x75e/0x8e0 [ 35.216276][ T3719] ? __rcu_read_unlock+0x4f/0x70 [ 35.216298][ T3719] ? __fget_files+0x184/0x1c0 [ 35.216322][ T3719] __secure_computing+0x82/0x150 [ 35.216372][ T3719] syscall_trace_enter+0xcf/0x1e0 [ 35.216395][ T3719] do_syscall_64+0xac/0x200 [ 35.216419][ T3719] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.216439][ T3719] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.216525][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.216546][ T3719] RIP: 0033:0x7fb7b081ebe9 [ 35.216561][ T3719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.216578][ T3719] RSP: 002b:00007fb7aee87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 35.216626][ T3719] RAX: ffffffffffffffda RBX: 00007fb7b0a45fa0 RCX: 00007fb7b081ebe9 [ 35.216639][ T3719] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000000c0 [ 35.216651][ T3719] RBP: 00007fb7aee87090 R08: ffffffffffffffff R09: 0000000000000000 [ 35.216692][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.216706][ T3719] R13: 00007fb7b0a46038 R14: 00007fb7b0a45fa0 R15: 00007ffc0cdba7e8 [ 35.216725][ T3719] [ 35.457925][ T3701] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.63: corrupted inode contents [ 35.474716][ T3701] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.63: mark_inode_dirty error [ 35.487081][ T3701] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.63: corrupted inode contents [ 35.501086][ T3701] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 35.510121][ T3701] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.63: corrupted inode contents [ 35.523554][ T3701] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.63: mark_inode_dirty error [ 35.534979][ T3701] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 35.546149][ T3701] EXT4-fs (loop0): 1 truncate cleaned up [ 35.553461][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.586867][ T3701] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.637699][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.689546][ T3734] loop4: detected capacity change from 0 to 512 [ 35.697802][ T3736] 9pnet_fd: Insufficient options for proto=fd [ 35.764959][ T3734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.861060][ T3743] serio: Serial port ttyS3 [ 35.880029][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.917702][ T3749] FAULT_INJECTION: forcing a failure. [ 35.917702][ T3749] name failslab, interval 1, probability 0, space 0, times 0 [ 35.930579][ T3749] CPU: 1 UID: 0 PID: 3749 Comm: syz.1.82 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 35.930625][ T3749] Tainted: [W]=WARN [ 35.930632][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.930644][ T3749] Call Trace: [ 35.930762][ T3749] [ 35.930967][ T3749] __dump_stack+0x1d/0x30 [ 35.931003][ T3749] dump_stack_lvl+0xe8/0x140 [ 35.931022][ T3749] dump_stack+0x15/0x1b [ 35.931038][ T3749] should_fail_ex+0x265/0x280 [ 35.931067][ T3749] should_failslab+0x8c/0xb0 [ 35.931092][ T3749] kmem_cache_alloc_noprof+0x50/0x310 [ 35.931194][ T3749] ? getname_flags+0x80/0x3b0 [ 35.931285][ T3749] getname_flags+0x80/0x3b0 [ 35.931334][ T3749] __se_sys_mq_unlink+0x6b/0x260 [ 35.931432][ T3749] __x64_sys_mq_unlink+0x1f/0x30 [ 35.931467][ T3749] x64_sys_call+0x28ae/0x2ff0 [ 35.931523][ T3749] do_syscall_64+0xd2/0x200 [ 35.931619][ T3749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.931647][ T3749] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 35.931667][ T3749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.931686][ T3749] RIP: 0033:0x7fd5ef50ebe9 [ 35.931701][ T3749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.931733][ T3749] RSP: 002b:00007fd5edb6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 35.931750][ T3749] RAX: ffffffffffffffda RBX: 00007fd5ef735fa0 RCX: 00007fd5ef50ebe9 [ 35.931762][ T3749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 35.931773][ T3749] RBP: 00007fd5edb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.931784][ T3749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.931796][ T3749] R13: 00007fd5ef736038 R14: 00007fd5ef735fa0 R15: 00007fffd5defcd8 [ 35.931813][ T3749] [ 36.168577][ T3759] FAULT_INJECTION: forcing a failure. [ 36.168577][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 36.181485][ T3759] CPU: 1 UID: 0 PID: 3759 Comm: syz.1.86 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 36.181517][ T3759] Tainted: [W]=WARN [ 36.181523][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.181540][ T3759] Call Trace: [ 36.181545][ T3759] [ 36.181552][ T3759] __dump_stack+0x1d/0x30 [ 36.181652][ T3759] dump_stack_lvl+0xe8/0x140 [ 36.181670][ T3759] dump_stack+0x15/0x1b [ 36.181685][ T3759] should_fail_ex+0x265/0x280 [ 36.181792][ T3759] should_failslab+0x8c/0xb0 [ 36.181837][ T3759] kmem_cache_alloc_noprof+0x50/0x310 [ 36.181863][ T3759] ? audit_log_start+0x365/0x6c0 [ 36.181894][ T3759] audit_log_start+0x365/0x6c0 [ 36.182045][ T3759] audit_seccomp+0x48/0x100 [ 36.182068][ T3759] ? __seccomp_filter+0x68c/0x10d0 [ 36.182088][ T3759] __seccomp_filter+0x69d/0x10d0 [ 36.182111][ T3759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.182179][ T3759] ? vfs_write+0x75e/0x8e0 [ 36.182199][ T3759] ? __rcu_read_unlock+0x4f/0x70 [ 36.182219][ T3759] ? __fget_files+0x184/0x1c0 [ 36.182332][ T3759] __secure_computing+0x82/0x150 [ 36.182352][ T3759] syscall_trace_enter+0xcf/0x1e0 [ 36.182380][ T3759] do_syscall_64+0xac/0x200 [ 36.182437][ T3759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.182461][ T3759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.182481][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.182563][ T3759] RIP: 0033:0x7fd5ef50ebe9 [ 36.182579][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.182598][ T3759] RSP: 002b:00007fd5edb6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 36.182620][ T3759] RAX: ffffffffffffffda RBX: 00007fd5ef735fa0 RCX: 00007fd5ef50ebe9 [ 36.182632][ T3759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 36.182717][ T3759] RBP: 00007fd5edb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.182730][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.182767][ T3759] R13: 00007fd5ef736038 R14: 00007fd5ef735fa0 R15: 00007fffd5defcd8 [ 36.182784][ T3759] [ 36.215295][ T3761] loop4: detected capacity change from 0 to 1024 [ 36.420272][ T3761] EXT4-fs: Mount option(s) incompatible with ext3 [ 36.486992][ T3776] loop0: detected capacity change from 0 to 512 [ 36.496629][ T3778] blktrace: Concurrent blktraces are not allowed on loop2 [ 36.531886][ T3776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.608099][ T3790] __nla_validate_parse: 1 callbacks suppressed [ 36.608123][ T3790] netlink: 7 bytes leftover after parsing attributes in process `syz.4.92'. [ 36.656887][ T3790] netlink: 7 bytes leftover after parsing attributes in process `syz.4.92'. [ 36.711597][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.739289][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 36.818406][ T3807] loop1: detected capacity change from 0 to 1024 [ 36.839311][ T3807] EXT4-fs: Mount option(s) incompatible with ext3 [ 36.889006][ T3807] loop1: detected capacity change from 0 to 1024 [ 36.935012][ T3807] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.102: Failed to acquire dquot type 0 [ 36.960609][ T3807] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 36.989801][ T3807] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.102: corrupted inode contents [ 37.020016][ T3807] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.102: mark_inode_dirty error [ 37.033678][ T3807] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.102: corrupted inode contents [ 37.046237][ T3807] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.102: mark_inode_dirty error [ 37.059128][ T3807] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.102: corrupted inode contents [ 37.073058][ T3807] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 37.082063][ T3807] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.102: corrupted inode contents [ 37.096268][ T3807] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.102: mark_inode_dirty error [ 37.107891][ T3807] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 37.118282][ T3807] EXT4-fs (loop1): 1 truncate cleaned up [ 37.125057][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.163081][ T3807] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.272560][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.577118][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 37.654375][ T3836] loop2: detected capacity change from 0 to 512 [ 37.702818][ T3836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.809229][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.822179][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 37.831154][ T3848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.115'. [ 37.840054][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 37.865474][ T3848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.115'. [ 37.874439][ T3848] netlink: 'syz.1.115': attribute type 6 has an invalid length. [ 37.903733][ T3854] loop2: detected capacity change from 0 to 1024 [ 37.964947][ T3854] EXT4-fs: Mount option(s) incompatible with ext3 [ 38.028435][ T3854] loop2: detected capacity change from 0 to 1024 [ 38.052193][ T3854] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.117: Failed to acquire dquot type 0 [ 38.087763][ T3854] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 38.102425][ T3854] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.117: corrupted inode contents [ 38.116835][ T3854] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.117: mark_inode_dirty error [ 38.130623][ T3865] FAULT_INJECTION: forcing a failure. [ 38.130623][ T3865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.144059][ T3865] CPU: 0 UID: 0 PID: 3865 Comm: syz.1.118 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 38.144140][ T3865] Tainted: [W]=WARN [ 38.144146][ T3865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.144222][ T3865] Call Trace: [ 38.144229][ T3865] [ 38.144238][ T3865] __dump_stack+0x1d/0x30 [ 38.144339][ T3865] dump_stack_lvl+0xe8/0x140 [ 38.144357][ T3865] dump_stack+0x15/0x1b [ 38.144371][ T3865] should_fail_ex+0x265/0x280 [ 38.144403][ T3865] should_fail+0xb/0x20 [ 38.144493][ T3865] should_fail_usercopy+0x1a/0x20 [ 38.144512][ T3865] _copy_from_user+0x1c/0xb0 [ 38.144535][ T3865] load_msg+0x173/0x2f0 [ 38.144625][ T3865] do_mq_timedsend+0x23e/0x6b0 [ 38.144649][ T3865] __x64_sys_mq_timedsend+0xd1/0x160 [ 38.144668][ T3865] x64_sys_call+0x1d10/0x2ff0 [ 38.144697][ T3865] do_syscall_64+0xd2/0x200 [ 38.144723][ T3865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.144750][ T3865] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.144773][ T3865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.144816][ T3865] RIP: 0033:0x7fd5ef50ebe9 [ 38.144830][ T3865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.144846][ T3865] RSP: 002b:00007fd5edb4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 38.144865][ T3865] RAX: ffffffffffffffda RBX: 00007fd5ef736090 RCX: 00007fd5ef50ebe9 [ 38.144878][ T3865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 38.144890][ T3865] RBP: 00007fd5edb4e090 R08: 0000000000000000 R09: 0000000000000000 [ 38.144935][ T3865] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 38.144948][ T3865] R13: 00007fd5ef736128 R14: 00007fd5ef736090 R15: 00007fffd5defcd8 [ 38.144968][ T3865] [ 38.146274][ T3854] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.117: corrupted inode contents [ 38.343635][ T3854] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.117: mark_inode_dirty error [ 38.386429][ T3854] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.117: corrupted inode contents [ 38.403227][ T3869] FAULT_INJECTION: forcing a failure. [ 38.403227][ T3869] name failslab, interval 1, probability 0, space 0, times 0 [ 38.416253][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: syz.4.121 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 38.416350][ T3869] Tainted: [W]=WARN [ 38.416356][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.416402][ T3869] Call Trace: [ 38.416408][ T3869] [ 38.416416][ T3869] __dump_stack+0x1d/0x30 [ 38.416438][ T3869] dump_stack_lvl+0xe8/0x140 [ 38.416459][ T3869] dump_stack+0x15/0x1b [ 38.416478][ T3869] should_fail_ex+0x265/0x280 [ 38.416513][ T3869] should_failslab+0x8c/0xb0 [ 38.416611][ T3869] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 38.416654][ T3869] ? __d_alloc+0x3d/0x340 [ 38.416686][ T3869] __d_alloc+0x3d/0x340 [ 38.416715][ T3869] ? should_fail_ex+0x30/0x280 [ 38.416752][ T3869] d_alloc_parallel+0x53/0xc60 [ 38.416778][ T3869] ? avc_has_perm_noaudit+0x1b1/0x200 [ 38.416802][ T3869] ? pcpu_block_update+0x232/0x3b0 [ 38.416822][ T3869] ? _find_next_zero_bit+0x64/0xa0 [ 38.416910][ T3869] ? pcpu_block_refresh_hint+0x157/0x170 [ 38.416929][ T3869] ? __rcu_read_unlock+0x4f/0x70 [ 38.417000][ T3869] ? __d_lookup+0x316/0x340 [ 38.417055][ T3869] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 38.417080][ T3869] __lookup_slow+0x8c/0x250 [ 38.417114][ T3869] lookup_noperm+0xc9/0x180 [ 38.417155][ T3869] simple_start_creating+0x97/0x120 [ 38.417183][ T3869] start_creating+0xe9/0x160 [ 38.417205][ T3869] __debugfs_create_file+0x6b/0x330 [ 38.417287][ T3869] debugfs_create_file_full+0x3f/0x60 [ 38.417341][ T3869] do_blk_trace_setup+0x2c8/0x4d0 [ 38.417375][ T3869] blk_trace_setup+0xa5/0x140 [ 38.417405][ T3869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 38.417478][ T3869] blk_trace_ioctl+0xf5/0x300 [ 38.417507][ T3869] ? do_vfs_ioctl+0x866/0xe10 [ 38.417586][ T3869] ? selinux_file_ioctl+0x308/0x3a0 [ 38.417630][ T3869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 38.417647][ T3869] blkdev_ioctl+0x25b/0x440 [ 38.417664][ T3869] __se_sys_ioctl+0xcb/0x140 [ 38.417771][ T3869] __x64_sys_ioctl+0x43/0x50 [ 38.417800][ T3869] x64_sys_call+0x1816/0x2ff0 [ 38.417819][ T3869] do_syscall_64+0xd2/0x200 [ 38.417846][ T3869] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.417872][ T3869] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.417919][ T3869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.417971][ T3869] RIP: 0033:0x7f79e916ebe9 [ 38.417988][ T3869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.418005][ T3869] RSP: 002b:00007f79e77cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.418022][ T3869] RAX: ffffffffffffffda RBX: 00007f79e9395fa0 RCX: 00007f79e916ebe9 [ 38.418034][ T3869] RDX: 0000200000000280 RSI: 00000000c0481273 RDI: 0000000000000005 [ 38.418052][ T3869] RBP: 00007f79e77cf090 R08: 0000000000000000 R09: 0000000000000000 [ 38.418066][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.418079][ T3869] R13: 00007f79e9396038 R14: 00007f79e9395fa0 R15: 00007ffdf54556a8 [ 38.418105][ T3869] [ 38.528963][ T3854] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 38.688511][ T3873] loop4: detected capacity change from 0 to 512 [ 38.734192][ T3854] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.117: corrupted inode contents [ 38.734792][ T3854] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.117: mark_inode_dirty error [ 38.735628][ T3854] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 38.758609][ T3873] EXT4-fs: Ignoring removed oldalloc option [ 38.786589][ T3854] EXT4-fs (loop2): 1 truncate cleaned up [ 38.792773][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.793195][ T3873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.820590][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 38.840081][ T3873] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 38.853046][ T3878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'. [ 38.862788][ T3873] EXT4-fs (loop4): 1 truncate cleaned up [ 38.868986][ T3873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.905079][ T3854] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.983731][ T3882] loop3: detected capacity change from 0 to 512 [ 39.009944][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.034656][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.110472][ T3892] loop2: detected capacity change from 0 to 512 [ 39.320498][ T3892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.359393][ T3892] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.385641][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.424487][ T3892] Zero length message leads to an empty skb [ 39.470679][ T2991] udevd[2991]: worker [3292] terminated by signal 33 (Unknown signal 33) [ 39.487072][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.541737][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.576821][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 39.576837][ T29] audit: type=1326 audit(1754493991.675:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef50ebe9 code=0x7ffc0000 [ 39.625597][ T3921] loop2: detected capacity change from 0 to 1024 [ 39.641664][ T3921] EXT4-fs: Mount option(s) incompatible with ext3 [ 39.748185][ T29] audit: type=1326 audit(1754493991.675:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef50ebe9 code=0x7ffc0000 [ 39.771713][ T29] audit: type=1326 audit(1754493991.685:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd5ef50ebe9 code=0x7ffc0000 [ 39.794990][ T29] audit: type=1326 audit(1754493991.685:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef50ebe9 code=0x7ffc0000 [ 39.818740][ T29] audit: type=1326 audit(1754493991.685:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef50ebe9 code=0x7ffc0000 [ 39.841983][ T29] audit: type=1400 audit(1754493991.825:535): avc: denied { execmem } for pid=3922 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.891131][ T3921] loop2: detected capacity change from 0 to 1024 [ 39.899543][ T3921] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 39.908790][ T3921] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 39.918204][ T3921] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.140: Failed to acquire dquot type 0 [ 39.931605][ T3921] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 39.994424][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.140: corrupted inode contents [ 40.056729][ T3921] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.140: mark_inode_dirty error [ 40.073829][ T3930] loop0: detected capacity change from 0 to 512 [ 40.084832][ T3926] futex_wake_op: syz.1.141 tries to shift op by -1; fix this program [ 40.117599][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.140: corrupted inode contents [ 40.151677][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.166076][ T3921] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.140: mark_inode_dirty error [ 40.178942][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.140: corrupted inode contents [ 40.221816][ T29] audit: type=1400 audit(1754493992.325:536): avc: denied { create } for pid=3939 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.262558][ T3921] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 40.271864][ T29] audit: type=1400 audit(1754493992.325:537): avc: denied { connect } for pid=3939 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.305022][ T3921] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.140: corrupted inode contents [ 40.306203][ T3944] FAULT_INJECTION: forcing a failure. [ 40.306203][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.330204][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.1.147 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 40.330250][ T3944] Tainted: [W]=WARN [ 40.330256][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.330267][ T3944] Call Trace: [ 40.330274][ T3944] [ 40.330281][ T3944] __dump_stack+0x1d/0x30 [ 40.330304][ T3944] dump_stack_lvl+0xe8/0x140 [ 40.330325][ T3944] dump_stack+0x15/0x1b [ 40.330343][ T3944] should_fail_ex+0x265/0x280 [ 40.330388][ T3944] should_fail+0xb/0x20 [ 40.330416][ T3944] should_fail_usercopy+0x1a/0x20 [ 40.330438][ T3944] _copy_from_user+0x1c/0xb0 [ 40.330462][ T3944] ___sys_sendmsg+0xc1/0x1d0 [ 40.330580][ T3944] __x64_sys_sendmsg+0xd4/0x160 [ 40.330612][ T3944] x64_sys_call+0x191e/0x2ff0 [ 40.330631][ T3944] do_syscall_64+0xd2/0x200 [ 40.330655][ T3944] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.330717][ T3944] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.330740][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.330764][ T3944] RIP: 0033:0x7fd5ef50ebe9 [ 40.330779][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.330833][ T3944] RSP: 002b:00007fd5edb6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.330854][ T3944] RAX: ffffffffffffffda RBX: 00007fd5ef735fa0 RCX: 00007fd5ef50ebe9 [ 40.330865][ T3944] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 40.330947][ T3944] RBP: 00007fd5edb6f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.330960][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.330971][ T3944] R13: 00007fd5ef736038 R14: 00007fd5ef735fa0 R15: 00007fffd5defcd8 [ 40.330988][ T3944] [ 40.335203][ T3921] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.140: mark_inode_dirty error [ 40.474030][ T3949] loop1: detected capacity change from 0 to 512 [ 40.492582][ T3921] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 40.541896][ T3949] EXT4-fs (loop1): inodes count not valid: 63 vs 32 [ 40.550518][ T3949] Invalid ELF header magic: != ELF [ 40.561285][ T3921] EXT4-fs (loop2): 1 truncate cleaned up [ 40.567333][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.582911][ T3949] loop1: detected capacity change from 0 to 512 [ 40.590867][ T3949] EXT4-fs (loop1): #blocks per group too big: 466944 [ 40.591254][ T3921] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.658862][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.682881][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.017199][ T3973] SELinux: policydb string  does not match my string SE Linux [ 41.025325][ T3973] SELinux: failed to load policy [ 41.070716][ T3977] loop4: detected capacity change from 0 to 512 [ 41.077768][ T3977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.089101][ T3975] bond0: (slave team0): Releasing backup interface [ 41.096924][ T3977] EXT4-fs (loop4): 1 truncate cleaned up [ 41.104213][ T3977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.129210][ T3975] bridge_slave_0: left allmulticast mode [ 41.135404][ T3975] bridge_slave_0: left promiscuous mode [ 41.141208][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.165085][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.184758][ T3975] bridge_slave_1: left allmulticast mode [ 41.190685][ T3975] bridge_slave_1: left promiscuous mode [ 41.196899][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.208145][ T3975] bond0: (slave bond_slave_0): Releasing backup interface [ 41.218956][ T3975] bond0: (slave bond_slave_1): Releasing backup interface [ 41.235995][ T3975] team0: Failed to send options change via netlink (err -105) [ 41.260995][ T3975] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 41.270852][ T3975] team0: Port device team_slave_0 removed [ 41.279571][ T3975] team0: Failed to send options change via netlink (err -105) [ 41.288729][ T3975] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 41.301929][ T3975] team0: Port device team_slave_1 removed [ 41.309288][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.316710][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.325627][ T3987] SELinux: Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped). [ 41.326638][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.343137][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.381409][ T3979] team0: Mode changed to "random" [ 41.412442][ T3992] loop3: detected capacity change from 0 to 512 [ 41.539783][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.573099][ T3997] loop2: detected capacity change from 0 to 1024 [ 41.582988][ T3997] EXT4-fs: Mount option(s) incompatible with ext3 [ 41.602848][ T3997] loop2: detected capacity change from 0 to 1024 [ 41.669979][ T3997] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.164: Failed to acquire dquot type 0 [ 41.690232][ T3997] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.729883][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.164: corrupted inode contents [ 41.749707][ T3997] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.164: mark_inode_dirty error [ 41.763308][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.164: corrupted inode contents [ 41.780156][ T3997] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.164: mark_inode_dirty error [ 41.799875][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.164: corrupted inode contents [ 41.821993][ T3997] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 41.860619][ T3997] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.164: corrupted inode contents [ 41.891295][ T3997] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.164: mark_inode_dirty error [ 41.893282][ T4007] __nla_validate_parse: 10 callbacks suppressed [ 41.893300][ T4007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.166'. [ 41.927612][ T3997] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 41.962631][ T3997] EXT4-fs (loop2): 1 truncate cleaned up [ 41.969305][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.039165][ T3997] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.170923][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.258360][ T4013] ======================================================= [ 42.258360][ T4013] WARNING: The mand mount option has been deprecated and [ 42.258360][ T4013] and is ignored by this kernel. Remove the mand [ 42.258360][ T4013] option from the mount to silence this warning. [ 42.258360][ T4013] ======================================================= [ 42.374688][ T4015] macvlan1: entered promiscuous mode [ 42.385442][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401521][ T4015] ipvlan0: entered promiscuous mode [ 42.410340][ T4015] ipvlan0: left promiscuous mode [ 42.417528][ T4015] macvlan1: left promiscuous mode [ 42.429394][ T4013] vlan2: entered allmulticast mode [ 42.434596][ T4013] bond0: entered allmulticast mode [ 42.439825][ T4013] bond_slave_0: entered allmulticast mode [ 42.445538][ T4013] bond_slave_1: entered allmulticast mode [ 42.505329][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 42.544917][ T4023] FAULT_INJECTION: forcing a failure. [ 42.544917][ T4023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.558316][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.2.174 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 42.558409][ T4023] Tainted: [W]=WARN [ 42.558417][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.558431][ T4023] Call Trace: [ 42.558439][ T4023] [ 42.558447][ T4023] __dump_stack+0x1d/0x30 [ 42.558468][ T4023] dump_stack_lvl+0xe8/0x140 [ 42.558485][ T4023] dump_stack+0x15/0x1b [ 42.558502][ T4023] should_fail_ex+0x265/0x280 [ 42.558583][ T4023] should_fail+0xb/0x20 [ 42.558612][ T4023] should_fail_usercopy+0x1a/0x20 [ 42.558631][ T4023] _copy_from_user+0x1c/0xb0 [ 42.558657][ T4023] ___sys_sendmsg+0xc1/0x1d0 [ 42.558789][ T4023] __x64_sys_sendmsg+0xd4/0x160 [ 42.558827][ T4023] x64_sys_call+0x191e/0x2ff0 [ 42.558851][ T4023] do_syscall_64+0xd2/0x200 [ 42.558878][ T4023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.558939][ T4023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.558961][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.559057][ T4023] RIP: 0033:0x7fa9ec2debe9 [ 42.559075][ T4023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.559091][ T4023] RSP: 002b:00007fa9ea93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.559183][ T4023] RAX: ffffffffffffffda RBX: 00007fa9ec505fa0 RCX: 00007fa9ec2debe9 [ 42.559195][ T4023] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 42.559285][ T4023] RBP: 00007fa9ea93f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.559299][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.559312][ T4023] R13: 00007fa9ec506038 R14: 00007fa9ec505fa0 R15: 00007fffe4e88978 [ 42.559332][ T4023] [ 42.580986][ T4029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.177'. [ 42.833731][ T4038] loop2: detected capacity change from 0 to 1024 [ 42.841031][ T4038] EXT4-fs: Mount option(s) incompatible with ext3 [ 42.867586][ T4038] loop2: detected capacity change from 0 to 1024 [ 42.881633][ T4038] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.180: Failed to acquire dquot type 0 [ 42.894892][ T4041] FAULT_INJECTION: forcing a failure. [ 42.894892][ T4041] name failslab, interval 1, probability 0, space 0, times 0 [ 42.898974][ T4038] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.907788][ T4041] CPU: 0 UID: 0 PID: 4041 Comm: syz.4.181 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 42.907830][ T4041] Tainted: [W]=WARN [ 42.907837][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.907849][ T4041] Call Trace: [ 42.907857][ T4041] [ 42.907865][ T4041] __dump_stack+0x1d/0x30 [ 42.907890][ T4041] dump_stack_lvl+0xe8/0x140 [ 42.907910][ T4041] dump_stack+0x15/0x1b [ 42.907987][ T4041] should_fail_ex+0x265/0x280 [ 42.908043][ T4041] should_failslab+0x8c/0xb0 [ 42.908068][ T4041] __kmalloc_noprof+0xa5/0x3e0 [ 42.908170][ T4041] ? unix_bind+0x1a0/0x920 [ 42.908287][ T4041] unix_bind+0x1a0/0x920 [ 42.908321][ T4041] __sys_bind+0x1d1/0x2a0 [ 42.908353][ T4041] __x64_sys_bind+0x3f/0x50 [ 42.908380][ T4041] x64_sys_call+0x2b6e/0x2ff0 [ 42.908445][ T4041] do_syscall_64+0xd2/0x200 [ 42.908487][ T4041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.908584][ T4041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.908606][ T4041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.908628][ T4041] RIP: 0033:0x7f79e916ebe9 [ 42.908645][ T4041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.908692][ T4041] RSP: 002b:00007f79e77cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 42.908711][ T4041] RAX: ffffffffffffffda RBX: 00007f79e9395fa0 RCX: 00007f79e916ebe9 [ 42.908724][ T4041] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000004 [ 42.908737][ T4041] RBP: 00007f79e77cf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.908750][ T4041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.908763][ T4041] R13: 00007f79e9396038 R14: 00007f79e9395fa0 R15: 00007ffdf54556a8 [ 42.908833][ T4041] [ 43.109195][ T4048] loop1: detected capacity change from 0 to 512 [ 43.120548][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.126892][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.180: corrupted inode contents [ 43.156688][ T4038] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.180: mark_inode_dirty error [ 43.185902][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.180: corrupted inode contents [ 43.209743][ T4038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.180: mark_inode_dirty error [ 43.222051][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.180: corrupted inode contents [ 43.251183][ T4038] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 43.272622][ T4038] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.180: corrupted inode contents [ 43.304546][ T4038] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.180: mark_inode_dirty error [ 43.327755][ T4038] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 43.338091][ T4038] EXT4-fs (loop2): 1 truncate cleaned up [ 43.345200][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.375447][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.386053][ T4038] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.410268][ T4054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 43.448774][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.476756][ T4062] FAULT_INJECTION: forcing a failure. [ 43.476756][ T4062] name failslab, interval 1, probability 0, space 0, times 0 [ 43.489500][ T4062] CPU: 0 UID: 0 PID: 4062 Comm: syz.2.187 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 43.489538][ T4062] Tainted: [W]=WARN [ 43.489546][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.489638][ T4062] Call Trace: [ 43.489644][ T4062] [ 43.489651][ T4062] __dump_stack+0x1d/0x30 [ 43.489716][ T4062] dump_stack_lvl+0xe8/0x140 [ 43.489736][ T4062] dump_stack+0x15/0x1b [ 43.489753][ T4062] should_fail_ex+0x265/0x280 [ 43.489862][ T4062] should_failslab+0x8c/0xb0 [ 43.489884][ T4062] kmem_cache_alloc_noprof+0x50/0x310 [ 43.489910][ T4062] ? audit_log_start+0x365/0x6c0 [ 43.489986][ T4062] audit_log_start+0x365/0x6c0 [ 43.490017][ T4062] audit_seccomp+0x48/0x100 [ 43.490045][ T4062] ? __seccomp_filter+0x68c/0x10d0 [ 43.490069][ T4062] __seccomp_filter+0x69d/0x10d0 [ 43.490092][ T4062] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.490254][ T4062] ? vfs_write+0x75e/0x8e0 [ 43.490279][ T4062] __secure_computing+0x82/0x150 [ 43.490363][ T4062] syscall_trace_enter+0xcf/0x1e0 [ 43.490390][ T4062] do_syscall_64+0xac/0x200 [ 43.490412][ T4062] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.490494][ T4062] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.490513][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.490544][ T4062] RIP: 0033:0x7fa9ec2debe9 [ 43.490614][ T4062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.490630][ T4062] RSP: 002b:00007fa9ea93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 43.490647][ T4062] RAX: ffffffffffffffda RBX: 00007fa9ec505fa0 RCX: 00007fa9ec2debe9 [ 43.490658][ T4062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.490669][ T4062] RBP: 00007fa9ea93f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.490718][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.490730][ T4062] R13: 00007fa9ec506038 R14: 00007fa9ec505fa0 R15: 00007fffe4e88978 [ 43.490800][ T4062] [ 43.698102][ T4052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.712237][ T4066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.189'. [ 43.773417][ T4072] SELinux: Context system_u:object_r:lirc_device_t:s0 is not valid (left unmapped). [ 43.785946][ T4075] loop1: detected capacity change from 0 to 512 [ 43.831314][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.844073][ T4075] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.857175][ T4075] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.883099][ T4083] loop0: detected capacity change from 0 to 512 [ 44.031515][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.151376][ T4092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 44.163682][ T4087] loop2: detected capacity change from 0 to 1024 [ 44.185632][ T4087] EXT4-fs: Mount option(s) incompatible with ext3 [ 44.219501][ T4087] loop2: detected capacity change from 0 to 1024 [ 44.256644][ T4094] loop1: detected capacity change from 0 to 764 [ 44.280019][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.308972][ T4087] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.198: Failed to acquire dquot type 0 [ 44.335124][ T4087] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.448925][ T4087] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.198: corrupted inode contents [ 44.496529][ T4102] netlink: 5448 bytes leftover after parsing attributes in process `syz.1.202'. [ 44.509767][ T4087] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.198: mark_inode_dirty error [ 44.540325][ T4087] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.198: corrupted inode contents [ 44.560310][ T4087] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.198: mark_inode_dirty error [ 44.589950][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 44.589963][ T29] audit: type=1400 audit(1754493996.695:734): avc: denied { read } for pid=4096 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.616477][ T4087] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.198: corrupted inode contents [ 44.640989][ T4087] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 44.656589][ T4107] loop0: detected capacity change from 0 to 512 [ 44.658949][ T29] audit: type=1400 audit(1754493996.755:735): avc: denied { read write } for pid=4106 comm="syz.0.204" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.687687][ T29] audit: type=1400 audit(1754493996.755:736): avc: denied { open } for pid=4106 comm="syz.0.204" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.702139][ T4087] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.198: corrupted inode contents [ 44.711963][ T29] audit: type=1400 audit(1754493996.755:737): avc: denied { ioctl } for pid=4106 comm="syz.0.204" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.789879][ T29] audit: type=1400 audit(1754493996.775:738): avc: denied { mounton } for pid=4106 comm="syz.0.204" path="/38/file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.823062][ T4087] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.198: mark_inode_dirty error [ 44.834783][ T4087] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 44.860142][ T4087] EXT4-fs (loop2): 1 truncate cleaned up [ 44.862516][ T4113] loop4: detected capacity change from 0 to 512 [ 44.866303][ T4087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.885500][ T29] audit: type=1400 audit(1754493996.985:739): avc: denied { prog_load } for pid=4110 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.890964][ T4107] EXT4-fs (loop0): too many log groups per flexible block group [ 44.904512][ T29] audit: type=1400 audit(1754493996.985:740): avc: denied { bpf } for pid=4110 comm="syz.3.203" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.912250][ T4107] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 44.932789][ T29] audit: type=1400 audit(1754493996.985:741): avc: denied { perfmon } for pid=4110 comm="syz.3.203" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.961640][ T29] audit: type=1400 audit(1754493996.985:742): avc: denied { prog_run } for pid=4110 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.980999][ T29] audit: type=1400 audit(1754493997.045:743): avc: denied { mount } for pid=4086 comm="syz.2.198" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.015800][ T4087] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.029848][ T4107] EXT4-fs (loop0): mount failed [ 45.050209][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.077986][ T4114] loop3: detected capacity change from 0 to 256 [ 45.086364][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.175432][ T4117] netlink: 'syz.2.206': attribute type 9 has an invalid length. [ 45.183322][ T4117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 45.223159][ T4120] loop1: detected capacity change from 0 to 512 [ 45.244131][ T4117] macvlan2: entered promiscuous mode [ 45.249477][ T4117] team0: entered promiscuous mode [ 45.254759][ T4117] macvlan2: entered allmulticast mode [ 45.260249][ T4117] team0: entered allmulticast mode [ 45.272390][ T4117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.354708][ T4114] FAT-fs (loop3): Directory bread(block 64) failed [ 45.374760][ T4128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.208'. [ 45.389247][ T4114] FAT-fs (loop3): Directory bread(block 65) failed [ 45.400808][ T4114] FAT-fs (loop3): Directory bread(block 66) failed [ 45.416041][ T4114] FAT-fs (loop3): Directory bread(block 67) failed [ 45.429898][ T4114] FAT-fs (loop3): Directory bread(block 68) failed [ 45.444441][ T4114] FAT-fs (loop3): Directory bread(block 69) failed [ 45.451227][ T4114] FAT-fs (loop3): Directory bread(block 70) failed [ 45.479947][ T4114] FAT-fs (loop3): Directory bread(block 71) failed [ 45.499324][ T4114] FAT-fs (loop3): Directory bread(block 72) failed [ 45.499358][ T4114] FAT-fs (loop3): Directory bread(block 73) failed [ 46.058632][ T4163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.224'. [ 46.069138][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084107][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.177971][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.266458][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.303247][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.394568][ T155] bridge_slave_1: left allmulticast mode [ 46.400323][ T155] bridge_slave_1: left promiscuous mode [ 46.406016][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.440088][ T155] bridge_slave_0: left allmulticast mode [ 46.445749][ T155] bridge_slave_0: left promiscuous mode [ 46.451399][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.562355][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.573306][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.583155][ T155] bond0 (unregistering): Released all slaves [ 46.624114][ T155] hsr_slave_0: left promiscuous mode [ 46.630664][ T155] hsr_slave_1: left promiscuous mode [ 46.636445][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.643987][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.653341][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.661057][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.712761][ T155] veth1_macvtap: left promiscuous mode [ 46.722772][ T155] veth0_macvtap: left promiscuous mode [ 46.754382][ T155] veth1_vlan: left promiscuous mode [ 46.760728][ T155] veth0_vlan: left promiscuous mode [ 46.924394][ T155] team0 (unregistering): Port device team_slave_1 removed [ 46.946294][ T155] team0 (unregistering): Port device team_slave_0 removed [ 47.246441][ T4200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.239'. [ 49.269746][ T4220] ================================================================== [ 49.278053][ T4220] BUG: KCSAN: data-race in touch_atime / touch_atime [ 49.284746][ T4220] [ 49.287054][ T4220] write to 0xffff88811abeb828 of 4 bytes by task 4222 on cpu 1: [ 49.294674][ T4220] touch_atime+0x1e8/0x340 [ 49.299102][ T4220] shmem_file_splice_read+0x5b1/0x600 [ 49.304550][ T4220] splice_direct_to_actor+0x26f/0x680 [ 49.309919][ T4220] do_splice_direct+0xda/0x150 [ 49.314677][ T4220] do_sendfile+0x380/0x650 [ 49.319096][ T4220] __x64_sys_sendfile64+0x105/0x150 [ 49.324296][ T4220] x64_sys_call+0x2bb0/0x2ff0 [ 49.329075][ T4220] do_syscall_64+0xd2/0x200 [ 49.333582][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.339472][ T4220] [ 49.341787][ T4220] read to 0xffff88811abeb828 of 4 bytes by task 4220 on cpu 0: [ 49.349499][ T4220] touch_atime+0x194/0x340 [ 49.353949][ T4220] shmem_file_splice_read+0x5b1/0x600 [ 49.359334][ T4220] splice_direct_to_actor+0x26f/0x680 [ 49.364879][ T4220] do_splice_direct+0xda/0x150 [ 49.369731][ T4220] do_sendfile+0x380/0x650 [ 49.374147][ T4220] __x64_sys_sendfile64+0x105/0x150 [ 49.379358][ T4220] x64_sys_call+0x2bb0/0x2ff0 [ 49.384069][ T4220] do_syscall_64+0xd2/0x200 [ 49.388742][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.394711][ T4220] [ 49.397019][ T4220] value changed: 0x15cec720 -> 0x16675da0 [ 49.403135][ T4220] [ 49.405456][ T4220] Reported by Kernel Concurrency Sanitizer on: [ 49.411687][ T4220] CPU: 0 UID: 0 PID: 4220 Comm: syz.1.246 Tainted: G W 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(voluntary) [ 49.425941][ T4220] Tainted: [W]=WARN [ 49.429744][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.439789][ T4220] ================================================================== [ 49.674282][ T3438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.742380][ T3438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.793479][ T3438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.853888][ T3438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.902473][ T3438] bridge_slave_1: left allmulticast mode [ 49.908428][ T3438] bridge_slave_1: left promiscuous mode [ 49.914221][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.922174][ T3438] bridge_slave_0: left allmulticast mode [ 49.928195][ T3438] bridge_slave_0: left promiscuous mode [ 49.933999][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.002248][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.012364][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.022006][ T3438] bond0 (unregistering): Released all slaves [ 50.063238][ T3438] hsr_slave_0: left promiscuous mode [ 50.068902][ T3438] hsr_slave_1: left promiscuous mode [ 50.074707][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.082563][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.090910][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.098370][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.108015][ T3438] veth1_macvtap: left promiscuous mode [ 50.113674][ T3438] veth0_macvtap: left promiscuous mode [ 50.119211][ T3438] veth1_vlan: left promiscuous mode [ 50.124508][ T3438] veth0_vlan: left promiscuous mode [ 50.177438][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 50.187383][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 50.485772][ T3438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.552363][ T3438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.612542][ T3438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.663057][ T3438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.743491][ T3438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.792626][ T3438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.842527][ T3438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.892442][ T3438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.952480][ T3438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.002509][ T3438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.052807][ T3438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.122365][ T3438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.192258][ T3438] bridge_slave_1: left allmulticast mode [ 51.198034][ T3438] bridge_slave_1: left promiscuous mode [ 51.203808][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.211496][ T3438] bridge_slave_0: left allmulticast mode [ 51.217381][ T3438] bridge_slave_0: left promiscuous mode [ 51.223066][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.231707][ T3438] bridge_slave_1: left allmulticast mode [ 51.237353][ T3438] bridge_slave_1: left promiscuous mode [ 51.242978][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.250765][ T3438] bridge_slave_0: left allmulticast mode [ 51.256510][ T3438] bridge_slave_0: left promiscuous mode [ 51.262238][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.371766][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.381490][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.390939][ T3438] bond0 (unregistering): Released all slaves [ 51.442187][ T3438] bond0 (unregistering): Released all slaves [ 51.532563][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.541340][ T3438] bond_slave_0: left allmulticast mode [ 51.547832][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.556742][ T3438] bond_slave_1: left allmulticast mode [ 51.562902][ T3438] bond0 (unregistering): Released all slaves [ 51.626976][ T3438] hsr_slave_0: left promiscuous mode [ 51.632695][ T3438] hsr_slave_1: left promiscuous mode [ 51.638400][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.645828][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.653431][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.660833][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.670255][ T3438] hsr_slave_0: left promiscuous mode [ 51.675920][ T3438] hsr_slave_1: left promiscuous mode [ 51.683022][ T3438] hsr_slave_0: left promiscuous mode [ 51.688725][ T3438] hsr_slave_1: left promiscuous mode [ 51.694299][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.701697][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.709166][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.716675][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.730480][ T3438] veth1_macvtap: left promiscuous mode [ 51.735941][ T3438] veth0_macvtap: left promiscuous mode [ 51.741553][ T3438] veth1_vlan: left promiscuous mode [ 51.746945][ T3438] veth0_vlan: left promiscuous mode [ 51.752771][ T3438] team0: left allmulticast mode [ 51.757739][ T3438] team0: left promiscuous mode [ 51.762747][ T3438] veth1_macvtap: left promiscuous mode [ 51.768198][ T3438] veth0_macvtap: left promiscuous mode [ 51.773966][ T3438] veth1_vlan: left promiscuous mode [ 51.779224][ T3438] veth0_vlan: left promiscuous mode [ 51.785191][ T3438] veth1_macvtap: left promiscuous mode [ 51.790707][ T3438] veth0_macvtap: left promiscuous mode [ 51.796239][ T3438] veth1_vlan: left promiscuous mode [ 51.801702][ T3438] veth0_vlan: left promiscuous mode [ 51.906167][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 51.915798][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 51.998762][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 52.008338][ T3438] team0 (unregistering): Port device team_slave_0 removed