last executing test programs: 1.603793278s ago: executing program 2 (id=6753): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1c, 0x6, 0x6, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffeae) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x5f, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x707, 0x40, 0x6, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000006c0)={'syztnl2\x00', r3, 0x7, 0x20, 0x7, 0x401, {{0x2b, 0x4, 0x0, 0xf, 0xac, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0x1f, 0x8b, [@loopback, @remote, @local, @loopback, @private=0xa014101, @empty, @rand_addr=0x64010100]}, @cipso={0x86, 0x40, 0x0, [{0x7, 0xf, "8900542903a1db5e223c21ba7e"}, {0x6, 0x11, "5d650456a4758bd5ed335bad769602"}, {0x5, 0x3, "e1"}, {0x2, 0x9, "b871afaccf3c84"}, {0x7, 0x3, "f2"}, {0x2, 0x5, '{i1'}, {0x7, 0x2}, {0x2, 0x4, 'bn'}]}, @lsrr={0x83, 0xf, 0x25, [@loopback, @rand_addr=0x64010102, @empty]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0xc, [{@local, 0x546}, {@multicast2, 0x3}]}, @generic={0x7, 0x11, "3af509694e0671aaf0ce4e90f47414"}, @timestamp_prespec={0x44, 0x4, 0xcd, 0x3, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x20, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x3}}}, 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.602668188s ago: executing program 1 (id=6754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0x6, 0x6, 0x7, 0xfffffffffffffffc, 0x8}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x200000003, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)="f1bb811c1e77073a8ff6fe1eedffacdebba4a4bc41afd16b2317cf891542281f6c37a60bf60e", 0x26}, {&(0x7f0000000480)="89643742f4b824dda89b11f119eff7ae762e011cf99cf8378efc4c3e0aed750000000000000000a322c95825a0baa4943f3cc20a4d7a430aad2d0090e4940f717c8144b32ba42ee73a4abb7c7113bb0172392c7f367000991b24797569a8ca7be72ac66f9cf1e6979d09cab48aef00000000f72db25982a800d7fa7a33", 0x7d}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='initcall_level\x00', r7, 0x0, 0x5}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x2048001}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000014c0)='fscache_volume\x00', r7, 0x0, 0xffffffffffffff40}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cDXYitp0c4kjW2Di1JB3BXUuo8hmYSQSSZkJm0TSknxDxBEdOHKlRvBP0CQbtwXoaB7EVGKbXXhQh25M3dsTGeSwU5m7OTzgdN77o/c7/d0Orf33HvICeDUuhgRdyJiJCKuRkQ+257LSuw3S3rc61ePltKSRL1+7y9JJNm21rmSbHk++7HxiPh2cmDHAdXdvfXFcrm0na0Xaxtbxeru3rW1jcXV0mppc25u9ub8rfkb8zM9a+vtr//xR9//2Tdu/+rLD36/8Ocrj9O0JrN9B9vRS82mjzX+LlpGI2L7JIINwEjWnrEujz97wvkAAHC09B7/0xHxhcb9fz5GGndzAAAAwDCpJxH/SCLqAAAAwNDKNcbAJrlCNhZgMnK5QqE5hvezcS5XrlRrX1qp7GwuN8fKTsVYbmWtXJrJxgpPxViSrs826m/Wrx9an4uIDyPih/mJZOVslApLlfLyoB9+AAAAwClx/lD//2/5Zv8fAAAAGDJTg04AAAAAOHH6/wAAADD8Ovb/E5MBAAAAwBD45t27aam35r9evr+7s165f225VF0vbOwsFZYq21uF1UpltVwqLFU2jjtfuVLZ+kps7jws1krVWrG6u7ewUdnZrC005vVeKHU7TzQAAADQOx9eePq7JCL2vzrRKKkz2T59dRhuueMPmThQT04yF6C/RgadADAw/9sAX8OCYRgc18d/Wa/3KRNgUI7r2I932vGs97kAAAAnY/pznd//A8Oti/f/bdzpeR5A/3n/D6eXN/lwehnjD7zb+3+DhAAA4H0w2ShJrpC9C5yMXK5QiPigMS3AWLKyVi7NRMSnIuK3+bGz6frsoJMGAAAAAAAAAAAAAAAAAAAAAAAAgPdMvZ5E/bAzb28CAAAA3l8RuT8l2fxf0/nLk4efD5xJ/p5vLCPiwU/u/fjhYq22PZtuf5l/M2tYtv163x9fAAAAAKlf//dqq5/e6scDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA/Vk+Zy6fWrR0v9DPziaxExFZHGbZXmntEYbyzHYywizv01idEDP5fmO9KD+PtPIuKjdvGTNK2YyrI4HD8XERMDjn++B/HhNHuaXn/utPv+5eJiY9n++zealXf14mKn61/uP9e/kQ7Xvw+6jPHx818UO8Z/EvHxaPvrTyt+0iH+pS7jf/c7e3ud9tV/GjEd7eMfjFWsbWwVq7t719Y2FldLq6XNubnZm/O35m/MzxRX1sql7M+2MX7w+V/+66j2n+sQf+qY9l/usv3/fP7w1Wfe2vr4eiv+lUvtP/+Pjoif/pv4Yvb/QLp/ulXfb9YP+uTnv/nkqPYvd2j/cZ//lS7bf/Vb3/tDl4cCAH1Q3d1bXyyXS9tHVp7F8cec3kp6L5RWbvcvaOvRQy/PfCE934kmPxH/F5+XSjeVAV+YAACAnntz0z/oTAAAAAAAAAAAAAAAAAAAAOD06sevExt0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvHvAAAA//+P68mm") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000700)) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0xf, 0x1fb, &(0x7f0000000a80)="b4bb36545fc71c92e5be2f7377eb6a10fbba3a75756bf7e3e563e3b94764cda33ff109d213ee390d4256d5e1568228dcadd73dc62742c7801d07a0ff6b432bca5ec6cc206d4847737d0e38a0fee0c7751b1dd8e885daa349e5650af15942414f81a0f79f92dba41a75290232ac0eed490296047cb02cd4fa7f30989cf43acb1addcd6a9288015dd8b8922a05e7d21ce4bbfdc0b30d5b16b6eff6a6ce492f9d6caebf81394bfae124e5e4416bea62b1a0102edce2fb4a45a413ef78ac3bc27e85feb7f29c4aef14075d30a15c53e26f86d34e709c9388472a5ec92ad07897b28405cdff30449ccecabd76ac43def85c47fd4e1f57f734cb75db780651a44039457192227d7cc3216d509d83d9e98a28ed39976086e7a7a43533ce12ff41fc9f8bfdf6252cf690d4bfaaa74a47336bf3afd453ce7c97d1d0e3f3d8b0af76c3b5ef57e0e87506ea66dc9bba08d64c10d024757a9b061b78a0d341e4accdff92be4f9323cfa6f461a9206c8014c7575e6bb7c9282353ec88441a83f356d71338be9c0b5c9278db855e66cb162859d4e803b673f6d409eddcf41b14ea40b6c29bf1f7ef4ac04ae055aad49f3e9c9a5fd4ce8a1bfa05d0e269d5f281b78291ee8064ac2e2338859f14656a78debb3184b7082a07dd2ec9caca2a5d7cf34ae5ea9b0a423094c1c9000a9966af7c9bb731be64fdec8a45e93fd99a97ecf0be7ec2f6ee642586ee978007ea8d75782ab9d05d84e5396034c140bae273d6d73388a0efd3d6f524ceba323a263d8b85802def77f08de9272102bef96c78ae1c7a688159c110237fff86e02fa581ef4fcfe3d9f5b45bf8ac9c3b029c9e49447aad5e2b93a284e0accffbcd370a8692715723b96aa3b90ace984412eb448e844f395b2b2501aaa9d3fb36422595877159d4ac5a3b156b744923babaa3057b6d6b16949c00b2617d3f1741513450722a4c8a3f9689110d15c8334524839e9039aa2ff6dda1234f2b129998ac86844b1b84ea2fa0dbc96643339fe9b2730ee49a117ab06b50d2e6f87270b6ca28a3e2efa6f831b8077fc640f147ce2416c0895c554be5e7cf2a13bd6dc491e320fe807c2e5ba8e07396fe920269eae1c6abfe7dee24657c4fe2839d2cfd7fb154c240a37733876b1075a62465c161437a658407b555f9c4a2fbf65be957659f8dc32aee5b5f5960dda1bf5f43d6f6bbaba480faf6a07423133b25ee1a2919fe230aeee7c75497e85481dc1b4032b6a2726c3e54a470982059f5a1af30fb8ed5e6abef35ce966dc71fd4d5fe774f93071208896022094a700f2a6c4c5cbe29a4217fa136754262a56d2428db194632baf2079256d6198ad254d8a530e46f27a7cea40a104e7187554859ec784e668621f1a1073e725cfe685e77d5c2d5ab7a6e10dadafbc36a4f996e0746dccd7c5d93bf43b7cc2f5cbbcdaaff6f"}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000001400)=[{{&(0x7f00000007c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000e80)=""/141, 0x8d}, 0xf5}, {{&(0x7f0000000f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/96, 0x60}, {&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/39, 0x27}, {&(0x7f00000010c0)=""/21, 0x15}, {&(0x7f0000001100)=""/131, 0x83}, {&(0x7f00000011c0)=""/168, 0xa8}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/181, 0xb5}], 0x8, &(0x7f00000013c0)=""/62, 0x3e}, 0x2}], 0x2, 0x102, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 1.549937483s ago: executing program 2 (id=6755): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn2') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x11, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x8, 0xc, 0x0, 0x14}, 0xc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x2000000) unshare(0x72040200) unshare(0x2c060000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) 1.430988364s ago: executing program 1 (id=6757): io_uring_setup(0x1229, &(0x7f0000000180)={0x0, 0x10000002, 0x800}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgget$private(0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000004400), 0x0, 0x24040810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r7 = openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1a1a40, 0x80, 0x23}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0193aae89a20000000001fffffff04001180080002a895bd5fd7afb6e1d18ae70f54c119df62a82247d337757edf3d8b0d0190e318b016888fd6ba04b85ad228675cc77cbc4e5548772851d4189f8e3e09df01b8f0762bfb3b698c5cb01d239787b0f4ed10fa1e372c5645584433752520722900dbb28a48b4aa6b90c98028379e438b6c07e19fed1f69ba4278e645575c585b2125d4f2893b0a203c5e831fb5403cd4811f84b0bc261f123a6de1b81345a84872e8f48e15fb4d7a2b814b207a8b9291"], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0xb, 0x2, {{0x1b, 0x4, 0x3, 0xd, 0x6c, 0x64, 0x0, 0x6, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x55, 0xffffffffffffffff, [{0x0, 0xc, "f3407d2c382dfec6a153"}, {0x0, 0xf, "a7d04d108c8a5c41a325cd0d7c"}, {0x0, 0x9, "d74f30303ae8b1"}, {0x7, 0xc, "7e79a8032a11ebda1421"}, {0x5, 0xd, "ef3fcab337eb11680d9e0d"}, {0x0, 0xc, "dbd7c81aa25f33aa71d6"}, {0x6, 0x4, '^J'}, {0x7, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x9, 0x8, {{0x1c, 0x4, 0x0, 0x34, 0x70, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x27, 0x64, [@remote, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @loopback, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x18, [@private=0xa010100, @empty, @loopback]}, @generic={0x83, 0x8, "c29a89cddd4b"}, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0xa, [{@multicast2, 0x8001}, {@local, 0x80000001}]}, @generic={0x94, 0x9, "caa81e7f2fdf38"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="00022cbd7000fddbdf25120000001c000180080003000200000008000100", @ANYRES32=r10, @ANYBLOB="ee7c0500", @ANYRES32=r11, @ANYBLOB="3800018008000100", @ANYRES32=r12, @ANYBLOB="080003000200000008000300000000001400020077673100000000000000000000000000080003000100000008000900090000000800090003000000080007000000000008000900010000000800060004000000"], 0x90}, 0x1, 0x0, 0x0, 0x24044090}, 0x4000010) listen(r6, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) 1.323007635s ago: executing program 1 (id=6761): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x108, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff482}, {0x6, 0x11, 0xe8d}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x80850) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0xe}]}, {0x0, [0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000040)=""/43, 0x2a, 0x2b, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x44, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/schedstat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x2, 0x4, 0xa, 0xa, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x65, &(0x7f0000000900)=""/101, 0x40f00, 0x5a, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x0, 0x800}, 0x10, 0x1059e, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[r4, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r4, r0, r0, r0, r5], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r6, 0x400, 0x2) 1.125283354s ago: executing program 1 (id=6769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) recvmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000440)=""/40, 0x28}], 0x8}, 0x4}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/181, 0xb5}], 0x1, &(0x7f0000000e40)=""/106, 0x6a}, 0x1}], 0x2, 0x10020, &(0x7f0000000f40)={0x0, 0x3938700}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @func={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) r6 = memfd_secret(0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/21, 0x15, 0x0, 0x1000003, 0x0, 0x0, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x64401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000004c0)=""/66, &(0x7f00000003c0)=0x42) 861.347349ms ago: executing program 3 (id=6779): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) unshare(0x400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000553abbb4ca24a3f43a"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000048fbffff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) modify_ldt$read_default(0x2, 0x0, 0x5e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x64a}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 770.988297ms ago: executing program 3 (id=6780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0x6, 0x6, 0x7, 0xfffffffffffffffc, 0x8}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x200000003, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)="f1bb811c1e77073a8ff6fe1eedffacdebba4a4bc41afd16b2317cf891542281f6c37a60bf60e", 0x26}, {&(0x7f0000000480)="89643742f4b824dda89b11f119eff7ae762e011cf99cf8378efc4c3e0aed750000000000000000a322c95825a0baa4943f3cc20a4d7a430aad2d0090e4940f717c8144b32ba42ee73a4abb7c7113bb0172392c7f367000991b24797569a8ca7be72ac66f9cf1e6979d09cab48aef00000000f72db25982a800d7fa7a33", 0x7d}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='initcall_level\x00', r7, 0x0, 0x5}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x2048001}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000014c0)='fscache_volume\x00', r7, 0x0, 0xffffffffffffff40}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000700)) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0xf, 0x1fb, &(0x7f0000000a80)="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"}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000001400)=[{{&(0x7f00000007c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000e80)=""/141, 0x8d}, 0xf5}, {{&(0x7f0000000f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/96, 0x60}, {&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/39, 0x27}, {&(0x7f00000010c0)=""/21, 0x15}, {&(0x7f0000001100)=""/131, 0x83}, {&(0x7f00000011c0)=""/168, 0xa8}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/181, 0xb5}], 0x8, &(0x7f00000013c0)=""/62, 0x3e}, 0x2}], 0x2, 0x102, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 762.844138ms ago: executing program 3 (id=6781): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xc8, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7}, {0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x80850) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0xe}]}, {0x0, [0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000040)=""/43, 0x2a, 0x2b, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x44, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x202, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/schedstat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x2, 0x4, 0xa, 0xa, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x65, &(0x7f0000000900)=""/101, 0x40f00, 0x5a, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x0, 0x800}, 0x10, 0x1059e, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[r4, r5, r4, r0, r6, r4, r0, r0, r0, r7], 0x0, 0x10, 0x3, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r9, 0x400, 0x2) 599.118423ms ago: executing program 4 (id=6782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, 0x0, 0x18) 546.372858ms ago: executing program 2 (id=6784): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000e5010000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x282340, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x3f, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) syz_io_uring_setup(0xcdc, &(0x7f00000003c0)={0x0, 0x50000, 0x612, 0x0, 0x4000}, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0xe0000006, 0x0) writev(r0, 0x0, 0x0) 545.652558ms ago: executing program 4 (id=6785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x4f62, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 528.4658ms ago: executing program 3 (id=6786): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@random="0d0f3f18927b", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x300}}}}}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a4", 0x70}, {&(0x7f0000001540)="b3da23cbcecb0b0107a496fbe0bad3f402cb8be3b5ffdb88f6bbf4b6230ab98c8eb277df97b97bc85816f9158545dc085e3fe407d9e477a973f32fd54ea716ff085e02770b8da5e08bcb146b05b7444f78c1dbad47", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f495", 0x3a}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a6967", 0xa2}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 527.89286ms ago: executing program 0 (id=6787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getitimer(0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) statx(0xffffffffffffffff, 0x0, 0x6000, 0x153146e58b5e3128, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000002000000000ec9e00000000000000000000f719643df987c707e1199b324469819e2a4105a6560e409f617b0cd87093234edf99e21c13cef28727e4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) openat(r5, &(0x7f0000000300)='./file0\x00', 0x6a1c2, 0x170) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 478.392055ms ago: executing program 2 (id=6788): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_remap\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 477.713075ms ago: executing program 4 (id=6789): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="0000000000ff001000"/22, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f00000003c0), 0x7ff, 0x20800) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000008"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}], [], 0x6b}}) statfs(0x0, 0x0) 426.78729ms ago: executing program 0 (id=6790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 425.39639ms ago: executing program 3 (id=6791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0x6, 0x6, 0x7, 0xfffffffffffffffc, 0x8}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$inet(0x2, 0x200000003, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) writev(r4, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000040)="f1bb811c1e77073a8ff6fe1eedffacdebba4a4bc41afd16b2317cf891542281f6c37a60bf60e", 0x26}, {&(0x7f0000000480)="89643742f4b824dda89b11f119eff7ae762e011cf99cf8378efc4c3e0aed750000000000000000a322c95825a0baa4943f3cc20a4d7a430aad2d0090e4940f717c8144b32ba42ee73a4abb7c7113bb0172392c7f367000991b24797569a8ca7be72ac66f9cf1e6979d09cab48aef00000000f72db25982a800d7fa7a33", 0x7d}], 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='initcall_level\x00', r7, 0x0, 0x5}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x2048001}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000014c0)='fscache_volume\x00', r7, 0x0, 0xffffffffffffff40}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet_buf(r3, 0x0, 0x50, 0x0, &(0x7f0000000700)) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0xf, 0x1fb, &(0x7f0000000a80)="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"}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000001400)=[{{&(0x7f00000007c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000e80)=""/141, 0x8d}, 0xf5}, {{&(0x7f0000000f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/96, 0x60}, {&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/39, 0x27}, {&(0x7f00000010c0)=""/21, 0x15}, {&(0x7f0000001100)=""/131, 0x83}, {&(0x7f00000011c0)=""/168, 0xa8}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/181, 0xb5}], 0x8, &(0x7f00000013c0)=""/62, 0x3e}, 0x2}], 0x2, 0x102, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 219.60938ms ago: executing program 1 (id=6792): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1c, 0x6, 0x6, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffeae) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x5f, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x707, 0x40, 0x6, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000006c0)={'syztnl2\x00', r3, 0x7, 0x20, 0x7, 0x401, {{0x2c, 0x4, 0x0, 0xf, 0xb0, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0x1f, 0x8b, [@loopback, @remote, @local, @loopback, @private=0xa014101, @empty, @rand_addr=0x64010100]}, @cipso={0x86, 0x40, 0x0, [{0x7, 0xf, "8900542903a1db5e223c21ba7e"}, {0x6, 0x11, "5d650456a4758bd5ed335bad769602"}, {0x5, 0x3, "e1"}, {0x2, 0x9, "b871afaccf3c84"}, {0x7, 0x3, "f2"}, {0x2, 0x5, '{i1'}, {0x7, 0x2}, {0x2, 0x4, 'bn'}]}, @lsrr={0x83, 0xf, 0x25, [@loopback, @rand_addr=0x64010102, @empty]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0xc, [{@local, 0x546}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x3, 0x28}, @generic={0x7, 0x11, "3af509694e0671aaf0ce4e90f47414"}, @timestamp_prespec={0x44, 0x4, 0xcd, 0x3, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x20, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x3}}}, 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 219.269819ms ago: executing program 2 (id=6793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff", @ANYBLOB], 0x48) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c", 0x41}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) 218.939179ms ago: executing program 4 (id=6794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x7, 0x54e, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s1f0bQAKJE/AfcEDigNQTB24ckTggpHJACmCBYiSQFs3s2Nk6a7y117ut9/ORJjPvvZ35vmdn/N6+tecFMLauRsRORExHxBsRMVfkJ8UWr3S27HUPd7cX93a3F5Not1//e5KXZ3nRdU7myeKasxHxja9GfCd5PG5zc+v+Qq1WXS/S5VZ9rdzc3LqxUl9Yri5XVyuV2/O3b75464XKwNp6pf7LB19ZefWbv/n1p9/7/c6Xf5BV62JR1t2OQeo0feogTmYyIl49i2AjMFHsp0dcD04mjYiPRcTn8vt/Liby/50AwHnWbs9Fe647DQCcd2k+B5akpYhI02IQUOrM4T0TF9Jao9m6fq+xsbrUmSu7FFPpvZVa9eblmT9+L3/xVJKl5/OyvDxPVw6lb0XE5Yj40cwTebq02KgtjWbIAwBj78nu/j8i/jWTpqVSX6f2+FQPAPjImB11BQCAodP/A8D40f8DwPjpo/8vPuzfOfO6AADD4f0/AIwf/T8AjB/9PwCMla+/9lq2tfeK518vvbm5cb/x5o2lavN+qb6xWFpsrK+VlhuN5fyZPfXjrldrNNbmn4+Nt8qtarNVbm5u3a03NlZbd/Pnet+tTg2lVQDA/3P5yrt/SCJi56Un8i261nLQV8P5lo66AsDITJzmZAME+EjrtdrXL0ZQD2D4+urC80HC7868LsBo9HyY92zPw/f7yQcI4veM4EPl2if7n/+3xjOcL+b/YXydbP7/5YHXAxi+XvP/wHhot5PDa/5PHxQBAOfSKX6Fr/32oAYhwEgdt5j3QD7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPmYkR8N5K0lK8Fnmb/pqVSxFMRcSmmknsrterNiHg6rkTE1EyWnh91pQGAU0r/mhTrf12be+7i4dLp5N8z+T4ivv/T13/81kKrtT6f5f/jIH9mf/mwyqPzTrGuIAAwYHn/XSn2XW/kH+5uL+5vw6zPgzvx32Ip4sW93e18y/KLvLcjZvOxxIV/JjFZnDMbEc9GxMQA4u+8ExGf6NX+JJ8buVSsfNodP4rYTw01fvq++Gle1tlng6+PD6AuMG7evRMRr/S6/9K4mu973/9Z7uQA4j+407nY/s++va74k0WkiR7xs3v+ar8xnv/t1x7LbM91yt6JeHayV/zkIH5yRPzn+oz/p0995ocvH1HW/lnEtegdvztWuVVfKzc3t26s1BeWq8vV1Url9vztmy/eeqFSzueoy/sz1Y/720vXnz6qbln7L3TF318XP4s627P90wfnfqHP9v/8P298+7OPkjOH43/p872//8/0jN+R9Ylf7DP+woVfHbl8dxZ/6Yiv/3Hf/+t9xn/vL1tLfb4UABiC5ubW/YVarbr+gQ6y3r87J3sXepLrHHuQVbG/F+8PF08X9M9xFq044cHUWX1Vz/xg8mCsONgrfyu74pCbkw68Fac6eDisWKP7mQQMx6ObftQ1AQAAAAAAAAAAAAAAjjKMP10adRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4XAAD//xnx1GQ=") 194.695862ms ago: executing program 0 (id=6795): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000600"/24], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000480)="89d6f40ee53605b8d051911a48891416c297f798d0f73fdd5d1aa2b08f60b72cad3f03cd0a25906483f1f8956a5b946373c2b92ebcbc9bb8cbf4c4155bba7ecc825f1df32edd6b546ce6d6fdaade4304ebad322c2c35b5172d0aee1793f9e0fbd539c9bc0e74be45d1623428de4514ba27963f513f7ae315dbea567e66896d717ecdf61febba925ce9939ecaf689c7e4adb1b12f34aae8f409f5a0ac549755647c9189965198b6b06ae101fdac0ca3ac8c54b1a53e6f5577a0e79c6291e4cc549545cba83240f5df3260b090e6dc90a811472b", 0xd3}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000240)="9e451ababd6b779fcc5a88da60360935583df75cfa40b991704f646e456b3ac85c52816ae351e3575d3b98d1f3a7efc78acc078477d3e17a3c7f1859ae92427f381119a2c1d75e5900db1a835a3ea117ac0810618a1c8a5e9820c9493210c682b075e94d644b31fdf6da2a1d92b234e0fa1f11c14d6043e17be0272981b7b9", 0x7f}], 0x3, &(0x7f0000001580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb8a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x269}}], 0x60}, 0x200008c0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7e) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x350759}}]}, 0xc4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000040", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) 159.105295ms ago: executing program 3 (id=6796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, 0x0, 0x18) 158.513405ms ago: executing program 4 (id=6797): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xcc, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff482}, {0x6, 0x11, 0xe8d}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x80850) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0xe}]}, {0x0, [0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000040)=""/43, 0x2a, 0x2b, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x44, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x202, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/schedstat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x2, 0x4, 0xa, 0xa, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x65, &(0x7f0000000900)=""/101, 0x40f00, 0x5a, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x0, 0x800}, 0x10, 0x1059e, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[r4, r5, r4, r0, r6, r4, r0, r0, r0, r7], 0x0, 0x10, 0x3, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r9, 0x400, 0x2) 96.737651ms ago: executing program 0 (id=6798): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x282340, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x3f, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) syz_io_uring_setup(0xcdc, &(0x7f00000003c0)={0x0, 0x50000, 0x612, 0x0, 0x4000}, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r3, 0x0, 0xe0000006, 0x0) writev(r0, 0x0, 0x0) 96.198951ms ago: executing program 1 (id=6799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file1/file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$eJzs3UtvVFUcAPD/nT54KiVBoi5MExZikCltfWDiApdGiSS6x0l7aUinDOlMCa0kwkI2bAwxMUYS4wdw75L4BfwUJEpCDGl04abmTu+Ugc70MQzMyPx+yYVz7qPnnDn3nPnfuTO5AQys8eyfQsRrEfFtEnGoadtw5BvH1/dbfXhtJluSWFv7/K8kknxdY/8k//9Annk1In77JuJEYXO51eWV+VK5nC7m+YnawuWJ6vLKyYsLpbl0Lr00NT19+t3pqQ/ef69rbX3r3D8/fHb349O3jq1+/8v9w7eTOBMH823N7XgK15sz4zGevyYjceaJHSe7UFg/SXpdAToylI/zkcjmgEMxlI964MX3dUSsAQMqMf5hQDXigMa1fZeug/83Hny0fgG0uf3D65+NxN76tdH+1eSxK6PsenesC+VnZfz6553b2RLd+xwCYFvXb0TEqeHhzfNfks9/nTu1g32eLMP8B8/P3Sz+ebtV/FPYiH+iRfxzoMXY7cT2479wv8VhSbc+pc7ivw9bxr8bN63GhiLilYh4qR7zjSQXLpbTbG57OSKOx8ieLL/V/ZzTq/fW2m1rjv+yJSu/EQvm9bg/vOfxY2ZLtdLTtLnZgxsRr7eMf5ON/k9a9H/26pzbYRlH0ztvtNu2ffufrbWfI95s2f+P7mglW9+fnKifDxONs2Kzv28e/b1d+b1uf9b/+7du/1jSfL+2uvsyftr7b9puW6fn/2jyRT09mq+7WqrVFicjRpNPN6+fenRsI9/YP2v/8WNbz3+tzv99EfHlDtt/88jNtrv2Q//P7qr/d5+498lXP7Yrf2f9/049dTxfs5P5b6cVfJrXDgAAAAAAAPpNISIORlIobqQLhWJx/fsdR2J/oVyp1k5cqCxdmo36b2XHYqTQuNN9qOn7EJP592Eb+akn8tMRcTgivhvaV88XZyrl2V43HgAAAAAAAAAAAAAAAAAAAPrEgTa//8/8MdTykNHnW0PgmfLIbxhc247/bjzpCehLu3//FzHAi6Kj0byv+/UAnj/v5jCgRnpdAaCXvP/D4DL+YXAZ/zC4jH8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqnNnz2bL2urDazNZfvbK8tJ85crJ2bQ6X1xYminOVBYvF+cqlblyWpypLGz398qVyuXJqVi6OlFLq7WJ6vLK+YXK0qXa+YsLpbn0fOppQwAAAAAAAAAAAAAAAAAAALBZdXllvlQup4sSEh0lhvujGhJNiVtdGN09npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMl/AQAA///VUDYA") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x18, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x4}]}, 0x18}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x20000000, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r8, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0xffffffff, 0x2066}) write$tcp_mem(r8, &(0x7f0000000900)={0x8, 0x20, 0x7, 0x20, 0x3}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000008c0)={0x1ff}, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 50.931745ms ago: executing program 2 (id=6800): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9febd8a6000000499c080cd9e3854a000c0000000200000010f8fff2000000040000006972c01cf2615d8d0e00e1dce8cf87536fa500000000"], &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9febd8a6000000499c080cd9e3854a000c0000000200000010f8fff2000000040000006972c01cf2615d8d0e00e1dce8cf87536fa500000000"], &(0x7f0000000240)=""/183, 0x26, 0xb7, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fbffffff00000013003d0000000000efff000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000001640)='./bus\x00', 0x41, &(0x7f0000001680)={[{@noinit_itable}, {@nodiscard}, {@dioread_nolock}, {@usrjquota}, {@abort}, {@data_writeback}, {@data_journal}, {@acl}, {@noload}]}, 0x4, 0x50a, &(0x7f0000000200)="$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") (async) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000001640)='./bus\x00', 0x41, &(0x7f0000001680)={[{@noinit_itable}, {@nodiscard}, {@dioread_nolock}, {@usrjquota}, {@abort}, {@data_writeback}, {@data_journal}, {@acl}, {@noload}]}, 0x4, 0x50a, &(0x7f0000000200)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000010000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00000000000000e000000100000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff0100"], 0x1fc}}, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) tgkill(r4, r6, 0x0) (async) tgkill(r4, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x2021, 0x800000000004, @thr={&(0x7f0000000740), &(0x7f0000000800)="36396f0f15fe01f9aa9441c66c8749150a2ad0a58c76f26d549742b61c2af21169f6fe06def903a1bb8e9300583cd275bc63cd4ee19cc275acfdc162d4d7e202b90525f57c0b56cddbad1301f694f069d3bff76283e5d5856d34a202762286fc31180b2b134b31cdd2459d8d6b510980e7ba9da55094cec48ebe603f599168a7b5a73596416e472b721e9a2d7033717c7b45a5a62b4072dc7eba5b378982d43eb20b4e4c4073c426a115d6dca86449058b20dea3aa0e98938def5c41bc3b86780a2c2783ab813cf39c72053b9bb4f57ec98fd35deec75d5a9d34"}}, &(0x7f0000bbdffc)) (async) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x2021, 0x800000000004, @thr={&(0x7f0000000740), &(0x7f0000000800)="36396f0f15fe01f9aa9441c66c8749150a2ad0a58c76f26d549742b61c2af21169f6fe06def903a1bb8e9300583cd275bc63cd4ee19cc275acfdc162d4d7e202b90525f57c0b56cddbad1301f694f069d3bff76283e5d5856d34a202762286fc31180b2b134b31cdd2459d8d6b510980e7ba9da55094cec48ebe603f599168a7b5a73596416e472b721e9a2d7033717c7b45a5a62b4072dc7eba5b378982d43eb20b4e4c4073c426a115d6dca86449058b20dea3aa0e98938def5c41bc3b86780a2c2783ab813cf39c72053b9bb4f57ec98fd35deec75d5a9d34"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'dummy0\x00', {'hsr0\x00'}, 0x4}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r7, &(0x7f0000000300)=""/150, 0x96, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r8}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x15, 0x5, 0x0) (async) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r9}, 0x10) 50.750935ms ago: executing program 0 (id=6801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) (fail_nth: 3) 29.822237ms ago: executing program 0 (id=6802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) recvmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/117, 0x75}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000000440)=""/40, 0x28}], 0x8}, 0x4}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/181, 0xb5}], 0x1, &(0x7f0000000e40)=""/106, 0x6a}, 0x1}], 0x2, 0x10020, &(0x7f0000000f40)={0x0, 0x3938700}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @func={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) r6 = memfd_secret(0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/21, 0x15, 0x0, 0x1000003, 0x0, 0x0, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x64401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000004c0)=""/66, &(0x7f00000003c0)=0x42) 0s ago: executing program 4 (id=6803): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r3}, 0x9) r4 = creat(&(0x7f0000001080)='./file0\x00', 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f00000001c0)=':yz1', 0x1001, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000001000000000000000d5181100", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xb5, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x75, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a00), &(0x7f0000000b00), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00132bbd7000fddbdf251100000034000180140002006272696467655f736c6176655f3100ef33429d88001400020076657468315f000000000000000000", @ANYRES32=r9, @ANYBLOB="2c000180080003000000000008000300040000000800030000000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x20000011}, 0x200400c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000940)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.625558][T25872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.015118][T25968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.072932][T25968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.113686][T25968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.157260][T25837] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.167836][T25968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.180953][T25837] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.192641][T25837] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.204951][T25837] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.221549][T25968] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.233396][T25968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.251471][T25968] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.269563][T25968] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.302960][T25980] loop0: detected capacity change from 0 to 512 [ 434.310659][T25980] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 434.337431][T25980] EXT4-fs (loop0): 1 orphan inode deleted [ 434.343344][T25980] EXT4-fs (loop0): 1 truncate cleaned up [ 434.353520][T25980] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6030: path /37/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 434.382716][T25980] EXT4-fs (loop0): Remounting filesystem read-only [ 434.448869][T25988] loop4: detected capacity change from 0 to 512 [ 434.461218][T25988] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 434.492688][T25988] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 434.527031][T25988] loop4: detected capacity change from 0 to 512 [ 434.542268][T25988] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.562440][T25988] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6033: iget: bad extended attribute block 19 [ 434.580172][T25988] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6033: couldn't read orphan inode 15 (err -117) [ 434.596537][T25988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6033: bg 0: block 65: padding at end of block bitmap is not set [ 434.611585][T25988] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.6033: Failed to acquire dquot type 0 [ 434.629617][T26003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.638972][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.646848][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.646926][T26003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.654539][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.670140][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.677921][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.685652][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.693378][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.701183][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.708855][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.716606][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.724418][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.732334][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.739993][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.747855][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.755534][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.763255][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.771051][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.778818][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.786609][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.794387][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.802121][ T3339] hid-generic 0000:1000003:0000.0055: unknown main item tag 0x0 [ 434.810486][ T3339] hid-generic 0000:1000003:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz1 [ 434.853065][T26011] loop4: detected capacity change from 0 to 1024 [ 435.678440][T26046] loop0: detected capacity change from 0 to 512 [ 435.685564][T26046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.707646][T26046] EXT4-fs (loop0): 1 orphan inode deleted [ 435.713646][T26046] EXT4-fs (loop0): 1 truncate cleaned up [ 435.719736][T26046] EXT4-fs mount: 16 callbacks suppressed [ 435.719754][T26046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.740264][T26046] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6055: path /43/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 435.761882][T26046] EXT4-fs (loop0): Remounting filesystem read-only [ 435.776575][T24841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.069799][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 436.069816][ T29] audit: type=1326 audit(1726797962.548:39349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.100450][ T29] audit: type=1326 audit(1726797962.548:39350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.124289][ T29] audit: type=1326 audit(1726797962.548:39351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.147937][ T29] audit: type=1326 audit(1726797962.548:39352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.158050][T26070] loop0: detected capacity change from 0 to 1024 [ 436.171528][ T29] audit: type=1326 audit(1726797962.558:39353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.171565][ T29] audit: type=1326 audit(1726797962.558:39354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.199312][T26070] ext4: Bad value for 'debug_want_extra_isize' [ 436.201617][ T29] audit: type=1326 audit(1726797962.558:39355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.255135][ T29] audit: type=1326 audit(1726797962.558:39356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.278766][ T29] audit: type=1326 audit(1726797962.558:39357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.302432][ T29] audit: type=1326 audit(1726797962.558:39358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26065 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 436.426215][T25882] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.437733][T25882] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.449508][T25882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.463012][T25882] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.514426][T26084] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 436.514426][T26084] program syz.1.6070 not setting count and/or reply_len properly [ 436.552765][T26084] program syz.1.6070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.787220][T26090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6073'. [ 436.799844][T26090] loop3: detected capacity change from 0 to 512 [ 436.841043][T26090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.853677][T26090] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.866276][T26090] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.6073: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 436.894371][T26090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 436.903599][T26090] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.6073: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 436.920395][T26090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 436.929458][T26090] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.6073: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 436.946524][T26090] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 436.957720][T26090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.6073: bg 0: block 18: invalid block bitmap [ 436.970506][T26090] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.6073: Failed to acquire dquot type 1 [ 437.031569][T21893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.135092][T26106] vhci_hcd: invalid port number 97 [ 437.140294][T26106] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 437.151544][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 437.151659][T26101] loop0: detected capacity change from 0 to 256 [ 437.174114][T26106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.175530][T26101] FAT-fs (loop0): Directory bread(block 64) failed [ 437.191330][T26101] FAT-fs (loop0): Directory bread(block 65) failed [ 437.206140][T26101] FAT-fs (loop0): Directory bread(block 66) failed [ 437.216269][T26101] FAT-fs (loop0): Directory bread(block 67) failed [ 437.225296][T26101] FAT-fs (loop0): Directory bread(block 68) failed [ 437.232336][T26101] FAT-fs (loop0): Directory bread(block 69) failed [ 437.239301][T26101] FAT-fs (loop0): Directory bread(block 70) failed [ 437.247069][T26101] FAT-fs (loop0): Directory bread(block 71) failed [ 437.247440][T26106] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.255113][T26101] FAT-fs (loop0): Directory bread(block 72) failed [ 437.270500][T26101] FAT-fs (loop0): Directory bread(block 73) failed [ 437.285303][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6080'. [ 437.307132][T26111] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.341284][T26106] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.361835][T26111] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.412568][T26106] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.421124][T26091] coredump: 457(syz.3.6073): written to core: VMAs: 29, size 89030656; core: 60007086 bytes, pos 89038848 [ 437.453369][T26111] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.466630][T26118] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 437.466630][T26118] program syz.0.6082 not setting count and/or reply_len properly [ 437.485535][T26118] program syz.0.6082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.532117][T26111] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.632747][T26124] FAULT_INJECTION: forcing a failure. [ 437.632747][T26124] name failslab, interval 1, probability 0, space 0, times 0 [ 437.645514][T26124] CPU: 0 UID: 0 PID: 26124 Comm: syz.2.6085 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 437.657468][T26124] Tainted: [W]=WARN [ 437.661323][T26124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 437.671386][T26124] Call Trace: [ 437.674664][T26124] [ 437.677624][T26124] dump_stack_lvl+0xf2/0x150 [ 437.682237][T26124] dump_stack+0x15/0x20 [ 437.686406][T26124] should_fail_ex+0x229/0x230 [ 437.691214][T26124] ? audit_log_start+0x34c/0x6b0 [ 437.696165][T26124] should_failslab+0x8f/0xb0 [ 437.700813][T26124] kmem_cache_alloc_noprof+0x4c/0x290 [ 437.706229][T26124] audit_log_start+0x34c/0x6b0 [ 437.711088][T26124] audit_seccomp+0x4b/0x130 [ 437.715653][T26124] __seccomp_filter+0x6fa/0x1180 [ 437.720661][T26124] ? proc_fail_nth_write+0x12a/0x150 [ 437.726170][T26124] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 437.731875][T26124] ? vfs_write+0x580/0x910 [ 437.736296][T26124] ? __fget_files+0x1d4/0x210 [ 437.741084][T26124] __secure_computing+0x9f/0x1c0 [ 437.746035][T26124] syscall_trace_enter+0xd1/0x1f0 [ 437.751118][T26124] ? fpregs_assert_state_consistent+0x83/0xa0 [ 437.757211][T26124] do_syscall_64+0xaa/0x1c0 [ 437.761729][T26124] ? clear_bhb_loop+0x55/0xb0 [ 437.766556][T26124] ? clear_bhb_loop+0x55/0xb0 [ 437.771339][T26124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.777353][T26124] RIP: 0033:0x7f1c8056def9 [ 437.781825][T26124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.801446][T26124] RSP: 002b:00007f1c7f1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 437.809927][T26124] RAX: ffffffffffffffda RBX: 00007f1c80725f80 RCX: 00007f1c8056def9 [ 437.818056][T26124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.826088][T26124] RBP: 00007f1c7f1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 437.834064][T26124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.842050][T26124] R13: 0000000000000000 R14: 00007f1c80725f80 R15: 00007fff7d08a498 [ 437.850056][T26124] [ 437.874297][T26128] loop2: detected capacity change from 0 to 512 [ 437.881379][T26128] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 437.901234][T26132] loop0: detected capacity change from 0 to 512 [ 437.908206][T26132] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 437.909883][T26128] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 437.928532][T26132] EXT4-fs (loop0): 1 orphan inode deleted [ 437.934417][T26132] EXT4-fs (loop0): 1 truncate cleaned up [ 437.942679][T26132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.949356][T26128] loop2: detected capacity change from 0 to 512 [ 437.956267][T26132] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6088: path /54/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 437.982957][T26128] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.983216][T26132] EXT4-fs (loop0): Remounting filesystem read-only [ 438.008171][T24841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.011104][T26128] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6087: iget: bad extended attribute block 19 [ 438.030241][T26128] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6087: couldn't read orphan inode 15 (err -117) [ 438.043079][T26128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.062314][T26128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6087: bg 0: block 65: padding at end of block bitmap is not set [ 438.064633][T26140] loop0: detected capacity change from 0 to 512 [ 438.078001][T26128] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.6087: Failed to acquire dquot type 0 [ 438.084299][T26140] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 438.106754][T26140] EXT4-fs (loop0): 1 orphan inode deleted [ 438.112666][T26140] EXT4-fs (loop0): 1 truncate cleaned up [ 438.118889][T26140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.131928][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.134567][T26140] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6090: path /56/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 438.162655][T26140] EXT4-fs (loop0): Remounting filesystem read-only [ 438.179966][T24841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.189622][T26145] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 438.189622][T26145] program syz.2.6093 not setting count and/or reply_len properly [ 438.207343][T26145] program syz.2.6093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.406548][T26111] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.418392][T26111] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.439917][T26111] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.453144][T26111] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.608363][T26189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.622882][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6114'. [ 438.633753][T26191] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.672543][T26191] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.730740][T26191] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.757185][T26196] usb usb8: usbfs: process 26196 (syz.1.6116) did not claim interface 0 before use [ 438.791588][T26191] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.868462][T26191] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.880732][T26191] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.892870][T26191] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.904600][T26191] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.949892][T26215] loop2: detected capacity change from 0 to 2048 [ 438.972595][T26215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.997961][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.121623][T26234] loop2: detected capacity change from 0 to 512 [ 439.128559][T26234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.140083][T26234] EXT4-fs (loop2): 1 orphan inode deleted [ 439.145827][T26234] EXT4-fs (loop2): 1 truncate cleaned up [ 439.151976][T26234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.165235][T26234] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6132: path /320/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 439.187118][T26234] EXT4-fs (loop2): Remounting filesystem read-only [ 439.201661][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.276208][T26241] FAULT_INJECTION: forcing a failure. [ 439.276208][T26241] name failslab, interval 1, probability 0, space 0, times 0 [ 439.288947][T26241] CPU: 1 UID: 0 PID: 26241 Comm: syz.2.6135 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 439.300895][T26241] Tainted: [W]=WARN [ 439.304825][T26241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 439.314981][T26241] Call Trace: [ 439.318269][T26241] [ 439.321208][T26241] dump_stack_lvl+0xf2/0x150 [ 439.325910][T26241] dump_stack+0x15/0x20 [ 439.330120][T26241] should_fail_ex+0x229/0x230 [ 439.334847][T26241] ? audit_log_d_path+0x96/0x250 [ 439.339808][T26241] should_failslab+0x8f/0xb0 [ 439.344521][T26241] __kmalloc_cache_noprof+0x4b/0x2a0 [ 439.349815][T26241] audit_log_d_path+0x96/0x250 [ 439.354607][T26241] ? get_file_rcu+0xeb/0x100 [ 439.359211][T26241] ? __rcu_read_unlock+0x4e/0x70 [ 439.364224][T26241] audit_log_d_path_exe+0x42/0x70 [ 439.369331][T26241] audit_log_task+0x155/0x180 [ 439.374036][T26241] audit_seccomp+0x68/0x130 [ 439.378564][T26241] __seccomp_filter+0x6fa/0x1180 [ 439.383533][T26241] ? proc_fail_nth_write+0x12a/0x150 [ 439.388839][T26241] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 439.394528][T26241] ? vfs_write+0x580/0x910 [ 439.399055][T26241] ? __fget_files+0x1d4/0x210 [ 439.403756][T26241] __secure_computing+0x9f/0x1c0 [ 439.408714][T26241] syscall_trace_enter+0xd1/0x1f0 [ 439.413794][T26241] ? fpregs_assert_state_consistent+0x83/0xa0 [ 439.419883][T26241] do_syscall_64+0xaa/0x1c0 [ 439.424480][T26241] ? clear_bhb_loop+0x55/0xb0 [ 439.429247][T26241] ? clear_bhb_loop+0x55/0xb0 [ 439.433997][T26241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.439970][T26241] RIP: 0033:0x7f1c8056def9 [ 439.444426][T26241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.464138][T26241] RSP: 002b:00007f1c7f1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 439.472556][T26241] RAX: ffffffffffffffda RBX: 00007f1c80725f80 RCX: 00007f1c8056def9 [ 439.480704][T26241] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000202 [ 439.488876][T26241] RBP: 00007f1c7f1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.496866][T26241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.504926][T26241] R13: 0000000000000000 R14: 00007f1c80725f80 R15: 00007fff7d08a498 [ 439.512933][T26241] [ 439.613511][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'. [ 439.623880][T26243] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.660504][T26243] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.713435][T26243] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.782464][T26243] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.828173][T26257] loop0: detected capacity change from 0 to 512 [ 439.835223][T26257] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 439.859738][T26257] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 439.876578][T26257] loop0: detected capacity change from 0 to 512 [ 439.885384][T26257] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.920234][T26257] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.6141: iget: bad extended attribute block 19 [ 439.933341][T26257] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6141: couldn't read orphan inode 15 (err -117) [ 439.946282][T26257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.961907][T26257] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6141: bg 0: block 65: padding at end of block bitmap is not set [ 439.976441][T26257] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.6141: Failed to acquire dquot type 0 [ 439.999377][T24841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.086907][T26276] loop0: detected capacity change from 0 to 512 [ 440.094193][T26276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 440.106077][T26276] EXT4-fs (loop0): 1 orphan inode deleted [ 440.112001][T26276] EXT4-fs (loop0): 1 truncate cleaned up [ 440.118021][T26276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.133053][T26276] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6147: path /75/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 440.154718][T26276] EXT4-fs (loop0): Remounting filesystem read-only [ 440.169268][T24841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.329046][T26286] loop0: detected capacity change from 0 to 1024 [ 440.338353][T26286] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6151'. [ 440.347730][T26286] bridge_slave_1: left allmulticast mode [ 440.353486][T26286] bridge_slave_1: left promiscuous mode [ 440.359239][T26286] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.367187][T26286] bridge_slave_0: left allmulticast mode [ 440.373089][T26286] bridge_slave_0: left promiscuous mode [ 440.378867][T26286] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.683560][T26106] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.694902][T26106] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.706323][T26106] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.717520][T26106] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.778437][T26293] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 440.778437][T26293] program syz.1.6154 not setting count and/or reply_len properly [ 440.796646][T26293] program syz.1.6154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.896317][T26311] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 441.753564][T26321] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 441.753564][T26321] program syz.1.6165 not setting count and/or reply_len properly [ 441.771270][T26321] program syz.1.6165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.793636][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 441.793651][ T29] audit: type=1326 audit(1726797968.280:40080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.825783][ T29] audit: type=1326 audit(1726797968.280:40081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.849724][ T29] audit: type=1326 audit(1726797968.280:40082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.873490][ T29] audit: type=1326 audit(1726797968.280:40083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.897311][ T29] audit: type=1326 audit(1726797968.280:40084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.920983][ T29] audit: type=1326 audit(1726797968.280:40085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.944576][ T29] audit: type=1326 audit(1726797968.280:40086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.968319][ T29] audit: type=1326 audit(1726797968.280:40087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 441.991952][ T29] audit: type=1326 audit(1726797968.280:40088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 442.015641][ T29] audit: type=1326 audit(1726797968.280:40089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.1.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 442.108051][T26332] vhci_hcd: invalid port number 97 [ 442.113193][T26332] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 442.122858][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6170'. [ 442.133529][T26332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.179291][T26332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.219651][T26332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.259194][T26332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.303774][T26332] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.315021][T26332] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.326206][T26332] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.337687][T26332] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.491933][T26348] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 442.491933][T26348] program syz.1.6177 not setting count and/or reply_len properly [ 442.509815][T26348] program syz.1.6177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.524121][T26243] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.536471][T26243] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.548296][T26243] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.559955][T26243] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.624601][T26363] loop2: detected capacity change from 0 to 512 [ 442.632032][T26363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.654748][T26363] EXT4-fs (loop2): 1 orphan inode deleted [ 442.660623][T26363] EXT4-fs (loop2): 1 truncate cleaned up [ 442.666897][T26363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.680215][T26363] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6184: path /327/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 442.702188][T26363] EXT4-fs (loop2): Remounting filesystem read-only [ 442.717301][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.801159][T26382] loop2: detected capacity change from 0 to 512 [ 442.808324][T26382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.819925][T26382] EXT4-fs (loop2): 1 orphan inode deleted [ 442.825779][T26382] EXT4-fs (loop2): 1 truncate cleaned up [ 442.831878][T26382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.845674][T26382] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6193: path /331/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 442.867409][T26382] EXT4-fs (loop2): Remounting filesystem read-only [ 442.881486][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.749119][T26414] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 443.749119][T26414] program syz.1.6206 not setting count and/or reply_len properly [ 443.767299][T26414] program syz.1.6206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.970831][T26425] syz.1.6210[26425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.970950][T26425] syz.1.6210[26425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.025070][T26435] loop2: detected capacity change from 0 to 128 [ 444.075214][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.082973][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.083200][T26441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.090666][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.106713][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.114381][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.122305][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.130123][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.137941][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.145734][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.153420][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.161122][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.169332][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.177019][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.184693][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.192466][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.200159][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.207903][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.215582][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.223278][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.230975][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.238662][ T3336] hid-generic 0000:1000003:0000.0056: unknown main item tag 0x0 [ 444.246461][T26441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.255357][ T3336] hid-generic 0000:1000003:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz1 [ 444.328390][T26448] FAULT_INJECTION: forcing a failure. [ 444.328390][T26448] name failslab, interval 1, probability 0, space 0, times 0 [ 444.341126][T26448] CPU: 1 UID: 0 PID: 26448 Comm: syz.1.6221 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 444.353039][T26448] Tainted: [W]=WARN [ 444.356839][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 444.367007][T26448] Call Trace: [ 444.370314][T26448] [ 444.373304][T26448] dump_stack_lvl+0xf2/0x150 [ 444.378001][T26448] dump_stack+0x15/0x20 [ 444.382194][T26448] should_fail_ex+0x229/0x230 [ 444.386926][T26448] ? vm_area_alloc+0x2c/0x130 [ 444.391615][T26448] should_failslab+0x8f/0xb0 [ 444.396231][T26448] kmem_cache_alloc_noprof+0x4c/0x290 [ 444.401637][T26448] vm_area_alloc+0x2c/0x130 [ 444.406205][T26448] mmap_region+0x885/0x1600 [ 444.410792][T26448] ? security_mmap_addr+0x5a/0x70 [ 444.415840][T26448] ? __get_unmapped_area+0x2cb/0x300 [ 444.421171][T26448] do_mmap+0x718/0xb60 [ 444.425269][T26448] vm_mmap_pgoff+0x133/0x290 [ 444.429872][T26448] ksys_mmap_pgoff+0xd0/0x330 [ 444.434553][T26448] ? fpregs_assert_state_consistent+0x83/0xa0 [ 444.440646][T26448] x64_sys_call+0x1884/0x2d60 [ 444.445361][T26448] do_syscall_64+0xc9/0x1c0 [ 444.450002][T26448] ? clear_bhb_loop+0x55/0xb0 [ 444.454700][T26448] ? clear_bhb_loop+0x55/0xb0 [ 444.459550][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.465536][T26448] RIP: 0033:0x7fe75e50df33 [ 444.470010][T26448] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 444.489712][T26448] RSP: 002b:00007fe75d180e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 444.498228][T26448] RAX: ffffffffffffffda RBX: 0000000000000471 RCX: 00007fe75e50df33 [ 444.506339][T26448] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 444.514373][T26448] RBP: 00000000200004c2 R08: 00000000ffffffff R09: 0000000000000000 [ 444.522344][T26448] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 444.530321][T26448] R13: 00007fe75d180ef0 R14: 00007fe75d180eb0 R15: 0000000020000000 [ 444.538441][T26448] [ 445.058808][T26478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6235'. [ 445.202129][T26487] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 445.202129][T26487] program syz.2.6239 not setting count and/or reply_len properly [ 445.219794][T26487] program syz.2.6239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.149610][T26527] loop2: detected capacity change from 0 to 512 [ 446.166877][T26527] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.195783][T26527] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.6246: iget: bad i_size value: -6917529027641081756 [ 446.222207][T26527] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6246: couldn't read orphan inode 17 (err -117) [ 446.235660][T26527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.243021][T26514] chnl_net:caif_netlink_parms(): no params data found [ 446.263253][T26527] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6246: bg 0: block 65: padding at end of block bitmap is not set [ 446.278887][T26527] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.6246: Failed to acquire dquot type 0 [ 446.318254][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.329923][T26514] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.337089][T26514] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.344435][T26514] bridge_slave_0: entered allmulticast mode [ 446.351231][T26514] bridge_slave_0: entered promiscuous mode [ 446.358402][T26514] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.365664][T26514] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.372940][T26514] bridge_slave_1: entered allmulticast mode [ 446.380151][T26514] bridge_slave_1: entered promiscuous mode [ 446.403098][T26514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.414054][T26514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.454556][T26514] team0: Port device team_slave_0 added [ 446.462240][T26514] team0: Port device team_slave_1 added [ 446.485505][T26514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.492630][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.518594][T26514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.532426][T26572] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 446.532426][T26572] program syz.2.6250 not setting count and/or reply_len properly [ 446.540080][T26514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.550138][T26572] program syz.2.6250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.556761][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.591976][T26514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.638287][T26514] hsr_slave_0: entered promiscuous mode [ 446.651294][T26514] hsr_slave_1: entered promiscuous mode [ 446.662835][T26514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.672439][T26514] Cannot create hsr debugfs directory [ 446.753489][T26598] loop2: detected capacity change from 0 to 512 [ 446.760884][T26598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 446.773571][T26598] EXT4-fs (loop2): 1 orphan inode deleted [ 446.779413][T26598] EXT4-fs (loop2): 1 truncate cleaned up [ 446.787107][T26598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.800976][T26514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.806409][T26598] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6254: path /356/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 446.832858][T26598] EXT4-fs (loop2): Remounting filesystem read-only [ 446.886284][T26514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.927936][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 446.927957][ T29] audit: type=1326 audit(1726797973.393:40474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 446.958097][ T29] audit: type=1326 audit(1726797973.393:40475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 446.981874][ T29] audit: type=1326 audit(1726797973.403:40476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.005582][ T29] audit: type=1326 audit(1726797973.403:40477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.029188][ T29] audit: type=1326 audit(1726797973.403:40478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.058619][ T29] audit: type=1326 audit(1726797973.523:40479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.082361][ T29] audit: type=1326 audit(1726797973.523:40480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.106042][ T29] audit: type=1326 audit(1726797973.523:40481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.129818][ T29] audit: type=1326 audit(1726797973.523:40482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.153479][ T29] audit: type=1326 audit(1726797973.523:40483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26632 comm="syz.1.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75e50def9 code=0x7ffc0000 [ 447.177640][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.199396][T26649] loop2: detected capacity change from 0 to 512 [ 447.208447][T26514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.248467][T26649] loop2: detected capacity change from 0 to 2048 [ 447.267111][T26649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.280603][T26514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.331742][T26659] syz.1.6262[26659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.331848][T26659] syz.1.6262[26659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.392000][T26514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.411446][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.413256][T26514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.456015][T26514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.479726][T26514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.513957][T26669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.560274][T26514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.575719][T26669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.590516][T26514] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.613650][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.620863][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.632889][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.640187][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.664873][T26514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.681723][T26669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.729984][T26514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.740282][T26669] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.801346][T26669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.817221][T26669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.827289][T26708] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 447.827289][T26708] program syz.1.6279 not setting count and/or reply_len properly [ 447.829260][T26669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.846210][T26708] program syz.1.6279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.858961][T26669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.963906][T26514] veth0_vlan: entered promiscuous mode [ 447.974381][T26514] veth1_vlan: entered promiscuous mode [ 447.978294][T26719] loop2: detected capacity change from 0 to 512 [ 447.999894][T26719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.000706][T26514] veth0_macvtap: entered promiscuous mode [ 448.019204][T26719] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.022476][T26514] veth1_macvtap: entered promiscuous mode [ 448.042126][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.052936][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.063039][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.073640][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.083517][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.094183][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.104049][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.114507][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.131088][T26514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.139848][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.150474][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.160323][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.170798][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.180675][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.191135][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.201009][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.211469][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.222861][T26514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.231685][T26514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.240473][T26514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.242695][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.249366][T26514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.266997][T26514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.340479][T26737] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 448.340479][T26737] program syz.1.6289 not setting count and/or reply_len properly [ 448.354592][T26741] syz.4.6245[26741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.357915][T26741] syz.4.6245[26741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.372106][T26740] syz.2.6290[26740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.384786][T26740] syz.2.6290[26740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.396450][T26737] program syz.1.6289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.558315][T14662] syz_tun (unregistering): left promiscuous mode [ 448.573894][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.581735][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.589476][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.597283][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.604995][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.612727][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.620562][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.628325][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.636124][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.643936][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.651717][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.654713][T26748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.659586][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.675682][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.683334][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.691042][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.698773][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.706565][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.714334][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.722007][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.729721][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.737485][T20798] hid-generic 0000:1000003:0000.0057: unknown main item tag 0x0 [ 448.745271][T26748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.768444][T26756] loop3: detected capacity change from 0 to 512 [ 448.813028][T26756] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 448.821486][T20798] hid-generic 0000:1000003:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz1 [ 449.005213][T26749] chnl_net:caif_netlink_parms(): no params data found [ 449.030763][T26771] loop2: detected capacity change from 0 to 512 [ 449.052066][T26749] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.060023][T26749] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.069502][T26771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.082478][T26771] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.093410][T26749] bridge_slave_0: entered allmulticast mode [ 449.100302][T26749] bridge_slave_0: entered promiscuous mode [ 449.108789][T26771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.119549][T26749] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.126715][T26749] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.134049][T26749] bridge_slave_1: entered allmulticast mode [ 449.140745][T26749] bridge_slave_1: entered promiscuous mode [ 449.159753][T26749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.170867][T26749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.207492][T26749] team0: Port device team_slave_0 added [ 449.215276][T26771] loop2: detected capacity change from 0 to 8192 [ 449.223140][T26749] team0: Port device team_slave_1 added [ 449.241984][T26749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.249035][T26749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.275013][T26749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.290437][T26749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.297493][T26749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.323504][T26749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.366421][T26749] hsr_slave_0: entered promiscuous mode [ 449.376975][T26749] hsr_slave_1: entered promiscuous mode [ 449.382926][T26749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.393675][T26749] Cannot create hsr debugfs directory [ 449.475072][T26788] syz.3.6301[26788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.475152][T26788] syz.3.6301[26788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.532853][T26793] loop4: detected capacity change from 0 to 256 [ 449.555845][T26749] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.627115][T26801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6303'. [ 449.644962][T26749] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.662513][T26801] 9pnet_virtio: no channels available for device 127.0.0.1 [ 449.685518][T26749] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.745619][T26749] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.819555][T26749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.828844][T26749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.838754][T26749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.849419][T26749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.882920][T26806] loop3: detected capacity change from 0 to 1024 [ 449.899020][T26806] ext4: Bad value for 'debug_want_extra_isize' [ 449.921401][T26749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.941257][T26749] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.954742][T15532] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.962036][T15532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.986601][T13156] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.993800][T13156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.077583][T26749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.170142][T26749] veth0_vlan: entered promiscuous mode [ 450.180212][T26749] veth1_vlan: entered promiscuous mode [ 450.199222][T26749] veth0_macvtap: entered promiscuous mode [ 450.207467][T26749] veth1_macvtap: entered promiscuous mode [ 450.218923][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.229485][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.239402][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.249910][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.259778][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.270265][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.280231][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.290727][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.300642][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.311082][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.322906][T26749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.334123][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.344632][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.354495][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.364979][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.374879][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.385552][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.395496][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.406028][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.415957][T26749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.426529][T26749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.438233][T26749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.451086][T26749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.459966][T26749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.469004][T26749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.477776][T26749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.560704][T26827] loop2: detected capacity change from 0 to 128 [ 450.579243][T26827] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.594363][T26827] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 450.715368][T21000] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.736681][T26818] chnl_net:caif_netlink_parms(): no params data found [ 450.802685][T26849] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 450.804740][T26860] loop2: detected capacity change from 0 to 512 [ 450.823377][T26860] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.831262][T26860] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.842610][T26860] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.6320: corrupted in-inode xattr: e_value out of bounds [ 450.857306][T26860] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6320: couldn't read orphan inode 15 (err -117) [ 450.858067][T26818] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.869879][T26860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.876346][T26818] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.896089][T26818] bridge_slave_0: entered allmulticast mode [ 450.902557][T26818] bridge_slave_0: entered promiscuous mode [ 450.910076][T26818] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.917192][T26818] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.925035][T26818] bridge_slave_1: entered allmulticast mode [ 450.931805][T26818] bridge_slave_1: entered promiscuous mode [ 450.951590][T26818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.963136][T26818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.982734][T26818] team0: Port device team_slave_0 added [ 450.989632][T26818] team0: Port device team_slave_1 added [ 451.008356][T26818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.015364][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.041373][T26818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.053084][T26818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.060057][T26818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.086075][T26818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.115038][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.146624][T26818] hsr_slave_0: entered promiscuous mode [ 451.166719][T26818] hsr_slave_1: entered promiscuous mode [ 451.186463][T26818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.199921][T26818] Cannot create hsr debugfs directory [ 451.340686][T26818] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.396404][T26818] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.464804][T26818] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.545013][T26818] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.552577][T26931] loop2: detected capacity change from 0 to 512 [ 451.561730][T26931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 451.592220][T26931] EXT4-fs (loop2): 1 orphan inode deleted [ 451.598084][T26931] EXT4-fs (loop2): 1 truncate cleaned up [ 451.604272][T26931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.621160][T26939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.623034][T26931] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6339: path /385/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 451.632493][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.653697][T26931] EXT4-fs (loop2): Remounting filesystem read-only [ 451.659160][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.673451][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.681112][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.688850][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.696581][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.704316][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.711983][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.719699][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.727447][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.735207][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.743023][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.750761][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.758546][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.766311][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.774034][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.781724][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.789608][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.797300][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.805050][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.812880][ T24] hid-generic 0000:1000003:0000.0058: unknown main item tag 0x0 [ 451.820716][T26939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.829016][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.834992][ T24] hid-generic 0000:1000003:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz1 [ 451.870135][T26818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 451.880939][T26818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 451.897034][T26818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 451.906942][T26818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.008936][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 452.008996][ T29] audit: type=1326 audit(1726797978.496:40831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.045771][T26818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.179819][T26818] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.224660][ T29] audit: type=1326 audit(1726797978.526:40832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.242689][T12091] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.248308][ T29] audit: type=1326 audit(1726797978.526:40833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.255312][T12091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.278803][ T29] audit: type=1326 audit(1726797978.546:40834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.309821][ T29] audit: type=1326 audit(1726797978.546:40835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.333809][ T29] audit: type=1326 audit(1726797978.546:40836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.357369][ T29] audit: type=1326 audit(1726797978.546:40837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.381045][ T29] audit: type=1326 audit(1726797978.546:40838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.391031][T12091] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.404652][ T29] audit: type=1326 audit(1726797978.546:40839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 452.411556][T12091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.435110][ T29] audit: type=1326 audit(1726797978.546:40840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c8056c890 code=0x7ffc0000 [ 452.450840][T27025] loop2: detected capacity change from 0 to 512 [ 452.476933][T27027] loop4: detected capacity change from 0 to 512 [ 452.484157][T27027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 452.485715][T27025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.512704][T27025] EXT4-fs (loop2): 1 orphan inode deleted [ 452.518489][T27025] EXT4-fs (loop2): 1 truncate cleaned up [ 452.528418][T27025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.548661][T27027] EXT4-fs (loop4): 1 orphan inode deleted [ 452.554555][T27027] EXT4-fs (loop4): 1 truncate cleaned up [ 452.567775][T27027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.577068][T27025] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.2.6349: path /391/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 452.593152][T27027] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.4.6350: path /11/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 452.614809][T27025] EXT4-fs (loop2): Remounting filesystem read-only [ 452.637740][T26818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.652945][T27027] EXT4-fs (loop4): Remounting filesystem read-only [ 452.663595][T27039] loop3: detected capacity change from 0 to 1024 [ 452.683873][T27039] loop3: detected capacity change from 0 to 164 [ 452.693090][T27039] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 452.701343][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.702840][T27039] 9pnet: Could not find request transport: fd0xffffffffffffffff7;þwfdno=›ÌþßlØ ~ŠCäa‚•UU [ 452.727624][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.766632][T27053] loop2: detected capacity change from 0 to 512 [ 452.808093][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.816017][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.823988][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.831773][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.839542][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.847260][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.854964][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.862768][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.870593][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.878361][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.886120][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.893834][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.896241][T27058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.901489][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.917669][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.925455][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.933163][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.941092][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.948905][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.956705][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.964484][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.972455][ T8336] hid-generic 0000:1000003:0000.0059: unknown main item tag 0x0 [ 452.980524][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.005400][T26818] veth0_vlan: entered promiscuous mode [ 453.011381][ T8336] hid-generic 0000:1000003:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz1 [ 453.051361][T26818] veth1_vlan: entered promiscuous mode [ 453.079141][T26818] veth0_macvtap: entered promiscuous mode [ 453.096948][T26818] veth1_macvtap: entered promiscuous mode [ 453.132763][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.143426][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.153492][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.164230][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.174222][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.184763][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.185514][T27096] loop4: detected capacity change from 0 to 512 [ 453.194609][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.194629][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.221210][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.231780][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.241632][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.252150][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.264544][T26818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.277544][T27096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.282543][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.300962][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.310916][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.310979][T27096] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.321502][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.321520][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.321538][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.321555][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.321570][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.321585][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.321616][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.321634][T26818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.321656][T26818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.345362][T27096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.353866][T26818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.443700][T26818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.452556][T26818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.461422][T26818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.470262][T26818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.916028][T27188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6365'. [ 453.975092][T27173] loop4: detected capacity change from 0 to 512 [ 454.035011][T27173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.048032][T27173] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.070801][T27173] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.6365: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 454.087772][T27173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 454.096804][T27173] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.6365: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 454.121582][T27173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 454.130973][T27173] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.6365: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 454.149209][T27173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 454.164904][T27173] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6365: bg 0: block 18: invalid block bitmap [ 454.180459][T27173] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.6365: Failed to acquire dquot type 1 [ 454.367468][T27264] loop2: detected capacity change from 0 to 512 [ 454.430450][T27264] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 454.447159][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.493416][T27264] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 454.539100][T27264] loop2: detected capacity change from 0 to 512 [ 454.581193][T27264] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 454.595651][T27279] loop3: detected capacity change from 0 to 512 [ 454.725774][T27264] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6378: iget: bad extended attribute block 19 [ 454.738771][T27264] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6378: couldn't read orphan inode 15 (err -117) [ 454.752975][T27279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.777066][T27279] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.795027][T27264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.818014][T27279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.859574][T27264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6378: bg 0: block 65: padding at end of block bitmap is not set [ 454.879949][T20798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4 [ 454.887934][T20798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2 [ 454.915478][T20798] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x3 [ 454.925797][T27264] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.6378: Failed to acquire dquot type 0 [ 454.962327][T20798] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 455.000962][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.045923][T27292] loop2: detected capacity change from 0 to 1024 [ 455.061656][T27292] EXT4-fs: Ignoring removed orlov option [ 455.067435][T27292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.112157][T27292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.139582][T27292] FAULT_INJECTION: forcing a failure. [ 455.139582][T27292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.152723][T27292] CPU: 0 UID: 0 PID: 27292 Comm: syz.2.6385 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 455.164802][T27292] Tainted: [W]=WARN [ 455.168686][T27292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 455.178795][T27292] Call Trace: [ 455.182089][T27292] [ 455.185040][T27292] dump_stack_lvl+0xf2/0x150 [ 455.189761][T27292] dump_stack+0x15/0x20 [ 455.194052][T27292] should_fail_ex+0x229/0x230 [ 455.198798][T27292] should_fail+0xb/0x10 [ 455.203091][T27292] should_fail_usercopy+0x1a/0x20 [ 455.208148][T27292] strncpy_from_user+0x25/0x270 [ 455.213050][T27292] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 455.218867][T27292] getname_flags+0xb0/0x3b0 [ 455.223715][T27292] user_path_at+0x26/0x110 [ 455.228159][T27292] __se_sys_chroot+0x4c/0x180 [ 455.232914][T27292] __x64_sys_chroot+0x1f/0x30 [ 455.237671][T27292] x64_sys_call+0x1754/0x2d60 [ 455.242451][T27292] do_syscall_64+0xc9/0x1c0 [ 455.247067][T27292] ? clear_bhb_loop+0x55/0xb0 [ 455.251784][T27292] ? clear_bhb_loop+0x55/0xb0 [ 455.256535][T27292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.262459][T27292] RIP: 0033:0x7f1c8056def9 [ 455.266879][T27292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.286528][T27292] RSP: 002b:00007f1c7f1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 455.295102][T27292] RAX: ffffffffffffffda RBX: 00007f1c80725f80 RCX: 00007f1c8056def9 [ 455.303080][T27292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 455.311161][T27292] RBP: 00007f1c7f1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.319190][T27292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.327166][T27292] R13: 0000000000000000 R14: 00007f1c80725f80 R15: 00007fff7d08a498 [ 455.335157][T27292] [ 455.376954][T27303] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.410397][T27305] loop0: detected capacity change from 0 to 512 [ 455.410641][T27189] coredump: 54(syz.4.6365): written to core: VMAs: 31, size 89161728; core: 60015390 bytes, pos 89169920 [ 455.433660][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.465808][T27305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.483789][T27303] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.510125][T27305] EXT4-fs (loop0): 1 orphan inode deleted [ 455.516065][T27305] EXT4-fs (loop0): 1 truncate cleaned up [ 455.526370][T27320] SELinux: Context :yz1 is not valid (left unmapped). [ 455.531244][T27305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.541816][T27322] loop4: detected capacity change from 0 to 512 [ 455.553888][T27305] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.6390: path /4/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 455.576214][T27322] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 455.617783][T27305] EXT4-fs (loop0): Remounting filesystem read-only [ 455.641481][T27303] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.655595][T27322] EXT4-fs (loop4): 1 orphan inode deleted [ 455.661462][T27322] EXT4-fs (loop4): 1 truncate cleaned up [ 455.667684][T27322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.681858][T26818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.715996][T27322] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.4.6396: path /24/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 455.757943][T27322] EXT4-fs (loop4): Remounting filesystem read-only [ 455.774953][T27303] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.804068][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.828529][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6398'. [ 455.847630][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'. [ 455.860644][T27331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.913641][T27332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.931779][T27331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.956538][T27303] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.971905][T27303] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.985149][T27303] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.997157][T27303] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.023357][T27331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.075129][T27331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.243852][T27331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.258967][T27331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.271379][T27331] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.286053][T27331] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.313166][T27340] loop3: detected capacity change from 0 to 1024 [ 456.336535][T27340] ext4: Bad value for 'debug_want_extra_isize' [ 456.453640][T27348] loop2: detected capacity change from 0 to 512 [ 456.463980][T27348] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 456.495969][T27332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.512691][T27348] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 456.512744][T27354] loop4: detected capacity change from 0 to 512 [ 456.529757][T27354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.560500][T27348] loop2: detected capacity change from 0 to 512 [ 456.569226][T27348] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.580172][T27354] EXT4-fs (loop4): 1 orphan inode deleted [ 456.585921][T27354] EXT4-fs (loop4): 1 truncate cleaned up [ 456.592323][T27354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.634929][T27354] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.4.6407: path /27/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 456.661534][T27332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.713078][T27354] EXT4-fs (loop4): Remounting filesystem read-only [ 456.734758][T27348] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6405: iget: bad extended attribute block 19 [ 456.751081][T27332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.769921][T27348] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6405: couldn't read orphan inode 15 (err -117) [ 456.806712][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.839728][T27332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.853336][T27348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.872774][T27332] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.885407][T27332] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.897113][T27332] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.898375][T27348] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6405: bg 0: block 65: padding at end of block bitmap is not set [ 456.921761][T27348] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.6405: Failed to acquire dquot type 0 [ 456.934109][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6413'. [ 456.962864][T27369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.976200][T21000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.021580][T27376] loop3: detected capacity change from 0 to 512 [ 457.029161][T27376] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 457.038302][T27376] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 457.067130][T27380] FAULT_INJECTION: forcing a failure. [ 457.067130][T27380] name failslab, interval 1, probability 0, space 0, times 0 [ 457.080034][T27380] CPU: 1 UID: 0 PID: 27380 Comm: syz.1.6412 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 457.091959][T27380] Tainted: [W]=WARN [ 457.095796][T27380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 457.105857][T27380] Call Trace: [ 457.109138][T27380] [ 457.112084][T27380] dump_stack_lvl+0xf2/0x150 [ 457.116726][T27380] dump_stack+0x15/0x20 [ 457.121036][T27380] should_fail_ex+0x229/0x230 [ 457.125795][T27380] ? __d_alloc+0x3d/0x340 [ 457.130225][T27380] should_failslab+0x8f/0xb0 [ 457.134882][T27380] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 457.140685][T27380] __d_alloc+0x3d/0x340 [ 457.145021][T27380] d_alloc_pseudo+0x1e/0x80 [ 457.149614][T27380] alloc_file_pseudo+0x70/0x140 [ 457.154510][T27380] __shmem_file_setup+0x1bb/0x1f0 [ 457.159605][T27380] shmem_file_setup+0x3b/0x50 [ 457.164295][T27380] __se_sys_memfd_create+0x31d/0x5c0 [ 457.169596][T27380] __x64_sys_memfd_create+0x31/0x40 [ 457.174878][T27380] x64_sys_call+0x2891/0x2d60 [ 457.179572][T27380] do_syscall_64+0xc9/0x1c0 [ 457.184086][T27380] ? clear_bhb_loop+0x55/0xb0 [ 457.188785][T27380] ? clear_bhb_loop+0x55/0xb0 [ 457.193497][T27380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.199511][T27380] RIP: 0033:0x7fa7cce4def9 [ 457.203940][T27380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.223595][T27380] RSP: 002b:00007fa7cba84d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 457.232086][T27380] RAX: ffffffffffffffda RBX: 000000000000060d RCX: 00007fa7cce4def9 [ 457.240073][T27380] RDX: 00007fa7cba84dec RSI: 0000000000000000 RDI: 00007fa7ccec1369 [ 457.248110][T27380] RBP: 0000000020001d80 R08: 00007fa7cba84b07 R09: 0000000000000000 [ 457.256174][T27380] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 457.264169][T27380] R13: 00007fa7cba84dec R14: 00007fa7cba84df0 R15: 00007ffda30696b8 [ 457.272169][T27380] [ 457.290397][T27376] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 457.298541][T27376] EXT4-fs (loop3): failed to initialize system zone (-117) [ 457.306345][T27376] EXT4-fs (loop3): mount failed [ 457.319057][T27369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.372531][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 457.372546][ T29] audit: type=1326 audit(1726797983.868:41421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.405798][T27369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.434583][ T29] audit: type=1326 audit(1726797983.898:41422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.458254][ T29] audit: type=1326 audit(1726797983.898:41423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.481924][ T29] audit: type=1326 audit(1726797983.898:41424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.505984][ T29] audit: type=1326 audit(1726797983.898:41425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.529660][ T29] audit: type=1326 audit(1726797983.898:41426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.553445][ T29] audit: type=1326 audit(1726797983.898:41427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.577470][ T29] audit: type=1326 audit(1726797983.898:41428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.601233][ T29] audit: type=1326 audit(1726797983.898:41429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.625077][ T29] audit: type=1326 audit(1726797983.898:41430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27387 comm="syz.2.6418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f1c8056def9 code=0x7ffc0000 [ 457.666164][T27369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.742536][T27396] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 457.946114][T27411] loop2: detected capacity change from 0 to 1024 [ 457.981447][T27411] ext4: Bad value for 'debug_want_extra_isize' [ 457.990291][T27416] syz.4.6431[27416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.990362][T27416] syz.4.6431[27416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.008601][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.028190][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.035915][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.041257][T11298] unregister_netdevice: waiting for vxcan1 to become free. Usage count = 2 [ 458.043621][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.060054][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.067721][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.072877][T27419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.075406][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.091438][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.099138][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.106840][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.114599][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.122434][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.130367][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.138037][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.145777][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.153464][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.161199][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.168866][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.176561][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.184263][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.192106][ T3434] hid-generic 0000:1000003:0000.005B: unknown main item tag 0x0 [ 458.201518][ T3434] hid-generic 0000:1000003:0000.005B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 458.211830][T27419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.247889][T27423] loop4: detected capacity change from 0 to 512 [ 458.255007][T27423] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 458.299102][T27423] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 458.351299][T27423] loop4: detected capacity change from 0 to 512 [ 458.358494][T27423] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.411146][T27423] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6434: iget: bad extended attribute block 19 [ 458.430752][T27423] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6434: couldn't read orphan inode 15 (err -117) [ 458.477895][T27423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.514511][T27423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6434: bg 0: block 65: padding at end of block bitmap is not set [ 458.544624][T27423] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.6434: Failed to acquire dquot type 0 [ 458.591688][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.083933][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.092681][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.100487][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.108171][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.115847][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.119554][T27451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.123618][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.139569][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.147356][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.155118][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.162957][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.171208][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.178881][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.186540][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.194235][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.201940][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.209645][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.217418][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.225179][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.232889][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.240667][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.248339][ T3434] hid-generic 0000:1000003:0000.005C: unknown main item tag 0x0 [ 459.256175][T27451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.257653][ T3434] hid-generic 0000:1000003:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 459.527319][T27481] loop4: detected capacity change from 0 to 512 [ 459.534832][T27481] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 459.562114][T27481] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 459.583275][T27481] loop4: detected capacity change from 0 to 512 [ 459.593751][T27481] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.601442][T27490] program syz.2.6455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.616054][T27481] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6457: iget: bad extended attribute block 19 [ 459.629025][T27481] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6457: couldn't read orphan inode 15 (err -117) [ 459.641651][T27481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.658904][T27481] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6457: bg 0: block 65: padding at end of block bitmap is not set [ 459.673758][T27481] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.6457: Failed to acquire dquot type 0 [ 459.683773][T27475] loop2: detected capacity change from 0 to 2048 [ 459.702099][T26514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.729612][T27475] loop2: p1 < > p4 [ 459.734475][T27475] loop2: p4 start 458752 is beyond EOD, truncated [ 459.746394][T27502] FAULT_INJECTION: forcing a failure. [ 459.746394][T27502] name failslab, interval 1, probability 0, space 0, times 0 [ 459.759178][T27502] CPU: 0 UID: 0 PID: 27502 Comm: syz.4.6464 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 459.771146][T27502] Tainted: [W]=WARN [ 459.774944][T27502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 459.785022][T27502] Call Trace: [ 459.788368][T27502] [ 459.791338][T27502] dump_stack_lvl+0xf2/0x150 [ 459.796013][T27502] dump_stack+0x15/0x20 [ 459.800354][T27502] should_fail_ex+0x229/0x230 [ 459.805038][T27502] ? __alloc_skb+0x10b/0x310 [ 459.809692][T27502] should_failslab+0x8f/0xb0 [ 459.814308][T27502] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 459.820143][T27502] __alloc_skb+0x10b/0x310 [ 459.824588][T27502] tcp_stream_alloc_skb+0x2f/0x1e0 [ 459.829779][T27502] tcp_sendmsg_locked+0x93a/0x2700 [ 459.834991][T27502] ? __pfx_tcp_sendmsg+0x10/0x10 [ 459.840005][T27502] tcp_sendmsg+0x30/0x50 [ 459.844334][T27502] inet_sendmsg+0x77/0xd0 [ 459.848693][T27502] __sock_sendmsg+0x102/0x180 [ 459.853380][T27502] __sys_sendto+0x1d9/0x250 [ 459.858021][T27502] __x64_sys_sendto+0x78/0x90 [ 459.862715][T27502] x64_sys_call+0x2959/0x2d60 [ 459.867560][T27502] do_syscall_64+0xc9/0x1c0 [ 459.872069][T27502] ? clear_bhb_loop+0x55/0xb0 [ 459.876850][T27502] ? clear_bhb_loop+0x55/0xb0 [ 459.881627][T27502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.887538][T27502] RIP: 0033:0x7f07c295def9 [ 459.892034][T27502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.911694][T27502] RSP: 002b:00007f07c15d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 459.920116][T27502] RAX: ffffffffffffffda RBX: 00007f07c2b15f80 RCX: 00007f07c295def9 [ 459.928215][T27502] RDX: 00000000000020c8 RSI: 00000000200012c0 RDI: 0000000000000003 [ 459.936359][T27502] RBP: 00007f07c15d1090 R08: 0000000000000000 R09: 0000000000000027 [ 459.944340][T27502] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 459.952391][T27502] R13: 0000000000000000 R14: 00007f07c2b15f80 R15: 00007ffdf653ef28 [ 459.960376][T27502] [ 460.230113][T27506] sg_write: data in/out 588840944/13 bytes for SCSI command 0x94-- guessing data in; [ 460.230113][T27506] program syz.4.6466 not setting count and/or reply_len properly [ 460.249636][T27506] program syz.4.6466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.356591][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6469'. [ 460.410423][T27524] loop4: detected capacity change from 0 to 1024 [ 460.417418][T27524] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 460.429483][T27526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.430902][T27524] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6474: Invalid block bitmap block 0 in block_group 0 [ 460.454006][T27524] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.6474: Failed to acquire dquot type 0 [ 460.466231][T27524] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.6474: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.482115][T27524] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.6474: Invalid inode bitmap blk 0 in block_group 0 [ 460.495118][T27524] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 460.504864][T11584] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u8:13: Failed to release dquot type 0 [ 460.508257][T27524] EXT4-fs (loop4): 1 orphan inode deleted [ 460.520354][T27526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.579842][T27526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.701936][T27526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.801782][T27526] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.822077][T27526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.841138][T27526] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.861808][T27526] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.911785][T27549] loop3: detected capacity change from 0 to 1024 [ 460.920223][T27549] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 460.932452][T27549] JBD2: no valid journal superblock found [ 460.938216][T27549] EXT4-fs (loop3): Could not load journal inode [ 461.773942][T27568] loop3: detected capacity change from 0 to 1024 [ 461.794588][T27562] loop4: detected capacity change from 0 to 8192 [ 461.797829][T27568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.828390][T27562] loop4: p1 p3 p4 [ 461.832536][T27562] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 461.843443][T27562] loop4: p3 start 4294901760 is beyond EOD, truncated [ 461.850328][T27562] loop4: p4 size 50331648 extends beyond EOD, truncated [ 461.860413][T27568] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 462.069651][T27578] bridge1: entered promiscuous mode [ 462.103551][T27580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6491'. [ 462.180984][T27582] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6491'. [ 462.257626][T27587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6492'. [ 462.298075][T27545] coredump: 594(syz.3.6479): written to core: VMAs: 29, size 72253440; core: 59990702 bytes, pos 72261632 [ 462.404038][T27369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.433387][T27369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.463714][T27369] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.525744][T27369] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.599898][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 462.599914][ T29] audit: type=1400 audit(1726797989.101:41879): avc: denied { read write } for pid=26818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 462.669701][ T29] audit: type=1400 audit(1726797989.151:41880): avc: denied { prog_load } for pid=27585 comm="syz.3.6492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.697689][ T29] audit: type=1400 audit(1726797989.171:41881): avc: denied { read write } for pid=26818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 462.722521][ T29] audit: type=1400 audit(1726797989.221:41882): avc: denied { prog_load } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.741820][ T29] audit: type=1400 audit(1726797989.221:41883): avc: denied { prog_load } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.761088][ T29] audit: type=1400 audit(1726797989.221:41884): avc: denied { prog_load } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.780609][ T29] audit: type=1400 audit(1726797989.221:41885): avc: denied { prog_load } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 462.823809][ T29] audit: type=1400 audit(1726797989.221:41886): avc: denied { create } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 462.843861][ T29] audit: type=1400 audit(1726797989.221:41887): avc: denied { create } for pid=27598 comm="syz.0.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 462.863667][ T29] audit: type=1400 audit(1726797989.301:41888): avc: denied { read write } for pid=26818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 463.090635][T27620] futex_wake_op: syz.1.6505 tries to shift op by 36; fix this program [ 464.227005][T27686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6533'. [ 464.236015][T27686] tc_dump_action: action bad kind [ 466.015733][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6547'. [ 466.024794][T27725] tc_dump_action: action bad kind [ 467.800294][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 467.800340][ T29] audit: type=1400 audit(1726797994.293:42144): avc: denied { read write } for pid=26514 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 467.850174][ T29] audit: type=1400 audit(1726797994.343:42145): avc: denied { read write } for pid=26514 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 467.877055][ T29] audit: type=1400 audit(1726797994.353:42146): avc: denied { create } for pid=27793 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 467.897903][ T29] audit: type=1400 audit(1726797994.353:42147): avc: denied { create } for pid=27793 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 467.918690][ T29] audit: type=1400 audit(1726797994.353:42148): avc: denied { create } for pid=27793 comm="syz.4.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 467.939402][ T29] audit: type=1400 audit(1726797994.363:42149): avc: denied { read write } for pid=26514 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 467.964076][ T29] audit: type=1400 audit(1726797994.363:42150): avc: denied { prog_load } for pid=27795 comm="syz.4.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 467.983329][ T29] audit: type=1400 audit(1726797994.363:42151): avc: denied { create } for pid=27795 comm="syz.4.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 468.028079][ T29] audit: type=1400 audit(1726797994.514:42152): avc: denied { read write } for pid=21893 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 468.053095][ T29] audit: type=1400 audit(1726797994.524:42153): avc: denied { read write } for pid=21000 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.260093][T27815] coredump: 661(syz.3.6582): written to core: VMAs: 29, size 89030656; core: 60007086 bytes, pos 89038848 [ 470.841194][T28131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28131 comm=syz.2.6732 [ 470.855155][T28134] FAULT_INJECTION: forcing a failure. [ 470.855155][T28134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.868399][T28134] CPU: 0 UID: 0 PID: 28134 Comm: syz.1.6733 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 470.880416][T28134] Tainted: [W]=WARN [ 470.884227][T28134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 470.894378][T28134] Call Trace: [ 470.897679][T28134] [ 470.900622][T28134] dump_stack_lvl+0xf2/0x150 [ 470.905310][T28134] dump_stack+0x15/0x20 [ 470.909592][T28134] should_fail_ex+0x229/0x230 [ 470.914302][T28134] should_fail+0xb/0x10 [ 470.918494][T28134] should_fail_usercopy+0x1a/0x20 [ 470.923553][T28134] _copy_from_user+0x1e/0xd0 [ 470.928193][T28134] __se_sys_memfd_create+0x26b/0x5c0 [ 470.933543][T28134] __x64_sys_memfd_create+0x31/0x40 [ 470.938959][T28134] x64_sys_call+0x2891/0x2d60 [ 470.943672][T28134] do_syscall_64+0xc9/0x1c0 [ 470.948227][T28134] ? clear_bhb_loop+0x55/0xb0 [ 470.952992][T28134] ? clear_bhb_loop+0x55/0xb0 [ 470.957776][T28134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.963780][T28134] RIP: 0033:0x7fa7cce4def9 [ 470.968226][T28134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.987871][T28134] RSP: 002b:00007fa7cbac6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 470.996369][T28134] RAX: ffffffffffffffda RBX: 000000000000056a RCX: 00007fa7cce4def9 [ 471.004439][T28134] RDX: 00007fa7cbac6ef0 RSI: 0000000000000000 RDI: 00007fa7ccec1369 [ 471.012441][T28134] RBP: 00000000200015c0 R08: 00007fa7cbac6bb7 R09: 00007fa7cbac6e40 [ 471.020419][T28134] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000140 [ 471.028413][T28134] R13: 00007fa7cbac6ef0 R14: 00007fa7cbac6eb0 R15: 00000000200001c0 [ 471.036498][T28134] [ 471.348397][T28168] FAULT_INJECTION: forcing a failure. [ 471.348397][T28168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.361656][T28168] CPU: 1 UID: 0 PID: 28168 Comm: syz.3.6749 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 471.373639][T28168] Tainted: [W]=WARN [ 471.377465][T28168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 471.387577][T28168] Call Trace: [ 471.390903][T28168] [ 471.393857][T28168] dump_stack_lvl+0xf2/0x150 [ 471.398499][T28168] dump_stack+0x15/0x20 [ 471.402731][T28168] should_fail_ex+0x229/0x230 [ 471.407487][T28168] should_fail+0xb/0x10 [ 471.411666][T28168] should_fail_usercopy+0x1a/0x20 [ 471.416717][T28168] _copy_from_user+0x1e/0xd0 [ 471.421351][T28168] __sys_bpf+0x14e/0x7a0 [ 471.425894][T28168] __x64_sys_bpf+0x43/0x50 [ 471.430367][T28168] x64_sys_call+0x2625/0x2d60 [ 471.435243][T28168] do_syscall_64+0xc9/0x1c0 [ 471.439763][T28168] ? clear_bhb_loop+0x55/0xb0 [ 471.444541][T28168] ? clear_bhb_loop+0x55/0xb0 [ 471.449300][T28168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.455228][T28168] RIP: 0033:0x7fbc54fedef9 [ 471.459672][T28168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.479369][T28168] RSP: 002b:00007fbc53c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.487846][T28168] RAX: ffffffffffffffda RBX: 00007fbc551a5f80 RCX: 00007fbc54fedef9 [ 471.495843][T28168] RDX: 0000000000000028 RSI: 00000000200000c0 RDI: 0000000000000012 [ 471.503922][T28168] RBP: 00007fbc53c67090 R08: 0000000000000000 R09: 0000000000000000 [ 471.511917][T28168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.519989][T28168] R13: 0000000000000000 R14: 00007fbc551a5f80 R15: 00007fff6f5cb678 [ 471.528029][T28168] [ 471.566520][T28071] coredump: 232(syz.4.6703): written to core: VMAs: 29, size 89030656; core: 60019374 bytes, pos 89038848 [ 472.050444][T28136] coredump: 97(syz.0.6734): written to core: VMAs: 29, size 89030656; core: 60008818 bytes, pos 89038848 [ 472.430948][T28102] coredump: 223(syz.1.6718): written to core: VMAs: 29, size 89030656; core: 60011182 bytes, pos 89038848 [ 472.433394][T28235] FAULT_INJECTION: forcing a failure. [ 472.433394][T28235] name failslab, interval 1, probability 0, space 0, times 0 [ 472.454993][T28235] CPU: 1 UID: 0 PID: 28235 Comm: syz.0.6778 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 472.466994][T28235] Tainted: [W]=WARN [ 472.470816][T28235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 472.480911][T28235] Call Trace: [ 472.484210][T28235] [ 472.487170][T28235] dump_stack_lvl+0xf2/0x150 [ 472.491794][T28235] dump_stack+0x15/0x20 [ 472.495995][T28235] should_fail_ex+0x229/0x230 [ 472.500692][T28235] ? audit_log_start+0x34c/0x6b0 [ 472.505861][T28235] should_failslab+0x8f/0xb0 [ 472.510510][T28235] kmem_cache_alloc_noprof+0x4c/0x290 [ 472.515952][T28235] audit_log_start+0x34c/0x6b0 [ 472.520766][T28235] audit_seccomp+0x4b/0x130 [ 472.525343][T28235] __seccomp_filter+0x6fa/0x1180 [ 472.530322][T28235] ? proc_fail_nth_write+0x12a/0x150 [ 472.535801][T28235] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 472.541482][T28235] ? vfs_write+0x580/0x910 [ 472.545934][T28235] ? __fget_files+0x1d4/0x210 [ 472.550695][T28235] __secure_computing+0x9f/0x1c0 [ 472.555692][T28235] syscall_trace_enter+0xd1/0x1f0 [ 472.560782][T28235] ? fpregs_assert_state_consistent+0x83/0xa0 [ 472.566929][T28235] do_syscall_64+0xaa/0x1c0 [ 472.571462][T28235] ? clear_bhb_loop+0x55/0xb0 [ 472.576209][T28235] ? clear_bhb_loop+0x55/0xb0 [ 472.581027][T28235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.587036][T28235] RIP: 0033:0x7fd6fc9fdef9 [ 472.591511][T28235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.611182][T28235] RSP: 002b:00007fd6fb671038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 472.619652][T28235] RAX: ffffffffffffffda RBX: 00007fd6fcbb5f80 RCX: 00007fd6fc9fdef9 [ 472.627653][T28235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 472.635709][T28235] RBP: 00007fd6fb671090 R08: 0000000000000000 R09: 0000000000000000 [ 472.640289][T28155] coredump: 1111(syz.2.6741): written to core: VMAs: 29, size 89030656; core: 60015278 bytes, pos 89038848 [ 472.643686][T28235] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 472.643703][T28235] R13: 0000000000000000 R14: 00007fd6fcbb5f80 R15: 00007ffd880a4d38 [ 472.671136][T28235] [ 472.816530][ T29] kauditd_printk_skb: 2707 callbacks suppressed [ 472.816547][ T29] audit: type=1400 audit(1726797999.316:44859): avc: denied { read write } for pid=26818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 472.858414][ T29] audit: type=1400 audit(1726797999.326:44860): avc: denied { read write } for pid=21893 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 472.882942][ T29] audit: type=1400 audit(1726797999.356:44861): avc: denied { map_create } for pid=28257 comm="syz.4.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 472.902318][ T29] audit: type=1400 audit(1726797999.356:44862): avc: denied { prog_load } for pid=28257 comm="syz.4.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 472.921762][ T29] audit: type=1400 audit(1726797999.356:44863): avc: denied { mounton } for pid=28257 comm="syz.4.6789" path="/117/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 472.944566][ T29] audit: type=1400 audit(1726797999.356:44864): avc: denied { prog_load } for pid=28260 comm="syz.2.6788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 472.963899][ T29] audit: type=1326 audit(1726797999.356:44865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28258 comm="syz.0.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fc9fdef9 code=0x7ffc0000 [ 472.987644][ T29] audit: type=1326 audit(1726797999.356:44866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28258 comm="syz.0.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fc9fdef9 code=0x7ffc0000 [ 473.011361][ T29] audit: type=1326 audit(1726797999.356:44867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28258 comm="syz.0.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fc9fdef9 code=0x7ffc0000 [ 473.035180][ T29] audit: type=1400 audit(1726797999.356:44868): avc: denied { prog_load } for pid=28258 comm="syz.0.6790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 473.274555][ T3250] ================================================================== [ 473.282684][ T3250] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 473.290971][ T3250] [ 473.293301][ T3250] read to 0xffff888101db0b78 of 2 bytes by interrupt on cpu 0: [ 473.300853][ T3250] virtqueue_disable_cb+0x63/0x180 [ 473.305988][ T3250] skb_xmit_done+0x5f/0x140 [ 473.310511][ T3250] vring_interrupt+0x157/0x180 [ 473.315305][ T3250] __handle_irq_event_percpu+0x95/0x490 [ 473.320864][ T3250] handle_irq_event+0x64/0xf0 [ 473.325556][ T3250] handle_edge_irq+0x16d/0x5b0 [ 473.330323][ T3250] __common_interrupt+0x58/0xe0 [ 473.335176][ T3250] common_interrupt+0x7c/0x90 [ 473.339868][ T3250] asm_common_interrupt+0x26/0x40 [ 473.344922][ T3250] kcsan_setup_watchpoint+0x404/0x410 [ 473.350304][ T3250] selinux_socket_post_create+0x4a/0x2a0 [ 473.355949][ T3250] security_socket_post_create+0x5b/0xa0 [ 473.361591][ T3250] __sock_create+0x342/0x4f0 [ 473.366181][ T3250] __sys_socket+0xae/0x240 [ 473.370597][ T3250] __x64_sys_socket+0x3f/0x50 [ 473.375275][ T3250] x64_sys_call+0x2c97/0x2d60 [ 473.380041][ T3250] do_syscall_64+0xc9/0x1c0 [ 473.384545][ T3250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.390458][ T3250] [ 473.392780][ T3250] write to 0xffff888101db0b78 of 2 bytes by task 3250 on cpu 1: [ 473.400583][ T3250] virtqueue_disable_cb+0x85/0x180 [ 473.405819][ T3250] start_xmit+0x14b/0x1260 [ 473.410235][ T3250] dev_hard_start_xmit+0x119/0x3f0 [ 473.415352][ T3250] sch_direct_xmit+0x1a9/0x580 [ 473.420206][ T3250] __dev_queue_xmit+0xf46/0x1fe0 [ 473.425151][ T3250] ip_finish_output2+0x73d/0x8b0 [ 473.430097][ T3250] ip_finish_output+0x11a/0x2a0 [ 473.434976][ T3250] ip_output+0xab/0x170 [ 473.439142][ T3250] __ip_queue_xmit+0xbcc/0xbf0 [ 473.443917][ T3250] ip_queue_xmit+0x38/0x50 [ 473.448348][ T3250] __tcp_transmit_skb+0x15b0/0x1970 [ 473.453556][ T3250] tcp_write_xmit+0x1410/0x3220 [ 473.458417][ T3250] __tcp_push_pending_frames+0x6a/0x1a0 [ 473.463968][ T3250] tcp_push+0x320/0x340 [ 473.468142][ T3250] tcp_sendmsg_locked+0x21ff/0x2700 [ 473.473353][ T3250] tcp_sendmsg+0x30/0x50 [ 473.477634][ T3250] inet_sendmsg+0x77/0xd0 [ 473.481983][ T3250] __sock_sendmsg+0x102/0x180 [ 473.486688][ T3250] sock_write_iter+0x15e/0x1a0 [ 473.491465][ T3250] vfs_write+0x76a/0x910 [ 473.495733][ T3250] ksys_write+0xeb/0x1b0 [ 473.499980][ T3250] __x64_sys_write+0x42/0x50 [ 473.504574][ T3250] x64_sys_call+0x27dd/0x2d60 [ 473.509283][ T3250] do_syscall_64+0xc9/0x1c0 [ 473.513786][ T3250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.519694][ T3250] [ 473.522030][ T3250] value changed: 0x0000 -> 0x0001 [ 473.527081][ T3250] [ 473.529401][ T3250] Reported by Kernel Concurrency Sanitizer on: [ 473.535544][ T3250] CPU: 1 UID: 0 PID: 3250 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 473.547523][ T3250] Tainted: [W]=WARN [ 473.551318][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 473.561369][ T3250] ================================================================== [ 473.645088][T28182] coredump: 243(syz.1.6754): interrupted: fatal signal pending [ 473.652776][T28182] coredump: 243(syz.1.6754): written to core: VMAs: 29, size 89030656; core: 33510062 bytes, pos 62537728 Sep 20 02:06:40 syzkaller auth.info sshd[3248]: Received disconnect from 10.128.0.163 port 47276:11: disconnected by user Sep 20 02:06:40 syzkaller auth.info sshd[3248]: Disconnected from user root 10.128.0.163 port 47276 [ 473.769217][T28265] coredump: 767(syz.3.6791): interrupted: fatal signal pending [ 473.776864][T28265] coredump: 767(syz.3.6791): written to core: VMAs: 29, size 89030656; core: 8250030 bytes, pos 8708096 [ 473.803476][T28240] coredump: 759(syz.3.6780): interrupted: fatal signal pending [ 473.811206][T28240] coredump: 759(syz.3.6780): written to core: VMAs: 29, size 89030656; core: 26452654 bytes, pos 38711296 [ 473.844342][T21000] syz_tun (unregistering): left promiscuous mode [ 474.036009][T12727] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.115524][T12727] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.173288][T12727] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.222954][T12727] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.297645][T12727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.355027][T12727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.414986][T12727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.474537][T12727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.525851][T12727] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.562972][T12727] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.622804][T12727] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.683094][T12727] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.754940][T12727] bridge_slave_1: left allmulticast mode [ 474.760604][T12727] bridge_slave_1: left promiscuous mode [ 474.766312][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.774125][T12727] bridge_slave_0: left allmulticast mode [ 474.779766][T12727] bridge_slave_0: left promiscuous mode [ 474.785426][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.793745][T12727] bridge_slave_1: left allmulticast mode [ 474.799423][T12727] bridge_slave_1: left promiscuous mode [ 474.805143][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.813136][T12727] bridge_slave_0: left allmulticast mode [ 474.819056][T12727] bridge_slave_0: left promiscuous mode [ 474.824758][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.833188][T12727] bridge_slave_1: left allmulticast mode [ 474.838880][T12727] bridge_slave_1: left promiscuous mode [ 474.844578][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.852439][T12727] bridge_slave_0: left allmulticast mode [ 474.858171][T12727] bridge_slave_0: left promiscuous mode [ 474.863906][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.970002][T12727] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 475.263454][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.273966][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.284169][T12727] bond0 (unregistering): Released all slaves [ 475.292788][T12727] bond1 (unregistering): Released all slaves [ 475.302084][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.312664][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.323139][T12727] bond0 (unregistering): Released all slaves [ 475.332723][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.343205][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.353577][T12727] bond0 (unregistering): Released all slaves [ 475.427538][T12727] hsr_slave_0: left promiscuous mode [ 475.433433][T12727] hsr_slave_1: left promiscuous mode [ 475.439212][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.446734][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.454429][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.461925][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.472204][T12727] hsr_slave_0: left promiscuous mode [ 475.477968][T12727] hsr_slave_1: left promiscuous mode [ 475.483792][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.491238][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.498926][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.506355][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.515992][T12727] hsr_slave_0: left promiscuous mode [ 475.522237][T12727] hsr_slave_1: left promiscuous mode [ 475.528071][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.535634][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.543294][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.550790][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.565292][T12727] veth1_macvtap: left promiscuous mode [ 475.570876][T12727] veth0_macvtap: left promiscuous mode [ 475.576365][T12727] veth1_vlan: left promiscuous mode [ 475.581661][T12727] veth0_vlan: left promiscuous mode [ 475.587418][T12727] veth1_macvtap: left promiscuous mode [ 475.592976][T12727] veth0_macvtap: left promiscuous mode [ 475.598536][T12727] veth1_vlan: left promiscuous mode [ 475.604038][T12727] veth0_vlan: left promiscuous mode [ 475.609804][T12727] veth1_macvtap: left promiscuous mode [ 475.615308][T12727] veth0_macvtap: left promiscuous mode [ 475.621314][T12727] veth1_vlan: left promiscuous mode [ 475.626625][T12727] veth0_vlan: left promiscuous mode [ 475.803696][T12727] team0 (unregistering): Port device team_slave_1 removed [ 475.814682][T12727] team0 (unregistering): Port device team_slave_0 removed [ 475.879486][T12727] team0 (unregistering): Port device team_slave_1 removed [ 475.890120][T12727] team0 (unregistering): Port device team_slave_0 removed [ 475.958751][T12727] team0 (unregistering): Port device team_slave_1 removed [ 475.969709][T12727] team0 (unregistering): Port device team_slave_0 removed [ 476.649191][T12727] IPVS: stop unused estimator thread 0... [ 476.712666][T12727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.761879][T12727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.831785][T12727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.881485][T12727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.963826][T12727] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.001747][T12727] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.051439][T12727] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.141467][T12727] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.212900][T12727] bridge_slave_1: left allmulticast mode [ 477.218732][T12727] bridge_slave_1: left promiscuous mode [ 477.224496][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.232453][T12727] bridge_slave_0: left allmulticast mode [ 477.238119][T12727] bridge_slave_0: left promiscuous mode [ 477.243819][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.251964][T12727] bridge_slave_1: left allmulticast mode [ 477.257609][T12727] bridge_slave_1: left promiscuous mode [ 477.263420][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.271182][T12727] bridge_slave_0: left allmulticast mode [ 477.276816][T12727] bridge_slave_0: left promiscuous mode [ 477.282459][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.472180][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.482300][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.492489][T12727] bond0 (unregistering): Released all slaves [ 477.501617][T12727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.511865][T12727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.521856][T12727] bond0 (unregistering): Released all slaves [ 477.575927][T12727] hsr_slave_0: left promiscuous mode [ 477.581732][T12727] hsr_slave_1: left promiscuous mode [ 477.587655][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.595162][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.602992][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.610418][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.618087][T12727] batadv_slave_0: left promiscuous mode [ 477.624801][T12727] hsr_slave_0: left promiscuous mode [ 477.631863][T12727] hsr_slave_1: left promiscuous mode [ 477.637748][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.645299][T12727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.652882][T12727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.660366][T12727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.671897][T12727] veth1_macvtap: left promiscuous mode [ 477.677461][T12727] veth0_macvtap: left promiscuous mode [ 477.682994][T12727] veth1_vlan: left promiscuous mode [ 477.688223][T12727] veth0_vlan: left promiscuous mode [ 477.693933][T12727] veth1_macvtap: left promiscuous mode [ 477.699478][T12727] veth0_macvtap: left promiscuous mode [ 477.814296][T12727] team0 (unregistering): Port device team_slave_1 removed [ 477.825052][T12727] team0 (unregistering): Port device team_slave_0 removed [ 477.881476][T12727] team0 (unregistering): Port device team_slave_1 removed [ 477.891674][T12727] team0 (unregistering): Port device team_slave_0 removed